MyCity » Ambulanta -> Arhiva Ambulante » hijack log hitno!!!!

hijack log hitno!!!!

Napisano na dan: 18.7.2009
3

hijack log hitno!!!!
Pagination Prethodna strana

Idi na vrh

Poslao: 21 Jul 2009 20:59
Idi na vrh
offline
  • Pridružio: 24 Okt 2007
  • Poruke: 122

USBNoRisk 2.4 (1 June 2009) by bobby

Started at 7/21/2009 8:55:17 PM

Searching for connected USB Mass storage...
----------------------------------------
========================================

Searching for other storage...
----------------------------------------
C: {622bc09f-73b7-11de-ab5b-806d6172696f}
========================================


Scanning fixed storage...
----------------------------------------

No blocked files found on C:
No Autorun.inf files found on C:
No mountpoint found for C:
No mountpoint found for 622bc09f-73b7-11de-ab5b-806d6172696f
No Desktop.ini files found on C:
----------------------------------------

========================================
Initial scan finished!
========================================


New device connected at 7/21/2009 8:55:54 PM

Scanning for connected USB mass storage...
----------------------------------------
E: {699510ff-7437-11de-81c7-00c0a8bb9012}
Added E:
========================================

Scanning USB mass storage for files...
----------------------------------------
Blocked file found: E:\autorun.inf.blocked
----------------------------------------
Content of E:\autorun.inf.blocked
----------------------------------------
[autorun]
open=RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\windowsupdate.com
icon=%SystemRoot%\system32\SHELL32.dll,4
action=Open folder to view files
shell\open=Open
shell\open\command=RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\windowsupdate.com
shell\open\default=1
----------------------------------------

Files referenced from E:\autorun.inf.blocked
----------------------------------------
E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\windowsupdate.com -r-hs 19968
----------------------------------------

----------------------------------------
No Autorun.inf files found on E:
No mountpoint found for 699510ff-7437-11de-81c7-00c0a8bb9012
----------------------------------------

No Desktop.ini files found on E:
----------------------------------------

No mimics found on drive E:
========================================

Processing script
----------------------------------------
699510ff-7437-11de-81c7-00c0a8bb9012
Drive letter for GUID: E:
SectionStart = 0
SectionEnd = 2
----------------------------------------
Delete folder tree E:\RECYCLER:
----------------------------------------
File lock detected:
USBNoRisk cannot find what locked the file
Delete: E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\windowsupdate.com > Error!
Delete: E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\Desktop.ini > Done!
Delete: E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013 > Error!
Delete: E:\RECYCLER > Error!
Delete: E:\RECYCLER > Error!
----------------------------------------
Deleting blocked files:
----------------------------------------
Delete: E:\autorun.inf.blocked > Done!
----------------------------------------

========================================
Scan finished!
========================================



Poslao: 24 Jul 2009 17:00
Idi na vrh
offline
  • diarno  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 15 Jun 2007
  • Poruke: 5572

Iskljuci sav zastitni softver i uradi sledece

Pokreni ponovo USbNoRisk

Predji na karticu Script u USBNoRisku i tamo iskopiraj sledeci skript:


{699510ff-7437-11de-81c7-00c0a8bb9012}
folder_delete: %DRIVE%RECYCLER
f_delete: %DRIVE%RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\windowsupdate.com
delete_blocked:

Vrati se na karticu Monitor.
Nakon toga prikljuci na komp ipod i sacekaj da USBNoRisk automatski obavi skeniranje i ciscenje.

Kada to odradis, snimi ponovo log i iskopiraj mi ga ovde.



MyCity » Ambulanta -> Arhiva Ambulante » hijack log hitno!!!!

Ko je trenutno na forumu
 

Ukupno su 7062 korisnika na forumu :: 67 registrovanih, 8 sakrivenih i 6987 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 20624 - dana 04 Apr 2026 04:18

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 4. Ozrenska, A.R.Chafee.Jr., Air_Force_82, AK - 230, aleksmajstor, Avalon015, Barista, Bobrock1, bojank, bokicacar, braca57, CCCP, celt, Comyymoc, curiosity, Dannyboy, Dejan_vw, Dragan1998, draganca, dragoljub11987, DragoslavS, Džekson, Electron, Feller, Georgius, Gitzherai, goxin, GT, howyesno, jon istvan, Jose, Jozo74, KonstantinR, Koser, laurusri, LostInSpaceandTime, Magistar78, Marko00, Metanoja, mikrimaus, Milometer, mino bosanac, mkukoleca, nemkea71, nikolapetkovic, paja69, Piani Jazzer, Pilence, raptorsi, RD84, Remain, Remarqe, S-lash, Sevatar, Sinisa76, SirOliver, Srki98, ssekir75, Tamna_strana_Meseca, tomigun, tomo2, trutcina, VBoss, wolverined4, zajcev1, zivojin32, |_MeD_|