Oto raport z USBFix
############################## | UsbFix 7.035 | [Deletion]
User: Crespo (Administrator) # SPECIAL-XP []
Updated 05/12/10 by El Desaparecido / C_XX
Started at 14:55:59 | 16/12/2010
Website: http://www.teamxscript.org
Contact: eldesaparecido@teamxscript.org
CPU: Intel® Core2 Duo CPU T7500 @ 2.20GHz
CPU 2: Intel® Core2 Duo CPU T7500 @ 2.20GHz
Microsoft Windows XP Professional (5.1.2600 32-Bit) # Dodatek Service Pack 3
Internet Explorer 7.0.5730.13
Windows Firewall: Enabled
Antivirus: avast! antivirus 4.8.1368 [VPS 101216-0] 4.8.1368 [Enabled | Updated]
RAM -> 2047 Mb
C:\ (%systemdrive%) -> Fixed drive # 29 Gb (22 Mb free - 74%) [] # FAT32
D:\ -> Fixed drive # 161 Gb (49 Mb free - 31%) [] # NTFS
E:\ -> Fixed drive # 108 Gb (47 Mb free - 44%) [] # NTFS
F:\ -> CD-ROM
G:\ -> CD-ROM
H:\ -> Removable drive # 2 Gb (2 Mb free - 82%) [] # FAT
################## | Files # Infected Folders |
Deleted ! D:$RECYCLE.BIN\S-1-5-21-2688499256-2879086580-3728478377-1000
Deleted ! D:\Recycler\S-1-5-21-1343024091-2146964659-1801674531-1003
Deleted ! D:\Recycler\S-1-5-21-1343024091-854245398-1801674531-1003
Deleted ! D:\Recycler\S-1-5-21-220523388-1606980848-1801674531-1003
Deleted ! D:\Recycler\S-1-5-21-725345543-179605362-1801674531-1003
Deleted ! E:$RECYCLE.BIN\S-1-5-21-2688499256-2879086580-3728478377-1000
Deleted ! E:\Recycler\S-1-5-21-1343024091-2146964659-1801674531-1003
Deleted ! E:\Recycler\S-1-5-21-1343024091-854245398-1801674531-1003
Deleted ! E:\Recycler\S-1-5-21-220523388-1606980848-1801674531-1003
Deleted ! E:\Recycler\S-1-5-21-725345543-179605362-1801674531-1003
Not deleted ! G:\autorun.inf
################## | Registry |
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
################## | Mountpoints2 |
################## | Listing |
[16/12/2010 - 14:21:52 | ASH | 2145386496] C:\pagefile.sys
[10/03/2010 - 20:38:08 | D] C:\WINDOWS
[08/11/2010 - 16:22:06 | D] C:\FOUND.000
[21/07/2001 - 22:13:54 | N | 4952] C:\Bootfont.bin
[13/04/2008 - 22:02:00 | N | 251152] C:\ntldr
[13/04/2008 - 20:13:04 | N | 47564] C:\NTDETECT.COM
[15/12/2010 - 13:03:44 | N | 471] C:\boot.ini
[10/03/2010 - 20:43:12 | D] C:\Documents and Settings
[10/03/2010 - 20:51:38 | D] C:\Program Files
[10/03/2010 - 20:52:26 | N | 0] C:\CONFIG.SYS
[10/03/2010 - 20:52:26 | N | 0] C:\AUTOEXEC.BAT
[10/03/2010 - 20:52:26 | N | 0] C:\IO.SYS
[10/03/2010 - 20:52:26 | N | 0] C:\MSDOS.SYS
[05/12/2010 - 12:58:48 | D] C:\FOUND.001
[15/12/2010 - 13:03:42 | D] C:\cmdcons
[03/08/2004 - 23:00:14 | N | 262400] C:\cmldr
[10/03/2010 - 21:03:36 | SHD] C:\System Volume Information
[15/12/2010 - 12:58:58 | D] C:\Qoobox
[16/12/2010 - 14:24:54 | N | 13422] C:\ComboFix.txt
[23/10/2010 - 14:04:04 | N | 355] C:\Boot.bak
[16/12/2010 - 14:55:42 | D] C:\UsbFix
[16/12/2010 - 11:28:52 | D] C:\FOUND.002
[16/12/2010 - 14:55:42 | N | 1969] C:\UsbFix.txt
[10/03/2010 - 21:09:00 | D] C:\Intel
[10/03/2010 - 21:18:36 | N | 516] C:\RHDSetup.log
[16/12/2010 - 14:58:04 | SHD] C:\Recycled
[18/03/2010 - 14:55:04 | D] C:\Team17
[14/04/2010 - 23:00:50 | D] C:\Boot
[14/07/2009 - 02:39:00 | RASH | 383562] C:\bootmgr
[14/04/2010 - 23:00:52 | N | 512] C:\BOOTSECT.BAK
[14/04/2010 - 23:14:48 | N | 171136] C:\W7LDR
[04/05/2010 - 21:44:46 | D] C:\TP link
[14/04/2010 - 22:15:12 | D] D:$RECYCLE.BIN
[15/12/2010 - 13:24:32 | D] D:\dokumenty
[03/09/2010 - 09:47:46 | N | 127382] D:\file.pdf
[05/12/2010 - 16:53:51 | D] D:\Filmy
[03/12/2010 - 09:19:40 | D] D:\Kamil bednarek
[15/08/2010 - 22:51:40 | N | 1397140] D:\lf-8.pdf
[19/12/2009 - 22:34:29 | D] D:\M P M II-2009-Full game + mod-RiP]
[20/09/2010 - 04:17:32 | D] D:\muza sabiny
[15/08/2010 - 12:47:57 | D] D:\Nowy folder (2)
[29/11/2010 - 21:30:04 | D] D:\Program Files
[16/12/2010 - 14:58:02 | SHD] D:\RECYCLER
[10/03/2010 - 12:40:16 | SHD] D:\System Volume Information
[28/11/2010 - 20:03:16 | D] D:\The.Punisher.PL
[14/04/2010 - 22:15:12 | D] E:$Recycle.Bin
[28/11/2010 - 18:39:18 | D] E:\D
[14/07/2009 - 06:08:56 | D] E:\Documents and Settings
[25/11/2010 - 21:28:18 | D] E:\Gry
[15/12/2010 - 14:35:10 | ASH | 1609949184] E:\hiberfil.sys
[14/04/2010 - 23:44:09 | D] E:\Intel
[04/11/2010 - 10:02:39 | D] E:\konio muza
[06/09/2010 - 20:10:51 | RD] E:\MSOCache
[28/11/2010 - 18:29:29 | D] E:\muzyka
[15/12/2010 - 14:35:15 | N | 2146603008] E:\pagefile.sys
[14/07/2009 - 04:20:08 | D] E:\PerfLogs
[06/09/2010 - 20:13:10 | D] E:\Program Files
[06/09/2010 - 20:16:05 | D] E:\Program Files (x86)
[06/09/2010 - 20:12:23 | D] E:\ProgramData
[15/12/2010 - 14:18:04 | D] E:\programy
[14/04/2010 - 22:13:57 | D] E:\Recovery
[16/12/2010 - 14:58:02 | SHD] E:\RECYCLER
[28/10/2010 - 18:57:19 | SHD] E:\System Volume Information
[14/04/2010 - 22:14:53 | D] E:\Users
[08/09/2010 - 20:04:23 | D] E:\Windows
[04/11/2010 - 12:03:58 | D] E:\Zdięcia
[04/11/2005 - 07:26:02 | R | 1091256] G:\00000000.256
[04/11/2005 - 07:26:03 | R | 2048] G:\00000001.TMP
[04/11/2005 - 07:26:03 | R | 317440] G:\00000002.TMP
[04/11/2005 - 07:05:28 | R | 612595273] G:\0compressed.zip
[04/11/2005 - 07:24:50 | RD] G:\AutoRun
[04/11/2005 - 06:52:23 | R | 729088] G:\AutoRun.exe
[14/10/2005 - 09:02:16 | R | 585728] G:\AutoRunGUI.dll
[04/11/2005 - 07:25:50 | R | 1266565] G:\DIAG.EXE
[04/11/2005 - 07:24:54 | RD] G:\DirectX
[18/10/2005 - 09:00:58 | R | 2366] G:\NFSMW_icon.ico
[04/11/2005 - 07:24:55 | RD] G:\Support
[04/11/2005 - 07:22:30 | R | 160] G:\autorun.inf
[03/10/2005 - 23:25:19 | R | 130] G:\bin.dat
[04/11/2005 - 07:22:34 | R | 252] G:\common_filelist.txt
[04/11/2005 - 06:52:23 | R | 344064] G:\eauninstall.exe
[27/10/2005 - 00:44:26 | R | 40960] G:\safemode_inst.exe
[03/10/2005 - 23:25:19 | R | 1462] G:\server.cfg
[21/10/2005 - 02:30:38 | R | 380928] G:\server.dll
[29/10/2005 - 00:21:47 | R | 40960] G:\shell_inst.exe
[04/11/2005 - 06:43:48 | R | 7250800] G:\speed.exe
################## | Vaccin |
C:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
D:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
E:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
G:\Autorun.inf -> Folder created by Panda USB Vaccine
################## | Upload |
Please send the file: C:\UsbFix_Upload_Me_SPECIAL-XP.zip
http://www.teamxscript.org/Upload.php
Thank you for your contribution.
################## | E.O.F |
wirusy nadal są wykrywane przez antywirusy. Dodam może że pendrive-a dziewczyna dostała w urzędzie miasta od jakiegoś stowarzyszenia. Może pen ma jakąś blokadę zapisu