Zdravím nefunguje mi externí disk, mužu se divat na filmy atd, ale nemužu nic z něj kopírovat, a nejde mí přistup do složek
log z USBFix
############################## | UsbFix V 7.096 | [Research]
User: Honza (Administrator) # HONZIK
Updated 15/08/2012 by El Desaparecido
Started at 22:47:42 | 15/08/2013
Website: http://eldesaparecido.com
Forum: http://forum.eldesaparecido.com
Suspicious file ? : http://eldesaparecido.com/upload.php
Contact: contact@eldesaparecido.com
PC: TOSHIBA (QOSMIO F750) (x64-based PC) # Notebook
CPU: Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz (2001)
RAM -> [Total : 8165 | Free : 5540]
BIOS: Default System BIOS
BOOT: Normal boot
OS: Microsoft Windows 7 Home Premium (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 9.10.9200.16635
SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: Microsoft Security Essentials [(!) Disabled | Updated]
FW: Windows FireWall Service [Enabled]
C:\ (%systemdrive%) -> Fixed drive # 450 Gb (162 Mb free - 36%) [Mistní Disk] # NTFS
D:\ -> CD-ROM
E:\ -> Fixed drive # 596 Gb (3 Mb free - 1%) [A-DATA SH93] # NTFS
F:\ -> CD-ROM
################## | Active Processes |
C:\windows\system32\csrss.exe (560)
C:\windows\system32\wininit.exe (636)
C:\windows\system32\csrss.exe (660)
C:\windows\system32\services.exe (704)
C:\windows\system32\lsass.exe (724)
C:\windows\system32\lsm.exe (732)
C:\windows\system32\svchost.exe (832)
C:\windows\system32\nvvsvc.exe (892)
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (916)
C:\windows\system32\svchost.exe (960)
c:\Program Files\Microsoft Security Client\MsMpEng.exe (152)
C:\windows\system32\winlogon.exe (212)
C:\windows\System32\svchost.exe (1156)
C:\windows\System32\svchost.exe (1188)
C:\windows\system32\svchost.exe (1236)
C:\windows\system32\svchost.exe (1268)
C:\windows\system32\svchost.exe (1368)
C:\windows\system32\svchost.exe (1456)
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1540)
C:\windows\system32\nvvsvc.exe (1552)
C:\windows\system32\WLANExt.exe (1624)
C:\windows\system32\conhost.exe (1656)
C:\windows\System32\spoolsv.exe (1984)
C:\windows\system32\svchost.exe (2016)
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (1636)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1800)
C:\windows\system32\taskhost.exe (2064)
C:\windows\system32\Dwm.exe (2148)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2228)
C:\windows\system32\taskeng.exe (2240)
C:\Program Files\Bonjour\mDNSResponder.exe (2360)
C:\windows\system32\svchost.exe (2388)
c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (2496)
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (2516)
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (2532)
C:\windows\system32\svchost.exe (2688)
C:\TeamViewer\Version8\TeamViewer_Service.exe (2836)
C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe (2972)
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3016)
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (2344)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (2464)
C:\Program Files\TOSHIBA\TECO\Teco.exe (2304)
C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe (3080)
C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe (3136)
C:\Program Files\Microsoft Security Client\msseces.exe (3216)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe (3260)
C:\Program Files (x86)\3D Screen Activator\3DScreenActivator.exe (3308)
C:\QIP 2012\qip.exe (3344)
C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (3400)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (3488)
C:\windows\system32\TODDSrv.exe (3796)
C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (3864)
c:\Program Files (x86)\Common Files\Ulead Systems\UDSS\UDSS.exe (3956)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (4064)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (3408)
C:\Program Files\TOSHIBA\TECO\TecoService.exe (3364)
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (4284)
C:\windows\system32\wbem\wmiprvse.exe (4556)
C:\windows\system32\SearchIndexer.exe (4656)
C:\windows\system32\svchost.exe (4756)
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (4984)
C:\Program Files\Windows Media Player\wmpnetwk.exe (4884)
C:\windows\system32\taskeng.exe (5464)
C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe (5660)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe (5900)
C:\Program Files\TOSHIBA\HDMICtrlMan\HCMSoundChanger.exe (6108)
C:\windows\System32\svchost.exe (5420)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5756)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5372)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5136)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5140)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6176)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6260)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6508)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6708)
C:\windows\system32\DllHost.exe (6812)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6996)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (7108)
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (792)
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (3512)
C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (2888)
C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (3268)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe (1716)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe (4812)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (4960)
C:\Program Files (x86)\Nero\Update\NASvc.exe (3176)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (5836)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4320)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (800)
C:\Users\Honza\Downloads\SRDownloader.exe (5736)
C:\uTorrent\uTorrent.exe (2904)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (3744)
C:\windows\Explorer.exe (1408)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5828)
C:\windows\system32\SearchProtocolHost.exe (5680)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (980)
C:\windows\system32\SearchFilterHost.exe (4472)
C:\UsbFix\Go.exe (5932)
C:\windows\system32\wbem\wmiprvse.exe (5404)
\\?\C:\windows\system32\wbem\WMIADAP.EXE (6856)
################## | Files # Infected Folders |
Found ! E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx
Found ! E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665
################## | Registry |
Found ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Found ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Found ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
################## | Mountpoints2 |
################## | Vaccin |
(!) This computer is not vaccinated!
################## | E.O.F |
Děkuji moc
Nejde číst a stahovat z ext.disku
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Nejde číst a stahovat z ext.disku
- Přílohy
-
- er.jpg (23.56 KiB) Zobrazeno 625 x
Re: Nejde číst a stahovat z ext.disku
log po odstranění, disk stále nefunguje
############################## | UsbFix V 7.096 | [Deletion]
User: Honza (Administrator) # HONZIK
Updated 15/08/2012 by El Desaparecido
Started at 23:10:50 | 15/08/2013
Website: http://eldesaparecido.com
Forum: http://forum.eldesaparecido.com
Suspicious file ? : http://eldesaparecido.com/upload.php
Contact: contact@eldesaparecido.com
PC: TOSHIBA (QOSMIO F750) (x64-based PC) # Notebook
CPU: Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz (2001)
RAM -> [Total : 8165 | Free : 5439]
BIOS: Default System BIOS
BOOT: Normal boot
OS: Microsoft Windows 7 Home Premium (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 9.10.9200.16635
SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: Microsoft Security Essentials [(!) Disabled | Updated]
FW: Windows FireWall Service [Enabled]
C:\ (%systemdrive%) -> Fixed drive # 450 Gb (152 Mb free - 34%) [Mistní Disk] # NTFS
D:\ -> CD-ROM
E:\ -> Fixed drive # 596 Gb (3 Mb free - 1%) [A-DATA SH93] # NTFS
F:\ -> CD-ROM
G:\ -> Removable drive # 7 Gb (7 Mb free - 89%) [KINGSTON] # FAT32
################## | Active Processes |
C:\windows\system32\csrss.exe (560)
C:\windows\system32\wininit.exe (636)
C:\windows\system32\csrss.exe (660)
C:\windows\system32\services.exe (704)
C:\windows\system32\lsass.exe (724)
C:\windows\system32\lsm.exe (732)
C:\windows\system32\svchost.exe (832)
C:\windows\system32\nvvsvc.exe (892)
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (916)
C:\windows\system32\svchost.exe (960)
c:\Program Files\Microsoft Security Client\MsMpEng.exe (152)
C:\windows\system32\winlogon.exe (212)
C:\windows\System32\svchost.exe (1156)
C:\windows\System32\svchost.exe (1188)
C:\windows\system32\svchost.exe (1236)
C:\windows\system32\svchost.exe (1268)
C:\windows\system32\svchost.exe (1368)
C:\windows\system32\svchost.exe (1456)
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1540)
C:\windows\system32\nvvsvc.exe (1552)
C:\windows\system32\WLANExt.exe (1624)
C:\windows\system32\conhost.exe (1656)
C:\windows\System32\spoolsv.exe (1984)
C:\windows\system32\svchost.exe (2016)
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (1636)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1800)
C:\windows\system32\taskhost.exe (2064)
C:\windows\system32\Dwm.exe (2148)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2228)
C:\windows\system32\taskeng.exe (2240)
C:\Program Files\Bonjour\mDNSResponder.exe (2360)
C:\windows\system32\svchost.exe (2388)
c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (2496)
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (2516)
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (2532)
C:\windows\system32\svchost.exe (2688)
C:\TeamViewer\Version8\TeamViewer_Service.exe (2836)
C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe (2972)
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3016)
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (2344)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (2464)
C:\Program Files\TOSHIBA\TECO\Teco.exe (2304)
C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe (3080)
C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe (3136)
C:\Program Files\Microsoft Security Client\msseces.exe (3216)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe (3260)
C:\Program Files (x86)\3D Screen Activator\3DScreenActivator.exe (3308)
C:\QIP 2012\qip.exe (3344)
C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (3400)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (3488)
C:\windows\system32\TODDSrv.exe (3796)
C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (3864)
c:\Program Files (x86)\Common Files\Ulead Systems\UDSS\UDSS.exe (3956)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (4064)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (3408)
C:\Program Files\TOSHIBA\TECO\TecoService.exe (3364)
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (4284)
C:\windows\system32\wbem\wmiprvse.exe (4556)
C:\windows\system32\SearchIndexer.exe (4656)
C:\windows\system32\svchost.exe (4756)
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (4984)
C:\Program Files\Windows Media Player\wmpnetwk.exe (4884)
C:\windows\system32\taskeng.exe (5464)
C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe (5660)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe (5900)
C:\Program Files\TOSHIBA\HDMICtrlMan\HCMSoundChanger.exe (6108)
C:\windows\System32\svchost.exe (5420)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5756)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5372)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5136)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5140)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6176)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6260)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6508)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6708)
C:\windows\system32\DllHost.exe (6812)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6996)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (7108)
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (792)
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (3512)
C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (2888)
C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (3268)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe (1716)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe (4812)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (4960)
C:\Program Files (x86)\Nero\Update\NASvc.exe (3176)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (5836)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4320)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (800)
C:\Users\Honza\Downloads\SRDownloader.exe (5736)
C:\uTorrent\uTorrent.exe (2904)
C:\windows\Explorer.exe (1408)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (980)
C:\windows\System32\WUDFHost.exe (848)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (2340)
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (1712)
C:\UsbFix\Go.exe (3524)
C:\windows\system32\wbem\wmiprvse.exe (5948)
################## | Stopped processes |
Stopped! C:\windows\system32\nvvsvc.exe (892)
Stopped! C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (916)
Stopped! c:\Program Files\Microsoft Security Client\MsMpEng.exe (152)
Stopped! C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1540)
Stopped! C:\windows\system32\nvvsvc.exe (1552)
Stopped! C:\windows\system32\WLANExt.exe (1624)
Stopped! C:\windows\system32\conhost.exe (1656)
Stopped! C:\windows\System32\spoolsv.exe (1984)
Stopped! C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (1636)
Stopped! C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1800)
Stopped! C:\windows\system32\taskhost.exe (2064)
Stopped! C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2228)
Stopped! C:\windows\system32\taskeng.exe (2240)
Stopped! C:\Program Files\Bonjour\mDNSResponder.exe (2360)
Stopped! c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (2496)
Stopped! C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (2516)
Stopped! C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (2532)
Stopped! C:\TeamViewer\Version8\TeamViewer_Service.exe (2836)
Stopped! C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe (2972)
Stopped! C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3016)
Stopped! C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (2344)
Stopped! C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (2464)
Stopped! C:\Program Files\TOSHIBA\TECO\Teco.exe (2304)
Stopped! C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe (3080)
Stopped! C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe (3136)
Stopped! C:\Program Files\Microsoft Security Client\msseces.exe (3216)
Stopped! C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe (3260)
Stopped! C:\Program Files (x86)\3D Screen Activator\3DScreenActivator.exe (3308)
Stopped! C:\QIP 2012\qip.exe (3344)
Stopped! C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (3400)
Stopped! C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (3488)
Stopped! C:\windows\system32\TODDSrv.exe (3796)
Stopped! C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (3864)
Stopped! c:\Program Files (x86)\Common Files\Ulead Systems\UDSS\UDSS.exe (3956)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (4064)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (3408)
Stopped! C:\Program Files\TOSHIBA\TECO\TecoService.exe (3364)
Stopped! C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (4284)
Stopped! C:\windows\system32\SearchIndexer.exe (4656)
Stopped! C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (4984)
Stopped! C:\Program Files\Windows Media Player\wmpnetwk.exe (4884)
Stopped! C:\windows\system32\taskeng.exe (5464)
Stopped! C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe (5660)
Stopped! C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe (5900)
Stopped! C:\Program Files\TOSHIBA\HDMICtrlMan\HCMSoundChanger.exe (6108)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5756)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5372)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5136)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5140)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6176)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6260)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6508)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6708)
Stopped! C:\windows\system32\DllHost.exe (6812)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6996)
Stopped! C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (7108)
Stopped! C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (792)
Stopped! C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (3512)
Stopped! C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (2888)
Stopped! C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (3268)
Stopped! C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe (1716)
Stopped! C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe (4812)
Stopped! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (4960)
Stopped! C:\Program Files (x86)\Nero\Update\NASvc.exe (3176)
Stopped! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (5836)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4320)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (800)
Stopped! C:\Users\Honza\Downloads\SRDownloader.exe (5736)
Stopped! C:\uTorrent\uTorrent.exe (2904)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (980)
Stopped! C:\windows\System32\WUDFHost.exe (848)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (2340)
Stopped! C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (1712)
################## | Files # Infected Folders |
Deleted ! C:\$RECYCLE.BIN\S-1-5-21-848119732-1025168802-1888411094-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1027572414-461053484-3470823533-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1198523880-493338664-3484616589-1006
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1603263534-4123973739-1215464569-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1618685428-4234376038-1486753998-1002
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1837590218-388872322-2637703823-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2033176242-382779935-1051457620-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2189909185-1201780795-404979967-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2189909185-1201780795-404979967-1005
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2189909185-1201780795-404979967-1006
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2556512683-1843415394-4231807322-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2798851076-3444965877-394427697-1000
Not deleted ! E:\$RECYCLE.BIN\S-1-5-21-3131828729-177145836-1696843606-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3146623157-3172578467-3289556724-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3185675988-3791750401-1536689858-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3899235270-1548223001-2818566445-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3916115188-3696534609-684656669-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3955028297-3072554108-3866661899-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3964080168-4140967078-3502735735-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3975933187-3799888390-2765331379-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-499407762-2334625425-658448664-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-848119732-1025168802-1888411094-1001
Deleted ! E:\Recycler\S-1-5-21-1614895754-1644491937-842925246-1003
Deleted ! E:\Recycler\S-1-5-21-1715567821-1035525444-682003330-1004
Not deleted ! E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx
Not deleted ! E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665
(!) Temporary files deleted.
################## | Registry |
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
################## | Mountpoints2 |
################## | Listing |
[15/08/2013 - 23:21:26 | SHD ] C:\$RECYCLE.BIN
[01/08/2013 - 18:23:12 | N | 1174] C:\AdwCleaner[R1].txt
[01/08/2013 - 19:10:36 | N | 1306] C:\AdwCleaner[S1].txt
[01/08/2013 - 22:07:19 | N | 921] C:\AdwCleaner[S2].txt
[19/06/2013 - 23:33:04 | D ] C:\Audacity
[06/09/2011 - 01:28:44 | D ] C:\Boot
[21/11/2010 - 05:23:51 | RASH | 383786] C:\bootmgr
[06/09/2011 - 01:28:47 | N | 8192] C:\BOOTSECT.BAK
[16/05/2013 - 10:44:56 | D ] C:\Burn4Free
[04/06/2013 - 16:48:11 | N | 47] C:\chid
[04/08/2013 - 22:18:07 | N | 21221] C:\ComboFix.txt
[21/04/2013 - 22:42:00 | D ] C:\DAEMON Tools Lite
[14/07/2009 - 07:08:56 | SHD ] C:\Documents and Settings
[27/06/2013 - 19:28:29 | D ] C:\Electronic Arts
[28/05/2013 - 11:22:53 | D ] C:\FlatOut2
[15/08/2013 - 19:40:17 | ASH | 6421549056] C:\hiberfil.sys
[12/04/2013 - 21:07:57 | D ] C:\ICQ
[15/04/2013 - 22:52:46 | D ] C:\JCreatorV4LE
[07/07/2013 - 21:57:23 | D ] C:\Left 4 Dead 2
[05/08/2013 - 15:25:35 | D ] C:\Mafia II
[23/05/2013 - 22:40:32 | D ] C:\Microsoft Office
[14/07/2013 - 09:23:25 | D ] C:\MSD
[23/05/2013 - 22:37:34 | RHD ] C:\MSOCache
[12/05/2013 - 13:34:58 | D ] C:\Need for Speed Underground 2
[24/05/2013 - 10:26:16 | D ] C:\NVIDIA
[15/08/2013 - 19:40:21 | ASH | 8562069504] C:\pagefile.sys
[08/08/2013 - 16:19:36 | D ] C:\Program Files
[08/08/2013 - 16:22:12 | D ] C:\Program Files (x86)
[01/08/2013 - 19:10:26 | D ] C:\ProgramData
[18/05/2013 - 21:27:34 | D ] C:\PSPad editor
[19/04/2013 - 08:31:08 | D ] C:\QIP 2012
[04/08/2013 - 22:18:10 | D ] C:\Qoobox
[15/08/2013 - 13:20:13 | D ] C:\SpeedFan
[15/08/2013 - 23:20:34 | SHD ] C:\System Volume Information
[03/05/2013 - 19:48:02 | D ] C:\TeamViewer
[08/08/2013 - 16:20:55 | D ] C:\The Battle for Middle-earth (tm)
[08/08/2013 - 16:20:18 | D ] C:\The Incredible Adventures of Van Helsing
[12/04/2013 - 20:24:12 | D ] C:\Toshiba
[14/06/2013 - 00:57:42 | D ] C:\totalcmd
[18/04/2013 - 09:24:07 | D ] C:\TotalMedia 3.5
[15/08/2013 - 23:22:01 | D ] C:\UsbFix
[15/08/2013 - 23:10:47 | A | 16288] C:\UsbFix.txt
[06/08/2011 - 00:03:51 | D ] C:\Users
[17/04/2013 - 12:08:41 | D ] C:\uTorrent
[09/08/2013 - 21:12:59 | D ] C:\Windows
[05/07/2011 - 11:21:37 | D ] E:\$AVG
[15/08/2013 - 23:12:26 | SHD ] E:\$RECYCLE.BIN
[16/06/2010 - 17:09:44 | N | 721913] E:\16062010109.jpg
[16/06/2010 - 18:11:28 | N | 882823] E:\16062010110.jpg
[16/06/2010 - 18:15:30 | N | 726930] E:\16062010111.jpg
[16/06/2010 - 18:15:48 | N | 764539] E:\16062010112.jpg
[16/06/2010 - 18:16:06 | N | 701719] E:\16062010113.jpg
[17/09/2011 - 19:02:22 | N | 47278318] E:\17092011015.mp4
[26/01/2011 - 10:41:30 | D ] E:\6957741178471d00bd75
[30/06/2013 - 13:01:58 | D ] E:\absolutorium
[07/03/2013 - 11:40:36 | D ] E:\auta
[27/03/2011 - 20:32:08 | N | 134627] E:\Bankovnictví.docx
[09/11/2011 - 14:37:59 | D ] E:\bratislav
[01/07/2013 - 15:39:28 | D ] E:\brigada ampluservis
[26/07/2005 - 11:32:19 | N | 363915] E:\Chorvatsko 2005 149.jpg
[26/07/2005 - 11:32:56 | N | 441401] E:\Chorvatsko 2005 243.jpg
[13/02/2013 - 22:55:13 | N | 14951] E:\citaty s knihy FORBES.docx
[08/07/2013 - 09:57:33 | D ] E:\cv
[12/11/2011 - 15:43:33 | D ] E:\f1c6c60f3c8c1419cae4
[20/07/2013 - 12:12:33 | D ] E:\Filmy
[11/04/2013 - 18:21:18 | D ] E:\fotky
[27/02/2013 - 11:32:42 | D ] E:\fotky fotak
[25/02/2013 - 11:52:28 | D ] E:\fotky stodolni
[01/02/2013 - 17:19:40 | N | 1124477] E:\fotky_3_1.jpg
[30/05/2013 - 15:07:06 | D ] E:\Iphone 4
[01/07/2013 - 15:34:27 | D ] E:\jirik
[09/12/2010 - 08:48:38 | D ] E:\Jirka maturita
[19/12/2010 - 20:05:08 | N | 208449] E:\Jiří Kovář.docx
[16/03/2013 - 17:42:32 | N | 123613] E:\Justýna Hejnová- absolutorium.docx
[16/03/2013 - 20:01:42 | N | 125403] E:\Justýna Hejnová.docx
[12/12/2011 - 18:02:28 | N | 609028] E:\katerina pribylova.docx
[09/08/2012 - 21:14:40 | N | 22435] E:\kupni-smlouva_Obcan_i_Obchod-zakonik.docx
[05/12/2011 - 13:41:43 | N | 44032] E:\kupni_smlouva_auto.doc
[05/11/2009 - 11:39:11 | N | 4260149248] E:\Lord Of The Rings Battle For Middle Earth [DVD Multilenguaje].iso
[26/03/2012 - 18:58:10 | N | 255227] E:\lucie pribilova - podniková ekonomie.docx
[09/05/2011 - 21:26:44 | N | 217600] E:\Nezamestnanost-seminarka.doc
[02/05/2011 - 21:38:12 | N | 101057] E:\nezaměstnanost - Zuzka.docx
[25/02/2013 - 11:49:31 | D ] E:\Nokia N8 Záloha , karta
[25/02/2013 - 11:41:53 | D ] E:\nokia N96
[17/10/2010 - 16:05:05 | N | 833904] E:\Obraz0298.jpg
[14/07/2010 - 21:34:48 | N | 692977664] E:\office_2010_cz_x86.iso
[25/02/2013 - 11:39:28 | D ] E:\pavel poslední zvonění video
[05/03/2013 - 10:50:26 | D ] E:\posledni pisnicky do auta 2013
[25/02/2013 - 11:51:37 | D ] E:\posledni zvoneni
[13/05/2013 - 14:57:55 | D ] E:\pujčky
[03/12/2012 - 15:26:40 | N | 14536] E:\Rad bych cestoval napříč časem.docx
[15/08/2013 - 23:22:01 | SHD ] E:\RECYCLER
[25/01/2012 - 12:33:14 | N | 21181] E:\Smlouva o půjčce- D.docx
[05/12/2011 - 13:35:15 | N | 18994] E:\Smlouva o půjčce.docx
[25/11/2011 - 20:15:19 | N | 50176] E:\Smlouva_o_smlouve_budouci_kupni.doc
[05/03/2012 - 13:52:10 | SHD ] E:\System Volume Information
[28/01/2013 - 21:10:27 | D ] E:\telefon
[05/04/2013 - 14:59:04 | ASH | 136192] E:\Thumbs.db
[29/01/2012 - 15:39:58 | N | 13932] E:\Vzor směnky vlastní.docx
[08/03/2013 - 12:08:00 | N | 48154] E:\Vývoj ekonomických ukazatelů malých a středních podniků.docx
[07/12/2010 - 11:16:04 | N | 81920] E:\winscard.dll
[01/02/2013 - 20:55:40 | D ] E:\Záloha N8 - Nokia Ovy Suite
[28/01/2012 - 17:10:15 | N | 162] E:\~$louva o půjčce- D.docx
[28/05/2011 - 16:46:13 | N | 162] E:\~$otazky.docx
[21/11/2011 - 20:31:14 | N | 162] E:\~$tulní strana.docx
[20/02/2011 - 21:43:47 | N | 182994] E:\Česká Národní banka.docx
[21/02/2011 - 20:14:22 | N | 15022] E:\ČNB je ústřední.docx
[05/04/2013 - 14:59:04 | D ] E:\škola
[20/03/2013 - 19:01:40 | N | 28672] E:\životopis Jiří Kovář.doc
[15/08/2013 - 22:59:08 | D ] G:\guitar hero
################## | Vaccin |
C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
################## | E.O.F |
############################## | UsbFix V 7.096 | [Deletion]
User: Honza (Administrator) # HONZIK
Updated 15/08/2012 by El Desaparecido
Started at 23:10:50 | 15/08/2013
Website: http://eldesaparecido.com
Forum: http://forum.eldesaparecido.com
Suspicious file ? : http://eldesaparecido.com/upload.php
Contact: contact@eldesaparecido.com
PC: TOSHIBA (QOSMIO F750) (x64-based PC) # Notebook
CPU: Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz (2001)
RAM -> [Total : 8165 | Free : 5439]
BIOS: Default System BIOS
BOOT: Normal boot
OS: Microsoft Windows 7 Home Premium (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 9.10.9200.16635
SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: Microsoft Security Essentials [(!) Disabled | Updated]
FW: Windows FireWall Service [Enabled]
C:\ (%systemdrive%) -> Fixed drive # 450 Gb (152 Mb free - 34%) [Mistní Disk] # NTFS
D:\ -> CD-ROM
E:\ -> Fixed drive # 596 Gb (3 Mb free - 1%) [A-DATA SH93] # NTFS
F:\ -> CD-ROM
G:\ -> Removable drive # 7 Gb (7 Mb free - 89%) [KINGSTON] # FAT32
################## | Active Processes |
C:\windows\system32\csrss.exe (560)
C:\windows\system32\wininit.exe (636)
C:\windows\system32\csrss.exe (660)
C:\windows\system32\services.exe (704)
C:\windows\system32\lsass.exe (724)
C:\windows\system32\lsm.exe (732)
C:\windows\system32\svchost.exe (832)
C:\windows\system32\nvvsvc.exe (892)
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (916)
C:\windows\system32\svchost.exe (960)
c:\Program Files\Microsoft Security Client\MsMpEng.exe (152)
C:\windows\system32\winlogon.exe (212)
C:\windows\System32\svchost.exe (1156)
C:\windows\System32\svchost.exe (1188)
C:\windows\system32\svchost.exe (1236)
C:\windows\system32\svchost.exe (1268)
C:\windows\system32\svchost.exe (1368)
C:\windows\system32\svchost.exe (1456)
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1540)
C:\windows\system32\nvvsvc.exe (1552)
C:\windows\system32\WLANExt.exe (1624)
C:\windows\system32\conhost.exe (1656)
C:\windows\System32\spoolsv.exe (1984)
C:\windows\system32\svchost.exe (2016)
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (1636)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1800)
C:\windows\system32\taskhost.exe (2064)
C:\windows\system32\Dwm.exe (2148)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2228)
C:\windows\system32\taskeng.exe (2240)
C:\Program Files\Bonjour\mDNSResponder.exe (2360)
C:\windows\system32\svchost.exe (2388)
c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (2496)
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (2516)
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (2532)
C:\windows\system32\svchost.exe (2688)
C:\TeamViewer\Version8\TeamViewer_Service.exe (2836)
C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe (2972)
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3016)
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (2344)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (2464)
C:\Program Files\TOSHIBA\TECO\Teco.exe (2304)
C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe (3080)
C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe (3136)
C:\Program Files\Microsoft Security Client\msseces.exe (3216)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe (3260)
C:\Program Files (x86)\3D Screen Activator\3DScreenActivator.exe (3308)
C:\QIP 2012\qip.exe (3344)
C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (3400)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (3488)
C:\windows\system32\TODDSrv.exe (3796)
C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (3864)
c:\Program Files (x86)\Common Files\Ulead Systems\UDSS\UDSS.exe (3956)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (4064)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (3408)
C:\Program Files\TOSHIBA\TECO\TecoService.exe (3364)
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (4284)
C:\windows\system32\wbem\wmiprvse.exe (4556)
C:\windows\system32\SearchIndexer.exe (4656)
C:\windows\system32\svchost.exe (4756)
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (4984)
C:\Program Files\Windows Media Player\wmpnetwk.exe (4884)
C:\windows\system32\taskeng.exe (5464)
C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe (5660)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe (5900)
C:\Program Files\TOSHIBA\HDMICtrlMan\HCMSoundChanger.exe (6108)
C:\windows\System32\svchost.exe (5420)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5756)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5372)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5136)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5140)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6176)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6260)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6508)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6708)
C:\windows\system32\DllHost.exe (6812)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6996)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (7108)
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (792)
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (3512)
C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (2888)
C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (3268)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe (1716)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe (4812)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (4960)
C:\Program Files (x86)\Nero\Update\NASvc.exe (3176)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (5836)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4320)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (800)
C:\Users\Honza\Downloads\SRDownloader.exe (5736)
C:\uTorrent\uTorrent.exe (2904)
C:\windows\Explorer.exe (1408)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (980)
C:\windows\System32\WUDFHost.exe (848)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (2340)
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (1712)
C:\UsbFix\Go.exe (3524)
C:\windows\system32\wbem\wmiprvse.exe (5948)
################## | Stopped processes |
Stopped! C:\windows\system32\nvvsvc.exe (892)
Stopped! C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (916)
Stopped! c:\Program Files\Microsoft Security Client\MsMpEng.exe (152)
Stopped! C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1540)
Stopped! C:\windows\system32\nvvsvc.exe (1552)
Stopped! C:\windows\system32\WLANExt.exe (1624)
Stopped! C:\windows\system32\conhost.exe (1656)
Stopped! C:\windows\System32\spoolsv.exe (1984)
Stopped! C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (1636)
Stopped! C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1800)
Stopped! C:\windows\system32\taskhost.exe (2064)
Stopped! C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2228)
Stopped! C:\windows\system32\taskeng.exe (2240)
Stopped! C:\Program Files\Bonjour\mDNSResponder.exe (2360)
Stopped! c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (2496)
Stopped! C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (2516)
Stopped! C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (2532)
Stopped! C:\TeamViewer\Version8\TeamViewer_Service.exe (2836)
Stopped! C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe (2972)
Stopped! C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3016)
Stopped! C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (2344)
Stopped! C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (2464)
Stopped! C:\Program Files\TOSHIBA\TECO\Teco.exe (2304)
Stopped! C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe (3080)
Stopped! C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe (3136)
Stopped! C:\Program Files\Microsoft Security Client\msseces.exe (3216)
Stopped! C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe (3260)
Stopped! C:\Program Files (x86)\3D Screen Activator\3DScreenActivator.exe (3308)
Stopped! C:\QIP 2012\qip.exe (3344)
Stopped! C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (3400)
Stopped! C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (3488)
Stopped! C:\windows\system32\TODDSrv.exe (3796)
Stopped! C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (3864)
Stopped! c:\Program Files (x86)\Common Files\Ulead Systems\UDSS\UDSS.exe (3956)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (4064)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (3408)
Stopped! C:\Program Files\TOSHIBA\TECO\TecoService.exe (3364)
Stopped! C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (4284)
Stopped! C:\windows\system32\SearchIndexer.exe (4656)
Stopped! C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (4984)
Stopped! C:\Program Files\Windows Media Player\wmpnetwk.exe (4884)
Stopped! C:\windows\system32\taskeng.exe (5464)
Stopped! C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe (5660)
Stopped! C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe (5900)
Stopped! C:\Program Files\TOSHIBA\HDMICtrlMan\HCMSoundChanger.exe (6108)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5756)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5372)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5136)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5140)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6176)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6260)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6508)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6708)
Stopped! C:\windows\system32\DllHost.exe (6812)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6996)
Stopped! C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (7108)
Stopped! C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (792)
Stopped! C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (3512)
Stopped! C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (2888)
Stopped! C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (3268)
Stopped! C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe (1716)
Stopped! C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe (4812)
Stopped! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (4960)
Stopped! C:\Program Files (x86)\Nero\Update\NASvc.exe (3176)
Stopped! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (5836)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4320)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (800)
Stopped! C:\Users\Honza\Downloads\SRDownloader.exe (5736)
Stopped! C:\uTorrent\uTorrent.exe (2904)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (980)
Stopped! C:\windows\System32\WUDFHost.exe (848)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (2340)
Stopped! C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (1712)
################## | Files # Infected Folders |
Deleted ! C:\$RECYCLE.BIN\S-1-5-21-848119732-1025168802-1888411094-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1027572414-461053484-3470823533-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1198523880-493338664-3484616589-1006
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1603263534-4123973739-1215464569-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1618685428-4234376038-1486753998-1002
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1837590218-388872322-2637703823-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2033176242-382779935-1051457620-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2189909185-1201780795-404979967-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2189909185-1201780795-404979967-1005
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2189909185-1201780795-404979967-1006
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2556512683-1843415394-4231807322-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2798851076-3444965877-394427697-1000
Not deleted ! E:\$RECYCLE.BIN\S-1-5-21-3131828729-177145836-1696843606-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3146623157-3172578467-3289556724-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3185675988-3791750401-1536689858-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3899235270-1548223001-2818566445-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3916115188-3696534609-684656669-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3955028297-3072554108-3866661899-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3964080168-4140967078-3502735735-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3975933187-3799888390-2765331379-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-499407762-2334625425-658448664-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-848119732-1025168802-1888411094-1001
Deleted ! E:\Recycler\S-1-5-21-1614895754-1644491937-842925246-1003
Deleted ! E:\Recycler\S-1-5-21-1715567821-1035525444-682003330-1004
Not deleted ! E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx
Not deleted ! E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665
(!) Temporary files deleted.
################## | Registry |
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
################## | Mountpoints2 |
################## | Listing |
[15/08/2013 - 23:21:26 | SHD ] C:\$RECYCLE.BIN
[01/08/2013 - 18:23:12 | N | 1174] C:\AdwCleaner[R1].txt
[01/08/2013 - 19:10:36 | N | 1306] C:\AdwCleaner[S1].txt
[01/08/2013 - 22:07:19 | N | 921] C:\AdwCleaner[S2].txt
[19/06/2013 - 23:33:04 | D ] C:\Audacity
[06/09/2011 - 01:28:44 | D ] C:\Boot
[21/11/2010 - 05:23:51 | RASH | 383786] C:\bootmgr
[06/09/2011 - 01:28:47 | N | 8192] C:\BOOTSECT.BAK
[16/05/2013 - 10:44:56 | D ] C:\Burn4Free
[04/06/2013 - 16:48:11 | N | 47] C:\chid
[04/08/2013 - 22:18:07 | N | 21221] C:\ComboFix.txt
[21/04/2013 - 22:42:00 | D ] C:\DAEMON Tools Lite
[14/07/2009 - 07:08:56 | SHD ] C:\Documents and Settings
[27/06/2013 - 19:28:29 | D ] C:\Electronic Arts
[28/05/2013 - 11:22:53 | D ] C:\FlatOut2
[15/08/2013 - 19:40:17 | ASH | 6421549056] C:\hiberfil.sys
[12/04/2013 - 21:07:57 | D ] C:\ICQ
[15/04/2013 - 22:52:46 | D ] C:\JCreatorV4LE
[07/07/2013 - 21:57:23 | D ] C:\Left 4 Dead 2
[05/08/2013 - 15:25:35 | D ] C:\Mafia II
[23/05/2013 - 22:40:32 | D ] C:\Microsoft Office
[14/07/2013 - 09:23:25 | D ] C:\MSD
[23/05/2013 - 22:37:34 | RHD ] C:\MSOCache
[12/05/2013 - 13:34:58 | D ] C:\Need for Speed Underground 2
[24/05/2013 - 10:26:16 | D ] C:\NVIDIA
[15/08/2013 - 19:40:21 | ASH | 8562069504] C:\pagefile.sys
[08/08/2013 - 16:19:36 | D ] C:\Program Files
[08/08/2013 - 16:22:12 | D ] C:\Program Files (x86)
[01/08/2013 - 19:10:26 | D ] C:\ProgramData
[18/05/2013 - 21:27:34 | D ] C:\PSPad editor
[19/04/2013 - 08:31:08 | D ] C:\QIP 2012
[04/08/2013 - 22:18:10 | D ] C:\Qoobox
[15/08/2013 - 13:20:13 | D ] C:\SpeedFan
[15/08/2013 - 23:20:34 | SHD ] C:\System Volume Information
[03/05/2013 - 19:48:02 | D ] C:\TeamViewer
[08/08/2013 - 16:20:55 | D ] C:\The Battle for Middle-earth (tm)
[08/08/2013 - 16:20:18 | D ] C:\The Incredible Adventures of Van Helsing
[12/04/2013 - 20:24:12 | D ] C:\Toshiba
[14/06/2013 - 00:57:42 | D ] C:\totalcmd
[18/04/2013 - 09:24:07 | D ] C:\TotalMedia 3.5
[15/08/2013 - 23:22:01 | D ] C:\UsbFix
[15/08/2013 - 23:10:47 | A | 16288] C:\UsbFix.txt
[06/08/2011 - 00:03:51 | D ] C:\Users
[17/04/2013 - 12:08:41 | D ] C:\uTorrent
[09/08/2013 - 21:12:59 | D ] C:\Windows
[05/07/2011 - 11:21:37 | D ] E:\$AVG
[15/08/2013 - 23:12:26 | SHD ] E:\$RECYCLE.BIN
[16/06/2010 - 17:09:44 | N | 721913] E:\16062010109.jpg
[16/06/2010 - 18:11:28 | N | 882823] E:\16062010110.jpg
[16/06/2010 - 18:15:30 | N | 726930] E:\16062010111.jpg
[16/06/2010 - 18:15:48 | N | 764539] E:\16062010112.jpg
[16/06/2010 - 18:16:06 | N | 701719] E:\16062010113.jpg
[17/09/2011 - 19:02:22 | N | 47278318] E:\17092011015.mp4
[26/01/2011 - 10:41:30 | D ] E:\6957741178471d00bd75
[30/06/2013 - 13:01:58 | D ] E:\absolutorium
[07/03/2013 - 11:40:36 | D ] E:\auta
[27/03/2011 - 20:32:08 | N | 134627] E:\Bankovnictví.docx
[09/11/2011 - 14:37:59 | D ] E:\bratislav
[01/07/2013 - 15:39:28 | D ] E:\brigada ampluservis
[26/07/2005 - 11:32:19 | N | 363915] E:\Chorvatsko 2005 149.jpg
[26/07/2005 - 11:32:56 | N | 441401] E:\Chorvatsko 2005 243.jpg
[13/02/2013 - 22:55:13 | N | 14951] E:\citaty s knihy FORBES.docx
[08/07/2013 - 09:57:33 | D ] E:\cv
[12/11/2011 - 15:43:33 | D ] E:\f1c6c60f3c8c1419cae4
[20/07/2013 - 12:12:33 | D ] E:\Filmy
[11/04/2013 - 18:21:18 | D ] E:\fotky
[27/02/2013 - 11:32:42 | D ] E:\fotky fotak
[25/02/2013 - 11:52:28 | D ] E:\fotky stodolni
[01/02/2013 - 17:19:40 | N | 1124477] E:\fotky_3_1.jpg
[30/05/2013 - 15:07:06 | D ] E:\Iphone 4
[01/07/2013 - 15:34:27 | D ] E:\jirik
[09/12/2010 - 08:48:38 | D ] E:\Jirka maturita
[19/12/2010 - 20:05:08 | N | 208449] E:\Jiří Kovář.docx
[16/03/2013 - 17:42:32 | N | 123613] E:\Justýna Hejnová- absolutorium.docx
[16/03/2013 - 20:01:42 | N | 125403] E:\Justýna Hejnová.docx
[12/12/2011 - 18:02:28 | N | 609028] E:\katerina pribylova.docx
[09/08/2012 - 21:14:40 | N | 22435] E:\kupni-smlouva_Obcan_i_Obchod-zakonik.docx
[05/12/2011 - 13:41:43 | N | 44032] E:\kupni_smlouva_auto.doc
[05/11/2009 - 11:39:11 | N | 4260149248] E:\Lord Of The Rings Battle For Middle Earth [DVD Multilenguaje].iso
[26/03/2012 - 18:58:10 | N | 255227] E:\lucie pribilova - podniková ekonomie.docx
[09/05/2011 - 21:26:44 | N | 217600] E:\Nezamestnanost-seminarka.doc
[02/05/2011 - 21:38:12 | N | 101057] E:\nezaměstnanost - Zuzka.docx
[25/02/2013 - 11:49:31 | D ] E:\Nokia N8 Záloha , karta
[25/02/2013 - 11:41:53 | D ] E:\nokia N96
[17/10/2010 - 16:05:05 | N | 833904] E:\Obraz0298.jpg
[14/07/2010 - 21:34:48 | N | 692977664] E:\office_2010_cz_x86.iso
[25/02/2013 - 11:39:28 | D ] E:\pavel poslední zvonění video
[05/03/2013 - 10:50:26 | D ] E:\posledni pisnicky do auta 2013
[25/02/2013 - 11:51:37 | D ] E:\posledni zvoneni
[13/05/2013 - 14:57:55 | D ] E:\pujčky
[03/12/2012 - 15:26:40 | N | 14536] E:\Rad bych cestoval napříč časem.docx
[15/08/2013 - 23:22:01 | SHD ] E:\RECYCLER
[25/01/2012 - 12:33:14 | N | 21181] E:\Smlouva o půjčce- D.docx
[05/12/2011 - 13:35:15 | N | 18994] E:\Smlouva o půjčce.docx
[25/11/2011 - 20:15:19 | N | 50176] E:\Smlouva_o_smlouve_budouci_kupni.doc
[05/03/2012 - 13:52:10 | SHD ] E:\System Volume Information
[28/01/2013 - 21:10:27 | D ] E:\telefon
[05/04/2013 - 14:59:04 | ASH | 136192] E:\Thumbs.db
[29/01/2012 - 15:39:58 | N | 13932] E:\Vzor směnky vlastní.docx
[08/03/2013 - 12:08:00 | N | 48154] E:\Vývoj ekonomických ukazatelů malých a středních podniků.docx
[07/12/2010 - 11:16:04 | N | 81920] E:\winscard.dll
[01/02/2013 - 20:55:40 | D ] E:\Záloha N8 - Nokia Ovy Suite
[28/01/2012 - 17:10:15 | N | 162] E:\~$louva o půjčce- D.docx
[28/05/2011 - 16:46:13 | N | 162] E:\~$otazky.docx
[21/11/2011 - 20:31:14 | N | 162] E:\~$tulní strana.docx
[20/02/2011 - 21:43:47 | N | 182994] E:\Česká Národní banka.docx
[21/02/2011 - 20:14:22 | N | 15022] E:\ČNB je ústřední.docx
[05/04/2013 - 14:59:04 | D ] E:\škola
[20/03/2013 - 19:01:40 | N | 28672] E:\životopis Jiří Kovář.doc
[15/08/2013 - 22:59:08 | D ] G:\guitar hero
################## | Vaccin |
C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
################## | E.O.F |

Přispějete na provoz fóra?