Win32/Malagent

2

Win32/Malagent

offline
  • Data Center Engineer
  • Pridružio: 13 Avg 2004
  • Poruke: 3048
  • Gde živiš: Holandija

Uploadovano.

offline
  • Pridružio: 02 Feb 2008
  • Poruke: 14018
  • Gde živiš: Nish

Ok, hvala.

Idemo dalje...



-------------------------------------------------------------------------------------
- Preuzmi USBNoRisk na Desktop i pokreni ga duplim klikom na ikonicu programa.
- Sacekaj koji sekund dok program izvrsi inicijalno skeniranje.
- Ubacuj sve USB memorijske uredjaje redom u USB slot i svaki zadrzi u slotu po 10 sekundi.
- Ukoliko imas vise uredjaja za proveru, onda na parcetu papira zapisi kojim redom su ubacivani jer ce nam kasnije trebati taj podatak
- Kada zavrsis sa svim uredjajima, klikni desno dugme misa na sred prozora programa i odaberi opciju Save scrambled log. To ce automatski otvoriti log u Notepadu. Iskopiraj nam taj log iz Notepada na forum.

Objasnjenje: U USB memorijske uredjaje spadaju svi oni uredjaji koji po prikljucivanju na kompjuter dobijaju svoju oznaku particije. Tu spadaju USB flash drajvovi, eksterni hard-diskovi, memorijske kartice, MP3 i MP4 plejeri, neki mobilni telefoni, neki GPS (navigacioni) uredjaji itd.



goran9888 (AMF Tim)

offline
  • Data Center Engineer
  • Pridružio: 13 Avg 2004
  • Poruke: 3048
  • Gde živiš: Holandija

Evo loga, 4 uređaja sam testirao.

USBNoRisk 2.6 (08 September 2010) by bobby

Started at 10/9/2010 12:22:00 AM

Searching for connected USB Mass storage...
----------------------------------------
========================================

Searching for other storage...
----------------------------------------
C: {f165a946-cbe8-11de-938b-806e6f6e6963}
D: {f165a947-cbe8-11de-938b-806e6f6e6963}
========================================


Scanning fixed storage...
----------------------------------------

No blocked files found on C:
No autorun.inf files found on C:
No mountpoint found for C:
No mountpoint found for f165a946-cbe8-11de-938b-806e6f6e6963
No Desktop.ini files found on C:
----------------------------------------

No blocked files found on D:
No autorun.inf files found on D:
No mountpoint found for D:
No mountpoint found for f165a947-cbe8-11de-938b-806e6f6e6963
No Desktop.ini files found on D:
----------------------------------------

========================================
Initial scan finished!
========================================


New device connected at 10/9/2010 12:22:17 AM

Scanning for connected USB mass storage...
----------------------------------------
H: {38714419-0126-11df-9de5-001b3869edb5}
Added H:
========================================

Scanning USB mass storage for files...
----------------------------------------
No blocked files found on H:
----------------------------------------
No autorun.inf files found on H:
Sanitized mountpoint for 38714419-0126-11df-9de5-001b3869edb5
----------------------------------------

No Desktop.ini files found on H:
----------------------------------------

No mimics found on drive H:
========================================

========================================
Removed H:
========================================


New device connected at 10/9/2010 12:23:31 AM

Scanning for connected USB mass storage...
----------------------------------------
H: {c38ee688-f86c-11de-8043-001b3869edb5}
Added H:
========================================

Scanning USB mass storage for files...
----------------------------------------


New device connected at 10/9/2010 12:23:36 AM

Scanning for connected USB mass storage...
----------------------------------------

========================================

Scanning USB mass storage for files...
----------------------------------------
No blocked files found on H:
----------------------------------------
autorun.inf found on H:
----------------------------------------
File H:\autorun.inf renamed successfully

Content of H:\autorun.inf.blocked
----------------------------------------
[autorun]
open=Toshiba\more4you.exe
icon=Toshiba\more4you.ico
label=Toshiba USB-HDD
----------------------------------------

No mountpoint found for H:
Sanitized mountpoint for c38ee688-f86c-11de-8043-001b3869edb5
----------------------------------------

No Desktop.ini files found on H:
----------------------------------------

No mimics found on drive H:
========================================

No blocked files found on H:
----------------------------------------
No autorun.inf files found on H:
No mountpoint found for H:
No mountpoint found for c38ee688-f86c-11de-8043-001b3869edb5
----------------------------------------

No Desktop.ini files found on H:
----------------------------------------

No mimics found on drive H:
========================================

========================================
Removed H:
========================================


New device connected at 10/9/2010 12:25:18 AM

Scanning for connected USB mass storage...
----------------------------------------

========================================
New drive connected, but USBNoRisk can't find it
========================================



New device connected at 10/9/2010 12:25:29 AM

Scanning for connected removable storage...
----------------------------------------
H: {b2dd6451-a257-11df-821c-001b3869edb5}
Added H:
========================================

Scanning removable storage for files...
----------------------------------------
No blocked files found on H:
----------------------------------------
No autorun.inf files found on H:
Sanitized mountpoint for b2dd6451-a257-11df-821c-001b3869edb5
----------------------------------------

No Desktop.ini files found on H:
----------------------------------------

No mimics found on drive H:
========================================

========================================
Removed H:
========================================


New device connected at 10/9/2010 12:27:40 AM

Scanning for connected USB mass storage...
----------------------------------------
H: {630579d5-dbfd-11de-9cd9-001b3869edb5}
Added H:
========================================

Scanning USB mass storage for files...
----------------------------------------
No blocked files found on H:
----------------------------------------
No autorun.inf files found on H:
Sanitized mountpoint for 630579d5-dbfd-11de-9cd9-001b3869edb5
----------------------------------------

No Desktop.ini files found on H:
----------------------------------------

No mimics found on drive H:
========================================

========================================
Removed H:
========================================

offline
  • Pridružio: 02 Feb 2008
  • Poruke: 14018
  • Gde živiš: Nish

Prikljucuj jedan po jedan uredjaj i ponovi uputstvo za svaki ponaosob




-----------------------------------------------------------------------------------------------
- Pokrenuti USBNoRisk i sačekati da izvrši inicijalno skeniranje.

- Po završetku inicijalnog skeniranja priključiti USB memorijski uređaj.

- Kliknuti na karticu Script;

U beli okvir prozora iskopirati sledeći tekst:

{38714419-0126-11df-9de5-001b3869edb5}
folder_list:%DRIVE%
no_sh:

{c38ee688-f86c-11de-8043-001b3869edb5}
folder_list:%DRIVE%
no_sh:

{b2dd6451-a257-11df-821c-001b3869edb5}
folder_list:%DRIVE%
no_sh:

{630579d5-dbfd-11de-9cd9-001b3869edb5}
folder_list:%DRIVE%
no_sh:


- Izvršiti komandu klikom na taster Run Script;



Po izvršenju komande USBNoRisk će se automatski vratiti na karticu Monitor;

- Uraditi desni klik unutar belog okvira prozora i odabrati opciju Save Log;

Otvoriće se prozor Notepad_a sa tekstom koji je potrebno iskopirati ovde u poruci.



goran9888 (AMF Tim)

offline
  • Data Center Engineer
  • Pridružio: 13 Avg 2004
  • Poruke: 3048
  • Gde živiš: Holandija

Napisano: 09 Okt 2010 11:38

Dosta su dugački logovi pa sam ih okačio uz poruku.

USBNoRisk 2.6 (08 September 2010) by bobby

Started at 10/9/2010 11:24:57 AM

Searching for connected USB Mass storage...
----------------------------------------
========================================

Searching for other storage...
----------------------------------------
C: {f165a946-cbe8-11de-938b-806e6f6e6963}
D: {f165a947-cbe8-11de-938b-806e6f6e6963}
========================================


Scanning fixed storage...
----------------------------------------

No blocked files found on C:
No Autorun.inf files found on C:
No mountpoint found for C:
No mountpoint found for f165a946-cbe8-11de-938b-806e6f6e6963
No Desktop.ini files found on C:
----------------------------------------

No blocked files found on D:
No Autorun.inf files found on D:
No mountpoint found for D:
No mountpoint found for f165a947-cbe8-11de-938b-806e6f6e6963
No Desktop.ini files found on D:
----------------------------------------

========================================
Initial scan finished!
========================================


New device connected at 10/9/2010 11:25:08 AM

Scanning for connected USB mass storage...
----------------------------------------
H: {38714419-0126-11df-9de5-001b3869edb5}
Added H:
========================================

Scanning USB mass storage for files...
----------------------------------------
No blocked files found on H:
----------------------------------------
No Autorun.inf files found on H:
Sanitized mountpoint for 38714419-0126-11df-9de5-001b3869edb5
----------------------------------------

No Desktop.ini files found on H:
----------------------------------------

No mimics found on drive H:
========================================


Processing script
----------------------------------------
38714419-0126-11df-9de5-001b3869edb5
Drive letter for GUID: H:
SectionStart = 0
SectionEnd = 3
----------------------------------------
Folder list for H:\:
----------------------------------------

--a--   200331264   H:\07 Fearless.avi   H:\07 Fearless.avi
--a--   6564396   H:\1380drvr.exe   H:\1380drvr.exe
--a--   7028910   H:\1380_vista.exe   H:\1380_vista.exe
--a--   434196992   H:\2010-08-28 22.07.34 Pry Gitarijada Ratkovo 2010.avi   H:\2010-08-28 22.07.34 Pry Gitarijada Ratkovo 2010.avi
d----   0   H:\Aparat   H:\Aparat
d----   0   H:\BeverlyHillsSubs   H:\BeverlyHillsSubs
--a--   201714   H:\dame.ai   H:\dame.ai
--a--   299869   H:\dame.png   H:\dame.png
--a--   237135   H:\Disneyland Resort Paris.mht   H:\Disneyland Resort Paris.mht
--a--   168318394   H:\Drawn - The Painted Tower.exe   H:\Drawn - The Painted Tower.exe
--a--   16300209   H:\DWL-G510_drv_RevC_v5.20-s0038-20090909.zip   H:\DWL-G510_drv_RevC_v5.20-s0038-20090909.zip
--a--   29549845   H:\Firefox 3.6.8 (en-US) - 2010-08-30.pcv   H:\Firefox 3.6.8 (en-US) - 2010-08-30.pcv
--a--   48128   H:\invoice 57.doc   H:\invoice 57.doc
d----   0   H:\MICROSOFT.WINDOWS.VIRTUAL.PC.PRE-RTM.BUILD.7600.16419.ENGLISH   H:\MICROSOFT.WINDOWS.VIRTUAL.PC.PRE-RTM.BUILD.7600.16419.ENGLISH
--a--   103   H:\minimahost.txt   H:\minimahost.txt
--a--   749311   H:\MozBackup-1.4.9_EN.zip   H:\MozBackup-1.4.9_EN.zip
--a--   318   H:\password.txt   H:\password.txt
--a--   3515152   H:\playsomnia_reklama.rar   H:\playsomnia_reklama.rar
--a--   73144   H:\sodalitas.sql.gz   H:\sodalitas.sql.gz
--a--   46080   H:\Video invoice 03 silard.doc   H:\Video invoice 03 silard.doc
d----   0   H:\VM Windows XP Home Edition   H:\VM Windows XP Home Edition
--a--   53670736   H:\xampp-win32-1.7.3.exe   H:\xampp-win32-1.7.3.exe

----------------------------------------
Unhide superhidden for H:\
----------------------------------------
----------------------------------------

USBNoRisk 2.6 (08 September 2010) by bobby

Started at 10/9/2010 11:27:26 AM

Searching for connected USB Mass storage...
----------------------------------------
========================================

Searching for other storage...
----------------------------------------
C: {f165a946-cbe8-11de-938b-806e6f6e6963}
D: {f165a947-cbe8-11de-938b-806e6f6e6963}
========================================


Scanning fixed storage...
----------------------------------------

No blocked files found on C:
No Autorun.inf files found on C:
No mountpoint found for C:
No mountpoint found for f165a946-cbe8-11de-938b-806e6f6e6963
No Desktop.ini files found on C:
----------------------------------------

No blocked files found on D:
No Autorun.inf files found on D:
No mountpoint found for D:
No mountpoint found for f165a947-cbe8-11de-938b-806e6f6e6963
No Desktop.ini files found on D:
----------------------------------------

========================================
Initial scan finished!
========================================


New device connected at 10/9/2010 11:28:06 AM

Scanning for connected USB mass storage...
----------------------------------------
H: {c38ee688-f86c-11de-8043-001b3869edb5}
Added H:
========================================

Scanning USB mass storage for files...
----------------------------------------


New device connected at 10/9/2010 11:28:11 AM

Scanning for connected USB mass storage...
----------------------------------------

========================================

Scanning USB mass storage for files...
----------------------------------------
Blocked file found: H:\autorun.inf.blocked
----------------------------------------
Content of H:\autorun.inf.blocked
----------------------------------------
[autorun]
open=Toshiba\more4you.exe
icon=Toshiba\more4you.ico
label=Toshiba USB-HDD
----------------------------------------

----------------------------------------
No Autorun.inf files found on H:
No mountpoint found for H:
Sanitized mountpoint for c38ee688-f86c-11de-8043-001b3869edb5
----------------------------------------

No Desktop.ini files found on H:
----------------------------------------

No mimics found on drive H:
========================================

Blocked file found: H:\autorun.inf.blocked
----------------------------------------
Content of H:\autorun.inf.blocked
----------------------------------------
[autorun]
open=Toshiba\more4you.exe
icon=Toshiba\more4you.ico
label=Toshiba USB-HDD
----------------------------------------

----------------------------------------
No Autorun.inf files found on H:
No mountpoint found for H:
No mountpoint found for c38ee688-f86c-11de-8043-001b3869edb5
----------------------------------------

No Desktop.ini files found on H:
----------------------------------------

No mimics found on drive H:
========================================


Processing script
----------------------------------------
c38ee688-f86c-11de-8043-001b3869edb5
Drive letter for GUID: H:
SectionStart = 4
SectionEnd = 7
----------------------------------------
Folder list for H:\:
----------------------------------------

d--h-   0   H:\$AVG   H:\$AVG
d--hs   0   H:\$RECYCLE.BIN   H:\$RECYCLE.BIN
--a--   88   H:\autorun.inf.blocked   H:\autorun.inf.blocked
d----   0   H:\backup   H:\backup
d----   0   H:\dvd   H:\dvd
--a--   29576047   H:\Firefox 3.6.8 (en-US) - 2010-09-25.pcv   H:\Firefox 3.6.8 (en-US) - 2010-09-25.pcv
d----   0   H:\install   H:\install
--a--   135   H:\minimahost.txt   H:\minimahost.txt
--a--   12794721   H:\Mother_3__English_.rar   H:\Mother_3__English_.rar
d----   0   H:\MozBackup-1.4.9-EN   H:\MozBackup-1.4.9-EN
--a--   203696307   H:\Portable Illustrator CS5 v15.0.0.exe   H:\Portable Illustrator CS5 v15.0.0.exe
d--hs   0   H:\RECYCLER   H:\RECYCLER
d--hs   0   H:\System Volume Information   H:\System Volume Information
d----   0   H:\TOSHIBA   H:\TOSHIBA
--a--   2503124   H:\Windows Loader.exe   H:\Windows Loader.exe

----------------------------------------
Unhide superhidden for H:\
----------------------------------------
d-a-- H:\$RECYCLE.BIN > unhidden
d-a-- H:\$RECYCLE.BIN\S-1-5-21-2229412044-4182841057-2455335706-1001 > unhidden
--a-- H:\$RECYCLE.BIN\S-1-5-21-2229412044-4182841057-2455335706-1001\desktop.ini > unhidden
d-a-- H:\$RECYCLE.BIN\S-1-5-21-2365338221-3089839118-3404208274-1001 > unhidden
--a-- H:\$RECYCLE.BIN\S-1-5-21-2365338221-3089839118-3404208274-1001\desktop.ini > unhidden
d-a-- H:\$RECYCLE.BIN\S-1-5-21-3970884505-2779978977-3864663749-1000 > unhidden
--a-- H:\$RECYCLE.BIN\S-1-5-21-3970884505-2779978977-3864663749-1000\desktop.ini > unhidden
d-a-- H:\$RECYCLE.BIN\S-1-5-21-665130819-2837616391-3361270125-1000 > unhidden
--a-- H:\$RECYCLE.BIN\S-1-5-21-665130819-2837616391-3361270125-1000\desktop.ini > unhidden
d-a-- H:\backup\Documents and Settings > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Application Data > unhidden
d-a-- H:\backup\Ivana\AppData\Local\History > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Credentials\204886A4A6EA2741B279C9FF88404598 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Credentials\78B34D486A6C1DDF4A3E6E007B88E533 > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Feeds Cache > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Feeds Cache\2O2FP5D5 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Feeds Cache\2O2FP5D5\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Feeds Cache\2O4B9YLF > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Feeds Cache\2O4B9YLF\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Feeds Cache\79Q4W88A > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Feeds Cache\79Q4W88A\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Feeds Cache\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Feeds Cache\index.dat > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Feeds Cache\XOL1HGQ8 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Feeds Cache\XOL1HGQ8\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Burn\Burn1\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\GameExplorer\{91CA4D38-EA2B-4f3c-94DE-36C1386182FC}\PlayTasks\0\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\GameExplorer\{91CA4D38-EA2B-4f3c-94DE-36C1386182FC}\SupportTasks\0\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\GameExplorer\{91CA4D38-EA2B-4f3c-94DE-36C1386182FC}\SupportTasks\1\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\GameExplorer\{91CA4D38-EA2B-4f3c-94DE-36C1386182FC}\SupportTasks\2\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\GameExplorer\{E91579C0-4EA9-4a2a-A9B2-04BEF1D6DC29}\PlayTasks\0\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\GameExplorer\{E91579C0-4EA9-4a2a-A9B2-04BEF1D6DC29}\SupportTasks\0\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\GameExplorer\{E91579C0-4EA9-4a2a-A9B2-04BEF1D6DC29}\SupportTasks\1\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\GameExplorer\{E91579C0-4EA9-4a2a-A9B2-04BEF1D6DC29}\SupportTasks\2\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012009061420090615\index.dat > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012009122720091228\index.dat > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010042620100503 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010042620100503\index.dat > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010050320100510 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010050320100510\index.dat > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010051020100511 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010051020100511\index.dat > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010051120100512 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010051120100512\index.dat > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010051220100513 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010051220100513\index.dat > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010051320100514 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010051320100514\index.dat > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010051420100515 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010051420100515\index.dat > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010051520100516 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010051520100516\index.dat > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010051620100517 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010051620100517\index.dat > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\Low > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\Low\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\Low\History.IE5 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\Low\History.IE5\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\Low\History.IE5\index.dat > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\Low\History.IE5\MSHist012009032820090329 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\History\Low\History.IE5\MSHist012009032820090329\index.dat > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\08WJOT1B > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\08WJOT1B\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0VVM9T5Q > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0VVM9T5Q\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8AECIEX9 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8AECIEX9\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ES9IHA1 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ES9IHA1\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ICY60O4 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ICY60O4\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DJIZ0FZB > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DJIZ0FZB\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DXMG4PBA > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DXMG4PBA\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L5Y9YXQS > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L5Y9YXQS\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LD1F01G0 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LD1F01G0\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LKYIA83A > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LKYIA83A\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LPMXIAXM > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LPMXIAXM\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XUSPP82A > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XUSPP82A\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\61X2YXW6 > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\61X2YXW6\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CE3RAR8X > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CE3RAR8X\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\EP0NH1NB > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\EP0NH1NB\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\P4EALI2S > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\P4EALI2S\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\UsrClass.dat{98c574d2-1b7e-11de-a2cf-002185479245}.TM.blf > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\UsrClass.dat{98c574d2-1b7e-11de-a2cf-002185479245}.TMContainer00000000000000000001.regtrans-ms > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows\UsrClass.dat{98c574d2-1b7e-11de-a2cf-002185479245}.TMContainer00000000000000000002.regtrans-ms > unhidden
dra-- H:\backup\Ivana\AppData\Local\Microsoft\Windows Live Contacts\{0babeaa6-6ce9-4211-826f-1431f186b437}\DBStore > unhidden
dra-- H:\backup\Ivana\AppData\Local\Microsoft\Windows Live Contacts\{0babeaa6-6ce9-4211-826f-1431f186b437}\DBStore\Backup > unhidden
dra-- H:\backup\Ivana\AppData\Local\Microsoft\Windows Live Contacts\{0babeaa6-6ce9-4211-826f-1431f186b437}\DBStore\LogFiles > unhidden
dra-- H:\backup\Ivana\AppData\Local\Microsoft\Windows Live Contacts\{6c89d53e-0c36-4b12-bd5f-35ca4900c66e}\DBStore > unhidden
dra-- H:\backup\Ivana\AppData\Local\Microsoft\Windows Live Contacts\{6c89d53e-0c36-4b12-bd5f-35ca4900c66e}\DBStore\Backup > unhidden
dra-- H:\backup\Ivana\AppData\Local\Microsoft\Windows Live Contacts\{6c89d53e-0c36-4b12-bd5f-35ca4900c66e}\DBStore\LogFiles > unhidden
dra-- H:\backup\Ivana\AppData\Local\Microsoft\Windows Live Contacts\{9aad78eb-be52-4ba2-b6b9-510a854ba449}\DBStore > unhidden
dra-- H:\backup\Ivana\AppData\Local\Microsoft\Windows Live Contacts\{9aad78eb-be52-4ba2-b6b9-510a854ba449}\DBStore\Backup > unhidden
dra-- H:\backup\Ivana\AppData\Local\Microsoft\Windows Live Contacts\{9aad78eb-be52-4ba2-b6b9-510a854ba449}\DBStore\LogFiles > unhidden
dra-- H:\backup\Ivana\AppData\Local\Microsoft\Windows Live Contacts\{a15db531-26d9-41d1-906b-908534b209a0}\DBStore > unhidden
dra-- H:\backup\Ivana\AppData\Local\Microsoft\Windows Live Contacts\{a15db531-26d9-41d1-906b-908534b209a0}\DBStore\LogFiles > unhidden
dra-- H:\backup\Ivana\AppData\Local\Microsoft\Windows Live Contacts\{f022e538-8a19-4a65-bb6d-8d5570bbbf75}\DBStore > unhidden
dra-- H:\backup\Ivana\AppData\Local\Microsoft\Windows Live Contacts\{f022e538-8a19-4a65-bb6d-8d5570bbbf75}\DBStore\Backup > unhidden
dra-- H:\backup\Ivana\AppData\Local\Microsoft\Windows Live Contacts\{f022e538-8a19-4a65-bb6d-8d5570bbbf75}\DBStore\LogFiles > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft\Windows Mail\Stationery\Desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft Games\FreeCell\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft Games\Hearts\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft Games\Minesweeper\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft Games\Purble Place\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Local\Microsoft Games\Solitaire\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Local\Temporary Internet Files > unhidden
--a-- H:\backup\Ivana\AppData\LocalLow\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini > unhidden
d-a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Internet Explorer\UserData > unhidden
d-a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Internet Explorer\UserData\996MVBLJ > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Internet Explorer\UserData\index.dat > unhidden
d-a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Internet Explorer\UserData\K0R6L3U0 > unhidden
d-a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Internet Explorer\UserData\ND4QL3JQ > unhidden
d-a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Internet Explorer\UserData\X3HTOGHG > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Protect\CREDHIST > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Protect\S-1-5-21-3970884505-2779978977-3864663749-1000\10f29306-ea39-48d4-932b-1f0f348d8d92 > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Protect\S-1-5-21-3970884505-2779978977-3864663749-1000\4c7dd7ac-c768-4bfc-a39c-98dfc8207a95 > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Protect\S-1-5-21-3970884505-2779978977-3864663749-1000\638ad895-e1f7-410b-97d1-cfa66e02aef1 > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Protect\S-1-5-21-3970884505-2779978977-3864663749-1000\a647c6b8-b6ff-4f1e-8958-79c75b12493d > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Protect\S-1-5-21-3970884505-2779978977-3864663749-1000\e3a0f02e-4757-4124-8f75-b75855f5e374 > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Protect\S-1-5-21-3970884505-2779978977-3864663749-1000\Preferred > unhidden
d-a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Windows\Cookies > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Windows\Cookies\index.dat > unhidden
d-a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Windows\Cookies\Low > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Windows\Cookies\Low\index.dat > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini > unhidden
--a-- H:\backup\Ivana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini > unhidden
d-a-- H:\backup\Ivana\Application Data > unhidden
--a-- H:\backup\Ivana\Contacts\desktop.ini > unhidden
d-a-- H:\backup\Ivana\Cookies > unhidden
--a-- H:\backup\Ivana\Desktop\desktop.ini > unhidden
--a-- H:\backup\Ivana\Documents\desktop.ini > unhidden
d-a-- H:\backup\Ivana\Documents\My Music > unhidden
d-a-- H:\backup\Ivana\Documents\My Pictures > unhidden
d-a-- H:\backup\Ivana\Documents\My Videos > unhidden
--a-- H:\backup\Ivana\Downloads\desktop.ini > unhidden
--a-- H:\backup\Ivana\Favorites\desktop.ini > unhidden
--a-- H:\backup\Ivana\Favorites\Links\desktop.ini > unhidden
--a-- H:\backup\Ivana\Links\desktop.ini > unhidden
d-a-- H:\backup\Ivana\Local Settings > unhidden
--a-- H:\backup\Ivana\Music\desktop.ini > unhidden
d-a-- H:\backup\Ivana\My Documents > unhidden
d-a-- H:\backup\Ivana\NetHood > unhidden
--a-- H:\backup\Ivana\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf > unhidden
--a-- H:\backup\Ivana\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms > unhidden
--a-- H:\backup\Ivana\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms > unhidden
--a-- H:\backup\Ivana\ntuser.ini > unhidden
--a-- H:\backup\Ivana\Pictures\desktop.ini > unhidden
d-a-- H:\backup\Ivana\PrintHood > unhidden
d-a-- H:\backup\Ivana\Recent > unhidden
--a-- H:\backup\Ivana\Saved Games\desktop.ini > unhidden
--a-- H:\backup\Ivana\Saved Games\Microsoft Games\desktop.ini > unhidden
--a-- H:\backup\Ivana\Searches\desktop.ini > unhidden
d-a-- H:\backup\Ivana\SendTo > unhidden
d-a-- H:\backup\Ivana\Start Menu > unhidden
d-a-- H:\backup\Ivana\Templates > unhidden
--a-- H:\backup\Ivana\Videos\desktop.ini > unhidden
--a-- H:\backup\laptop\Skola\GIS\MapM CD\MMVEZBE\SRBIJA\Thumbs.db > unhidden
--a-- H:\backup\laptop\Skola\GIS\MapM CD\MMVEZBE\SVET\Thumbs.db > unhidden
--a-- H:\backup\laptop\Skola\GIS\MapM CD\MMVEZBE\VOJVODINA\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Dejanov Rodjendan\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Jesen2004\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Kamera\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Leto 2004 Simens\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Leto2003\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Leto2004\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\LGs5200\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Matura,Maj 2001\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\More2004\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\More2005\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Prolece 2005\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Prolece2004\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Slike za Net\LookLikes\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Slike za Net\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Svadba Gabi i Tanja 2.12.2006\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Taize 2000\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Taize 2002\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Taize 2003\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Taize2004\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Teren Madjarska-Rumunija April 2006\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Teren Zapadna Srbija\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Turizmolozi jesen 2002\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Moje Slike\Vanesin Rodjendan\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Ana Kostic\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Bane Terzic\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Bane Terzin\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Bojan Injac\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Branislav Djisalov\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\BRMBOTA\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Casper Vesa\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Cike Sabo\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Damir Hadnadjev\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Dania Nora\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Darko Vidakovic\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Dejan Terzic\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Djole\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Fixer Ivan\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Goran Alasov\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Goran Trajkovic\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Ivan Perovic\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Karikatura\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Kumovi\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Ljilja\Alonso\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Ljilja\Filmovi_1\Filmovi 1\images\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Ljilja\ljiksi\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Ljilja\Ljiljana\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Ljilja\Slike\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Ljilja\Slike ZOKI\101MSDCF\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Ljilja\Slike ZOKI\102_COPY\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Ljilja\smiles\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Ljilja\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Ljilja\ZEZANCIJE\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\LJUBOMIR\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Mail Friends\Jenny Waldrop\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Mail Friends\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Miki\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Milan Milosavljevic\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\MilosLFC\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Mira Pervanovic\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Missfit\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Mojsije\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Momcilo Ns\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Nina Raskovic\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Obitus\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Olivera Milkov\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Olja\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Parfumes\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Renata\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Tamara Slike\Film1\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Tamara Slike\Film2\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Tamara Slike\Film3\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Tamara Slike\Film4\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Tamara Slike\Film5\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Tamara Slike\Film6\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Tamara Slike\Film7\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Tamara Slike\Film8\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Tamara Slike\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Tihomir Zoraje\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Vanesa Petrik\Thumbs.db > unhidden
--a-- H:\backup\laptop\Slike\Slike Drugara i Poznanika\Viktor Nemet\Thumbs.db > unhidden
--a-- H:\backup\laptop\Thumbs.db > unhidden
--a-- H:\install\DVD Maestro 2.92915a\Examples\subpictures\Thumbs.db > unhidden
d-a-- H:\RECYCLER > unhidden
d-a-- H:\RECYCLER\S-1-5-21-1644491937-813497703-1801674531-1002 > unhidden
--a-- H:\RECYCLER\S-1-5-21-1644491937-813497703-1801674531-1002\desktop.ini > unhidden
d-a-- H:\RECYCLER\S-1-5-21-1715567821-261478967-682003330-500 > unhidden
--a-- H:\RECYCLER\S-1-5-21-1715567821-261478967-682003330-500\desktop.ini > unhidden
d--hs H:\System Volume Information > error setting attributes
----------------------------------------

USBNoRisk 2.6 (08 September 2010) by bobby

Started at 10/9/2010 11:33:08 AM

Searching for connected USB Mass storage...
----------------------------------------
========================================

Searching for other storage...
----------------------------------------
C: {f165a946-cbe8-11de-938b-806e6f6e6963}
D: {f165a947-cbe8-11de-938b-806e6f6e6963}
========================================


Scanning fixed storage...
----------------------------------------

No blocked files found on C:
No Autorun.inf files found on C:
No mountpoint found for C:
No mountpoint found for f165a946-cbe8-11de-938b-806e6f6e6963
No Desktop.ini files found on C:
----------------------------------------

No blocked files found on D:
No Autorun.inf files found on D:
No mountpoint found for D:
No mountpoint found for f165a947-cbe8-11de-938b-806e6f6e6963
No Desktop.ini files found on D:
----------------------------------------

========================================
Initial scan finished!
========================================


New device connected at 10/9/2010 11:33:15 AM

Scanning for connected USB mass storage...
----------------------------------------

========================================
New drive connected, but USBNoRisk can't find it
========================================



New device connected at 10/9/2010 11:33:25 AM

Scanning for connected removable storage...
----------------------------------------
H: {b2dd6451-a257-11df-821c-001b3869edb5}
Added H:
========================================

Scanning removable storage for files...
----------------------------------------
No blocked files found on H:
----------------------------------------
No Autorun.inf files found on H:
Sanitized mountpoint for b2dd6451-a257-11df-821c-001b3869edb5
----------------------------------------

No Desktop.ini files found on H:
----------------------------------------

No mimics found on drive H:
========================================


Processing script
----------------------------------------
b2dd6451-a257-11df-821c-001b3869edb5
Drive letter for GUID: H:
SectionStart = 8
SectionEnd = 11
----------------------------------------
Folder list for H:\:
----------------------------------------

d----   0   H:\LOST.DIR   H:\LOST.DIR
d----   0   H:\FOOTPR~1   H:\.footprints
d----   0   H:\iGO   H:\iGO
d----   0   H:\backup   H:\backup
--a--   162   H:\device.nng   H:\device.nng
d----   0   H:\DCIM   H:\DCIM
d----   0   H:\BOOKMA~1   H:\.bookmark_thumb

----------------------------------------
Unhide superhidden for H:\
----------------------------------------
----------------------------------------

USBNoRisk 2.6 (08 September 2010) by bobby

Started at 10/9/2010 11:36:07 AM

Searching for connected USB Mass storage...
----------------------------------------
========================================

Searching for other storage...
----------------------------------------
C: {f165a946-cbe8-11de-938b-806e6f6e6963}
D: {f165a947-cbe8-11de-938b-806e6f6e6963}
========================================


Scanning fixed storage...
----------------------------------------

No blocked files found on C:
No Autorun.inf files found on C:
No mountpoint found for C:
No mountpoint found for f165a946-cbe8-11de-938b-806e6f6e6963
No Desktop.ini files found on C:
----------------------------------------

No blocked files found on D:
No Autorun.inf files found on D:
No mountpoint found for D:
No mountpoint found for f165a947-cbe8-11de-938b-806e6f6e6963
No Desktop.ini files found on D:
----------------------------------------

========================================
Initial scan finished!
========================================


New device connected at 10/9/2010 11:36:12 AM

Scanning for connected USB mass storage...
----------------------------------------
H: {630579d5-dbfd-11de-9cd9-001b3869edb5}
Added H:
========================================

Scanning USB mass storage for files...
----------------------------------------
No blocked files found on H:
----------------------------------------
No Autorun.inf files found on H:
Sanitized mountpoint for 630579d5-dbfd-11de-9cd9-001b3869edb5
----------------------------------------

No Desktop.ini files found on H:
----------------------------------------

No mimics found on drive H:
========================================


Processing script
----------------------------------------
630579d5-dbfd-11de-9cd9-001b3869edb5
Drive letter for GUID: H:
SectionStart = 12
SectionEnd = 14
----------------------------------------
Folder list for H:\:
----------------------------------------

-----   4480   H:\YSMENU.ARP   H:\YSMENU.ARP
d----   0   H:\Games   H:\Games
d----   0   H:\TTMenu   H:\TTMenu
--a--   17265   H:\YSMenu.ini   H:\YSMenu.ini
--a--   99328   H:\r4dldi.dat   H:\r4dldi.dat
--a--   125952   H:\r4patch.dat   H:\r4patch.dat
--a--   406080   H:\_DS_MENU.DAT   H:\_DS_MENU.DAT
--a--   406080   H:\YSMenu.nds   H:\YSMenu.nds
--a--   2276   H:\R4TF~1.DLD   H:\r4tf.dldi
--a--   9885   H:\CHANGE~1.TXT   H:\changelog.txt
--a--   4194304   H:\TTMENU.SYS   H:\TTMENU.SYS
--a--   334912   H:\TTMENU.DAT   H:\TTMENU.DAT
--a--   13629   H:\YSMenu.txt   H:\YSMenu.txt
--a--   4430   H:\YSMENU~1.TXT   H:\YSMenu_eng.txt

----------------------------------------
Unhide superhidden for H:\
----------------------------------------
----------------------------------------

https://www.mycity.rs/must-login.png

https://www.mycity.rs/must-login.png

https://www.mycity.rs/must-login.png

https://www.mycity.rs/must-login.png


Dopuna: 12 Okt 2010 0:59

Bump. Nije valjda toliko komplikovan problem lebamu Laughing

offline
  • Pridružio: 02 Feb 2008
  • Poruke: 14018
  • Gde živiš: Nish

Izvinjavam se sto kasnim sa odgovorom. Nekako mi se omaklo da zaboravim da ti odgovorim, no desava se. Hvala sto si "osvezio" temu.



Arrow USB memorijski uredjaji su cisti. Potrebno je da prikljucis eksterni hard disk i da fajl autorun.inf.blocked preimenujes u autorun.inf.




Kakvo je sada stanje racunara?





goran9888 (AMF Tim)

offline
  • Data Center Engineer
  • Pridružio: 13 Avg 2004
  • Poruke: 3048
  • Gde živiš: Holandija

Sve je kako je i bilo, osim što MSSE više ne prijavljuje jedno te isti virus. Sad ostaje samo da rešim kako da njega uninstaliram i instaliram KAV jer i dalje prijavljuje da ne koristim odgovarajući OS.

offline
  • Pridružio: 02 Feb 2008
  • Poruke: 14018
  • Gde živiš: Nish

Ok, problem sa malware-om smo resili. Racunar je cist.



-----------------------------------------------------------------------------------------

Predlog:

- Za dalje resavanje tvog problema otvori novu temu u podforumu Antivirus programi: http://www.mycity.rs/Antivirus-programi/
- S'obzirom da se danasnji malware najcesce i najlakse prenosi putem USB memorijskih uredjaja predlazem ti instalaciju i koriscenje programa "domace proizvodnje" MCShield za zastitu USB memorijskih uredjaja.

Home page MCShield-a: http://amf.mycity.rs/programs/mc/mcshield/

Tema na forumu o MCShield-u:
-> http://www.mycity.rs/Antispyware-programi/MCShield.html



-----------------------------------------------------------------------------------------


Ovom mojom porukom zavrsavamo diskusiju u ovoj temi.

Hvala sto verujes AMF Timu Ziveli



Pozdrav,
goran9888 (AMF Tim)

Ko je trenutno na forumu
 

Ukupno su 980 korisnika na forumu :: 52 registrovanih, 11 sakrivenih i 917 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: _Petar, _Rade, aljosa7, alkatraz080, amonsrb, Atomski čoban, babaroga, bankulen, Belac91, Bogoslov, branko7, celik, Ctrl x, dane007, darcaud, DARKMEN22, darkstar101, djboj, dragon986, Faki-Valjevo, goxin, h8propaganda, ikan, ivan1973, jaeger, Jovan Nenad, Kiki2004, Koca Popovic, kovinacc, KUZMAR, kybonacci, Leonardo, LUDI, MB120mm, milekNS, milos.cbr, miodrag, Miskohd, mnn2, nebkv, nidzasrb, Ognjen D., Panter, pein, rodoljub, Simon simonović, Toni, VJ, Vl veliki, vobo, zajcev1, Zi0mek