přípony .ink na flešce

[Hynek88]

Dobrý den,

při ukládání na flešku se všechny soubory jeví jako zástupci -- a ve vlastnostech je cesta C:\windows\system32\cmd.exe/minecraft... a jeste naky znaky k tomu ---

tady je log z rsitu, ještě sem to projel mbam

děkuji



Logfile of random's system information tool 1.10 (written by random/random)
Run by Krejcarová at 2016-02-28 18:38:32
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 72 GB (36%) free of 200 GB
Total RAM: 3326 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:38:37, on 28.2.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18163)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\KONICA MINOLTA\magicolor 1680MF\LinkMagic for magicolor 1680MF\lmmc1680.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\system32\GWX\GWX.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\taskeng.exe
C:\Users\Krejcarová\Desktop\RSIT.exe
C:\Program Files\trend micro\Krejcarová.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
R3 - URLSearchHook: IsoBuster Toolbar - {266fcdca-7bb3-4da7-b3bf-f845dea2ebd6} - C:\Program Files\IsoBuster\prxtbIsoB.dll
R3 - URLSearchHook: Ashampoo_US Toolbar - {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - C:\Users\Krejcarová\AppData\LocalLow\CT2481032\ldrtbAsha.dll
O2 - BHO: Ashampoo_US Toolbar - {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - C:\Users\Krejcarová\AppData\LocalLow\CT2481032\ldrtbAsha.dll
O2 - BHO: IsoBuster - {266fcdca-7bb3-4da7-b3bf-f845dea2ebd6} - C:\Program Files\IsoBuster\prxtbIsoB.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: IsoBuster Toolbar - {266fcdca-7bb3-4da7-b3bf-f845dea2ebd6} - C:\Program Files\IsoBuster\prxtbIsoB.dll
O3 - Toolbar: Ashampoo_US Toolbar - {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - C:\Users\Krejcarová\AppData\LocalLow\CT2481032\ldrtbAsha.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKCU\..\Run: [LinkMagic for magicolor 1680MF] C:\Program Files\KONICA MINOLTA\magicolor 1680MF\LinkMagic for magicolor 1680MF\lmmc1680.exe -startup
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [Xvid] C:\Program Files\Xvid\CheckUpdate.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MBAMScheduler - Malwarebytes - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: PinnacleUpdate Service (PinnacleUpdateSvc) - PowerUp Software, LLC - C:\Program Files\PowerUp Software\Pinnacle Game Profiler\pinnacle_updater.exe

--
End of file - 6913 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job - C:\Windows\TEMP\{9463480A-DC94-459C-9B2F-BE203C4A2E39}.exe --uninstall=1
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Krejcarová\AppData\Roaming\Mozilla\Firefox\Profiles\hj7r9pw2.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{dc572301-7619-498c-a57d-39143191b318}:0.3.8.5, {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.1.12, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6, {B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.25, fileserve@fileserve.com:2.9, {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}:6.0.18, jqs@sun.com:1.0, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:3.9.0.3, gencrawler@some.com:2.0, {3713a489-0634-4472-8456-dc7abd7eba00}:1.3.1, {3926fb20-4bea-11de-8a39-0800200c9a66}:3.6.1, {241aae70-0022-11de-87af-0800200c9a66}:3.6.30.01.10, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6, nasanightlaunch@example.com:0.6.20110419"
prefs.js - "keyword.URL" - "http://www15.yoog.com/search.php?q="

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Krejcarová\AppData\Roaming\Mozilla\Firefox\Profiles\hj7r9pw2.default\extensions\
cs@dictionaries.addons.mozilla.org
{1018e4d6-728f-4b20-ad56-37578a4de76b}
{1018e4d6-728f-4b20-ad56-37578a4de76b}(2)
{1018e4d6-728f-4b20-ad56-37578a4de76b}(3)
{2bae58c2-79f9-45d1-a286-81f911301c3a}(2)
{3713a489-0634-4472-8456-dc7abd7eba00}
{3926fb20-4bea-11de-8a39-0800200c9a66}
{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}(2)
{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}(3)
{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}-trash
{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}(2)
{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}(3)

C:\Users\Krejcarová\AppData\Roaming\Mozilla\Firefox\Profiles\hj7r9pw2.default\searchplugins\
hledn-na-irecepti.xml
imdb.xml
mapycz.xml
movie-library.xml
opensubtitles.xml
sfd.xml
uloto.xml
vyhledvn-vide-ve-slub-youtube.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{124d001a-bdcb-472f-aa59-bbe7e4bc3204}]
Ashampoo_US Toolbar - C:\Users\Krejcarová\AppData\LocalLow\CT2481032\ldrtbAsha.dll [2013-01-07 620440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{266fcdca-7bb3-4da7-b3bf-f845dea2ebd6}]
IsoBuster Toolbar - C:\Program Files\IsoBuster\prxtbIsoB.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2015-01-17 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2015-01-17 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
{266fcdca-7bb3-4da7-b3bf-f845dea2ebd6} - IsoBuster Toolbar - C:\Program Files\IsoBuster\prxtbIsoB.dll [2011-05-09 176936]
{124d001a-bdcb-472f-aa59-bbe7e4bc3204} - Ashampoo_US Toolbar - C:\Users\Krejcarová\AppData\LocalLow\CT2481032\ldrtbAsha.dll [2013-01-07 620440]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-03-09 336384]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"WheelMouse"=C:\Program Files\A4Tech\Mouse\Amoumain.exe [2008-03-06 241664]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"LinkMagic for magicolor 1680MF"=C:\Program Files\KONICA MINOLTA\magicolor 1680MF\LinkMagic for magicolor 1680MF\lmmc1680.exe [2009-04-06 5005312]
"ISUSPM"=C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2006-03-20 213936]
"Xvid"=C:\Program Files\Xvid\CheckUpdate.exe [2011-01-17 8192]

C:\Users\Krejcarová\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=l3codecp.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
"VIDC.FFDS"=ff_vfw.dll
"vidc.tscc"=C:\PROGRA~1\MpcStar\Codecs\tscc\tsccvid.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-02-28 18:26:01 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2016-02-28 18:25:51 ----A---- C:\Windows\system32\drivers\mwac.sys
2016-02-28 18:25:51 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2016-02-28 18:25:51 ----A---- C:\Windows\system32\drivers\mbam.sys
2016-02-28 18:25:50 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2016-02-28 18:19:27 ----D---- C:\Users\Krejcarová\AppData\Roaming\Malwarebytes
2016-02-26 19:24:32 ----D---- C:\Program Files\trend micro
2016-02-26 19:24:31 ----D---- C:\rsit
2016-02-26 09:56:37 ----D---- C:\Malwarebytes Anti-Malware

======List of files/folders modified in the last 1 month======

2016-02-28 18:37:56 ----D---- C:\Windows\Temp
2016-02-28 18:33:38 ----D---- C:\Windows\system32\drivers
2016-02-28 18:33:38 ----D---- C:\Windows\Cursors
2016-02-28 18:33:04 ----D---- C:\Windows\system32\catroot
2016-02-28 18:32:53 ----A---- C:\Windows\wincmd.ini
2016-02-28 18:25:50 ----RD---- C:\Program Files
2016-02-28 18:21:39 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2016-02-28 18:19:42 ----D---- C:\Windows\Prefetch
2016-02-28 18:03:42 ----D---- C:\Windows\winsxs
2016-02-28 17:49:16 ----D---- C:\Windows\System32
2016-02-28 17:49:16 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-02-28 17:49:15 ----D---- C:\Windows\inf
2016-02-28 17:47:12 ----D---- C:\Windows\system32\config
2016-02-28 17:44:06 ----A---- C:\Windows\system32\zlib.dll
2016-02-26 20:26:50 ----SHD---- C:\Windows\Installer
2016-02-26 20:12:30 ----D---- C:\Windows\Tasks
2016-02-26 20:12:30 ----D---- C:\Windows\system32\wfp
2016-02-26 20:12:30 ----D---- C:\Program Files\Internet Explorer
2016-02-26 20:12:27 ----D---- C:\Windows\system32\wbem
2016-02-26 20:12:27 ----D---- C:\Windows
2016-02-26 20:10:18 ----SD---- C:\Windows\system32\GWX
2016-02-26 20:10:18 ----SD---- C:\Windows\system32\CompatTel
2016-02-26 20:10:18 ----D---- C:\Windows\system32\en-US
2016-02-26 20:10:18 ----D---- C:\Windows\system32\DriverStore
2016-02-26 20:10:18 ----D---- C:\Windows\system32\drivers\etc
2016-02-26 20:10:18 ----D---- C:\Windows\system32\cs-CZ
2016-02-26 20:10:18 ----D---- C:\Windows\system32\catroot2
2016-02-26 20:10:18 ----D---- C:\Windows\system32\appraiser
2016-02-26 20:10:18 ----D---- C:\Windows\rescache
2016-02-26 20:10:18 ----D---- C:\Windows\cs-CZ
2016-02-26 20:10:18 ----D---- C:\Windows\AppPatch
2016-02-26 20:10:18 ----D---- C:\Program Files\Windows Journal
2016-02-26 20:10:15 ----D---- C:\Windows\system32\CodeIntegrity
2016-02-26 20:09:31 ----D---- C:\Program Files\SpeedFan
2016-02-26 20:09:31 ----D---- C:\Program Files\IsoBuster
2016-02-26 20:09:31 ----D---- C:\Program Files\Common Files\microsoft shared
2016-02-26 20:09:31 ----D---- C:\Program Files\CCleaner
2016-02-26 20:09:03 ----D---- C:\Windows\registration
2016-02-26 20:07:53 ----D---- C:\Windows\Microsoft.NET
2016-02-26 20:07:46 ----RSD---- C:\Windows\assembly
2016-02-26 20:04:59 ----D---- C:\ProgramData\MFAData
2016-02-26 20:01:24 ----SHD---- C:\System Volume Information
2016-02-26 19:02:06 ----D---- C:\Windows\debug
2016-02-26 17:37:02 ----D---- C:\Program Files\Conduit
2016-02-26 17:37:01 ----D---- C:\ProgramData\APN
2016-02-25 15:59:13 ----D---- C:\ProgramData\boost_interprocess
2016-02-10 17:01:52 ----D---- C:\Windows\system32\MRT
2016-02-10 15:18:11 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2016-02-10 15:18:10 ----A---- C:\Windows\system32\FlashPlayerInstaller.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2012-12-29 24184]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 amdiox86;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox86.sys [2010-02-18 37944]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-03-09 7770624]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-03-09 242176]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2011-02-24 100328]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2011-02-24 308200]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2010-11-17 101392]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2015-10-05 23256]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2016-02-28 170200]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2015-10-05 51928]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-07-17 13216]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2011-03-21 362600]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 AODDriver4.0;AODDriver4.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\drivers\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-13 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-03-09 176128]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-03-09 294400]
R2 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-11 45744]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [2015-10-05 1135416]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-10-05 1513784]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-07-20 935208]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2016-01-24 144200]
S2 PinnacleUpdateSvc;PinnacleUpdate Service; C:\Program Files\PowerUp Software\Pinnacle Game Profiler\pinnacle_updater.exe [2011-05-09 430080]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-10 269504]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2016-01-24 144200]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-12-12 102912]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 NetMsmqActivator;Adaptér naslouchání Net.Msmq; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S3 NetPipeActivator;Adaptér naslouchání Net.Pipe; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S3 NetTcpActivator;Adaptér naslouchání Net.Tcp; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-02-27 1343400]

-----------------EOF-----------------

[Rudy]

Zdravím!
Flešku připojte a pusťte na ni USBFix: http://forum.viry.cz/viewtopic.php?f=24&t=140144 .

[Hynek88]

tak tady je log

############################## | UsbFix V 7.181 | [Clean]

User: Krejcarová (Administrator) # KREJCAROVÁ-PC
Updated 31/08/2014 by El Desaparecido - SosVirus
Started at 19:17:53 | 28/02/2016

Website : http://www.en.usbfix.net/
Changelog : http://www.en.usbfix.net/changelog/
Support : http://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.en.usbfix.net/contact/

################## | System information |

MB: ASUSTeK Computer INC. (M5A78L-M/USB3)
CPU: AMD Athlon(tm) II X4 640 Processor
RAM -> [Total : 3326 Mo | Free : 2229 Mo]
Bios: American Megatrends Inc.
Boot: Normal boot

OS: Microsoft™ Windows 7 Home Premium (6.1.7601 32-Bit) Service Pack 1
WB: Internet Explorer : 11.00.9600.16428
WB: Google Chrome : 48.0.2564.116
WB: Mozilla Firefox : 10.0.2

################## | Security Information |

AS: Windows Defender [(!) Disabled |Updated]
AS: Malwarebytes Anti-Malware : 2.2.0.1024
FW: Windows Firewall [Enabled]
SC: Security Center [Enabled]
WU: Windows Update [Enabled]

################## | Disk Information |

C:\ (%SystemDrive%) -> Fixed disk # 195 Gb (71 Gb free - 36%) [] # NTFS
D:\ -> Fixed disk # 270 Gb (270 Gb free - 100%) [] # NTFS
F:\ -> Removable disk # 2 Gb (2 Gb free - 84%) [KINGSTON] # FAT
G:\ -> Removable disk # 15 Gb (15 Gb free - 100%) [ADATA UFD] # FAT32

################## | Generic Research |

Deleted! F:\Minecraft 1 8 by TeamExtremeMc.vbs
Deleted! G:\Minecraft 1 8 by TeamExtremeMc.vbs
Deleted! F:\index.lnk
Deleted! F:\ Škoda.lnk
Deleted! F:\AutoMapa.lnk
Deleted! F:\Sýkora koňadra.lnk
Deleted! F:\svatebni_pochod.lnk
Deleted! F:\super cesta OK.lnk
Deleted! F:\RevolutionaryHONDAMotors_cz.lnk
Deleted! F:\Puštík bělavý.lnk
Deleted! F:\výfuk 1,2tl 4ks.lnk
Deleted! F:\Jawa 90 Trail.lnk
Deleted! F:\Ptáci našich vod 1.lnk
Deleted! F:\Ptáci našich vod 2.lnk
Deleted! F:\Moto Chouzavá.lnk
Deleted! F:\Ptáci našich měst a vesnic 1.lnk
Deleted! F:\Ptáci našich hor a zimní hosté.lnk
Deleted! F:\Ptáci našich měst a vesnic 2.lnk
Deleted! F:\Ptáci našich polí a luk 1.lnk
Deleted! F:\Ptáci našich polí a luk 2.lnk
Deleted! F:\Ptáci našich lesů 1.lnk
Deleted! F:\Ptáci našich lesů 2.lnk
Deleted! F:\pták.lnk
Deleted! F:\1029.lnk
Deleted! F:\13 Hýl obecný.lnk
Deleted! F:\13 Hýl obecný 1.lnk
Deleted! F:\1059.lnk
Deleted! F:\bbb.lnk
Deleted! F:\bbb1.lnk
Deleted! F:\241.lnk
Deleted! F:\Čáp_černý.lnk
Deleted! F:\1280px-Ciconia_ciconia_-_01.lnk
Deleted! G:\super cesta.lnk
Deleted! G:\super cesta OK.lnk
Deleted! G:\ptáci.lnk
Deleted! G:\index.lnk

(!) Temporary files deleted. (30.326865196228 MB)

################## | Registry |


################## | Regedit Run |

F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [LinkMagic for magicolor 1680MF] C:\Program Files\KONICA MINOLTA\magicolor 1680MF\LinkMagic for magicolor 1680MF\lmmc1680.exe -startup
04 - HKCU\..\Run : [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
04 - HKCU\..\Run : [Xvid] C:\Program Files\Xvid\CheckUpdate.exe
04 - HKLM\..\Run : [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
04 - HKLM\..\Run : [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
04 - HKLM\..\Run : [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-3873575144-2197926087-3466645383-1000\..\Run : [LinkMagic for magicolor 1680MF] C:\Program Files\KONICA MINOLTA\magicolor 1680MF\LinkMagic for magicolor 1680MF\lmmc1680.exe -startup
04 - HKU\S-1-5-21-3873575144-2197926087-3466645383-1000\..\Run : [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
04 - HKU\S-1-5-21-3873575144-2197926087-3466645383-1000\..\Run : [Xvid] C:\Program Files\Xvid\CheckUpdate.exe
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe

################## | UsbFix - Information |

Info : How to remove shortcut virus on flash disk (Video)
Info : Shortcut virus on flash disk, What is it ?

################## | Hijack |

Restored! [N] F:\Sýkora koňadra.docx
Restored! [D] F:\Jawa 90 Trail
Restored! [N] F:\svatebni_pochod.mp3
Restored! [N] F:\super cesta OK.xls
Restored! [D] F:\ Škoda
Restored! [N] F:\index.php.jpg
Restored! [N] F:\RevolutionaryHONDAMotors_cz.pps
Restored! [N] F:\Puštík bělavý.docx
Restored! [D] F:\Ptáci našich vod 1
Restored! [N] F:\1029.JPG
Restored! [N] F:\výfuk 1,2tl 4ks.DXF
Restored! [D] F:\Ptáci našich vod 2
Restored! [D] F:\Moto Chouzavá
Restored! [D] F:\Ptáci našich měst a vesnic 1
Restored! [N] F:\pták.php
Restored! [D] F:\Ptáci našich hor a zimní hosté
Restored! [D] F:\Ptáci našich měst a vesnic 2
Restored! [D] F:\Ptáci našich polí a luk 1
Restored! [D] F:\Ptáci našich polí a luk 2
Restored! [D] F:\Ptáci našich lesů 1
Restored! [D] F:\Ptáci našich lesů 2
Restored! [N] F:\13 Hýl obecný.jpg
Restored! [N] F:\13 Hýl obecný 1.jpg
Restored! [N] F:\1059.JPG
Restored! [D] F:\bbb
Restored! [D] F:\bbb1
Restored! [N] F:\241.JPG
Restored! [N] F:\Čáp_černý.JPG
Restored! [N] F:\1280px-Ciconia_ciconia_-_01.jpg
Restored! [N] G:\super cesta.xls
Restored! [D] G:\ptáci
Restored! [N] G:\index.php
Restored! [N] G:\super cesta OK.xls

################## | C:\ %SystemDrive% - Fixed drive (NTFS) |

[10/06/2009 - 22:42:20 | A | 0 Ko] - C:\config.sys
[28/02/2016 - 18:37:30 | ASH | 2554504 Ko] - C:\hiberfil.sys
[28/02/2016 - 18:37:33 | ASH | 3406008 Ko] - C:\pagefile.sys
[09/01/2011 - 12:10:14 | A | 429261 Ko] - C:\setup_panzer_general_2.exe
[16/11/2011 - 10:11:12 | SHD] - C:\$Recycle.Bin
[10/06/2009 - 22:42:20 | A | 0 Ko] - C:\autoexec.bat
[18/08/2015 - 13:52:34 | D] - C:\$Windows.~BT
[14/07/2009 - 03:37:05 | D] - C:\PerfLogs
[14/07/2009 - 05:53:55 | SHD] - C:\Documents and Settings
[16/11/2011 - 10:09:12 | SHD] - C:\Recovery
[16/11/2011 - 13:14:54 | D] - C:\totalcmd
[16/11/2011 - 13:17:01 | RHD] - C:\MSOCache
[14/01/2013 - 11:26:16 | A | 0 Ko] - C:\END
[15/07/2014 - 08:11:16 | HD] - C:\ProgramData
[26/11/2015 - 19:17:18 | RD] - C:\Users
[26/02/2016 - 19:24:40 | D] - C:\rsit
[26/02/2016 - 20:01:24 | SHD] - C:\System Volume Information
[26/02/2016 - 20:12:27 | D] - C:\Windows
[26/02/2016 - 20:12:30 | D] - C:\Malwarebytes Anti-Malware
[28/02/2016 - 18:25:50 | RD] - C:\Program Files
[28/02/2016 - 19:17:47 | D] - C:\UsbFix

################## | D:\ - Fixed drive (NTFS) |

[01/01/2015 - 15:43:14 | A | 2124 Ko] - [VirusTotal - (0/55)] - D:\instsf450.exe
[16/11/2011 - 10:11:12 | SHD] - D:\$RECYCLE.BIN
[16/11/2011 - 10:03:50 | SHD] - D:\System Volume Information
[14/01/2013 - 11:22:41 | D] - D:\STAHOVANE SOUBORY
[25/06/2014 - 17:56:50 | RD] - D:\Documents

################## | F:\ - Removable drive (FAT) |

[29/08/2015 - 22:35:54 | N | 2597 Ko] - F:\super cesta OK.xls
[03/04/2009 - 09:08:28 | N | 176 Ko] - F:\RevolutionaryHONDAMotors_cz.pps
[25/02/2016 - 17:47:50 | N | 145 Ko] - F:\pták.php
[02/08/2015 - 15:17:52 | N | 6789 Ko] - F:\svatebni_pochod.mp3
[24/05/2014 - 18:17:26 | N | 4380 Ko] - F:\241.JPG
[04/11/2014 - 15:09:48 | N | 4114 Ko] - F:\1059.JPG
[09/10/2015 - 13:03:00 | N | 4251 Ko] - F:\1029.JPG
[25/02/2016 - 15:50:10 | N | 223 Ko] - F:\index.php.jpg
[25/02/2016 - 16:20:34 | N | 223 Ko] - F:\13 Hýl obecný.jpg
[25/02/2016 - 17:12:02 | N | 145 Ko] - F:\13 Hýl obecný 1.jpg
[26/02/2016 - 19:04:20 | N | 57 Ko] - F:\Čáp_černý.JPG
[26/02/2016 - 19:15:18 | N | 76 Ko] - F:\1280px-Ciconia_ciconia_-_01.jpg
[13/03/2014 - 12:45:02 | N | 47 Ko] - F:\výfuk 1,2tl 4ks.DXF
[16/02/2016 - 17:33:18 | N | 21499 Ko] - F:\Sýkora koňadra.docx
[18/02/2016 - 20:46:00 | N | 30785 Ko] - F:\Puštík bělavý.docx
[23/11/2011 - 20:13:30 | D] - F:\Jawa 90 Trail
[15/02/2015 - 08:46:00 | D] - F:\Moto Chouzavá
[16/02/2016 - 17:41:08 | D] - F:\ Škoda
[18/02/2016 - 11:47:54 | D] - F:\Ptáci našich vod 1
[18/02/2016 - 15:26:10 | D] - F:\Ptáci našich vod 2
[18/02/2016 - 18:41:32 | D] - F:\Ptáci našich hor a zimní hosté
[19/02/2016 - 13:43:16 | D] - F:\Ptáci našich měst a vesnic 1
[19/02/2016 - 16:53:08 | D] - F:\Ptáci našich měst a vesnic 2
[20/02/2016 - 16:59:50 | D] - F:\Ptáci našich polí a luk 1
[21/02/2016 - 13:47:24 | D] - F:\Ptáci našich polí a luk 2
[22/02/2016 - 15:33:50 | D] - F:\Ptáci našich lesů 1
[23/02/2016 - 14:54:06 | D] - F:\Ptáci našich lesů 2
[25/02/2016 - 19:14:08 | D] - F:\bbb
[25/02/2016 - 19:16:20 | D] - F:\bbb1

################## | G:\ - Removable drive (FAT32) |

[27/08/2014 - 10:48:42 | N | 2572 Ko] - G:\super cesta.xls
[28/02/2016 - 17:46:46 | N | 2599 Ko] - G:\super cesta OK.xls
[25/02/2016 - 18:02:24 | N | 145 Ko] - G:\index.php
[28/02/2016 - 18:51:22 | A | 3786 Ko] - [VirusTotal - (11/54)] - G:\UsbFix.exe
[25/02/2016 - 16:39:50 | D] - G:\ptáci

################## | Vaccin |

C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)

################## | E.O.F | http://www.sosvirus.net/ | http://www.en.usbfix.net/ |

[Rudy]

Fleška by měla být čistá.

[Hynek88]

tak díky moc!

[Rudy]

Rádo se stalo!