ADVERTISEMENT

UsbFix__Clean_4__KOMP.txt

Zainfekowany Pendrive - zamiast folderów - skróty.

Już są foldery w obu pendrivach.


Download file - link to post

############################## | UsbFix V 7.165 | [Deletion]

User: Kamil (Administrator) # KOMP
Updated 20/02/2014 by El Desaparecido - Team SosVirus
Started at 11:24:19 | 23/02/2014

Website : http://www.en.usbfix.net/
Changelog : http://www.en.usbfix.net/changelog/
Support : http://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.en.usbfix.net/contact/

PC: ASUSTeK Computer Inc. (K52N)
CPU: AMD V120 Processor
RAM - & gt; [Total : 7934 Mo| Free : 7072 Mo]
Bios: American Megatrends Inc.
Boot: Normal boot

OS: Microsoft Windows 7 Professional (6.1.7601 64-Bit) Service Pack 1
WB: Windows Internet Explorer : 8.0.7601.17514
WB: Google Chrome : 33.0.1750.117

SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AS: Windows Defender [Enabled | Updated]
FW: Windows FireWall [(!) Disabled]

C:\ (%systemdrive%) - & gt; Fixed drive # 100 Gb (67 Mb free - 67%) [] # NTFS
D:\ - & gt; Fixed drive # 198 Gb (176 Mb free - 89%) [] # NTFS
E:\ - & gt; CD-ROM
F:\ - & gt; CD-ROM
G:\ - & gt; Removable drive # 4 Gb (3 Mb free - 92%) [KP ITA] # FAT32

################## | Active Processes |

C:\Windows\system32\csrss.exe (ID: 396 |ParentID: 388)
C:\Windows\system32\wininit.exe (ID: 456 |ParentID: 388)
C:\Windows\system32\csrss.exe (ID: 464 |ParentID: 448)
C:\Windows\system32\winlogon.exe (ID: 520 |ParentID: 448)
C:\Windows\system32\services.exe (ID: 556 |ParentID: 456)
C:\Windows\system32\lsass.exe (ID: 572 |ParentID: 456)
C:\Windows\system32\lsm.exe (ID: 580 |ParentID: 456)
C:\Windows\system32\svchost.exe (ID: 688 |ParentID: 556)
C:\Windows\system32\svchost.exe (ID: 772 |ParentID: 556)
C:\Windows\system32\atiesrxx.exe (ID: 820 |ParentID: 556)
C:\Windows\System32\svchost.exe (ID: 924 |ParentID: 556)
C:\Windows\System32\svchost.exe (ID: 992 |ParentID: 556)
C:\Windows\system32\svchost.exe (ID: 1020 |ParentID: 556)
C:\Windows\system32\svchost.exe (ID: 284 |ParentID: 556)
C:\Windows\system32\AUDIODG.EXE (ID: 300 |ParentID: 924)
C:\Windows\system32\svchost.exe (ID: 872 |ParentID: 556)
C:\Windows\system32\svchost.exe (ID: 1124 |ParentID: 556)
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (ID: 1196 |ParentID: 556)
C:\Windows\system32\atieclxx.exe (ID: 1204 |ParentID: 820)
C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ID: 1272 |ParentID: 556)
C:\Windows\System32\spoolsv.exe (ID: 1392 |ParentID: 556)
C:\Windows\system32\svchost.exe (ID: 1432 |ParentID: 556)
C:\Windows\system32\taskhost.exe (ID: 1504 |ParentID: 556)
C:\Windows\system32\taskeng.exe (ID: 1652 |ParentID: 284)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (ID: 1688 |ParentID: 556)
C:\Windows\system32\Dwm.exe (ID: 1696 |ParentID: 992)
C:\Windows\Explorer.EXE (ID: 1744 |ParentID: 1672)
C:\Windows\system32\runonce.exe (ID: 1804 |ParentID: 1744)
C:\Windows\system32\svchost.exe (ID: 1844 |ParentID: 556)
C:\Windows\system32\svchost.exe (ID: 1916 |ParentID: 556)
C:\Windows\system32\taskeng.exe (ID: 2232 |ParentID: 284)
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ID: 2304 |ParentID: 2232)
C:\Program Files\P4G\BatteryLife.exe (ID: 2316 |ParentID: 2232)
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe (ID: 2328 |ParentID: 2232)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 2376 |ParentID: 688)
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ID: 2416 |ParentID: 1196)
C:\Windows\System32\WUDFHost.exe (ID: 2448 |ParentID: 992)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 2500 |ParentID: 688)
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ID: 2604 |ParentID: 2416)
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (ID: 2628 |ParentID: 2416)

################## | Regedit Run |

04 - HKLM\..\Run : [StartCCC] " C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe " MSRun
04 - HKLM\..\Run : [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe
04 - HKLM\..\Run : [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
04 - HKLM\..\Run : [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
04 - HKLM\..\Run : [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
04 - HKLM\..\Run : [Adobe ARM] " C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe "
04 - HKLM\..\Run : [GrooveMonitor] " C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe "
04 - HKLM\..\RunOnce : []
04 - HKLM64\..\Run : [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
04 - HKLM64\..\Run : [ETDWare] %ProgramFiles%\Elantech\ETDCtrl.exe
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun

################## | Generic Research |

Deleted ! G:\home.vbe
Deleted ! G:\SO.lnk
Deleted ! G:\Zeszyt UTK.lnk
Deleted ! G:\Skillet.lnk
Deleted ! G:\Shingeki no Kyojin-manga.lnk
Deleted ! G:\Tytu³y.lnk
Deleted ! G:\Gimp.lnk
Deleted ! G:\Nowy folder (3).lnk
Deleted ! G:\mdhdjq.pif

(!) Temporary files deleted.

################## | Registry |

Repaired ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|EnableLUA - & gt; 1
Repaired ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|ConsentPromptBehaviorAdmin - & gt; 5

################## | Listing |

[18/01/2014 - 17:47:35 | SHD] - C:\$Recycle.Bin
[17/01/2014 - 21:13:52 | D] - C:\ASUS.DAT
[14/07/2009 - 06:08:56 | SHD] - C:\Documents and Settings
[23/02/2014 - 11:22:19 | ASH | 6093176 Ko] - C:\hiberfil.sys
[18/01/2014 - 13:22:11 | RHD] - C:\MSOCache
[23/02/2014 - 11:22:22 | ASH | 8124236 Ko] - C:\pagefile.sys
[14/07/2009 - 04:20:08 | D] - C:\PerfLogs
[22/02/2014 - 19:54:58 | D] - C:\Program Files
[22/02/2014 - 15:31:37 | D] - C:\Program Files (x86)
[22/02/2014 - 16:02:29 | HD] - C:\ProgramData
[17/01/2014 - 18:44:42 | SHD] - C:\Recovery
[22/02/2014 - 19:53:17 | SHD] - C:\System Volume Information
[23/02/2014 - 11:21:13 | D] - C:\UsbFix
[23/02/2014 - 10:42:04 | N | 9 Ko | B2E217A954A9E06AE0228E7AF64B85F6] - C:\UsbFix [Clean 2] KOMP.txt
[23/02/2014 - 11:26:34 | A | 6 Ko | 2A070A1982C3A39B035121C7EC135334] - C:\UsbFix [Clean 4] KOMP.txt
[23/02/2014 - 10:45:47 | N | 3 Ko | 649E726CB8508F23A56561FFAAC41BF5] - C:\UsbFix [Listing 1] KOMP.txt
[23/02/2014 - 10:46:11 | N | 3 Ko | 1465FAF2CA109187FDF7A55B2B21C495] - C:\UsbFix [Listing 2] KOMP.txt
[18/01/2014 - 17:47:18 | D] - C:\Users
[14/11/2007 - 08:18:40 | N | 1 Ko] - C:\USetup.iss
[22/02/2014 - 17:42:11 | D] - C:\Windows
[23/02/2014 - 11:20:12 | D] - C:\_OTL
[18/01/2014 - 17:47:35 | SHD] - D:\$RECYCLE.BIN
[03/02/2014 - 21:44:34 | D] - D:\Filmy
[29/01/2014 - 22:04:10 | D] - D:\Gry
[20/02/2014 - 17:12:11 | D] - D:\Instalki
[18/01/2014 - 13:04:07 | D] - D:\Kamil
[18/01/2014 - 14:20:12 | D] - D:\msdownld.tmp
[23/01/2014 - 15:01:48 | D] - D:\Muzyka
[29/01/2014 - 11:18:34 | D] - D:\Pobrane
[22/02/2014 - 14:23:31 | D] - D:\Programy
[19/01/2014 - 18:53:06 | D] - D:\Przemek
[17/01/2014 - 18:39:09 | SHD] - D:\System Volume Information
[14/04/2008 - 22:51:32 | N | 0 Ko] - G:\autorun.inf
[15/11/2013 - 13:14:06 | N | 58 Ko] - G:\Piotr Gr¹dkowski.docx
[20/11/2013 - 21:00:36 | N | 3603 Ko] - G:\Piotr Gr¹dkowski - Elektrownie atomowe.pptx
[20/02/2014 - 20:06:04 | D] - G:\Tytu³y
[07/02/2014 - 18:07:56 | N | 3254 Ko] - G:\Mechanika World of Tanks v1.2 od Loofaha.pdf
[20/02/2014 - 20:08:08 | D] - G:\Gimp
[21/02/2014 - 10:06:42 | D] - G:\Nowy folder (3)
[30/11/2013 - 13:29:46 | D] - G:\SO
[12/02/2013 - 16:33:26 | N | 53 Ko] - G:\ang.doc
[01/12/2013 - 17:46:50 | N | 371 Ko] - G:\Kamil Pawêska Kl ITa.rar
[01/12/2013 - 18:58:10 | D] - G:\Zeszyt UTK
[02/12/2013 - 08:08:54 | N | 0 Ko] - G:\.~lock.pytania na egzamin systemy i sieci IVsem.doc#
[13/12/2013 - 10:07:40 | N | 41 Ko] - G:\Pawêska Kamil ITa.docx
[30/10/2013 - 15:47:34 | N | 14323 Ko] - G:\Kurs GIMPa.pdf
[18/01/2014 - 17:43:28 | D] - G:\Skillet
[24/01/2014 - 10:26:16 | N | 97583 Ko] - G:\Pawêska Kl Ita.psd
[19/02/2014 - 18:41:22 | D] - G:\Shingeki no Kyojin-manga

################## | Vaccin |

D:\Autorun.inf - & gt; Vaccine created by UsbFix (El Desaparecido)
G:\Autorun.inf - & gt; Vaccine created by UsbFix (El Desaparecido)

################## | E.O.F | http://www.en.usbfix.net/ - http://www.sosvirus.net |