[b]############################## | UsbFix V 8.204 | [Clean][/b]

User: Rahma (Administrator) # DESKTOP-I8259RO
Updated 22/03/2016 by SOSVirus
Started at 22:06:02 | 22/03/2016

Website : [url=https://www.usb-antivirus.com/]https://www.usb-antivirus.com/[/url]
Tutorial : [url=https://www.usb-antivirus.com/tutorial/]https://www.usb-antivirus.com/tutorial/[/url]
Support : [url=http://www.sosvirus.org/]http://www.sosvirus.org/[/url]
Live detection : [url=http://www.sosmalware.com/usbfix/]http://www.sosmalware.com/usbfix/[/url]
Contact : [url=https://www.usb-antivirus.com/contact/]https://www.usb-antivirus.com/contact/[/url]

[b]################## | System information |[/b]

MB: ASUSTeK COMPUTER INC. (X550JX)
CPU: Intel(R) Core(TM) i7-4720HQ CPU @ 2.60GHz
RAM -> [Total : 8081 Mo | Free : 5980 Mo]
Bios: American Megatrends Inc.
Boot: Normal boot

OS: Microsoft™ Windows 10 Pro (6.3.10586 64-Bit)
WB: Internet Explorer : 11.00.10586.0
WB: Microsoft Edge : 11.00.10586.122 (th2_release_inmarket.160222-1549)
WB: Google Chrome : 49.0.2623.87

[b]################## | Security Information |[/b]

AV: Windows Defender [[b](!) Disabled[/b] |Updated]
AS: Windows Defender [[b](!) Disabled[/b] |Updated]
AS: Malwarebytes Anti-Malware : 2.2.0.1024
FW: Windows Firewall [Enabled]
SC: Security Center [Enabled]
WU: Windows Update [Enabled]

[b]################## | Disk Information |[/b]

C:\ (%SystemDrive%) -> Fixed disk # 537 Gb (436 Gb free - 81%) [] # NTFS
D:\ -> Fixed disk # 394 Gb (96 Gb free - 24%) [] # NTFS

[b]################## | Generic Research |[/b]


(!) Temporary files deleted. (67.3125286102295 MB)

[b]################## | Startup |[/b]

F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [OneDrive] "C:\Users\Rahma\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
04 - HKCU\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKCU\..\Run : [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
04 - HKCU\..\Run : [Microsoft Word] wscript.exe //B "C:\Users\Rahma\AppData\Roaming\Microsoft Office\\Microsoft Word.WsF"
04 - HKCU\..\Run : [GoogleChromeAutoLaunch_D028B9C29B2B99F573D78B14A40BF0B4] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Rahma\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Rahma\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64"
04 - HKLM\..\Run : [ADSKAppManager] "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
04 - HKLM\..\Policies\Explorer\run : [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
04 - [x64] HKLM\..\Run : [NvBackend] "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
04 - [x64] HKLM\..\Run : [ShadowPlay] C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
04 - [x64] HKLM\..\Run : [cAudioFilterAgent] C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe
04 - [x64] HKLM\..\Run : [SmartAudio] C:\Program Files\CONEXANT\SAII\SACpl.exe /c /delay:30
04 - [x64] HKLM\..\Policies\Explorer\run : [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
04 - HKU\S-1-5-19\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup
04 - HKU\S-1-5-20\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup
04 - HKU\S-1-5-21-1626028712-2863914626-1744165970-1001\..\Run : [OneDrive] "C:\Users\Rahma\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
04 - HKU\S-1-5-21-1626028712-2863914626-1744165970-1001\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKU\S-1-5-21-1626028712-2863914626-1744165970-1001\..\Run : [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
04 - HKU\S-1-5-21-1626028712-2863914626-1744165970-1001\..\Run : [Microsoft Word] wscript.exe //B "C:\Users\Rahma\AppData\Roaming\Microsoft Office\\Microsoft Word.WsF"
04 - HKU\S-1-5-21-1626028712-2863914626-1744165970-1001\..\Run : [GoogleChromeAutoLaunch_D028B9C29B2B99F573D78B14A40BF0B4] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5
04 - HKU\S-1-5-21-1626028712-2863914626-1744165970-1001\..\RunOnce : [Uninstall C:\Users\Rahma\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Rahma\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64"

[b]################## | UsbFix - Information |[/b]

Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]How to remove shortcut virus on flash disk (Video)[/url]
Info : [url=http://www.usb-antivirus.com/2014/03/remove-shortcut-virus-usb/]Shortcut virus on flash disk, What is it ?[/url]
Live detection : [url=http://www.sosmalware.com/usbfix/]http://www.sosmalware.com/usbfix/[/url]

[b]################## | C:\ %SystemDrive% - Fixed drive (NTFS) |[/b]

[22/03/2016 - 21:21:14 | ASH | 3309928 Ko] - C:\hiberfil.sys
[22/03/2016 - 21:21:14 | ASH | 1310720 Ko] - C:\pagefile.sys
[22/03/2016 - 21:21:14 | ASH | 262144 Ko] - C:\swapfile.sys
[30/10/2015 - 15:05:49 | A | 0 Ko] - C:\setup.log
[28/11/2012 - 05:10:40 | A | 1 Ko] - C:\setup.iss
[09/11/2015 - 07:29:17 | SHD] - C:\$Recycle.Bin
[10/07/2015 - 12:00:31 | RASH | 386 Ko] - C:\bootmgr
[10/07/2015 - 13:21:38 | SHD] - C:\Documents and Settings
[30/10/2015 - 08:18:34 | N | 0 Ko] - C:\BOOTNXT
[30/10/2015 - 08:24:24 | D] - C:\PerfLogs
[30/10/2015 - 14:46:22 | D] - C:\Intel
[30/10/2015 - 14:51:08 | D] - C:\NVIDIA
[30/10/2015 - 15:43:14 | RHD] - C:\MSOCache
[17/12/2015 - 07:00:31 | RD] - C:\Users
[17/12/2015 - 07:14:59 | SHD] - C:\Recovery
[24/02/2016 - 11:55:01 | RD] - C:\Program Files
[22/03/2016 - 21:13:42 | HD] - C:\ProgramData
[22/03/2016 - 21:21:14 | D] - C:\Windows
[22/03/2016 - 21:49:06 | RD] - C:\Program Files (x86)
[22/03/2016 - 22:03:47 | D] - C:\UsbFix

[b]################## | D:\ - Fixed drive (NTFS) |[/b]

[30/10/2015 - 15:53:48 | SHD] - D:\$RECYCLE.BIN
[30/10/2015 - 15:44:44 | D] - D:\e
[24/02/2016 - 11:50:41 | D] - D:\Hearthstone
[16/03/2016 - 11:00:57 | D] - D:\rahma

[b]################## | Vaccin |[/b]

C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)

[b]Analysed in 7.659 seconds[/b]

[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=https://www.usb-antivirus.com/]https://www.usb-antivirus.com/[/url] |[/b]