Zdravím nefunguje mi externí disk, mužu se divat na filmy atd, ale nemužu nic z něj kopírovat, a nejde mí přistup do složek
log z USBFix
############################## | UsbFix V 7.096 | [Research]
User: Honza (Administrator) # HONZIK
Updated 15/08/2012 by El Desaparecido
Started at 22:47:42 | 15/08/2013
Website: http://eldesaparecido.com
Forum: http://forum.eldesaparecido.com
Suspicious file ? : http://eldesaparecido.com/upload.php
Contact: contact@eldesaparecido.com
PC: TOSHIBA (QOSMIO F750) (x64-based PC) # Notebook
CPU: Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz (2001)
RAM -> [Total : 8165 | Free : 5540]
BIOS: Default System BIOS
BOOT: Normal boot
OS: Microsoft Windows 7 Home Premium (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 9.10.9200.16635
SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: Microsoft Security Essentials [(!) Disabled | Updated]
FW: Windows FireWall Service [Enabled]
C:\ (%systemdrive%) -> Fixed drive # 450 Gb (162 Mb free - 36%) [Mistní Disk] # NTFS
D:\ -> CD-ROM
E:\ -> Fixed drive # 596 Gb (3 Mb free - 1%) [A-DATA SH93] # NTFS
F:\ -> CD-ROM
################## | Active Processes |
C:\windows\system32\csrss.exe (560)
C:\windows\system32\wininit.exe (636)
C:\windows\system32\csrss.exe (660)
C:\windows\system32\services.exe (704)
C:\windows\system32\lsass.exe (724)
C:\windows\system32\lsm.exe (732)
C:\windows\system32\svchost.exe (832)
C:\windows\system32\nvvsvc.exe (892)
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (916)
C:\windows\system32\svchost.exe (960)
c:\Program Files\Microsoft Security Client\MsMpEng.exe (152)
C:\windows\system32\winlogon.exe (212)
C:\windows\System32\svchost.exe (1156)
C:\windows\System32\svchost.exe (1188)
C:\windows\system32\svchost.exe (1236)
C:\windows\system32\svchost.exe (1268)
C:\windows\system32\svchost.exe (1368)
C:\windows\system32\svchost.exe (1456)
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1540)
C:\windows\system32\nvvsvc.exe (1552)
C:\windows\system32\WLANExt.exe (1624)
C:\windows\system32\conhost.exe (1656)
C:\windows\System32\spoolsv.exe (1984)
C:\windows\system32\svchost.exe (2016)
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (1636)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1800)
C:\windows\system32\taskhost.exe (2064)
C:\windows\system32\Dwm.exe (2148)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2228)
C:\windows\system32\taskeng.exe (2240)
C:\Program Files\Bonjour\mDNSResponder.exe (2360)
C:\windows\system32\svchost.exe (2388)
c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (2496)
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (2516)
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (2532)
C:\windows\system32\svchost.exe (2688)
C:\TeamViewer\Version8\TeamViewer_Service.exe (2836)
C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe (2972)
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3016)
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (2344)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (2464)
C:\Program Files\TOSHIBA\TECO\Teco.exe (2304)
C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe (3080)
C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe (3136)
C:\Program Files\Microsoft Security Client\msseces.exe (3216)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe (3260)
C:\Program Files (x86)\3D Screen Activator\3DScreenActivator.exe (3308)
C:\QIP 2012\qip.exe (3344)
C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (3400)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (3488)
C:\windows\system32\TODDSrv.exe (3796)
C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (3864)
c:\Program Files (x86)\Common Files\Ulead Systems\UDSS\UDSS.exe (3956)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (4064)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (3408)
C:\Program Files\TOSHIBA\TECO\TecoService.exe (3364)
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (4284)
C:\windows\system32\wbem\wmiprvse.exe (4556)
C:\windows\system32\SearchIndexer.exe (4656)
C:\windows\system32\svchost.exe (4756)
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (4984)
C:\Program Files\Windows Media Player\wmpnetwk.exe (4884)
C:\windows\system32\taskeng.exe (5464)
C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe (5660)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe (5900)
C:\Program Files\TOSHIBA\HDMICtrlMan\HCMSoundChanger.exe (6108)
C:\windows\System32\svchost.exe (5420)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5756)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5372)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5136)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5140)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6176)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6260)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6508)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6708)
C:\windows\system32\DllHost.exe (6812)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6996)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (7108)
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (792)
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (3512)
C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (2888)
C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (3268)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe (1716)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe (4812)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (4960)
C:\Program Files (x86)\Nero\Update\NASvc.exe (3176)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (5836)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4320)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (800)
C:\Users\Honza\Downloads\SRDownloader.exe (5736)
C:\uTorrent\uTorrent.exe (2904)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (3744)
C:\windows\Explorer.exe (1408)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5828)
C:\windows\system32\SearchProtocolHost.exe (5680)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (980)
C:\windows\system32\SearchFilterHost.exe (4472)
C:\UsbFix\Go.exe (5932)
C:\windows\system32\wbem\wmiprvse.exe (5404)
\\?\C:\windows\system32\wbem\WMIADAP.EXE (6856)
################## | Files # Infected Folders |
Found ! E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx
Found ! E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665
################## | Registry |
Found ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Found ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Found ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
################## | Mountpoints2 |
################## | Vaccin |
(!) This computer is not vaccinated!
################## | E.O.F |
Děkuji moc

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Nejde číst a stahovat z ext.disku
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Nejde číst a stahovat z ext.disku
- Přílohy
-
- er.jpg (23.56 KiB) Zobrazeno 555 x
Re: Nejde číst a stahovat z ext.disku
log po odstranění, disk stále nefunguje
############################## | UsbFix V 7.096 | [Deletion]
User: Honza (Administrator) # HONZIK
Updated 15/08/2012 by El Desaparecido
Started at 23:10:50 | 15/08/2013
Website: http://eldesaparecido.com
Forum: http://forum.eldesaparecido.com
Suspicious file ? : http://eldesaparecido.com/upload.php
Contact: contact@eldesaparecido.com
PC: TOSHIBA (QOSMIO F750) (x64-based PC) # Notebook
CPU: Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz (2001)
RAM -> [Total : 8165 | Free : 5439]
BIOS: Default System BIOS
BOOT: Normal boot
OS: Microsoft Windows 7 Home Premium (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 9.10.9200.16635
SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: Microsoft Security Essentials [(!) Disabled | Updated]
FW: Windows FireWall Service [Enabled]
C:\ (%systemdrive%) -> Fixed drive # 450 Gb (152 Mb free - 34%) [Mistní Disk] # NTFS
D:\ -> CD-ROM
E:\ -> Fixed drive # 596 Gb (3 Mb free - 1%) [A-DATA SH93] # NTFS
F:\ -> CD-ROM
G:\ -> Removable drive # 7 Gb (7 Mb free - 89%) [KINGSTON] # FAT32
################## | Active Processes |
C:\windows\system32\csrss.exe (560)
C:\windows\system32\wininit.exe (636)
C:\windows\system32\csrss.exe (660)
C:\windows\system32\services.exe (704)
C:\windows\system32\lsass.exe (724)
C:\windows\system32\lsm.exe (732)
C:\windows\system32\svchost.exe (832)
C:\windows\system32\nvvsvc.exe (892)
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (916)
C:\windows\system32\svchost.exe (960)
c:\Program Files\Microsoft Security Client\MsMpEng.exe (152)
C:\windows\system32\winlogon.exe (212)
C:\windows\System32\svchost.exe (1156)
C:\windows\System32\svchost.exe (1188)
C:\windows\system32\svchost.exe (1236)
C:\windows\system32\svchost.exe (1268)
C:\windows\system32\svchost.exe (1368)
C:\windows\system32\svchost.exe (1456)
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1540)
C:\windows\system32\nvvsvc.exe (1552)
C:\windows\system32\WLANExt.exe (1624)
C:\windows\system32\conhost.exe (1656)
C:\windows\System32\spoolsv.exe (1984)
C:\windows\system32\svchost.exe (2016)
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (1636)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1800)
C:\windows\system32\taskhost.exe (2064)
C:\windows\system32\Dwm.exe (2148)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2228)
C:\windows\system32\taskeng.exe (2240)
C:\Program Files\Bonjour\mDNSResponder.exe (2360)
C:\windows\system32\svchost.exe (2388)
c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (2496)
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (2516)
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (2532)
C:\windows\system32\svchost.exe (2688)
C:\TeamViewer\Version8\TeamViewer_Service.exe (2836)
C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe (2972)
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3016)
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (2344)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (2464)
C:\Program Files\TOSHIBA\TECO\Teco.exe (2304)
C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe (3080)
C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe (3136)
C:\Program Files\Microsoft Security Client\msseces.exe (3216)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe (3260)
C:\Program Files (x86)\3D Screen Activator\3DScreenActivator.exe (3308)
C:\QIP 2012\qip.exe (3344)
C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (3400)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (3488)
C:\windows\system32\TODDSrv.exe (3796)
C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (3864)
c:\Program Files (x86)\Common Files\Ulead Systems\UDSS\UDSS.exe (3956)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (4064)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (3408)
C:\Program Files\TOSHIBA\TECO\TecoService.exe (3364)
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (4284)
C:\windows\system32\wbem\wmiprvse.exe (4556)
C:\windows\system32\SearchIndexer.exe (4656)
C:\windows\system32\svchost.exe (4756)
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (4984)
C:\Program Files\Windows Media Player\wmpnetwk.exe (4884)
C:\windows\system32\taskeng.exe (5464)
C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe (5660)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe (5900)
C:\Program Files\TOSHIBA\HDMICtrlMan\HCMSoundChanger.exe (6108)
C:\windows\System32\svchost.exe (5420)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5756)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5372)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5136)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5140)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6176)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6260)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6508)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6708)
C:\windows\system32\DllHost.exe (6812)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6996)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (7108)
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (792)
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (3512)
C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (2888)
C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (3268)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe (1716)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe (4812)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (4960)
C:\Program Files (x86)\Nero\Update\NASvc.exe (3176)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (5836)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4320)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (800)
C:\Users\Honza\Downloads\SRDownloader.exe (5736)
C:\uTorrent\uTorrent.exe (2904)
C:\windows\Explorer.exe (1408)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (980)
C:\windows\System32\WUDFHost.exe (848)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (2340)
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (1712)
C:\UsbFix\Go.exe (3524)
C:\windows\system32\wbem\wmiprvse.exe (5948)
################## | Stopped processes |
Stopped! C:\windows\system32\nvvsvc.exe (892)
Stopped! C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (916)
Stopped! c:\Program Files\Microsoft Security Client\MsMpEng.exe (152)
Stopped! C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1540)
Stopped! C:\windows\system32\nvvsvc.exe (1552)
Stopped! C:\windows\system32\WLANExt.exe (1624)
Stopped! C:\windows\system32\conhost.exe (1656)
Stopped! C:\windows\System32\spoolsv.exe (1984)
Stopped! C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (1636)
Stopped! C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1800)
Stopped! C:\windows\system32\taskhost.exe (2064)
Stopped! C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2228)
Stopped! C:\windows\system32\taskeng.exe (2240)
Stopped! C:\Program Files\Bonjour\mDNSResponder.exe (2360)
Stopped! c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (2496)
Stopped! C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (2516)
Stopped! C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (2532)
Stopped! C:\TeamViewer\Version8\TeamViewer_Service.exe (2836)
Stopped! C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe (2972)
Stopped! C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3016)
Stopped! C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (2344)
Stopped! C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (2464)
Stopped! C:\Program Files\TOSHIBA\TECO\Teco.exe (2304)
Stopped! C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe (3080)
Stopped! C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe (3136)
Stopped! C:\Program Files\Microsoft Security Client\msseces.exe (3216)
Stopped! C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe (3260)
Stopped! C:\Program Files (x86)\3D Screen Activator\3DScreenActivator.exe (3308)
Stopped! C:\QIP 2012\qip.exe (3344)
Stopped! C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (3400)
Stopped! C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (3488)
Stopped! C:\windows\system32\TODDSrv.exe (3796)
Stopped! C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (3864)
Stopped! c:\Program Files (x86)\Common Files\Ulead Systems\UDSS\UDSS.exe (3956)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (4064)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (3408)
Stopped! C:\Program Files\TOSHIBA\TECO\TecoService.exe (3364)
Stopped! C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (4284)
Stopped! C:\windows\system32\SearchIndexer.exe (4656)
Stopped! C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (4984)
Stopped! C:\Program Files\Windows Media Player\wmpnetwk.exe (4884)
Stopped! C:\windows\system32\taskeng.exe (5464)
Stopped! C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe (5660)
Stopped! C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe (5900)
Stopped! C:\Program Files\TOSHIBA\HDMICtrlMan\HCMSoundChanger.exe (6108)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5756)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5372)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5136)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5140)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6176)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6260)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6508)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6708)
Stopped! C:\windows\system32\DllHost.exe (6812)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6996)
Stopped! C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (7108)
Stopped! C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (792)
Stopped! C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (3512)
Stopped! C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (2888)
Stopped! C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (3268)
Stopped! C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe (1716)
Stopped! C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe (4812)
Stopped! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (4960)
Stopped! C:\Program Files (x86)\Nero\Update\NASvc.exe (3176)
Stopped! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (5836)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4320)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (800)
Stopped! C:\Users\Honza\Downloads\SRDownloader.exe (5736)
Stopped! C:\uTorrent\uTorrent.exe (2904)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (980)
Stopped! C:\windows\System32\WUDFHost.exe (848)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (2340)
Stopped! C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (1712)
################## | Files # Infected Folders |
Deleted ! C:\$RECYCLE.BIN\S-1-5-21-848119732-1025168802-1888411094-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1027572414-461053484-3470823533-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1198523880-493338664-3484616589-1006
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1603263534-4123973739-1215464569-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1618685428-4234376038-1486753998-1002
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1837590218-388872322-2637703823-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2033176242-382779935-1051457620-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2189909185-1201780795-404979967-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2189909185-1201780795-404979967-1005
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2189909185-1201780795-404979967-1006
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2556512683-1843415394-4231807322-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2798851076-3444965877-394427697-1000
Not deleted ! E:\$RECYCLE.BIN\S-1-5-21-3131828729-177145836-1696843606-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3146623157-3172578467-3289556724-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3185675988-3791750401-1536689858-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3899235270-1548223001-2818566445-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3916115188-3696534609-684656669-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3955028297-3072554108-3866661899-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3964080168-4140967078-3502735735-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3975933187-3799888390-2765331379-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-499407762-2334625425-658448664-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-848119732-1025168802-1888411094-1001
Deleted ! E:\Recycler\S-1-5-21-1614895754-1644491937-842925246-1003
Deleted ! E:\Recycler\S-1-5-21-1715567821-1035525444-682003330-1004
Not deleted ! E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx
Not deleted ! E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665
(!) Temporary files deleted.
################## | Registry |
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
################## | Mountpoints2 |
################## | Listing |
[15/08/2013 - 23:21:26 | SHD ] C:\$RECYCLE.BIN
[01/08/2013 - 18:23:12 | N | 1174] C:\AdwCleaner[R1].txt
[01/08/2013 - 19:10:36 | N | 1306] C:\AdwCleaner[S1].txt
[01/08/2013 - 22:07:19 | N | 921] C:\AdwCleaner[S2].txt
[19/06/2013 - 23:33:04 | D ] C:\Audacity
[06/09/2011 - 01:28:44 | D ] C:\Boot
[21/11/2010 - 05:23:51 | RASH | 383786] C:\bootmgr
[06/09/2011 - 01:28:47 | N | 8192] C:\BOOTSECT.BAK
[16/05/2013 - 10:44:56 | D ] C:\Burn4Free
[04/06/2013 - 16:48:11 | N | 47] C:\chid
[04/08/2013 - 22:18:07 | N | 21221] C:\ComboFix.txt
[21/04/2013 - 22:42:00 | D ] C:\DAEMON Tools Lite
[14/07/2009 - 07:08:56 | SHD ] C:\Documents and Settings
[27/06/2013 - 19:28:29 | D ] C:\Electronic Arts
[28/05/2013 - 11:22:53 | D ] C:\FlatOut2
[15/08/2013 - 19:40:17 | ASH | 6421549056] C:\hiberfil.sys
[12/04/2013 - 21:07:57 | D ] C:\ICQ
[15/04/2013 - 22:52:46 | D ] C:\JCreatorV4LE
[07/07/2013 - 21:57:23 | D ] C:\Left 4 Dead 2
[05/08/2013 - 15:25:35 | D ] C:\Mafia II
[23/05/2013 - 22:40:32 | D ] C:\Microsoft Office
[14/07/2013 - 09:23:25 | D ] C:\MSD
[23/05/2013 - 22:37:34 | RHD ] C:\MSOCache
[12/05/2013 - 13:34:58 | D ] C:\Need for Speed Underground 2
[24/05/2013 - 10:26:16 | D ] C:\NVIDIA
[15/08/2013 - 19:40:21 | ASH | 8562069504] C:\pagefile.sys
[08/08/2013 - 16:19:36 | D ] C:\Program Files
[08/08/2013 - 16:22:12 | D ] C:\Program Files (x86)
[01/08/2013 - 19:10:26 | D ] C:\ProgramData
[18/05/2013 - 21:27:34 | D ] C:\PSPad editor
[19/04/2013 - 08:31:08 | D ] C:\QIP 2012
[04/08/2013 - 22:18:10 | D ] C:\Qoobox
[15/08/2013 - 13:20:13 | D ] C:\SpeedFan
[15/08/2013 - 23:20:34 | SHD ] C:\System Volume Information
[03/05/2013 - 19:48:02 | D ] C:\TeamViewer
[08/08/2013 - 16:20:55 | D ] C:\The Battle for Middle-earth (tm)
[08/08/2013 - 16:20:18 | D ] C:\The Incredible Adventures of Van Helsing
[12/04/2013 - 20:24:12 | D ] C:\Toshiba
[14/06/2013 - 00:57:42 | D ] C:\totalcmd
[18/04/2013 - 09:24:07 | D ] C:\TotalMedia 3.5
[15/08/2013 - 23:22:01 | D ] C:\UsbFix
[15/08/2013 - 23:10:47 | A | 16288] C:\UsbFix.txt
[06/08/2011 - 00:03:51 | D ] C:\Users
[17/04/2013 - 12:08:41 | D ] C:\uTorrent
[09/08/2013 - 21:12:59 | D ] C:\Windows
[05/07/2011 - 11:21:37 | D ] E:\$AVG
[15/08/2013 - 23:12:26 | SHD ] E:\$RECYCLE.BIN
[16/06/2010 - 17:09:44 | N | 721913] E:\16062010109.jpg
[16/06/2010 - 18:11:28 | N | 882823] E:\16062010110.jpg
[16/06/2010 - 18:15:30 | N | 726930] E:\16062010111.jpg
[16/06/2010 - 18:15:48 | N | 764539] E:\16062010112.jpg
[16/06/2010 - 18:16:06 | N | 701719] E:\16062010113.jpg
[17/09/2011 - 19:02:22 | N | 47278318] E:\17092011015.mp4
[26/01/2011 - 10:41:30 | D ] E:\6957741178471d00bd75
[30/06/2013 - 13:01:58 | D ] E:\absolutorium
[07/03/2013 - 11:40:36 | D ] E:\auta
[27/03/2011 - 20:32:08 | N | 134627] E:\Bankovnictví.docx
[09/11/2011 - 14:37:59 | D ] E:\bratislav
[01/07/2013 - 15:39:28 | D ] E:\brigada ampluservis
[26/07/2005 - 11:32:19 | N | 363915] E:\Chorvatsko 2005 149.jpg
[26/07/2005 - 11:32:56 | N | 441401] E:\Chorvatsko 2005 243.jpg
[13/02/2013 - 22:55:13 | N | 14951] E:\citaty s knihy FORBES.docx
[08/07/2013 - 09:57:33 | D ] E:\cv
[12/11/2011 - 15:43:33 | D ] E:\f1c6c60f3c8c1419cae4
[20/07/2013 - 12:12:33 | D ] E:\Filmy
[11/04/2013 - 18:21:18 | D ] E:\fotky
[27/02/2013 - 11:32:42 | D ] E:\fotky fotak
[25/02/2013 - 11:52:28 | D ] E:\fotky stodolni
[01/02/2013 - 17:19:40 | N | 1124477] E:\fotky_3_1.jpg
[30/05/2013 - 15:07:06 | D ] E:\Iphone 4
[01/07/2013 - 15:34:27 | D ] E:\jirik
[09/12/2010 - 08:48:38 | D ] E:\Jirka maturita
[19/12/2010 - 20:05:08 | N | 208449] E:\Jiří Kovář.docx
[16/03/2013 - 17:42:32 | N | 123613] E:\Justýna Hejnová- absolutorium.docx
[16/03/2013 - 20:01:42 | N | 125403] E:\Justýna Hejnová.docx
[12/12/2011 - 18:02:28 | N | 609028] E:\katerina pribylova.docx
[09/08/2012 - 21:14:40 | N | 22435] E:\kupni-smlouva_Obcan_i_Obchod-zakonik.docx
[05/12/2011 - 13:41:43 | N | 44032] E:\kupni_smlouva_auto.doc
[05/11/2009 - 11:39:11 | N | 4260149248] E:\Lord Of The Rings Battle For Middle Earth [DVD Multilenguaje].iso
[26/03/2012 - 18:58:10 | N | 255227] E:\lucie pribilova - podniková ekonomie.docx
[09/05/2011 - 21:26:44 | N | 217600] E:\Nezamestnanost-seminarka.doc
[02/05/2011 - 21:38:12 | N | 101057] E:\nezaměstnanost - Zuzka.docx
[25/02/2013 - 11:49:31 | D ] E:\Nokia N8 Záloha , karta
[25/02/2013 - 11:41:53 | D ] E:\nokia N96
[17/10/2010 - 16:05:05 | N | 833904] E:\Obraz0298.jpg
[14/07/2010 - 21:34:48 | N | 692977664] E:\office_2010_cz_x86.iso
[25/02/2013 - 11:39:28 | D ] E:\pavel poslední zvonění video
[05/03/2013 - 10:50:26 | D ] E:\posledni pisnicky do auta 2013
[25/02/2013 - 11:51:37 | D ] E:\posledni zvoneni
[13/05/2013 - 14:57:55 | D ] E:\pujčky
[03/12/2012 - 15:26:40 | N | 14536] E:\Rad bych cestoval napříč časem.docx
[15/08/2013 - 23:22:01 | SHD ] E:\RECYCLER
[25/01/2012 - 12:33:14 | N | 21181] E:\Smlouva o půjčce- D.docx
[05/12/2011 - 13:35:15 | N | 18994] E:\Smlouva o půjčce.docx
[25/11/2011 - 20:15:19 | N | 50176] E:\Smlouva_o_smlouve_budouci_kupni.doc
[05/03/2012 - 13:52:10 | SHD ] E:\System Volume Information
[28/01/2013 - 21:10:27 | D ] E:\telefon
[05/04/2013 - 14:59:04 | ASH | 136192] E:\Thumbs.db
[29/01/2012 - 15:39:58 | N | 13932] E:\Vzor směnky vlastní.docx
[08/03/2013 - 12:08:00 | N | 48154] E:\Vývoj ekonomických ukazatelů malých a středních podniků.docx
[07/12/2010 - 11:16:04 | N | 81920] E:\winscard.dll
[01/02/2013 - 20:55:40 | D ] E:\Záloha N8 - Nokia Ovy Suite
[28/01/2012 - 17:10:15 | N | 162] E:\~$louva o půjčce- D.docx
[28/05/2011 - 16:46:13 | N | 162] E:\~$otazky.docx
[21/11/2011 - 20:31:14 | N | 162] E:\~$tulní strana.docx
[20/02/2011 - 21:43:47 | N | 182994] E:\Česká Národní banka.docx
[21/02/2011 - 20:14:22 | N | 15022] E:\ČNB je ústřední.docx
[05/04/2013 - 14:59:04 | D ] E:\škola
[20/03/2013 - 19:01:40 | N | 28672] E:\životopis Jiří Kovář.doc
[15/08/2013 - 22:59:08 | D ] G:\guitar hero
################## | Vaccin |
C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
################## | E.O.F |
############################## | UsbFix V 7.096 | [Deletion]
User: Honza (Administrator) # HONZIK
Updated 15/08/2012 by El Desaparecido
Started at 23:10:50 | 15/08/2013
Website: http://eldesaparecido.com
Forum: http://forum.eldesaparecido.com
Suspicious file ? : http://eldesaparecido.com/upload.php
Contact: contact@eldesaparecido.com
PC: TOSHIBA (QOSMIO F750) (x64-based PC) # Notebook
CPU: Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz (2001)
RAM -> [Total : 8165 | Free : 5439]
BIOS: Default System BIOS
BOOT: Normal boot
OS: Microsoft Windows 7 Home Premium (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 9.10.9200.16635
SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: Microsoft Security Essentials [(!) Disabled | Updated]
FW: Windows FireWall Service [Enabled]
C:\ (%systemdrive%) -> Fixed drive # 450 Gb (152 Mb free - 34%) [Mistní Disk] # NTFS
D:\ -> CD-ROM
E:\ -> Fixed drive # 596 Gb (3 Mb free - 1%) [A-DATA SH93] # NTFS
F:\ -> CD-ROM
G:\ -> Removable drive # 7 Gb (7 Mb free - 89%) [KINGSTON] # FAT32
################## | Active Processes |
C:\windows\system32\csrss.exe (560)
C:\windows\system32\wininit.exe (636)
C:\windows\system32\csrss.exe (660)
C:\windows\system32\services.exe (704)
C:\windows\system32\lsass.exe (724)
C:\windows\system32\lsm.exe (732)
C:\windows\system32\svchost.exe (832)
C:\windows\system32\nvvsvc.exe (892)
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (916)
C:\windows\system32\svchost.exe (960)
c:\Program Files\Microsoft Security Client\MsMpEng.exe (152)
C:\windows\system32\winlogon.exe (212)
C:\windows\System32\svchost.exe (1156)
C:\windows\System32\svchost.exe (1188)
C:\windows\system32\svchost.exe (1236)
C:\windows\system32\svchost.exe (1268)
C:\windows\system32\svchost.exe (1368)
C:\windows\system32\svchost.exe (1456)
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1540)
C:\windows\system32\nvvsvc.exe (1552)
C:\windows\system32\WLANExt.exe (1624)
C:\windows\system32\conhost.exe (1656)
C:\windows\System32\spoolsv.exe (1984)
C:\windows\system32\svchost.exe (2016)
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (1636)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1800)
C:\windows\system32\taskhost.exe (2064)
C:\windows\system32\Dwm.exe (2148)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2228)
C:\windows\system32\taskeng.exe (2240)
C:\Program Files\Bonjour\mDNSResponder.exe (2360)
C:\windows\system32\svchost.exe (2388)
c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (2496)
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (2516)
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (2532)
C:\windows\system32\svchost.exe (2688)
C:\TeamViewer\Version8\TeamViewer_Service.exe (2836)
C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe (2972)
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3016)
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (2344)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (2464)
C:\Program Files\TOSHIBA\TECO\Teco.exe (2304)
C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe (3080)
C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe (3136)
C:\Program Files\Microsoft Security Client\msseces.exe (3216)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe (3260)
C:\Program Files (x86)\3D Screen Activator\3DScreenActivator.exe (3308)
C:\QIP 2012\qip.exe (3344)
C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (3400)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (3488)
C:\windows\system32\TODDSrv.exe (3796)
C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (3864)
c:\Program Files (x86)\Common Files\Ulead Systems\UDSS\UDSS.exe (3956)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (4064)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (3408)
C:\Program Files\TOSHIBA\TECO\TecoService.exe (3364)
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (4284)
C:\windows\system32\wbem\wmiprvse.exe (4556)
C:\windows\system32\SearchIndexer.exe (4656)
C:\windows\system32\svchost.exe (4756)
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (4984)
C:\Program Files\Windows Media Player\wmpnetwk.exe (4884)
C:\windows\system32\taskeng.exe (5464)
C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe (5660)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe (5900)
C:\Program Files\TOSHIBA\HDMICtrlMan\HCMSoundChanger.exe (6108)
C:\windows\System32\svchost.exe (5420)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5756)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5372)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5136)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5140)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6176)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6260)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6508)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6708)
C:\windows\system32\DllHost.exe (6812)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6996)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (7108)
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (792)
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (3512)
C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (2888)
C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (3268)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe (1716)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe (4812)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (4960)
C:\Program Files (x86)\Nero\Update\NASvc.exe (3176)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (5836)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4320)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (800)
C:\Users\Honza\Downloads\SRDownloader.exe (5736)
C:\uTorrent\uTorrent.exe (2904)
C:\windows\Explorer.exe (1408)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (980)
C:\windows\System32\WUDFHost.exe (848)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (2340)
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (1712)
C:\UsbFix\Go.exe (3524)
C:\windows\system32\wbem\wmiprvse.exe (5948)
################## | Stopped processes |
Stopped! C:\windows\system32\nvvsvc.exe (892)
Stopped! C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (916)
Stopped! c:\Program Files\Microsoft Security Client\MsMpEng.exe (152)
Stopped! C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1540)
Stopped! C:\windows\system32\nvvsvc.exe (1552)
Stopped! C:\windows\system32\WLANExt.exe (1624)
Stopped! C:\windows\system32\conhost.exe (1656)
Stopped! C:\windows\System32\spoolsv.exe (1984)
Stopped! C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (1636)
Stopped! C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1800)
Stopped! C:\windows\system32\taskhost.exe (2064)
Stopped! C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2228)
Stopped! C:\windows\system32\taskeng.exe (2240)
Stopped! C:\Program Files\Bonjour\mDNSResponder.exe (2360)
Stopped! c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (2496)
Stopped! C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (2516)
Stopped! C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (2532)
Stopped! C:\TeamViewer\Version8\TeamViewer_Service.exe (2836)
Stopped! C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe (2972)
Stopped! C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3016)
Stopped! C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (2344)
Stopped! C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (2464)
Stopped! C:\Program Files\TOSHIBA\TECO\Teco.exe (2304)
Stopped! C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe (3080)
Stopped! C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe (3136)
Stopped! C:\Program Files\Microsoft Security Client\msseces.exe (3216)
Stopped! C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe (3260)
Stopped! C:\Program Files (x86)\3D Screen Activator\3DScreenActivator.exe (3308)
Stopped! C:\QIP 2012\qip.exe (3344)
Stopped! C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (3400)
Stopped! C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (3488)
Stopped! C:\windows\system32\TODDSrv.exe (3796)
Stopped! C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (3864)
Stopped! c:\Program Files (x86)\Common Files\Ulead Systems\UDSS\UDSS.exe (3956)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (4064)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (3408)
Stopped! C:\Program Files\TOSHIBA\TECO\TecoService.exe (3364)
Stopped! C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (4284)
Stopped! C:\windows\system32\SearchIndexer.exe (4656)
Stopped! C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (4984)
Stopped! C:\Program Files\Windows Media Player\wmpnetwk.exe (4884)
Stopped! C:\windows\system32\taskeng.exe (5464)
Stopped! C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe (5660)
Stopped! C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe (5900)
Stopped! C:\Program Files\TOSHIBA\HDMICtrlMan\HCMSoundChanger.exe (6108)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5756)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5372)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5136)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5140)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6176)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6260)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6508)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6708)
Stopped! C:\windows\system32\DllHost.exe (6812)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6996)
Stopped! C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (7108)
Stopped! C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (792)
Stopped! C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (3512)
Stopped! C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (2888)
Stopped! C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (3268)
Stopped! C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe (1716)
Stopped! C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe (4812)
Stopped! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (4960)
Stopped! C:\Program Files (x86)\Nero\Update\NASvc.exe (3176)
Stopped! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (5836)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4320)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (800)
Stopped! C:\Users\Honza\Downloads\SRDownloader.exe (5736)
Stopped! C:\uTorrent\uTorrent.exe (2904)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (980)
Stopped! C:\windows\System32\WUDFHost.exe (848)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (2340)
Stopped! C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (1712)
################## | Files # Infected Folders |
Deleted ! C:\$RECYCLE.BIN\S-1-5-21-848119732-1025168802-1888411094-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1027572414-461053484-3470823533-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1198523880-493338664-3484616589-1006
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1603263534-4123973739-1215464569-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1618685428-4234376038-1486753998-1002
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-1837590218-388872322-2637703823-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2033176242-382779935-1051457620-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2189909185-1201780795-404979967-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2189909185-1201780795-404979967-1005
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2189909185-1201780795-404979967-1006
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2556512683-1843415394-4231807322-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-2798851076-3444965877-394427697-1000
Not deleted ! E:\$RECYCLE.BIN\S-1-5-21-3131828729-177145836-1696843606-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3146623157-3172578467-3289556724-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3185675988-3791750401-1536689858-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3899235270-1548223001-2818566445-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3916115188-3696534609-684656669-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3955028297-3072554108-3866661899-1001
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3964080168-4140967078-3502735735-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-3975933187-3799888390-2765331379-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-499407762-2334625425-658448664-1000
Deleted ! E:\$RECYCLE.BIN\S-1-5-21-848119732-1025168802-1888411094-1001
Deleted ! E:\Recycler\S-1-5-21-1614895754-1644491937-842925246-1003
Deleted ! E:\Recycler\S-1-5-21-1715567821-1035525444-682003330-1004
Not deleted ! E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx
Not deleted ! E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665
(!) Temporary files deleted.
################## | Registry |
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
################## | Mountpoints2 |
################## | Listing |
[15/08/2013 - 23:21:26 | SHD ] C:\$RECYCLE.BIN
[01/08/2013 - 18:23:12 | N | 1174] C:\AdwCleaner[R1].txt
[01/08/2013 - 19:10:36 | N | 1306] C:\AdwCleaner[S1].txt
[01/08/2013 - 22:07:19 | N | 921] C:\AdwCleaner[S2].txt
[19/06/2013 - 23:33:04 | D ] C:\Audacity
[06/09/2011 - 01:28:44 | D ] C:\Boot
[21/11/2010 - 05:23:51 | RASH | 383786] C:\bootmgr
[06/09/2011 - 01:28:47 | N | 8192] C:\BOOTSECT.BAK
[16/05/2013 - 10:44:56 | D ] C:\Burn4Free
[04/06/2013 - 16:48:11 | N | 47] C:\chid
[04/08/2013 - 22:18:07 | N | 21221] C:\ComboFix.txt
[21/04/2013 - 22:42:00 | D ] C:\DAEMON Tools Lite
[14/07/2009 - 07:08:56 | SHD ] C:\Documents and Settings
[27/06/2013 - 19:28:29 | D ] C:\Electronic Arts
[28/05/2013 - 11:22:53 | D ] C:\FlatOut2
[15/08/2013 - 19:40:17 | ASH | 6421549056] C:\hiberfil.sys
[12/04/2013 - 21:07:57 | D ] C:\ICQ
[15/04/2013 - 22:52:46 | D ] C:\JCreatorV4LE
[07/07/2013 - 21:57:23 | D ] C:\Left 4 Dead 2
[05/08/2013 - 15:25:35 | D ] C:\Mafia II
[23/05/2013 - 22:40:32 | D ] C:\Microsoft Office
[14/07/2013 - 09:23:25 | D ] C:\MSD
[23/05/2013 - 22:37:34 | RHD ] C:\MSOCache
[12/05/2013 - 13:34:58 | D ] C:\Need for Speed Underground 2
[24/05/2013 - 10:26:16 | D ] C:\NVIDIA
[15/08/2013 - 19:40:21 | ASH | 8562069504] C:\pagefile.sys
[08/08/2013 - 16:19:36 | D ] C:\Program Files
[08/08/2013 - 16:22:12 | D ] C:\Program Files (x86)
[01/08/2013 - 19:10:26 | D ] C:\ProgramData
[18/05/2013 - 21:27:34 | D ] C:\PSPad editor
[19/04/2013 - 08:31:08 | D ] C:\QIP 2012
[04/08/2013 - 22:18:10 | D ] C:\Qoobox
[15/08/2013 - 13:20:13 | D ] C:\SpeedFan
[15/08/2013 - 23:20:34 | SHD ] C:\System Volume Information
[03/05/2013 - 19:48:02 | D ] C:\TeamViewer
[08/08/2013 - 16:20:55 | D ] C:\The Battle for Middle-earth (tm)
[08/08/2013 - 16:20:18 | D ] C:\The Incredible Adventures of Van Helsing
[12/04/2013 - 20:24:12 | D ] C:\Toshiba
[14/06/2013 - 00:57:42 | D ] C:\totalcmd
[18/04/2013 - 09:24:07 | D ] C:\TotalMedia 3.5
[15/08/2013 - 23:22:01 | D ] C:\UsbFix
[15/08/2013 - 23:10:47 | A | 16288] C:\UsbFix.txt
[06/08/2011 - 00:03:51 | D ] C:\Users
[17/04/2013 - 12:08:41 | D ] C:\uTorrent
[09/08/2013 - 21:12:59 | D ] C:\Windows
[05/07/2011 - 11:21:37 | D ] E:\$AVG
[15/08/2013 - 23:12:26 | SHD ] E:\$RECYCLE.BIN
[16/06/2010 - 17:09:44 | N | 721913] E:\16062010109.jpg
[16/06/2010 - 18:11:28 | N | 882823] E:\16062010110.jpg
[16/06/2010 - 18:15:30 | N | 726930] E:\16062010111.jpg
[16/06/2010 - 18:15:48 | N | 764539] E:\16062010112.jpg
[16/06/2010 - 18:16:06 | N | 701719] E:\16062010113.jpg
[17/09/2011 - 19:02:22 | N | 47278318] E:\17092011015.mp4
[26/01/2011 - 10:41:30 | D ] E:\6957741178471d00bd75
[30/06/2013 - 13:01:58 | D ] E:\absolutorium
[07/03/2013 - 11:40:36 | D ] E:\auta
[27/03/2011 - 20:32:08 | N | 134627] E:\Bankovnictví.docx
[09/11/2011 - 14:37:59 | D ] E:\bratislav
[01/07/2013 - 15:39:28 | D ] E:\brigada ampluservis
[26/07/2005 - 11:32:19 | N | 363915] E:\Chorvatsko 2005 149.jpg
[26/07/2005 - 11:32:56 | N | 441401] E:\Chorvatsko 2005 243.jpg
[13/02/2013 - 22:55:13 | N | 14951] E:\citaty s knihy FORBES.docx
[08/07/2013 - 09:57:33 | D ] E:\cv
[12/11/2011 - 15:43:33 | D ] E:\f1c6c60f3c8c1419cae4
[20/07/2013 - 12:12:33 | D ] E:\Filmy
[11/04/2013 - 18:21:18 | D ] E:\fotky
[27/02/2013 - 11:32:42 | D ] E:\fotky fotak
[25/02/2013 - 11:52:28 | D ] E:\fotky stodolni
[01/02/2013 - 17:19:40 | N | 1124477] E:\fotky_3_1.jpg
[30/05/2013 - 15:07:06 | D ] E:\Iphone 4
[01/07/2013 - 15:34:27 | D ] E:\jirik
[09/12/2010 - 08:48:38 | D ] E:\Jirka maturita
[19/12/2010 - 20:05:08 | N | 208449] E:\Jiří Kovář.docx
[16/03/2013 - 17:42:32 | N | 123613] E:\Justýna Hejnová- absolutorium.docx
[16/03/2013 - 20:01:42 | N | 125403] E:\Justýna Hejnová.docx
[12/12/2011 - 18:02:28 | N | 609028] E:\katerina pribylova.docx
[09/08/2012 - 21:14:40 | N | 22435] E:\kupni-smlouva_Obcan_i_Obchod-zakonik.docx
[05/12/2011 - 13:41:43 | N | 44032] E:\kupni_smlouva_auto.doc
[05/11/2009 - 11:39:11 | N | 4260149248] E:\Lord Of The Rings Battle For Middle Earth [DVD Multilenguaje].iso
[26/03/2012 - 18:58:10 | N | 255227] E:\lucie pribilova - podniková ekonomie.docx
[09/05/2011 - 21:26:44 | N | 217600] E:\Nezamestnanost-seminarka.doc
[02/05/2011 - 21:38:12 | N | 101057] E:\nezaměstnanost - Zuzka.docx
[25/02/2013 - 11:49:31 | D ] E:\Nokia N8 Záloha , karta
[25/02/2013 - 11:41:53 | D ] E:\nokia N96
[17/10/2010 - 16:05:05 | N | 833904] E:\Obraz0298.jpg
[14/07/2010 - 21:34:48 | N | 692977664] E:\office_2010_cz_x86.iso
[25/02/2013 - 11:39:28 | D ] E:\pavel poslední zvonění video
[05/03/2013 - 10:50:26 | D ] E:\posledni pisnicky do auta 2013
[25/02/2013 - 11:51:37 | D ] E:\posledni zvoneni
[13/05/2013 - 14:57:55 | D ] E:\pujčky
[03/12/2012 - 15:26:40 | N | 14536] E:\Rad bych cestoval napříč časem.docx
[15/08/2013 - 23:22:01 | SHD ] E:\RECYCLER
[25/01/2012 - 12:33:14 | N | 21181] E:\Smlouva o půjčce- D.docx
[05/12/2011 - 13:35:15 | N | 18994] E:\Smlouva o půjčce.docx
[25/11/2011 - 20:15:19 | N | 50176] E:\Smlouva_o_smlouve_budouci_kupni.doc
[05/03/2012 - 13:52:10 | SHD ] E:\System Volume Information
[28/01/2013 - 21:10:27 | D ] E:\telefon
[05/04/2013 - 14:59:04 | ASH | 136192] E:\Thumbs.db
[29/01/2012 - 15:39:58 | N | 13932] E:\Vzor směnky vlastní.docx
[08/03/2013 - 12:08:00 | N | 48154] E:\Vývoj ekonomických ukazatelů malých a středních podniků.docx
[07/12/2010 - 11:16:04 | N | 81920] E:\winscard.dll
[01/02/2013 - 20:55:40 | D ] E:\Záloha N8 - Nokia Ovy Suite
[28/01/2012 - 17:10:15 | N | 162] E:\~$louva o půjčce- D.docx
[28/05/2011 - 16:46:13 | N | 162] E:\~$otazky.docx
[21/11/2011 - 20:31:14 | N | 162] E:\~$tulní strana.docx
[20/02/2011 - 21:43:47 | N | 182994] E:\Česká Národní banka.docx
[21/02/2011 - 20:14:22 | N | 15022] E:\ČNB je ústřední.docx
[05/04/2013 - 14:59:04 | D ] E:\škola
[20/03/2013 - 19:01:40 | N | 28672] E:\životopis Jiří Kovář.doc
[15/08/2013 - 22:59:08 | D ] G:\guitar hero
################## | Vaccin |
C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
################## | E.O.F |