Recycler

1

Recycler

offline
  • Pridružio: 17 Sep 2006
  • Poruke: 421
  • Gde živiš: PALE, Republika Srpska

ljudi usao sam na stick uz pomoc FTP-a, e sada vide se svi folderi imaju skrivenu extenziju, ali takodje ima folder RECYCLER kojeg ne moze obrisati kaspersky, a folderima ne mogu u propetisu promjeniti da ne budu hidden... ocigledno da me zeza ovaj recycer.. kako da ga izbacim kada ne moze kaspersky...

offline
  • diarno  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 15 Jun 2007
  • Poruke: 5572

Ti nikad do sad nisi svracao ili gledao teme u ambulanti?

offline
  • Pridružio: 17 Sep 2006
  • Poruke: 421
  • Gde živiš: PALE, Republika Srpska

Napisano: 10 Mar 2010 1:13

DDS (Ver_09-12-01.01) - NTFSx86
Run by Aleksandar at 1:06:41,91 on sri 10.03.2010
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_17
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.387.1033.18.3327.1872 [GMT 1:00]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe
C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\Program Files\Google\Update\1.2.183.17\GoogleCrashHandler.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVH.EXE
C:\Program Files\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtblfs.exe
C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe
H:\dds.scr
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uSearch Page =
uStart Page = hxxp://start.facemoods.com
uSearch Bar =
mSearchAssistant = hxxp://start.facemoods.com/?s={searchTerms}
uURLSearchHooks: H - No File
BHO: ContributeBHO Class: {074c1dc5-9320-4a9a-947d-c042949c6216} - c:\program files\adobe\/Adobe Contribute CS4/contributeieplugin.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky anti-virus 2010\ievkbd.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: CescrtHlpr Object: {64182481-4f71-486b-a045-b233bd0da8fc} - c:\program files\facemoods.com\facemoods\1.3.43.0\escort.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: Google Gears Helper: {e0fefe40-fbf9-42ae-ba58-794ca7e3fb53} - c:\program files\google\google gears\internet explorer\0.5.36.0\gears.dll
BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - c:\program files\kaspersky lab\kaspersky anti-virus 2010\klwtbbho.dll
BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
TB: Contribute Toolbar: {517bdde4-e3a7-4570-b21e-2b52b6139fc7} - c:\program files\adobe\/Adobe Contribute CS4/contributeieplugin.dll
TB: facemoods Toolbar: {db4e9724-f518-4dfd-9c7c-78b52103cab9} - c:\program files\facemoods.com\facemoods\1.3.43.0\escorTlbr.dll
TB: {EEE6C35B-6118-11DC-9C72-001320C79847} - No File
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [NVIDIA nTune] "c:\program files\nvidia corporation\ntune\nTuneCmd.exe" clear
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\daemon.exe" -autorun
uRun: [Windows] "c:\users\public\public documents\windows movie player\players.exe"
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [RGSC] d:\program files (x86)\rockstar games social club\RGSCLauncher.exe /silent
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
mRun: [AdobeCS4ServiceManager] "c:\program files\common files\adobe\cs4servicemanager\CS4ServiceManager.exe" -launchedbylogin
mRun: [Adobe Acrobat Speed Launcher] "c:\program files\adobe\acrobat 9.0\acrobat\Acrobat_sl.exe"
mRun: [<NO NAME>]
mRun: [Acrobat Assistant 8.0] "c:\program files\adobe\acrobat 9.0\acrobat\Acrotray.exe"
mRun: [RtHDVCpl] c:\program files\realtek\audio\hda\RtHDVCpl.exe
mRun: [AVP] "c:\program files\kaspersky lab\kaspersky anti-virus 2010\avp.exe"
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Append Link Target to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office10\EXCEL.EXE/3000
IE: {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - {0B4350D1-055F-47A3-B112-5F2F2B0D6F08} - c:\program files\google\google gears\internet explorer\0.5.36.0\gears.dll
IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files\kaspersky lab\kaspersky anti-virus 2010\klwtbbho.dll
IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\kaspersky lab\kaspersky anti-virus 2010\klwtbbho.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: klogon - c:\windows\system32\klogon.dll
AppInit_DLLs: c:\progra~1\kasper~1\kasper~1\mzvkbd3.dll

================= FIREFOX ===================

FF - ProfilePath - c:\users\aleksa~1\appdata\roaming\mozilla\firefox\profiles\6035u98f.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.ba/
FF - component: c:\program files\google\google gears\firefox\lib\ff36\gears.dll
FF - component: c:\program files\mozilla firefox\extensions\linkfilter@kaspersky.ru\components\KavLinkFilter.dll
FF - plugin: c:\progra~1\micros~4\office14\NPSPWRAP.DLL
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\users\aleksandar\appdata\local\yahoo!\browserplus\2.5.1\plugins\npybrowserplus_2.5.1.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);

============= SERVICES / DRIVERS ===============

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2009-10-14 36880]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\drivers\klim6.sys [2009-9-14 21520]
R2 AVP;Kaspersky Anti-Virus;c:\program files\kaspersky lab\kaspersky anti-virus 2010\avp.exe [2009-10-20 340456]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files\firebird\firebird_2_1\bin\fbguard.exe -s defaultinstance --> c:\program files\firebird\firebird_2_1\bin\fbguard.exe -s DefaultInstance [?]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files\firebird\firebird_2_1\bin\fbserver.exe -s defaultinstance --> c:\program files\firebird\firebird_2_1\bin\fbserver.exe -s DefaultInstance [?]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-10-2 19472]
R3 sftfs;sftfs;c:\program files\microsoft application virtualization client\drivers\SftFSlh.sys [2009-9-23 543064]
R3 sftplay;sftplay;c:\program files\microsoft application virtualization client\drivers\sftplaylh.sys [2009-9-23 190312]
R3 Sftredir;Sftredir;c:\windows\system32\drivers\Sftredirlh.sys [2009-9-23 21848]
R3 sftvol;sftvol;c:\program files\microsoft application virtualization client\drivers\SftVollh.sys [2009-9-23 14680]
S2 ASTSRV;Nalpeiron Licensing Service;c:\windows\system32\ASTSRV.EXE [2009-12-6 57344]
S2 cvhsvc;Client Virtualization Handler;c:\program files\common files\microsoft shared\virtualization handler\CVHSVC.EXE [2009-9-26 819600]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S4 Adobe Version Cue CS4;Adobe Version Cue CS4;c:\program files\common files\adobe\adobe version cue cs4\server\bin\VersionCueCS4.exe [2008-8-15 284016]

=============== Created Last 30 ================

2010-03-09 15:03:40 46 --sha-w- c:\windows\KLIF.spi
2010-02-28 21:55:14 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2010-02-28 21:53:15 0 d-----w- c:\windows\system32\xlive
2010-02-28 21:53:15 0 d-----w- c:\program files\Microsoft Games for Windows - LIVE
2010-02-26 01:12:30 0 d-----w- c:\program files\CoreCodec
2010-02-22 18:39:57 0 d-----w- c:\users\aleksa~1\appdata\roaming\Super-Cow
2010-02-22 18:38:04 0 d-----w- c:\program files\Super_Cow
2010-02-21 18:05:39 0 d-----w- c:\program files\Cinemaware Marquee
2010-02-18 17:36:38 0 d-----w- c:\users\aleksa~1\appdata\roaming\Vivox
2010-02-18 17:14:45 0 d-----w- c:\users\aleksa~1\appdata\roaming\IMVU
2010-02-18 17:14:29 0 d-----w- c:\users\aleksa~1\appdata\roaming\IMVUClient
2010-02-08 20:47:37 0 d-----w- c:\windows\UbiSoft

==================== Find3M ====================

2010-02-25 15:16:30 85504 ----a-w- c:\windows\system32\ff_vfw.dll
2009-12-20 22:59:37 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2009-12-20 22:59:37 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2009-07-14 04:56:42 31548 ----a-w- c:\windows\inf\perflib\0409\perfd.dat
2009-07-14 04:56:42 31548 ----a-w- c:\windows\inf\perflib\0409\perfc.dat
2009-07-14 04:56:42 291294 ----a-w- c:\windows\inf\perflib\0409\perfi.dat
2009-07-14 04:56:42 291294 ----a-w- c:\windows\inf\perflib\0409\perfh.dat
2009-07-14 04:41:57 174 --sha-w- c:\program files\desktop.ini
2009-07-14 00:34:40 291294 ----a-w- c:\windows\inf\perflib\0000\perfi.dat
2009-07-14 00:34:40 291294 ----a-w- c:\windows\inf\perflib\0000\perfh.dat
2009-07-14 00:34:38 31548 ----a-w- c:\windows\inf\perflib\0000\perfd.dat
2009-07-14 00:34:38 31548 ----a-w- c:\windows\inf\perflib\0000\perfc.dat
2009-06-10 21:26:35 9633792 --sha-r- c:\windows\fonts\StaticCache.dat
2009-10-28 21:27:05 245760 --sha-w- c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\ietldcache\index.dat
2009-07-14 01:14:45 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe

============= FINISH: 1:07:43,37 ===============

https://www.mycity.rs/must-login.png

ovo sam pokrenuo na sticku, tu mi se i nalazi recycler, inace windows me dobro sluzi, ali ovaj virus ne mogu izbaciti sa USB sticka.

Dopuna: 10 Mar 2010 14:52

da li je neko uspio da provali u cemu je kvaka, posto nisam uspio da obrisem recycler sa USB sticka, a ne smijem ga formatirati posto imam dosta vaznih podataka na njemu.

offline
  • diarno  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 15 Jun 2007
  • Poruke: 5572

Lako cemo za recycler, nego jel si ti pokusao ovo :

http://www.mycity.rs/Windows/Stick-i-windows-7.html#1018939

offline
  • Pridružio: 17 Sep 2006
  • Poruke: 421
  • Gde živiš: PALE, Republika Srpska

jesam pokusao sam to, i isto mi se dogodi, folderi su hidden i ne mogu im promjeniti opciju da budu normalni. takodje ne mogu ih ni kopirati sa sticka.... isto kao da cu ucaureni... ne znam da li moze ovaj jbn recycler da ih blokira??

offline
  • diarno  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 15 Jun 2007
  • Poruke: 5572

- Preuzmi USBNoRisk na Desktop i pokreni ga duplim klikom na ikonicu programa.
- Sacekaj koji sekund dok program izvrsi inicijalno skeniranje.
- Ubacuj sve USB memorijske uredjaje redom u USB slot i svaki zadrzi u slotu po 10 sekundi.
- Ukoliko imas vise uredjaja za proveru, onda na parcetu papira zapisi kojim redom su ubacivani jer ce nam kasnije trebati taj podatak
- Kada zavrsis sa svim uredjajima, klikni desno dugme misa na sred prozora programa i odaberi opciju Save log. To ce automatski otvoriti log u Notepadu. Iskopiraj nam taj log iz Notepada na forum.

Objasnjenje: U USB memorijske uredjaje spadaju svi oni uredjaji koji po prikljucivanju na kompjuter dobijaju svoju oznaku particije. Tu spadaju USB flash drajvovi, eksterni hard-diskovi, memorijske kartice, MP3 i MP4 plejeri, neki mobilni telefoni, neki GPS (navigacioni) uredjaji itd.

offline
  • Pridružio: 17 Sep 2006
  • Poruke: 421
  • Gde živiš: PALE, Republika Srpska

Napisano: 11 Mar 2010 15:32

USBNoRisk 2.5 (26 July 2009) by bobby

Started at 11.3.2010 15:30:51

Searching for connected USB Mass storage...
----------------------------------------
========================================

Searching for other storage...
----------------------------------------
C: {e39f293a-c406-11de-9c1d-806e6f6e6963}
D: {e39f293b-c406-11de-9c1d-806e6f6e6963}
========================================


Scanning fixed storage...
----------------------------------------

No blocked files found on C:
No Autorun.inf files found on C:
No mountpoint found for C:
No mountpoint found for e39f293a-c406-11de-9c1d-806e6f6e6963
No Desktop.ini files found on C:
----------------------------------------

No blocked files found on D:
No Autorun.inf files found on D:
No mountpoint found for D:
No mountpoint found for e39f293b-c406-11de-9c1d-806e6f6e6963
No Desktop.ini files found on D:
----------------------------------------

========================================
Initial scan finished!
========================================


New device connected at 11.3.2010 15:31:05

Scanning for connected USB mass storage...
----------------------------------------
H: {779ecd51-c557-11de-9504-0023548d72e2}
Added H:
========================================

Scanning USB mass storage for files...
----------------------------------------
No blocked files found on H:
----------------------------------------
No Autorun.inf files found on H:
Sanitized mountpoint for 779ecd51-c557-11de-9504-0023548d72e2
----------------------------------------

No Desktop.ini files found on H:
----------------------------------------

No mimics found on drive H:
========================================

Dopuna: 12 Mar 2010 15:26

ej ljudi, sta rekoste za moj slucaj, skenirao sam stick sa USBnoRisk i okacio vam log fajl, ima li nade da izbrisem recycler bez formatiranja, a imam bas vrijedne podatke na njemu???

offline
  • diarno  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 15 Jun 2007
  • Poruke: 5572

Pokreni USBNoRisk, ubaci flash drive (ako već nije priključen), pređi na Script tab i tamo iskopiraj sledeće:


{779ecd51-c557-11de-9504-0023548d72e2}
folder_list: H:\



Klikni Run Script.


Zatim na Monitor tab-u klikni desnim tasterom i izaberi Save log.


Iskopiraj log u temu.

offline
  • Pridružio: 17 Sep 2006
  • Poruke: 421
  • Gde živiš: PALE, Republika Srpska

USBNoRisk 2.5 (26 July 2009) by bobby

Started at 12.3.2010 16:04:46

Searching for connected USB Mass storage...
----------------------------------------
H: {779ecd51-c557-11de-9504-0023548d72e2}
========================================

Searching for other storage...
----------------------------------------
C: {e39f293a-c406-11de-9c1d-806e6f6e6963}
D: {e39f293b-c406-11de-9c1d-806e6f6e6963}
========================================

Scanning removable storage...
----------------------------------------

No blocked files found on H:
No Autorun.inf files found on H:
Sanitized mountpoint for 779ecd51-c557-11de-9504-0023548d72e2
No Desktop.ini files found on H:
No mimics found on drive H:
----------------------------------------


Scanning fixed storage...
----------------------------------------

No blocked files found on C:
No Autorun.inf files found on C:
No mountpoint found for C:
No mountpoint found for e39f293a-c406-11de-9c1d-806e6f6e6963
No Desktop.ini files found on C:
----------------------------------------

No blocked files found on D:
No Autorun.inf files found on D:
No mountpoint found for D:
No mountpoint found for e39f293b-c406-11de-9c1d-806e6f6e6963
No Desktop.ini files found on D:
----------------------------------------

========================================
Initial scan finished!
========================================

Processing script
----------------------------------------
779ecd51-c557-11de-9504-0023548d72e2
Drive letter for GUID: H:
SectionStart = 0
SectionEnd = 1
----------------------------------------
Folder list for H:\:
----------------------------------------

--a--   173   H:\140614~1.REG   H:\140614_854601123_regfix.reg
dr-hs   0   H:\2009_0~2   H:\2009_03_26
dr-hs   0   H:\2009_0~1   H:\2009_03_27
dr-hs   0   H:\237_MA~1   H:\237_Magic Night
dr-hs   0   H:\ACOKOM~1   H:\Aco komp
dr-hs   0   H:\ACOSIK~1   H:\Aco Sikras WEB
dr-hs   0   H:\ALEKSA~1   H:\Aleksandar
dr-hs   0   H:\CITYNI~1   H:\City Night
dr-hs   0   H:\CITYOF~1   H:\City of angels
--a--   6089998   H:\COMBIN~1.EXE   H:\Combined-Community-Codec-Pack-2008-01-24.exe
dr-hs   0   H:\CREATI~1   H:\Creative Feather
dr-hs   0   H:\CREATI~2   H:\Creative feather matepainting
dr-hs   0   H:\CS4   H:\CS4
dr-hs   0   H:\Damis   H:\Damis
dr-hs   0   H:\DAMISN~1   H:\damis nove
--a--   524288   H:\dds.scr   H:\dds.scr
dr-hs   0   H:\ETNOSE~1   H:\Etno selo Stanisic
--a--   5797488   H:\GOMPLA~1.EXE   H:\GOMPLAYERENSETUP.EXE
dr-hs   0   H:\HARRYP~1   H:\Harry Potter
dr-hs   0   H:\Install   H:\Install
--a--   14890721   H:\K-LITE~1.EXE   H:\K-Lite_Codec_Pack_544_Full.exe
dr-hs   0   H:\ljilja   H:\ljilja
dr-hs   0   H:\LJILJA~1   H:\Ljilja slike
dr-hs   0   H:\LOGOOR~1   H:\Logo ORA
dr-hs   0   H:\MILEFI~1   H:\Mile FINAL
dr-hs   0   H:\NOVISA~1   H:\Novi sajt Vasic
dr-hs   0   H:\ora   H:\ora
dr-hs   0   H:\PaleLive   H:\PaleLive
dr-hs   0   H:\Panorama   H:\Panorama
dr-hs   0   H:\PROGRA~1   H:\programcic
dr-hs   0   H:\QUICKT~1   H:\QuickTime player pro
dr-hs   0   H:\RECYCLER   H:\RECYCLER
dr-hs   0   H:\Serial   H:\Serial
dr-hs   0   H:\SLIKET~1   H:\slike telefon
dr-hs   0   H:\SURETA~1   H:\Sure Target
dr-hs   0   H:\Termag   H:\Termag
dr-hs   0   H:\Veseli   H:\Veseli
--a--   12826919   H:\VGA_SI~1.ZIP   H:\VGA_SIS_6.14.10.3654_XPx86.zip
dr-hs   0   H:\Vlado   H:\Vlado
--a--   6123478   H:\WLAN_A~1.ZIP   H:\WLAN_Athroas_4.0.0.14001_XPx86.zip

----------------------------------------

evo ga iskopirao sam log.

offline
  • diarno  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 15 Jun 2007
  • Poruke: 5572

Ponovo isto samo sledeca skripta :



{779ecd51-c557-11de-9504-0023548d72e2}
no_sh:
f_delete:%DRIVE%RECYCLER

Ko je trenutno na forumu
 

Ukupno su 1217 korisnika na forumu :: 42 registrovanih, 8 sakrivenih i 1167 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 357magnum, A.R.Chafee.Jr., aleksmajstor, aramis s, Atomski čoban, bobomicek, bojank, bokisha253, cinoeye, comi_pfc, croato, dekan.m, Demostant, Denaya, Dr.Strangelove, flash12, FOX, GenZee, goxin, ILGromovnik, Ivica1102, ivica976, Joja, ladro, Lieutenant, mercedesamg, milenko crazy north, Milometer, milutin134, nemkea71, nenad81, novator, Oscar2, procesor, Ripanjac, slonic_tonic, theNedjeljko, YU-UKI, zdrebac, |_MeD_|, 125, 1107