# ----------------------------------------------------

# UsbFix Antivirus Premium

# ----------------------------------------------------
# Versión : 11.029
# Base de datos :
# Contacto : https://www.usb-antivirus.com/es/contacto
# ----------------------------------------------------
# Tipo de escaneo : Windows [Auto Scan]
# Usuario : milag (Administrador)
# Dispositivo : LAPTOP-HN5C84HT
# Comenzó : 31/10/2023 11:01:34
# ----------------------------------------------------

------------ | Discos analizados |

C:\ NTFS (153GB/237GB) [Fixed]

------------ | Elemento(s) infectado(s) |

~ Ningún elemento detectado ~

------------ | Run |

F2 - HKLM\..\Winlogon : [Shell] explorer.exe

F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [HPSEU_Host_Launcher] C:\System.sav\util\HPSEU\
HpseuHostLauncher.exe
04 - HKCU\..\Run : [OneDrive] "C:\Users\milag\AppData\Local\Microsoft\OneDrive\
OneDrive.exe" /background
04 - HKCU\..\Run : [usbrescate] "C:\Ericksystem\USB Rescate\usbrescate.exe"
04 - HKCU\..\Run : [MicrosoftEdgeAutoLaunch_07019DCA21D67272334744128DFC3DE9] "C:\
Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --
win-session-start /prefetch:5
04 - HKCU\..\RunOnce : [Delete Cached Update Binary] C:\WINDOWS\system32\cmd.exe /q
/c del /q "C:\Users\milag\AppData\Local\Microsoft\OneDrive\Update\
OneDriveSetup.exe"
04 - HKCU\..\RunOnce : [Delete Cached Standalone Update Binary] C:\WINDOWS\
system32\cmd.exe /q /c del /q "C:\Users\milag\AppData\Local\Microsoft\OneDrive\
StandaloneUpdater\OneDriveSetup.exe"
04 - HKCU\..\RunOnce : [Uninstall 23.199.0924.0001] C:\WINDOWS\system32\cmd.exe
/q /c rmdir /s /q "C:\Users\milag\AppData\Local\Microsoft\OneDrive\
23.199.0924.0001"
04 - HKCU\..\RunOnce : [Uninstall 23.204.1001.0003] C:\WINDOWS\system32\cmd.exe
/q /c rmdir /s /q "C:\Users\milag\AppData\Local\Microsoft\OneDrive\
23.204.1001.0003"
04 - HKLM\..\Run : [cmsc] "c:\program files (x86)\cmcm\Clean Master\cmtray.exe" -
autorun
04 - HKLM\..\Run : [Lightshot] C:\Program Files (x86)\Skillbrains\lightshot\
Lightshot.exe
04 - HKLM\..\Run : [QHSafeTray] "C:\Program Files (x86)\360\Total Security\safemon\
360Tray.exe" /start
04 - [x64] HKLM\..\Run : [SecurityHealth] %windir%\system32\
SecurityHealthSystray.exe
04 - [x64] HKLM\..\Run : [RtkAudUService] "C:\WINDOWS\System32\DriverStore\
FileRepository\realtekservice.inf_amd64_1c0a31316508effa\RtkAudUService64.exe" -
background
04 - [x64] HKLM\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common
Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
04 - [x64] HKLM\..\RunOnce : [msedge_cleanup_{F3017226-FE2A-4295-8BDF-
00C3A9A7E4C5}] "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\
118.0.2088.76\Installer\setup.exe" --msedgewebview --delete-old-versions --system-
level --verbose-logging --on-logon
04 - HKU\S-1-5-19\..\Run : [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe
/thfirstsetup
04 - HKU\S-1-5-20\..\Run : [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe
/thfirstsetup
04 - HKU\S-1-5-21-2377646910-472246176-1221056264-1001\..\Run :
[HPSEU_Host_Launcher] C:\System.sav\util\HPSEU\HpseuHostLauncher.exe
04 - HKU\S-1-5-21-2377646910-472246176-1221056264-1001\..\Run : [OneDrive] "C:\
Users\milag\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
04 - HKU\S-1-5-21-2377646910-472246176-1221056264-1001\..\Run : [usbrescate] "C:\
Ericksystem\USB Rescate\usbrescate.exe"
04 - HKU\S-1-5-21-2377646910-472246176-1221056264-1001\..\Run :
[MicrosoftEdgeAutoLaunch_07019DCA21D67272334744128DFC3DE9] "C:\Program Files (x86)\
Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
/prefetch:5
04 - HKU\S-1-5-21-2377646910-472246176-1221056264-1001\..\RunOnce : [Delete Cached
Update Binary] C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\milag\AppData\
Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
04 - HKU\S-1-5-21-2377646910-472246176-1221056264-1001\..\RunOnce : [Delete Cached
Standalone Update Binary] C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\milag\
AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
04 - HKU\S-1-5-21-2377646910-472246176-1221056264-1001\..\RunOnce : [Uninstall
23.199.0924.0001] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\milag\
AppData\Local\Microsoft\OneDrive\23.199.0924.0001"
04 - HKU\S-1-5-21-2377646910-472246176-1221056264-1001\..\RunOnce : [Uninstall
23.204.1001.0003] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\milag\
AppData\Local\Microsoft\OneDrive\23.204.1001.0003"

------------ | Tasks |

Task - Adobe Acrobat Update Task --> C:\Program Files (x86)\Common Files\Adobe\ARM\
1.0\AdobeARM.exe
Task - CreateExplorerShellUnelevatedTask --> C:\windows\explorer.exe /NoUACCheck
Task - GoogleUpdateTaskMachineCore --> "C:\Program Files (x86)\Google\Update\
GoogleUpdate.exe" /c
Task - GoogleUpdateTaskMachineUA --> "C:\Program Files (x86)\Google\Update\
GoogleUpdate.exe" /ua /installsource scheduler
Task - HPAudioSwitch --> "C:\Program Files (x86)\HP\HPAudioSwitch\
HPAudioSwitch.exe"
Task - MicrosoftEdgeUpdateTaskMachineCore --> C:\Program Files (x86)\Microsoft\
EdgeUpdate\MicrosoftEdgeUpdate.exe /c
Task - MicrosoftEdgeUpdateTaskMachineUA --> C:\Program Files (x86)\Microsoft\
EdgeUpdate\MicrosoftEdgeUpdate.exe /ua /installsource scheduler
Task - OneDrive Reporting Task-S-1-5-21-2377646910-472246176-1221056264-1001 -->
%localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting
Task - OneDrive Standalone Update Task-S-1-5-21-2377646910-472246176-1221056264-
1001 --> %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task - OneDrive Standalone Update Task-S-1-5-21-2377646910-472246176-1221056264-500
--> %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task - OneDrive Standalone Update Task-S-1-5-21-3030136429-2419178335-3506893383-
500 --> %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task - OneDrive Standalone Update Task-S-1-5-21-3301456378-1275565351-4053328577-
500 --> %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task - OneDrive Standalone Update Task-S-1-5-21-42099465-2214198599-535371160-500
--> %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task - update-S-1-5-21-2377646910-472246176-1221056264-1001 --> C:\Program Files
(x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
Task - update-sys --> C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -
runmode=checkupdate
Task - UsbFix Boot Scan --> "C:\ProgramData\SosVirus\UsbFix\UsbFix.exe" -
scanonstart
Task - UsbFix Monitor --> "C:\ProgramData\SosVirus\UsbFix\Modules\
UsbFixMonitor.exe"

------------ | C:\ %SystemDrive% - Disco fijo (NTFS) |

[31/10/2023 - 11:01:15 | ASH | 12 Ko] - DumpStack.log.tmp

[31/10/2023 - 11:01:12 | ASH | 1597844 Ko] - hiberfil.sys
[31/10/2023 - 11:01:15 | ASH | 16384 Ko] - swapfile.sys
[31/10/2023 - 11:01:15 | ASH | 5505024 Ko] - pagefile.sys
[17/03/2021 - 01:21:04 | HD] - System.sav
[03/07/2022 - 11:38:17 | A | 74 Ko] - dism.log
[02/07/2023 - 17:24:35 | SHD] - $Recycle.Bin
[16/03/2021 - 22:49:17 | HD] - hp
[13/05/2021 - 15:17:34 | SHD] - Documents and Settings
[13/05/2021 - 15:17:34 | SHD] - Archivos de programa
[20/05/2021 - 20:32:23 | HD] - OneDriveTemp
[24/05/2021 - 22:35:15 | D] - Ericksystem
[24/05/2021 - 22:40:00 | AH | 0 Ko] - 722FC68AA604
[24/05/2021 - 22:51:04 | AD] - Windows 10 Insider Preview Icons UPDATE 6
[26/11/2021 - 11:56:49 | D] - hpswsetup
[21/03/2022 - 09:55:55 | RSHD] - 360SANDBOX
[07/05/2022 - 00:24:50 | D] - PerfLogs
[02/07/2023 - 17:25:00 | RD] - Users
[12/07/2023 - 19:35:31 | HD] - Recovery
[12/07/2023 - 21:04:36 | HD] - ProgramData
[18/07/2023 - 23:00:12 | D] - SWSetup
[06/08/2023 - 12:37:03 | RD] - Program Files (x86)
[06/08/2023 - 12:38:53 | SHD] - $360Section
[11/10/2023 - 10:31:12 | RD] - Program Files
[19/10/2023 - 15:14:36 | HD] - $WinREAgent
[31/10/2023 - 10:50:46 | D] - Windows
[31/10/2023 - 11:01:17 | D] - Intel

Elemento(s) infectado(s) : 0
Elementos analizados : 56671 en 00h 00m 04s

# UsbFix-Report-400.txt [8184B]

------------ | E.O.F |