offline
- Mari983
- Novi MyCity građanin
- Pridružio: 09 Jun 2010
- Poruke: 13
|
Napisano: 13 Jun 2010 1:36
USBNoRisk 2.5 (26 July 2009) by bobby
Started at 6/13/2010 01:35:24
Searching for connected USB Mass storage...
----------------------------------------
========================================
Searching for other storage...
----------------------------------------
D: {93732455-fe4d-11d5-954a-806d6172696f}
C: {93732457-fe4d-11d5-954a-806d6172696f}
========================================
Scanning fixed storage...
----------------------------------------
No blocked files found on C:
No Autorun.inf files found on C:
No mountpoint found for C:
No mountpoint found for 93732457-fe4d-11d5-954a-806d6172696f
No Desktop.ini files found on C:
----------------------------------------
No blocked files found on D:
No Autorun.inf files found on D:
No mountpoint found for D:
No mountpoint found for 93732455-fe4d-11d5-954a-806d6172696f
No Desktop.ini files found on D:
----------------------------------------
autorun.inf found in Qoobox
----------------------------------------
Content of C:\QooBox\Quarantine\C\autorun.inf.vir
----------------------------------------
;12T14I69FX2E03Q9ZYM
[aUTORUN]
;5
;B6M5HOUGHF2087TLC51IB5Y99E1FK2272X9298QYY8O6AZM1R34R3IXBPAKW9
;755GH782Y39Z31JBS7IH18NMQ2OHF8DM
;263344BEDQH5UNO8662G2NM8CA7QY08104EKP5WML754VXZ2A9XQ70CH4U7F8U
;6625KXG1S86BBFXTL97OEB70799E2QBI9BIO1H8KG19GB
OPEN=UiPVKr.ExE
;45F27A231FCABAE1D81E005E0841BDA88E8C0E96B727D2C7BFC81571
;7KWBSR4WM4QA9
;3HDH076YZ2VI90C8E3P6D5SG1AC4JSXW1NZM998Q5O08N44
;285S0RY4S64470REW74D4RD5MK4740S8044F5
;554RE32VBA0N2B5L55O542428KV3R7YY27T6W387CHQ703081ZKZR36ELMPK3
;3IG2YV6NKZ4721O35UD
ShElL\opeN\defAuLT=1
;R8
SHELl\open\CoMmand=UIPvkr.exe
;2Y2HAE1MN56J3JVO3MS39B7918F1SSA9C2UK4A8JY16S8KG530XZ6P076U2BPXW836806YX90A8
----------------------------------------
Content of C:\QooBox\Quarantine\D\autorun.inf.vir
----------------------------------------
;12T14I69FX2E03Q9ZYM
[aUTORUN]
;5
;B6M5HOUGHF2087TLC51IB5Y99E1FK2272X9298QYY8O6AZM1R34R3IXBPAKW9
;755GH782Y39Z31JBS7IH18NMQ2OHF8DM
;263344BEDQH5UNO8662G2NM8CA7QY08104EKP5WML754VXZ2A9XQ70CH4U7F8U
;6625KXG1S86BBFXTL97OEB70799E2QBI9BIO1H8KG19GB
OPEN=UiPVKr.ExE
;45F27A231FCABAE1D81E005E0841BDA88E8C0E96B727D2C7BFC81571
;7KWBSR4WM4QA9
;3HDH076YZ2VI90C8E3P6D5SG1AC4JSXW1NZM998Q5O08N44
;285S0RY4S64470REW74D4RD5MK4740S8044F5
;554RE32VBA0N2B5L55O542428KV3R7YY27T6W387CHQ703081ZKZR36ELMPK3
;3IG2YV6NKZ4721O35UD
ShElL\opeN\defAuLT=1
;R8
SHELl\open\CoMmand=UIPvkr.exe
;2Y2HAE1MN56J3JVO3MS39B7918F1SSA9C2UK4A8JY16S8KG530XZ6P076U2BPXW836806YX90A8
----------------------------------------
========================================
Initial scan finished!
========================================
New device connected at 6/13/2010 01:35:43
Scanning for connected USB mass storage...
----------------------------------------
H: {456f292c-e668-11de-8edf-00112f75c6e2}
Added H:
========================================
Scanning USB mass storage for files...
----------------------------------------
Blocked file found: H:\autorun.inf.blocked
----------------------------------------
Content of H:\autorun.inf.blocked
----------------------------------------
[autorun
(dsakdasêÄË×ÑÀÊÄ׊Œê䌊×Č̊kDL?FSAFNsak?fmjwq?DKWQDWLQáäÂÛÜÁÂÆëÀËÉÆÙÀËùæÖÉÂÄÇÔÛÆñüÑüÔÛÆÑëáÔÛäáñâÔÛÂÁëÛÝÄÆÂÝÆäÖÂËÖëÙÂëéùËÄâçéÂËöõçâëäÔÛâëäÔÛÜËÀÔÛÒÜëäæ÷ÿüìßËÄòñËÆÖÙËÀÖÀËÄÝÖÔÛÄüàÄÆÔÛÜïàôûäæáâôÄÆÂÁÝÖÉÆÂËéöîàÖÆÎâàöÔðòâöäéâëîÖÉÆ
open=DIJANA/lausanerka.exe
action=Open folder to view files using Windows Explorer
icon=DIJANA/lausanerka.exe
Shell\open\command=DIJANA/lausanerka.exe
shell\open\command=DIJANA/lausanerka.exe
USEAUTOPLAY=1
----------------------------------------
Files referenced from H:\autorun.inf.blocked
----------------------------------------
None
----------------------------------------
----------------------------------------
No Autorun.inf files found on H:
No mountpoint found for 456f292c-e668-11de-8edf-00112f75c6e2
----------------------------------------
----------------------------------------
Desktop.ini found at H:\RAZLOG\ contains interesting CLSID string
----------------------------------------
[.ShellClassInfo]
CLSID={645FF040-5081-101B-9F08-00AA002F954E}
----------------------------------------
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},InfoTip = @%SystemRoot%\system32\SHELL32.dll,-22915
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},IntroText = @%SystemRoot%\system32\SHELL32.dll,-31748
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},LocalizedString = @%SystemRoot%\system32\SHELL32.dll,-8964
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,@ = %SystemRoot%\System32\shell32.dll,31
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Empty = %SystemRoot%\System32\shell32.dll,31
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Full = %SystemRoot%\System32\shell32.dll,32
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32,@ = shell32.dll
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},InfoTip = @%SystemRoot%\system32\SHELL32.dll,-22915
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},IntroText = @%SystemRoot%\system32\SHELL32.dll,-31748
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},LocalizedString = @%SystemRoot%\system32\SHELL32.dll,-8964
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,@ = %SystemRoot%\System32\shell32.dll,31
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Empty = %SystemRoot%\System32\shell32.dll,31
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Full = %SystemRoot%\System32\shell32.dll,32
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32,@ = shell32.dll
----------------------------------------
Desktop.ini found at H:\DIJANA\ contains interesting CLSID string
----------------------------------------
[.ShellClassInfo]
CLSID={645FF040-5081-101B-9F08-00AA002F954E}
----------------------------------------
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},InfoTip = @%SystemRoot%\system32\SHELL32.dll,-22915
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},IntroText = @%SystemRoot%\system32\SHELL32.dll,-31748
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},LocalizedString = @%SystemRoot%\system32\SHELL32.dll,-8964
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,@ = %SystemRoot%\System32\shell32.dll,31
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Empty = %SystemRoot%\System32\shell32.dll,31
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Full = %SystemRoot%\System32\shell32.dll,32
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32,@ = shell32.dll
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},InfoTip = @%SystemRoot%\system32\SHELL32.dll,-22915
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},IntroText = @%SystemRoot%\system32\SHELL32.dll,-31748
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},LocalizedString = @%SystemRoot%\system32\SHELL32.dll,-8964
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,@ = %SystemRoot%\System32\shell32.dll,31
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Empty = %SystemRoot%\System32\shell32.dll,31
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Full = %SystemRoot%\System32\shell32.dll,32
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32,@ = shell32.dll
----------------------------------------
Desktop.ini found at H:\LAUDA\ contains interesting CLSID string
----------------------------------------
[.ShellClassInfo]
CLSID={645FF040-5081-101B-9F08-00AA002F954E}
----------------------------------------
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},InfoTip = @%SystemRoot%\system32\SHELL32.dll,-22915
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},IntroText = @%SystemRoot%\system32\SHELL32.dll,-31748
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},LocalizedString = @%SystemRoot%\system32\SHELL32.dll,-8964
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,@ = %SystemRoot%\System32\shell32.dll,31
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Empty = %SystemRoot%\System32\shell32.dll,31
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Full = %SystemRoot%\System32\shell32.dll,32
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32,@ = shell32.dll
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},InfoTip = @%SystemRoot%\system32\SHELL32.dll,-22915
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},IntroText = @%SystemRoot%\system32\SHELL32.dll,-31748
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},LocalizedString = @%SystemRoot%\system32\SHELL32.dll,-8964
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,@ = %SystemRoot%\System32\shell32.dll,31
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Empty = %SystemRoot%\System32\shell32.dll,31
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Full = %SystemRoot%\System32\shell32.dll,32
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32,@ = shell32.dll
----------------------------------------
No mimics found on drive H:
========================================
Processing script
----------------------------------------
456f292c-e668-11de-8edf-00112f75c6e2
Drive letter for GUID: H:
SectionStart = 0
SectionEnd = 4
----------------------------------------
Unhide superhidden for H:\
----------------------------------------
dra-- H:\iPod_Control > unhidden
dra-- H:\Contacts > unhidden
dra-- H:\Calendars > unhidden
dra-- H:\Notes > unhidden
--a-- H:\msvcr71.dll > unhidden
dra-- H:\RAZLOG > unhidden
--a-- H:\RAZLOG\Desktop.ini > unhidden
dra-- H:\Cut Copy - In Ghost Colours > unhidden
--a-- H:\Cut Copy - In Ghost Colours\AlbumArtSmall.jpg > unhidden
--a-- H:\Cut Copy - In Ghost Colours\AlbumArt_{4B1AC54D-2CE8-41E6-B855-8199AD33B539}_Large.jpg > unhidden
--a-- H:\Cut Copy - In Ghost Colours\AlbumArt_{4B1AC54D-2CE8-41E6-B855-8199AD33B539}_Small.jpg > unhidden
--a-- H:\Cut Copy - In Ghost Colours\desktop.ini > unhidden
--a-- H:\Cut Copy - In Ghost Colours\Folder.jpg > unhidden
dra-- H:\Florence and The Machine > unhidden
dra-- H:\DIJANA > unhidden
--a-- H:\DIJANA\Desktop.ini > unhidden
-ra-- H:\DIJANA\lausanerka.exe > unhidden
dra-- H:\LAUDA > unhidden
--a-- H:\LAUDA\Desktop.ini > unhidden
dra-- H:\RECYCLER > unhidden
dra-- H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013 > unhidden
--a-- H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\Desktop.ini > unhidden
----------------------------------------
Deleting blocked files:
----------------------------------------
Delete: H:\autorun.inf.blocked > Done!
f_delete:
file "H:\\DIJANA\lausanerka.exe" deleted successfully
----------------------------------------
Folder list for H:\:
----------------------------------------
dra-- 0 H:\IPOD_C~1 H:\iPod_Control
dra-- 0 H:\Contacts H:\Contacts
dra-- 0 H:\CALEND~1 H:\Calendars
dra-- 0 H:\Notes H:\Notes
--a-- 1986560 H:\DIPLOM~1.DOC H:\Diplomski final.doc
--a-- 33792 H:\OMLADI~1.DOC H:\OMLADINSKA ZADRUGA.doc
--a-- 348160 H:\msvcr71.dll H:\msvcr71.dll
--a-- 6004523 H:\RAZORL~1.MP3 H:\ Razorlight - America.mp3
d---s 0 H:\Photos H:\Photos
--a-- 53954 H:\MARINA~1.PDF H:\Marina Buha CV.pdf
--a-- 101837 H:\MARINA~2.PDF H:\Marina Buha_CV.pdf
dra-- 0 H:\RAZLOG H:\RAZLOG
dra-- 0 H:\CUTCOP~1 H:\Cut Copy - In Ghost Colours
--a-- 5959808 H:\EDITOR~1.MP3 H:\Editors - Bones.mp3
dra-- 0 H:\FLOREN~1 H:\Florence and The Machine
dra-- 0 H:\DIJANA H:\DIJANA
dra-- 0 H:\LAUDA H:\LAUDA
--a-- 5356902 H:\RAZORL~2.MP3 H:\ Razorlight - In The Morning.mp3
--a-- 6921151 H:\KAISER~1.MP3 H:\Kaiser Chiefs - The Angry Mob.mp3
--a-- 5041126 H:\KEANE-~1.MP3 H:\Keane - The Sun Ain't Gonna Shine (Anymore).mp3
--a-- 4275202 H:\ARCTIC~1.MP3 H:\ Arctic Monkeys - Fake Tales Of San Francisco.mp3
--a-- 5566413 H:\NEWORD~1.M4A H:\New Order - Who's Joe_.m4a
dra-- 0 H:\RECYCLER H:\RECYCLER
----------------------------------------
Dopuna: 13 Jun 2010 1:43
P.S. Mozda je nebitno, ali da naglasim da mi je nedavno bio neki virus koji je registrovao nod na ovom iPOD-u, jer sam ga ubadala kod drugarice i da je nod sam nesto izbrisao tako da mi se sad kad je povezan na racunar kao disk uopste ne vidi glavni folder "music" koji je velicine oko 27 GB, a inace mu sa plejera mogu pristupiti, tj.nije mi obrisao nikakve fajlove, ali jednostavno citav se folder ne vidi kad pristupam direkt kao na disk dok iTunes sve vidi normalno.
|