Virus Hi

2

Virus Hi

offline
  • Pridružio: 24 Jul 2011
  • Poruke: 8

Nije da zurim, ali oduzi se sve ovo...Very Happy

USBNoRisk 2.7 (28 December 2010) by bobby

Started at 25.7.2011 19:33:22

Searching for connected USB Mass storage...
----------------------------------------
========================================

Searching for other storage...
----------------------------------------
C: {84025ba8-8568-11df-800e-806e6f6e6963}
D: {84025ba9-8568-11df-800e-806e6f6e6963}
========================================


Scanning fixed storage...
----------------------------------------

No blocked files found on C:
No autorun.inf files found on C:
No mountpoint found for C:
No mountpoint found for 84025ba8-8568-11df-800e-806e6f6e6963
No Desktop.ini files found on C:
----------------------------------------

No blocked files found on D:
No autorun.inf files found on D:
No mountpoint found for D:
No mountpoint found for 84025ba9-8568-11df-800e-806e6f6e6963
No Desktop.ini files found on D:
----------------------------------------

========================================
Initial scan finished!
========================================


New device connected at 25.7.2011 19:34:24

Scanning for connected USB mass storage...
----------------------------------------
G: {c5f99347-afb1-11df-97cf-001d72cd19b4}
Added G:
========================================

Scanning USB mass storage for files...
----------------------------------------
Blocked file found: G:\autorun.inf.blocked
----------------------------------------
----------------------------------------
Could not open G:\autorun.inf.blocked to read the content
File lock detected:
USBNoRisk cannot find what locked the file
----------------------------------------

----------------------------------------
No autorun.inf files found on G:
Sanitized mountpoint for c5f99347-afb1-11df-97cf-001d72cd19b4
----------------------------------------

----------------------------------------
Desktop.ini found at G:\selomoje\ contains interesting CLSID string
----------------------------------------
[.ShellClassInfo]
CLSID={645FF040-5081-101B-9F08-00AA002F954E}
----------------------------------------
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},InfoTip = @%SystemRoot%\system32\shell32.dll,-22915
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},LocalizedString = @%SystemRoot%\system32\shell32.dll,-8964
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,@ = %SystemRoot%\System32\imageres.dll,-55
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Empty = %SystemRoot%\System32\imageres.dll,-55
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Full = %SystemRoot%\System32\imageres.dll,-54
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32,@ = %SystemRoot%\system32\shell32.dll
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\empty,MUIVerb = @shell32.dll,-10564
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\empty,Icon = shell32.dll,-254
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\empty,Description = @shell32.dll,-31332
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},InfoTip = @%SystemRoot%\system32\shell32.dll,-22915
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},LocalizedString = @%SystemRoot%\system32\shell32.dll,-8964
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,@ = %SystemRoot%\System32\imageres.dll,-55
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Empty = %SystemRoot%\System32\imageres.dll,-55
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Full = %SystemRoot%\System32\imageres.dll,-54
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32,@ = %SystemRoot%\system32\shell32.dll
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\empty,MUIVerb = @shell32.dll,-10564
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\empty,Icon = shell32.dll,-254
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\empty,Description = @shell32.dll,-31332
----------------------------------------

No mimics found on drive G:
----------------------------------------

No .lnk/.pif/.com/.scr files found on drive G:
========================================



New device connected at 25.7.2011 19:34:29

Scanning for connected USB mass storage...
----------------------------------------
H: {c5f99343-afb1-11df-97cf-001d72cd19b4}
Added H:
========================================

Scanning USB mass storage for files...
----------------------------------------
Blocked file found: H:\autorun.inf.blocked
----------------------------------------
----------------------------------------
Could not open H:\autorun.inf.blocked to read the content
File lock detected:
USBNoRisk cannot find what locked the file
----------------------------------------

----------------------------------------
No autorun.inf files found on H:
Sanitized mountpoint for c5f99343-afb1-11df-97cf-001d72cd19b4
----------------------------------------

No Desktop.ini files found on H:
----------------------------------------

No mimics found on drive H:
----------------------------------------

No .lnk/.pif/.com/.scr files found on drive H:
========================================


Processing script
----------------------------------------
c5f99343-afb1-11df-97cf-001d72cd19b4
Drive letter for GUID: H:
SectionStart = 0
SectionEnd = 2
----------------------------------------
Folder list for H:\:
----------------------------------------

d----   0   H:\Images   H:\Images
d----   0   H:\Videos   H:\Videos
d----   0   H:\Sounds   H:\Sounds
d----   0   H:\Others   H:\Others
d----   0   H:\DOCUME~1   H:\Documents
d--hs   0   H:\FOUND.000   H:\FOUND.000
--a--   808   H:\AUTORU~1.BL~   H:\aut[b][/b]orun.inf.blocked

----------------------------------------
Unhide superhidden for H:\
----------------------------------------
d-a-- H:\FOUND.000 > unhidden
----------------------------------------

[Link mogu videti samo ulogovani korisnici]

Ae pogledaj, pa posalji dobre vesti...Smile



offline
  • Pridružio: 02 Feb 2008
  • Poruke: 14018
  • Gde živiš: Nish

Tvoj sistem je cist sto se malware-a tice.




Arrow


Prikljuci telefon i obrisi sa njega fajl koji nosi naziv: autorun.inf.blocked




Arrow


Potrebno je deinstalirati ComboFix:
klikni start (ili ), a zatim RUN.

Na Visti koristiti Start Search polje ukoliko Run nije dostupan.

U liniju za unos teksta ukucaj (iskopiraj) sledeće:

ComboFix /Uninstall

Primeti da postoji razmak između "ComboFix" i "/Uninstall".



a zatim klikni OK (ili pritisni Enter).


Sačekaj da se proces deinstalacije završi.



Arrow


Pokreni OTL i izaberi opciju CleanUp (restaruj sistem kada zatrazi).











offline
  • Pridružio: 24 Jul 2011
  • Poruke: 8

Uradila.... hvala na pomoci...

Ko je trenutno na forumu
 

Ukupno su 1798 korisnika na forumu :: 86 registrovanih, 6 sakrivenih i 1706 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 20624 - dana 04 Apr 2026 04:18

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 04bokibole, aleph_one, Andrija357, Apok, Ares12356, arsa, bobomicek, borya90, Breuk, bufanje, C-Gun, CHARLIE JA., Cirkon, Comyymoc, cyprus, Denaya, Dežurni pod palubom, djordjemiklusev, doktor097, draganl, dusanobr, dushan, Gaga_89, glados, goran.vvv, goxin, Great White, Hans Gajger, Homislav, ILGromovnik, istina, Jeremiah, Jester, Jozo74, Karapan, komenski, Konda, kreker, kybonacci, lakson001, Lieutenant, lord sir giga, Lotus, Malahit, mat, Matija, MB120mm, mercedesamg, mikidragi, mikrimaus, Milan A. Nikolic, Milos ZA, Milovan Dinic, MrG, Nikolajevic, nixos, OgnjenMitric, Panter, Pauljxxx, Pekman, Pero, ping15, radovanstojkov023, Resnica, royst33, S-G, sevenino, sickmouse, Simulink11000, SOVO515, Stojan Mrsavi, Tafocus, tecataki, Tila Painen, tomigun, uruk, vaci, vathra, VJ, voja64, Vojkan Petrovic, Yekaterinburg, Zastava, ZetaMan, zzapNDjuric99, Žrnov