VIRY.CZ

uz musim koncit...zatim dik...kdyby neco tak mrknu na odpoved

Logfile of random's system information tool 1.06 (written by random/random)
Run by Rostislav at 2010-03-05 21:40:07
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 140 GB (92%) free of 153 GB
Total RAM: 1015 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at ...

Gmer v nouzovem rezimu jen zahlasil nejakou modifikaci sytemu a pote se ukoncil bez vytvoreni logu....Zatim je klid soubor se neobjevuje tak to snad tak vydrzi i nadale....mockrat dika za pomoc...kdyby byl problema ozvu se...a jeste jednou dik

soubor RBOMM.bak se zatim neobjevuje

Gmer restnul PC asik to vypada na crash programu nic nedodelal

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
kernel: MBR read successfully
user & kernel MBR OK

Virtualni mechaniky nejsou nainstalovany....v pc je fyzicky jen ctecka karet


STPD? mohu se optat k cemu to slouzi?

ComboFix 10-03-04.06 - Rostislav 05.03.2010 20:40:35.2.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1015.541 [GMT 1:00]
Spuštěný z: c:\documents and settings\Rostislav\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Rostislav\Plocha\CFScript.txt ...

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 20:32 on 05/03/2010 by Rostislav (Administrator - Elevation successful)

========== filefind ==========

Searching for "rbomm.*"
C:\Documents and Settings\Rostislav\Local Settings\temp\rbomm.bak --a--- 24064 bytes [12:00 18/08/2004] [10:56 09 ...

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 20:30 on 05/03/2010 by Rostislav (Administrator - Elevation successful)

========== filefind ==========

Searching for "rbomm.bak"
C:\Documents and Settings\Rostislav\Local Settings\temp\rbomm.bak --a--- 24064 bytes [12:00 18/08/2004] [10:56 ...

soubor ale neni rbomm.exe ale BAK

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 20:23 on 05/03/2010 by Rostislav (Administrator - Elevation successful)

========== filefind ==========

Searching for "rbomm.exe"
No files found.

========== regfind ==========

Searching for "rbomm"
[HKEY_CURRENT_USER\Software\Microsoft ...

1 bod temp clear OK
2 bod malware bytes---program po spusteni spadne
na tretim bodu se pracuje

procesy jsou pokazde jine, jednou skypenames.exe pak to je zas iexplore.exe atd


rbomm.exe na virustotal detekovan pokazde s jinym nazvem a oznaceno jako 54 procentz problem, nicmene nemuze to byt planny poplach? Hlaska od avastu je kazdych 45 sekund ze soubor je presunut do truhly

problem avast hlasi v documents setings/rostislav/local setings/temp/rbomm.bak

soubor vymazu a je ihned zpet