MCShield ::Anti-Malware Tool:: http://www.mcshield.net/ >>> v 3.0.4.27 / DB: 2014.2.2.1 / Windows Vista <<< 2/8/2014 9:34:32 AM > Drive C: - scan started (OS ~451 GB, NTFS HDD )... => The drive is clean. 2/8/2014 9:34:33 AM > Drive D: - scan started (RECOVERY ~15 GB, NTFS HDD )... >>> D:\autorun.inf > Suspicious > Renamed. (MD5: 8aba234578aff1b6ccb8c245503e03f1) >>> D:\autorun.inf.vir - Malware > Deleted. (14.02.08. 09.34 autorun.inf.vir.516689; MD5: 8aba234578aff1b6ccb8c245503e03f1) >>> D:\Info.exe - Malware > Deleted. (14.02.08. 09.34 Info.exe.637092; MD5: d6434cfa3a1a471a443da9729acfe162) >>> D:\$RECYCLE.BIN\AUTORUN.INF - Malware > Deleted. (14.02.08. 09.34 AUTORUN.INF.400518; MD5: 8aba234578aff1b6ccb8c245503e03f1) >>> D:\$RECYCLE.BIN\Info.exe - Malware > Deleted. (14.02.08. 09.34 Info.exe.733410; MD5: d6434cfa3a1a471a443da9729acfe162) >>> D:\$RECYCLE.BIN\protect.chinese simplified - Malware > Deleted. (14.02.08. 09.34 protect.chinese simplified.593788; MD5: 59f5f8acb01117fd062062ad4c67a27b) >>> D:\$RECYCLE.BIN\protect.chinese traditional - Malware > Deleted. (14.02.08. 09.34 protect.chinese traditional.88354; MD5: b565b2e16e144d8c8d07c5f1163b6a0e) >>> D:\$RECYCLE.BIN\protect.danish - Malware > Deleted. (14.02.08. 09.34 protect.danish.401393; MD5: aec4fbae805458c90d045414cf96a27e) >>> D:\$RECYCLE.BIN\protect.dutch - Malware > Deleted. (14.02.08. 09.34 protect.dutch.724926; MD5: 01a8ba69298881b106649cfce9d908b7) >>> D:\$RECYCLE.BIN\protect.english - Malware > Deleted. (14.02.08. 09.34 protect.english.252860; MD5: 90d7431abf8f7580b7aaf2f68b6cc547) >>> D:\$RECYCLE.BIN\protect.french - Malware > Deleted. (14.02.08. 09.34 protect.french.636437; MD5: 3144d6962dd3c3a28f37abe34aa22cd3) >>> D:\$RECYCLE.BIN\protect.german - Malware > Deleted. (14.02.08. 09.34 protect.german.640034; MD5: 455a8fefbb519d9c1dc5d978adff1711) >>> D:\$RECYCLE.BIN\protect.italian - Malware > Deleted. (14.02.08. 09.34 protect.italian.439362; MD5: 3ff5a05d35833fab706498d46cbfc5a2) >>> D:\$RECYCLE.BIN\protect.japanese - Malware > Deleted. (14.02.08. 09.34 protect.japanese.71070; MD5: cd3a95864e9c8ca1e7737be764f2c170) >>> D:\$RECYCLE.BIN\protect.korean - Malware > Deleted. (14.02.08. 09.34 protect.korean.828810; MD5: 4779e97cbadb54bf24fa3e3891160d5e) >>> D:\$RECYCLE.BIN\protect.norwegian - Malware > Deleted. (14.02.08. 09.34 protect.norwegian.654725; MD5: f1fefc575fa7806864d8e5808d8988e5) >>> D:\$RECYCLE.BIN\protect.portuguese brazilian - Malware > Deleted. (14.02.08. 09.34 protect.portuguese brazilian.54482; MD5: 15664f29b61f4d0be2c83a9edbaa85ad) >>> D:\$RECYCLE.BIN\protect.spanish - Malware > Deleted. (14.02.08. 09.34 protect.spanish.619325; MD5: 4b09a5e3a3709d88b2ab15cd16fbaf74) >>> D:\$RECYCLE.BIN\protect.swedish - Malware > Deleted. (14.02.08. 09.34 protect.swedish.79125; MD5: 717e73cafd7bb172902f27fc6c3f4059) >>> D:\desktop.ini - Malware > Deleted. (14.02.08. 09.34 desktop.ini.994997; MD5: 240a82ae664e6d50503cb41cd72966b4) => Malicious files : 19/19 deleted. ____________________________________________ ::::: Scan duration: 1sec :::::::::::::::::: ____________________________________________ 2/8/2014 9:34:34 AM > Drive F: - scan started (no label ~3893 MB, FAT32 flash drive )... >>> F:\._TeamViewer_Setup_en.exe - Suspicious > Renamed. (MD5: 12ccbd03f68739659c6500d4a5d9ade7) >>> F:\._FRST64.exe - Suspicious > Renamed. (MD5: ab54fb891fc7bf037bdaa88a99933e32) >>> F:\._MCShield-Setup.exe - Suspicious > Renamed. (MD5: eaa70abd043b3ba964d4f07cac8332fa) => Suspicious files : 3/3 renamed. ____________________________________________ ::::: Scan duration: 18sec ::::::::::::::::: ____________________________________________