# ----------------------------------------------------

# UsbFix Antivirus Free

# ----------------------------------------------------
# Version : 11.012
# Database : 2020.03.23
# Contact : https://www.usb-antivirus.com/contact
# ----------------------------------------------------
# Scan type : USB
# User : Jalal (Administrator)
# Device : DESKTOP-4EKF4LU
# Started : 31/03/2020 23:31:42
# ----------------------------------------------------

------------ | Analyzed disks |

G:\ FAT32 (14GB/14GB) [Removable]

------------ | Infected elements |

~ No element detected ~

------------ | Run |

F2 - HKLM\..\Winlogon : [Shell] explorer.exe

F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\WINDOWS\System32\Userinit.exe,
04 - HKCU\..\Run : [IDMan] C:\Program Files (x86)\Internet Download
Manager\IDMan.exe /onboot
04 - HKCU\..\Run : [CCXProcess] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud
Experience\CCXProcess.exe"
04 - HKLM\..\Run : [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common
Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
04 - HKLM\..\Run : [Adobe Acrobat Speed Launcher] "C:\Program Files
(x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
04 - HKLM\..\Run : [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat
9.0\Acrobat\Acrotray.exe"
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common
Files\Java\Java Update\jusched.exe"
04 - HKLM\..\Run : [ExpressVPNNotificationService] "C:\Program Files
(x86)\ExpressVPN\expressvpn-ui\ExpressVPNNotificationServiceStarter.exe"
04 - [x64] HKLM\..\Run : [SecurityHealth] %windir
%\system32\SecurityHealthSystray.exe
04 - [x64] HKLM\..\Run : [RTHDVCPL] "C:\Program
Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
04 - [x64] HKLM\..\Run : [RtHDVBg_Dolby] "C:\Program
Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
04 - [x64] HKLM\..\Run : [RtHDVBg_LENOVO_DOLBYDRAGON] "C:\Program
Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_DOLBYDRAGON
04 - [x64] HKLM\..\Run : [AdobeGCInvoker-1.0] "C:\Program Files (x86)\Common
Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe"
04 - [x64] HKLM\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common
Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
04 - [x64] HKLM\..\Run : [egui] "C:\Program Files\ESET\ESET Security\ecmds.exe"
/run /hide /proxy
04 - HKU\S-1-5-19\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe
/thfirstsetup
04 - HKU\S-1-5-20\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe
/thfirstsetup
04 - HKU\S-1-5-21-557386086-1320944255-658478744-1001\..\Run : [IDMan] C:\Program
Files (x86)\Internet Download Manager\IDMan.exe /onboot
04 - HKU\S-1-5-21-557386086-1320944255-658478744-1001\..\Run : [CCXProcess]
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe"

------------ | Tasks |

Task - Adobe Acrobat Update Task --> C:\Program Files (x86)\Common

Files\Adobe\ARM\1.0\AdobeARM.exe
Task - AdobeGCInvoker-1.0 --> C:\Program Files (x86)\Common
Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe -mode=scheduled
Task - Connect --> C:\Program Files (x86)\MAGIX\Connect\connect.exe
Task - GoogleUpdateTaskMachineCore --> C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe /c
Task - GoogleUpdateTaskMachineUA --> C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
Task - KMSAutoNet --> "C:\ProgramData\KMSAutoS\KMSAuto Net.exe" /win=act /off=act
Task - NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -->
C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -d "C:\Program
Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f
C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task - NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -->
C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -d "C:\Program
Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f
C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task - NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
--> "C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce
Experience.exe"
Task - NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} --> C:\Program Files
(x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe --launcher=TaskScheduler
Task - NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} --> C:\Program
Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
Task - NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -->
C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
Task - NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} --> C:\Program
Files\NVIDIA Corporation\NvBackend\NvTmRep.exe
Task - NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} --> C:\Program
Files\NVIDIA Corporation\NvBackend\NvTmRep.exe
Task - NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} --> C:\Program
Files\NVIDIA Corporation\NvBackend\NvTmRep.exe
Task - NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} --> C:\Program
Files\NVIDIA Corporation\NvBackend\NvTmRep.exe
Task - OneDrive Standalone Update Task-S-1-5-21-557386086-1320944255-658478744-500
--> %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task - RtHDVBg_Dolby --> "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
Task - RtHDVBg_LENOVO_DOLBYDRAGON --> "C:\Program
Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_DOLBYDRAGON
Task - RTKCPL --> "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /runcplsilence

------------ | G:\ - Removable drive (FAT32) |

[31/03/2020 - 23:29:22 | SH | 0 Ko] - autorun.inf

Infected elements : 0
Analyzed elements : 56177 in 00h 00m 09s

# UsbFix-Report-01.txt [5783B]

------------ | E.O.F |