Do you have any sources that the infected USB contained AV updates?

I can't find any sources saying that..