Strange executable file from sandbox allowed normally (where is description??)

Hi, I installed ubuntu and winxp on vm ware player because before I got a keylogger on my work pc (I think it was from external or internal spy I don’t know…). Now I installed a keyl for first wich work ok. I got a message from avast telling me usb file “llfdfjkijfkdj” is trying to do something asking me if I wanted to store in sandbox or normal .I was thinking about my logger and accepted to run it normally remembering my choice… later I feared about a new “external and unwanted” logger but when I tried to look at the log to check exactly what I accepted I can’t find it. Where should I look? even in my logger report there wasn’t anything… please help i son’t want to reinstall again. Thanks