Tworzenie się skrótów na pendrive

[ania137]

############################## | UsbFix V 7.075 | [Research]

User: Ja (Administrator) # JA-KOMPUTER
Updated 20/12/2011 by El Desaparecido
Started at 18:41:06 | 04/06/2014

Website: Dostępne tylko dla zarejestrowanych użytkowników
Suspicious file ? : Dostępne tylko dla zarejestrowanych użytkowników
Contact: contact@eldesaparecido.com

PC: Acer (Extensa 5220 ) (X86-based PC) # Notebook
CPU: Intel(R) Celeron(R) CPU 540 @ 1.86GHz (1862)
RAM -> [ Total : 2038 | Free : 746 ]
BIOS: Ver 1.00PARTTBL
BOOT: Normal boot

OS: Microsoft Windows 7 Ultimate (6.1.7600 32-Bit) #
WB: Windows Internet Explorer 9.0.8112.16421

SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
AV: avast! Internet Security [ Enabled | Updated ]
FW: Windows FireWall Service [ Enabled ]

C:\ (%systemdrive%) -> Fixed drive # 59 Gb (21 Mb free - 35%) [System] # NTFS
D:\ -> Fixed drive # 12 Gb (798 Mb free - 7%) [Narzędzia] # NTFS
E:\ -> Fixed drive # 76 Gb (23 Mb free - 31%) [Dysk lokany] # NTFS
F:\ -> CD-ROM
G:\ -> CD-ROM
H:\ -> Removable drive # 4 Gb (4 Mb free - 100%) [INTENSO] # FAT32

################## | Active Processes |

C:\Windows\system32\csrss.exe (408)
C:\Windows\system32\wininit.exe (460)
C:\Windows\system32\csrss.exe (468)
C:\Windows\system32\services.exe (516)
C:\Windows\system32\winlogon.exe (548)
C:\Windows\system32\lsass.exe (576)
C:\Windows\system32\lsm.exe (584)
C:\Windows\system32\svchost.exe (704)
C:\Program Files\Fingerprint Sensor\AtService.exe (784)
C:\Windows\system32\svchost.exe (808)
C:\Windows\System32\svchost.exe (868)
C:\Windows\System32\svchost.exe (1000)
C:\Windows\system32\svchost.exe (1040)
C:\Windows\system32\svchost.exe (1184)
C:\Program Files\Acer Bio Protection\CompPtcVUI.exe (1308)
C:\Windows\system32\svchost.exe (1324)
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (1428)
C:\Windows\system32\Dwm.exe (1592)
C:\Windows\Explorer.EXE (1612)
C:\Windows\System32\spoolsv.exe (1692)
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (1764)
C:\Program Files\Acer Bio Protection\PdtWzd.exe (1772)
C:\Program Files\Alwil Software\Avast5\AvastUI.exe (1788)
C:\Program Files\Common Files\Java\Java Update\jusched.exe (1812)
C:\Users\Ja\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (1828)
C:\Windows\system32\taskhost.exe (1852)
C:\Windows\system32\svchost.exe (1896)
C:\Users\Ja\AppData\Local\Akamai\netsession_win.exe (1912)
C:\Windows\System32\wscript.exe (1920)
C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (1988)
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (2032)
C:\Users\Ja\AppData\Local\Akamai\netsession_win.exe (416)
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (1364)
C:\Program Files\Acer Bio Protection\BASVC.exe (2068)
C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe (2104)
C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe (2212)
C:\Windows\system32\svchost.exe (2336)
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe (2460)
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (2608)
C:\Windows\system32\wbem\wmiprvse.exe (2856)
C:\Windows\system32\SearchIndexer.exe (2896)
C:\Windows\system32\svchost.exe (2980)
C:\Windows\System32\svchost.exe (3092)
C:\Program Files\Windows Media Player\wmpnetwk.exe (5984)
C:\Windows\System32\svchost.exe (5320)
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (4020)
C:\Windows\system32\WUDFHost.exe (3756)
C:\Program Files\Mozilla Firefox\firefox.exe (5584)
C:\Program Files\Mozilla Firefox\plugin-container.exe (4728)
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe (340)
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe (932)
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe (4900)
C:\UsbFix\UsbFix.exe (4224)

################## | Files # Infected Folders |

Found ! H:\exampl2.lnk
Found ! G:\Setup.exe
Found ! G:\autorun.inf

################## | Registry |


################## | Mountpoints2 |

HKCU\.\.\.\.\Explorer\MountPoints2\{14dcd1a3-0592-11e2-9c67-001d7203fd5e}
Shell\AutoRun\Command = G:\Setup.exe



################## | Vaccin |

(!) This computer is not vaccinated!

################## | E.O.F |

[djarta]

Użyj opcji CLEAN w USBFix.