# ----------------------------------------------------

# UsbFix Antivirus Free

# ----------------------------------------------------
# Version : 11.026
# Database : 2020.01.13
# Contact : https://www.usb-antivirus.com/contact
# ----------------------------------------------------
# Scan type : USB
# User : user (Administrator)
# Device : ZBBLAPTOP
# Started : 07/02/2020 09:26:05
# ----------------------------------------------------

------------ | Analyzed disks |

F:\ FAT32 (2GB/30GB) [Removable]

G:\ exFAT (58GB/58GB) [Removable]

------------ | Infected elements |

~ No element detected ~

------------ | Run |

F2 - HKLM\..\Winlogon : [Shell] explorer.exe

F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [OneDrive]
"C:\Users\user\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
04 - HKCU\..\Run : [Lync] "C:\Program Files (x86)\Microsoft
Office\root\Office16\lync.exe" /fromrunkey
04 - HKCU\..\Run : [Autodesk Sync] C:\Program Files\Autodesk\Autodesk
Sync\AdSync.exe
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common
Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [Adobe Acrobat Speed Launcher] "C:\Program Files
(x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
04 - HKLM\..\Run : [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat
10.0\Acrobat\Acrotray.exe"
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple
Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [YouCam Mirage] "C:\Program Files
(x86)\CyberLink\YouCam\YCMMirage.exe"
04 - HKLM\..\Run : [YouCam Tray] "C:\Program Files
(x86)\CyberLink\YouCam\YouCamTray.exe" /s
04 - HKLM\..\Run : [Autodesk Desktop App] "C:\Program Files (x86)\Autodesk\Autodesk
Desktop App\AutodeskDesktopApp.exe" -tray
04 - [x64] HKLM\..\Run : [SecurityHealth] %windir
%\system32\SecurityHealthSystray.exe
04 - [x64] HKLM\..\Run : [RTHDVCPL] "C:\Program
Files\Realtek\Audio\HDA\RtkNGUI64.exe" /s
04 - [x64] HKLM\..\Run : [RtHDVBg] "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe"
/MAXX4P1
04 - [x64] HKLM\..\Run : [Apoint] "C:\Program Files\DellTPad\Apoint.exe"
04 - HKU\S-1-5-19\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe
/thfirstsetup
04 - HKU\S-1-5-20\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe
/thfirstsetup
04 - HKU\S-1-5-21-1915285580-315271379-2198186723-1002\..\Run : [OneDrive]
"C:\Users\user\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
04 - HKU\S-1-5-21-1915285580-315271379-2198186723-1002\..\Run : [Lync] "C:\Program
Files (x86)\Microsoft Office\root\Office16\lync.exe" /fromrunkey
04 - HKU\S-1-5-21-1915285580-315271379-2198186723-1002\..\Run : [Autodesk Sync]
C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe

------------ | Tasks |

Task - CCleaner Update --> C:\Program Files\CCleaner\CCUpdate.exe

Task - GoogleUpdateTaskMachineCore --> C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe /c
Task - GoogleUpdateTaskMachineUA --> C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
Task - KMSAutoNet --> "C:\ProgramData\KMSAutoS\KMSAuto Net.exe" /off=act
Task - OneDrive Standalone Update Task-S-1-5-21-1915285580-315271379-2198186723-
1002 --> %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task - RtHDVBg_PushButton --> "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /IM
Task - User_Feed_Synchronization-{30B77504-CF8F-4B98-BDB6-31CBDABD2F11} -->
C:\WINDOWS\system32\msfeedssync.exe sync
Task - {4C898877-4B97-4AC9-8F13-E2FB09494A57} -->
"c:\windows\system32\launchwinapp.exe"
http://ui.skype.com/ui/0/7.26.0.101/en/abandoninstall?
source=lightinstaller&page=tsInstall
Task - {B084DCE5-90D7-4B8D-854F-1E81577E0B17} -->
"c:\windows\system32\launchwinapp.exe"
http://ui.skype.com/ui/0/7.26.0.101/en/abandoninstall?
source=lightinstaller&page=tsInstall
Task - {C75D68D8-0066-4279-84C1-0DDA777AC7DB} -->
"c:\windows\system32\launchwinapp.exe" http://www.skype.com/go/downloading?
source=lightinstaller&ver=7.26.0.101&LastError=12007
Task - {F2C36E58-5173-44CE-B98B-C77F3C27FA6C} -->
"c:\windows\system32\launchwinapp.exe" http://www.skype.com/go/downloading?
source=lightinstaller&ver=7.26.0.101&LastError=12007

------------ | Dev Zone |

------------ | F:\ - Removable drive (FAT32) |

[06/03/2018 - 23:00:26 | A | 245315 Ko] - Avast Premier Antivirus 17.7.2314 Full

Version BAGAS31 .zip
[13/10/2015 - 23:21:26 | D] - .trash
[06/03/2018 - 22:59:54 | A | 276513 Ko] - Avast Pro Antivirus 2017 Final - BAGAS31
.rar
[14/01/2018 - 10:47:36 | A | 16 Ko] - December.pdf
[26/01/2018 - 17:25:32 | A | 21681 Ko] - 17th_edition_iee_wiring_regulations.pdf
[25/08/2018 - 16:01:14 | A | 48 Ko] - Maybank2u.com - Welcome.pdf
[29/01/2019 - 11:38:10 | A | 54 Ko] - sempurna resort.pdf
[13/02/2019 - 22:09:32 | A | 23 Ko] - Pembantu Tadbir (Perkeranian_Operasi) Gred
N17.pdf
[19/02/2019 - 12:28:10 | A | 30 Ko] - LAPORAN kEWANGAN - Iftar 2016 SMSMS-1 Lambor
Kanan.pdf
[07/02/2020 - 08:37:58 | A | 2 Ko] - BOOTEX.LOG
[15/03/2018 - 11:02:24 | A | 318 Ko] - Banner Mac.jpg
[15/03/2018 - 11:02:50 | A | 198 Ko] - Poster Ceramah Bulanan Mac.jpg
[18/04/2018 - 11:59:40 | D] - .dwd
[26/11/2017 - 15:40:12 | A | 133 Ko] - Minit Meeting 3- 2017.doc
[26/11/2017 - 15:40:40 | A | 83 Ko] - Surat Panggilan AJK 4-2017.doc
[26/11/2017 - 15:41:06 | A | 97 Ko] - Cover - Nov 2017.doc
[26/11/2017 - 15:41:06 | A | 98 Ko] - Senarai Aktiviti Surau TIE Jan -2017.doc
[23/07/2017 - 07:33:56 | D] - LOST.DIR
[17/03/2018 - 16:15:22 | D] - .android_secure
[31/07/2016 - 18:27:50 | D] - .android_obb
[02/08/2016 - 16:35:52 | D] - DCIM
[03/11/2017 - 15:41:52 | D] - My Cert
[11/12/2017 - 09:57:44 | D] - Etiqa Takaful Khairat Kematian
[22/01/2018 - 06:56:32 | D] - Camera
[26/01/2018 - 15:33:20 | D] - ICT Room Inspection
[07/02/2018 - 06:48:34 | D] - E-Book
[17/04/2018 - 19:24:42 | D] - Android
[30/10/2018 - 17:01:30 | D] - Download
[28/12/2018 - 10:53:58 | D] - CV
[02/01/2019 - 11:28:06 | D] - ZBB
[08/02/2019 - 17:03:20 | D] - MP3
[01/04/2019 - 16:49:38 | D] - Surau TIE
[03/04/2019 - 14:29:08 | D] - Screenshot

------------ | G:\ - Removable drive (exFAT) |

Infected elements : 0
Analyzed elements : 60399 in 00h 00m 08s

# UsbFix-Report-01.txt [6360B]

------------ | E.O.F |