Problem na externim disku - 0xA25D5DBD.exe

[snake.w]

Zdravim mam naprosto stejny problem jako popsany v tomto topicu http://www.viry.cz/forum/viewtopic.php?f=13&t=112412. Problemovy disk je H.

Prosim o pomoc.

Zde je log z USB Fixu

############################## | UsbFix 7.014 | [Deletion]

User: Snake (Administrator) # SNAKE-PC [ ]
Updated 24/06/10 by El Desaparecido / C_XX
Started at 20:23:54 | 08/08/2011
Website: http://pagesperso-orange.fr/NosTools/index.html
Contact: FindyKill.Contact@gmail.com

CPU: Intel(R) Core(TM)2 Duo CPU E4600 @ 2.40GHz
CPU 2: Intel(R) Core(TM)2 Duo CPU E4600 @ 2.40GHz
Systém Microsoft Windows XP Professional (5.1.2600 32-Bit) # Service Pack 3
Internet Explorer 7.0.5730.13

Windows Firewall: Disabled /!\
Antivirus: Norton Internet Security 15.5.0.23 [Enabled | Updated]
Firewall: Norton Internet Security 15.5.0.23 [Enabled]
RAM -> 2047 Mb
C:\ (%systemdrive%) -> Fixed drive # 49 Gb (32 Mb free - 65%) [] # NTFS
D:\ -> Fixed drive # 184 Gb (47 Mb free - 26%) [] # NTFS
E:\ -> CD-ROM
F:\ -> CD-ROM
G:\ -> CD-ROM
H:\ -> Fixed drive # 298 Gb (17 Mb free - 6%) [Hadr] # NTFS

################## | Files # Infected Folders |


################## | Registry |

Deleted ! HKLM\software\microsoft\windows nt\currentversion\winlogon|Taskman
Deleted ! HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\policies\System|DisableTaskMgr
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableTaskMgr
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableTaskMgr

################## | Mountpoints2 |


################## | Listing |

[03/02/2011 - 15:42:45 | A | 0] C:\AUTOEXEC.BAT
[22/07/2011 - 14:07:29 | A | 215] C:\boot.ini
[25/10/2001 - 18:00:00 | RASH | 4952] C:\Bootfont.bin
[24/07/2011 - 11:52:45 | SHD ] C:\Config.Msi
[03/02/2011 - 15:42:45 | A | 0] C:\CONFIG.SYS
[03/02/2011 - 15:46:30 | D ] C:\Documents and Settings
[04/07/2011 - 10:28:24 | D ] C:\Intel
[03/02/2011 - 15:42:45 | RASH | 0] C:\IO.SYS
[03/02/2011 - 15:42:45 | RASH | 0] C:\MSDOS.SYS
[04/08/2004 - 00:38:34 | RASH | 47564] C:\NTDETECT.COM
[03/02/2011 - 16:04:40 | RASH | 250576] C:\ntldr
[20/02/2011 - 16:25:11 | D ] C:\NVIDIA
[08/08/2011 - 08:33:00 | ASH | 2145386496] C:\pagefile.sys
[24/07/2011 - 15:40:45 | RD ] C:\Program Files
[20/02/2011 - 20:47:37 | D ] C:\Programme
[08/08/2011 - 20:26:45 | SHD ] C:\RECYCLER
[22/07/2011 - 13:57:55 | D ] C:\rsit
[22/07/2011 - 13:56:18 | SHD ] C:\System Volume Information
[22/07/2011 - 14:00:17 | D ] C:\Temp
[08/08/2011 - 20:26:45 | D ] C:\UsbFix
[08/08/2011 - 20:26:48 | A | 1344] C:\UsbFix.txt
[07/08/2011 - 20:19:13 | D ] C:\WINDOWS
[12/02/2011 - 12:34:02 | D ] D:\7087999024cd36a290
[12/02/2011 - 12:36:51 | D ] D:\ca22969774ec34e0066f63
[04/07/2011 - 15:58:37 | D ] D:\Documents and Settings
[12/02/2011 - 18:45:40 | D ] D:\e27e97af60cf09c4c99748
[18/07/2011 - 22:19:23 | D ] D:\Filmy
[21/07/2011 - 14:17:43 | D ] D:\HRY ISO
[19/07/2011 - 13:32:08 | D ] D:\Hudba
[08/02/2011 - 17:47:39 | HD ] D:\msdownld.tmp
[25/07/2011 - 12:32:10 | D ] D:\Program Files
[08/08/2011 - 20:26:45 | SHD ] D:\RECYCLER
[22/07/2011 - 13:56:13 | SHD ] D:\System Volume Information
[29/06/2011 - 16:09:09 | D ] D:\TopCD
[08/08/2011 - 20:24:40 | SHD ] H:\$RECYCLE.BIN
[08/08/2011 - 08:38:43 | A | 1469] H:\$RECYCLE.BIN.lnk
[28/06/2011 - 21:12:32 | A | 768553] H:\593px-SaatLS2011.png
[20/01/2011 - 19:55:38 | SHDC ] H:\74bdb30f1e9e67ad0864ee8020
[08/08/2011 - 19:43:57 | RA | 1497] H:\74bdb30f1e9e67ad0864ee8020.lnk
[08/05/2011 - 09:45:30 | SHDC ] H:\CSSR 45-68
[24/07/2011 - 17:23:14 | A | 1465] H:\CSSR 45-68.lnk
[22/07/2011 - 14:51:36 | SHDC ] H:\Dokumenty
[08/08/2011 - 19:27:35 | A | 1463] H:\Dokumenty.lnk
[22/07/2011 - 15:53:11 | SHDC ] H:\Filmy
[08/08/2011 - 19:27:37 | A | 1455] H:\Filmy.lnk
[22/07/2011 - 15:00:41 | SHDC ] H:\HRY
[08/08/2011 - 19:39:25 | A | 1451] H:\HRY.lnk
[22/07/2011 - 15:04:25 | SHDC ] H:\Hudba
[24/07/2011 - 14:41:51 | A | 1455] H:\Hudba.lnk
[22/07/2011 - 15:26:06 | SHDC ] H:\JAWA-ČZ
[24/07/2011 - 13:02:10 | A | 1459] H:\JAWA-ČZ.lnk
[24/07/2011 - 13:19:21 | DC ] H:\Kopie - WoW
[29/06/2011 - 18:40:40 | SHDC ] H:\mods
[24/07/2011 - 13:02:10 | A | 1453] H:\mods.lnk
[07/11/2010 - 14:53:49 | SHDC ] H:\msdownld.tmp
[24/07/2011 - 13:02:10 | A | 1469] H:\msdownld.tmp.lnk
[28/01/2011 - 18:25:45 | SHDC ] H:\Programy
[24/07/2011 - 13:02:10 | A | 1461] H:\Programy.lnk
[08/08/2011 - 20:26:45 | SHDC ] H:\RECYCLER
[14/04/2008 - 08:52:54 | A | 28672] H:\setupSNK.exe
[23/05/2011 - 12:01:55 | SHDC ] H:\SMRTNTKY
[08/08/2011 - 19:39:07 | A | 1461] H:\SMRTNTKY.lnk
[28/07/2011 - 19:20:11 | SHD ] H:\System Volume Information
[24/07/2011 - 13:02:10 | A | 1495] H:\System Volume Information.lnk
[08/05/2011 - 10:30:00 | SHDC ] H:\The Simpsons
[24/07/2011 - 13:02:10 | A | 1469] H:\The Simpsons.lnk
[24/07/2011 - 13:02:23 | ASH | 7680] H:\Thumbs.db
[19/04/2011 - 21:21:46 | SHDC ] H:\Truck Trial
[24/07/2011 - 13:02:10 | A | 1467] H:\Truck Trial.lnk

################## | Vaccin |

C:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
D:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
H:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)

################## | E.O.F |

[vyosek]

Zdravim a pekny den preji

Otevrete si poznamkovy blok

• Start->spustit->notepad
• Vlozte text nize

• Kód: Vybrat vše

  @echo off
  del "H:\$RECYCLE.BIN.lnk" /q
  rmdir "H:\$RECYCLE.BIN" /s /q
  rmdir "H:\RECYCLER" /s /q
  H:\74bdb30f1e9e67ad0864ee8020
  del "H:\74bdb30f1e9e67ad0864ee8020.lnk" /q
  attrib -h -s "H:\CSSR 45-68" /s /d
  del "H:\CSSR 45-68.lnk" /q
  attrib -h -s " H:\Dokumenty" /s /d
  del " H:\Dokumenty.lnk" /q
  attrib -h -s "H:\Filmy" /s /d
  del " H:\Filmy.lnk" /q
  attrib -h -s "H:\HRY" /s /d
  del " H:\HRY.lnk" /q
  attrib -h -s "H:\Hudba" /s /d
  del "H:\Hudba.lnk" /q
  attrib -h -s "H:\JAWA-ČZ" /s /d
  del " H:\JAWA-ČZ.lnk" /q
  attrib -h -s "H:\mods" /s /d
  del "H:\mods.lnk" /q
  attrib -h -s "H:\msdownld.tmp" /s /d
  del "H:\msdownld.tmp.lnk" /q
  attrib -h -s "H:\Programy" /s /d
  del " H:\Programy.lnk" /q
  attrib -h -s "H:\SMRTNTKY" /s /d
  del "H:\SMRTNTKY.lnk" /q
  attrib -h -s "H:\System Volume Information" /s /d
  del "H:\System Volume Information.lnk" /q
  attrib -h -s "H:\The Simpsons" /s /d
  del "H:\The Simpsons.lnk" /q
  attrib -h -s " H:\Truck Trial" /s /d
  del " H:\Truck Trial.lnk" /q
  

• Soubor ulozte jako del.bat
• Pri ukladani dejte ulozit jako typ Vsechny soubory (nastevni je uvedeno na obrazku nize)
• 
• Zavrit notepad a spustit dvojklikem del.bat
• Okno jen problikne a provede mazani - soubor muzete smazat

[snake.w]

Zdravim diky za pomoc.
Pomohlo to ale ne na vsechno jeste tam jsou nejake slozky stale nefunkcni.

[vyosek]

Stahnete SytemLook (viz muj podpis) a ulozte jej na plochu

• Do okna vlozte skript nize

• Kód: Vybrat vše

  :dir
  H:\

• Kliknete na Look
• Tlacitko Look se zmeni na Scanning a zsedne
• Pockejte pokud se tlacitko Scanning opet nezmeni na Look - tak poznate ze SystemLook dokoncil svou praci
• Vyskoci na Vas log s nazvem SystemLook (pripadne bude ulozen na plose), jeho obsah mi sem vlozte

[snake.w]

SystemLook 30.07.11 by jpshortstuff
Log created at 20:46 on 09/08/2011 by Snake
Administrator - Elevation successful

========== dir ==========

H: - Parameters: "(none)"

---Files---
593px-SaatLS2011.png --a---- 768553 bytes [14:50 30/06/2011] [19:12 28/06/2011]
74bdb30f1e9e67ad0864ee8020.lnk -ra---- 1497 bytes [11:02 24/07/2011] [17:43 08/08/2011]
Dokumenty.lnk --a---- 1463 bytes [11:02 24/07/2011] [18:42 09/08/2011]
Filmy.lnk --a---- 1455 bytes [11:02 24/07/2011] [18:43 09/08/2011]
HRY.lnk --a---- 1451 bytes [11:02 24/07/2011] [17:39 08/08/2011]
JAWA-ČZ.lnk --a---- 1459 bytes [11:02 24/07/2011] [11:02 24/07/2011]
Programy.lnk --a---- 1461 bytes [11:02 24/07/2011] [11:02 24/07/2011]
setupSNK.exe --a---- 28672 bytes [10:01 23/05/2011] [06:52 14/04/2008]
Thumbs.db --ahs-- 7680 bytes [11:02 24/07/2011] [11:02 24/07/2011]
Truck Trial.lnk --a---- 1467 bytes [11:02 24/07/2011] [11:02 24/07/2011]

---Folders---
74bdb30f1e9e67ad0864ee8020 d--hsc- [17:54 20/01/2011]
Autorun.inf drahsc- [18:26 08/08/2011]
CSSR 45-68 d----c- [08:11 18/03/2011]
Dokumenty d--hsc- [06:49 28/04/2011]
Filmy d----c- [18:22 12/11/2010]
HRY d----c- [07:54 28/10/2010]
Hudba d----c- [13:09 29/10/2010]
JAWA-ČZ d--hsc- [12:58 22/07/2011]
Kopie - WoW d----c- [11:02 24/07/2011]
mods d----c- [16:39 29/06/2011]
msdownld.tmp d----c- [12:53 07/11/2010]
Programy d----c- [16:55 27/10/2010]
SMRTNTKY d----c- [10:01 23/05/2011]
System Volume Information d--hs-- [16:54 27/10/2010]
The Simpsons d----c- [10:03 30/12/2010]
Truck Trial d--hsc- [13:12 17/04/2011]

-= EOF =-

[vyosek]

Znovu vytvorte bat soubor s timto obsahem

Kód: Vybrat vše

@echo off
del "H:\74bdb30f1e9e67ad0864ee8020.lnk" /q
del "H:\Dokumenty.lnk" /q
del "H:\Filmy.lnk" /q
del "H:\HRY.lnk" /q
del "H:\JAWA-ČZ.lnk" /q
del "H:\Programy.lnk" /q
del "H:\Truck Trial.lnk" /q
attrib -h -s "H:\Dokumenty /s /d
attrib -h -s H:\Truck Trial" /s /d
attrib -h -s "H:\JAWA-ČZ" /s /s

[snake.w]

Jeste mi tam zustali 2 slozky ktere ale nepotrebuji staci je smazat nebo jeste mam udelat log z System looku?

[vyosek]

Jake to jsou?

Udelejte znou ten krok se SystemLookem