- USBNoRisk 2.5 (26 July 2009) by bobby
- Started at 3/21/2010 12:15:43 PM
- Searching for connected USB Mass storage...
- ----------------------------------------
- ========================================
- Searching for other storage...
- ----------------------------------------
- C: {b24c4562-4f04-11de-9e38-806d6172696f}
- D: {b24c4563-4f04-11de-9e38-806d6172696f}
- ========================================
- Scanning fixed storage...
- ----------------------------------------
- No blocked files found on C:
- No Autorun.inf files found on C:
- No mountpoint found for C:
- No mountpoint found for b24c4562-4f04-11de-9e38-806d6172696f
- No Desktop.ini files found on C:
- ----------------------------------------
- No blocked files found on D:
- No Autorun.inf files found on D:
- No mountpoint found for D:
- No mountpoint found for b24c4563-4f04-11de-9e38-806d6172696f
- No Desktop.ini files found on D:
- ----------------------------------------
- ========================================
- Initial scan finished!
- ========================================
- [b]New device connected at[/b] 3/21/2010 12:16:04 PM
- Scanning for connected USB mass storage...
- ----------------------------------------
- H: {6d6ee6e4-acec-11de-b18d-00186811054d}
- Added H:
- ========================================
- Scanning USB mass storage for files...
- ----------------------------------------
- Blocked file found: H:\autorun.inf.blocked
- ----------------------------------------
- Content of H:\autorun.inf.blocked
- ----------------------------------------
- [autorun
- @pornic
- open=SAVEST///cista.exe
- #djkadjkasDJasDKJasdkl
- action=Open folder to view files using Windows Explorer
- :1232ko3k
- $MJ4k
- icon=%SystemRoot%\system32\SHELL32.dll,4
- !ksdkjfasifkas
- Shell\open\command=SAVEST///cista.exe
- ^jkasdjaskldjasldjaskl
- shell\open\command=SAVEST///cista.exe
- &dfasjfasfkwfwfk
- USEAUTOPLAY=1
- %asfkjawjifikWQFjFijw
- ----------------------------------------
- Files referenced from H:\autorun.inf.blocked
- ----------------------------------------
- None
- ----------------------------------------
- ----------------------------------------
- autorun.inf found on H:
- ----------------------------------------
- File H:\autorun.inf renamed successfully
- Content of H:\autorun(1).inf.blocked
- ----------------------------------------
- [autorun
- @pornic
- open=SAVEST///cista.exe
- #djkadjkasDJasDKJasdkl
- action=Open folder to view files using Windows Explorer
- :1232ko3k
- $MJ4k
- icon=%SystemRoot%\system32\SHELL32.dll,4
- !ksdkjfasifkas
- Shell\open\command=SAVEST///cista.exe
- ^jkasdjaskldjasldjaskl
- shell\open\command=SAVEST///cista.exe
- &dfasjfasfkwfwfk
- USEAUTOPLAY=1
- %asfkjawjifikWQFjFijw
- ----------------------------------------
- Files referenced from H:\autorun(1).inf.blocked
- ----------------------------------------
- None
- ----------------------------------------
- No mountpoint found for 6d6ee6e4-acec-11de-b18d-00186811054d
- ----------------------------------------
- ----------------------------------------
- Desktop.ini found at H:\SAVEST\ contains interesting CLSID string
- ----------------------------------------
- [.ShellClassInfo]
- CLSID={645FF040-5081-101B-9F08-00AA002F954E}
- ----------------------------------------
- HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},InfoTip = @%SystemRoot%\system32\SHELL32.dll,-22915
- HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},IntroText = @%SystemRoot%\system32\SHELL32.dll,-31748
- HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},LocalizedString = @%SystemRoot%\system32\SHELL32.dll,-8964
- HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,@ = %SystemRoot%\System32\shell32.dll,31
- HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Empty = %SystemRoot%\System32\shell32.dll,31
- HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Full = %SystemRoot%\System32\shell32.dll,32
- HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32,@ = shell32.dll
- HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},InfoTip = @%SystemRoot%\system32\SHELL32.dll,-22915
- HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},IntroText = @%SystemRoot%\system32\SHELL32.dll,-31748
- HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},LocalizedString = @%SystemRoot%\system32\SHELL32.dll,-8964
- HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,@ = %SystemRoot%\System32\shell32.dll,31
- HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Empty = %SystemRoot%\System32\shell32.dll,31
- HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Full = %SystemRoot%\System32\shell32.dll,32
- HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32,@ = shell32.dll
- ----------------------------------------
- No mimics found on drive H:
- ========================================
- Processing script
- ----------------------------------------
- 6d6ee6e4-acec-11de-b18d-00186811054d
- Drive letter for GUID: H:
- SectionStart = 0
- SectionEnd = 2
- ----------------------------------------
- Delete folder tree H:\SAVEST:
- ----------------------------------------
- File lock detected:
- USBNoRisk cannot find what locked the file
- Delete: H:\SAVEST\cista.exe > Error!
- Delete: H:\SAVEST\Desktop.ini > Done!
- Delete: H:\SAVEST > Error!
- Delete: H:\SAVEST > Error!
- ----------------------------------------
- Deleting blocked files:
- ----------------------------------------
- Delete: H:\autorun.inf.blocked > Done!
- Delete: H:\autorun(1).inf.blocked > Done!
- ----------------------------------------
- ========================================
- Removed H:
- ========================================
- [b]New device connected at[/b] 3/21/2010 12:43:22 PM
- Scanning for connected USB mass storage...
- ----------------------------------------
- H: {6d6ee6e4-acec-11de-b18d-00186811054d}
- Added H:
- ========================================
- Scanning USB mass storage for files...
- ----------------------------------------
- No blocked files found on H:
- ----------------------------------------
- No Autorun.inf files found on H:
- No mountpoint found for 6d6ee6e4-acec-11de-b18d-00186811054d
- ----------------------------------------
- No Desktop.ini files found on H:
- ----------------------------------------
- No mimics found on drive H:
- ========================================
- Processing script
- ----------------------------------------
- 6d6ee6e4-acec-11de-b18d-00186811054d
- Drive letter for GUID: H:
- SectionStart = 0
- SectionEnd = 2
- ----------------------------------------
- Delete folder tree H:\SAVEST:
- ----------------------------------------
- File lock detected:
- USBNoRisk cannot find what locked the file
- Delete: H:\SAVEST\cista.exe > Error!
- Delete: H:\SAVEST > Error!
- Delete: H:\SAVEST > Error!
- ----------------------------------------
- Deleting blocked files:
- ----------------------------------------
- None
- ----------------------------------------
- ========================================
- Scan finished!
- ========================================
