# ----------------------------------------------------

# UsbFix Antivirus Free

# ----------------------------------------------------
# Version : 11.016
# Database : 2019.05.21
# Contact : https://www.usb-antivirus.com/contact
# ----------------------------------------------------
# Scan type : USB
# User : Moise (Administrator)
# Device : DESKTOP-ARDCA7B
# Started : 27/08/2019 13:26:55
# ----------------------------------------------------

------------ | Analyzed disks |

F:\ NTFS (7GB/7GB) [Removable]

------------ | Infected elements |

~ No element detected ~

------------ | Run |

F2 - HKLM\..\Winlogon : [Shell] explorer.exe

F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\WINDOWS\system32\userinit.exe,
04 - HKCU\..\Run : [OneDrive]
"C:\Users\Moise\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
04 - HKCU\..\Run : [EPLTarget\P0000000000000000]
C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISOE.EXE /EPT
"EPLTarget\P0000000000000000" /M "L4150 Series"
04 - HKCU\..\Run : [EPLTarget\P0000000000000001]
C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISOE.EXE /EPT
"EPLTarget\P0000000000000001" /M "L4150 Series"
04 - HKCU\..\RunOnce : [Delete Cached Update Binary] C:\WINDOWS\system32\cmd.exe /q
/c del /q
"C:\Users\Moise\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
04 - HKCU\..\RunOnce : [Delete Cached Standalone Update Binary]
C:\WINDOWS\system32\cmd.exe /q /c del /q
"C:\Users\Moise\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.ex
e"
04 - HKCU\..\RunOnce : [Uninstall 19.131.0704.0007\amd64]
C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q
"C:\Users\Moise\AppData\Local\Microsoft\OneDrive\19.131.0704.0007\amd64"
04 - HKCU\..\RunOnce : [Uninstall 19.131.0704.0007] C:\WINDOWS\system32\cmd.exe
/q /c rmdir /s /q
"C:\Users\Moise\AppData\Local\Microsoft\OneDrive\19.131.0704.0007"
04 - HKLM\..\Run : [EEventManager] "C:\Program Files (x86)\Epson Software\Event
Manager\EEventManager.exe"
04 - HKLM\..\Run : [SwitchBoard] C:\Program Files (x86)\Common
Files\Adobe\SwitchBoard\SwitchBoard.exe
04 - HKLM\..\Run : [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common
Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
04 - [x64] HKLM\..\Run : [SecurityHealth] %ProgramFiles%\Windows
Defender\MSASCuiL.exe
04 - [x64] HKLM\..\Run : [Apoint] C:\Program Files\DellTPad\Apoint.exe
04 - [x64] HKLM\..\Run : [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
04 - [x64] HKLM\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common
Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
04 - HKU\S-1-5-19\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe
/thfirstsetup
04 - HKU\S-1-5-20\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe
/thfirstsetup
04 - HKU\S-1-5-21-2999192075-568212624-3871410181-1001\..\Run : [OneDrive]
"C:\Users\Moise\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
04 - HKU\S-1-5-21-2999192075-568212624-3871410181-1001\..\Run :
[EPLTarget\P0000000000000000] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISOE.EXE
/EPT "EPLTarget\P0000000000000000" /M "L4150 Series"
04 - HKU\S-1-5-21-2999192075-568212624-3871410181-1001\..\Run : [AdobeBridge]
04 - HKU\S-1-5-21-2999192075-568212624-3871410181-1001\..\Run :
[EPLTarget\P0000000000000001] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISOE.EXE
/EPT "EPLTarget\P0000000000000001" /M "L4150 Series"
04 - HKU\S-1-5-19\..\RunOnce : [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe
/Upgrade
04 - HKU\S-1-5-20\..\RunOnce : [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe
/Upgrade
04 - HKU\S-1-5-21-2999192075-568212624-3871410181-1001\..\RunOnce : [Delete Cached
Update Binary] C:\WINDOWS\system32\cmd.exe /q /c del /q
"C:\Users\Moise\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
04 - HKU\S-1-5-21-2999192075-568212624-3871410181-1001\..\RunOnce : [Delete Cached
Standalone Update Binary] C:\WINDOWS\system32\cmd.exe /q /c del /q
"C:\Users\Moise\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.ex
e"
04 - HKU\S-1-5-21-2999192075-568212624-3871410181-1001\..\RunOnce : [Uninstall
19.131.0704.0007\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q
"C:\Users\Moise\AppData\Local\Microsoft\OneDrive\19.131.0704.0007\amd64"
04 - HKU\S-1-5-21-2999192075-568212624-3871410181-1001\..\RunOnce : [Uninstall
19.131.0704.0007] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q
"C:\Users\Moise\AppData\Local\Microsoft\OneDrive\19.131.0704.0007"
04 - HKU\S-1-5-18\..\RunOnce : [Application Restart #1] C:\Program Files
(x86)\RSUPPORT\MobizenService\MobizenTray.exe /RestartByRestartManager:5EE80CAB-
AC9F-4d47-A567-56A5F1E42832
04 - HKU\S-1-5-18\..\RunOnce : [Application Restart #0] C:\Program Files
(x86)\RSUPPORT\MobizenService\MobizenTray.exe /RestartByRestartManager:BFFD0085-
3BF8-4ee4-85CE-EFF118B1B1B6

------------ | Tasks |

Task - Adobe Acrobat Update Task --> C:\Program Files (x86)\Common

Files\Adobe\ARM\1.0\AdobeARM.exe
Task - Adobe Flash Player PPAPI Notifier -->
C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_238_pepper.exe -check
pepperplugin
Task - Adobe Flash Player Updater -->
C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task - CCleaner Update --> C:\Program Files\CCleaner\CCUpdate.exe
Task - CCleanerSkipUAC --> "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
Task - EPSON L4150 Series Update {95664304-BFCA-404D-9E2B-F0660C0A9D7F} -->
C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSOE.EXE /EXE:"{95664304-BFCA-404D-
9E2B-F0660C0A9D7F}" /F:"Update"
Task - EPSON L4150 Series Update {CEE8F20C-BCF4-498D-B235-4CDE471B4538} -->
C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSOE.EXE /EXE:"{CEE8F20C-BCF4-498D-
B235-4CDE471B4538}" /F:"Update"
Task - GoogleUpdateTaskMachineCore --> C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe /c
Task - GoogleUpdateTaskMachineUA --> C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
Task - OneDrive Standalone Update Task-S-1-5-21-2999192075-568212624-3871410181-
1001 --> %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe

------------ | F:\ - Removable drive (NTFS) |

[19/08/2019 - 13:19:46 | A | 32 Ko] - CONTRATO.docx

[27/08/2019 - 06:42:25 | A | 16 Ko] - 14 COMPRAVENTA CORPOCASA - DAGO.docx

Infected elements : 0
Analyzed elements : 47934 in 00h 00m 08s

# UsbFix-Report-04.txt [6423B]

------------ | E.O.F |