VIRY.CZ

Tak pc sa reštartoval, som v normálnom režime a security tool už nevyskakuje. Tu je log:

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Administrator.LUDOVIT-6BNJGFO ...

Logfile of random's system information tool 1.08 (written by random/random)
Run by Lubko at 2010-08-16 16:34:47
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 3 GB (24%) free of 14 GB
Total RAM: 767 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16 ...

Stále to nefunguje, teraz sa mi dokonca reštartoval pc.

[HKEY_USERS\S-1-5-21-746137067-2077806209-725345543-1004\Software\G*e*n*i*e*"!\FM Genie Scout 2008\Columns\Staff]
"Position0"=dword:00000000
"Visible0"=dword:00000001
"Width0"=dword:0000007d
"Position1"=dword:00000001
"Visible1"=dword:00000001
"Width1"=dword:00000064
"Position2"=dword:00000002 ...

[HKEY_USERS\S-1-5-21-746137067-2077806209-725345543-1004\Software\G*e*n*i*e*"!\FM Genie Scout\History Points]
"Bohemians"="d:\\Downloady\\0-fm_genie_scout_2007\\FM Genie Scout 2007\\History Points\\Bohemians"

[HKEY_USERS\S-1-5-21-746137067-2077806209-725345543-1004\Software\G*e*n*i*e*"!\FM Genie ...

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-746137067-2077806209-725345543-1004\Software\G*e*n*i*e*"!\FM Genie Scout]
"ScreenshotsDir"="d:\\Program Files\\Sports Interactive ...

+ 2010-04-11 20:17 . 2010-04-11 20:17 2607104 c:\windows\Installer\c9537c.msp
+ 2010-04-11 20:17 . 2010-04-11 20:17 4210688 c:\windows\Installer\c9537b.msp
+ 2008-07-11 15:39 . 2008-07-11 15:39 1670144 c:\windows\Installer\b23f2d.msi
+ 2007-01-21 14:23 . 2007-01-21 14:23 5806592 c:\windows\Installer ...

+ 2010-02-11 11:36 . 2010-02-11 11:36 226880 c:\windows\$hf_mig$\KB978338\SP3QFE\tcpip6.sys
+ 2010-02-12 04:29 . 2010-02-12 04:29 100864 c:\windows\$hf_mig$\KB978338\SP3QFE\6to4svc.dll
+ 2010-02-11 12:02 . 2010-02-11 12:02 226880 c:\windows\$hf_mig$\KB978338\SP3GDR\tcpip6.sys
+ 2010-02-12 04:35 ...

+ 2010-07-14 14:00 . 2010-07-14 14:00 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_92458c09\System.Drawing.dll
+ 2010-07-14 14:00 . 2010-07-14 14:00 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a ...

+ 2007-06-26 13:57 . 2009-03-08 02:33 759296 c:\windows\system32\dllcache\VGX.dll
+ 2007-08-13 17:54 . 2010-03-10 06:17 420352 c:\windows\system32\dllcache\vbscript.dll
+ 2007-08-13 17:44 . 2009-03-08 02:34 105984 c:\windows\system32\dllcache\url.dll
- 2007-08-13 17:44 . 2009-02-20 17:13 105984 c ...

+ 2009-12-09 21:01 . 2004-08-17 22:49 75776 c:\windows\$NtUninstallKB970430$\strmfilt.dll
+ 2009-12-09 21:01 . 2004-08-17 22:49 24576 c:\windows\$NtUninstallKB970430$\httpapi.dll
+ 2009-08-25 17:02 . 2006-03-24 04:39 49152 c:\windows\$NtUninstallKB968389$\wdigest.dll
+ 2009-08-25 17:02 . 2009-02-03 ...

ComboFix 10-08-15.02 - Lubko . 08. 2010 15:26:40.5.1 - x86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.421.1029.18.767.571 [GMT 2:00]
Running from: c:\documents and settings\Lubko\Plocha\ComboFix.exe
Command switches used :: c:\documents and settings\Lubko\Plocha\CFScript.txt
FW ...

Ten log je extrémne dlhý, tak ho sem dám ako prílohu.

Tak sa to podarilo:



ComboFix 10-08-15.02 - Lubko . 08. 2010 11:07:16.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.421.1029.18.767.521 [GMT 2:00]
Running from: c:\documents and settings\Lubko\Plocha\ComboFix.exe
FW: COMODO Firewall Pro *enabled* {043803A3-4F86-4ef6-AFC5 ...

Bohužiaľ je to to isté.