VIRY.CZ

Jop vyzerá že je to čisté, zatiaľ žiadne pokusy o načítanie daných adries.

Ďakujem, posielam 200Cz.

RogueKiller V8.8.2 [Jan 17 2014] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spustené v : Normálny ...

RogueKiller V8.8.2 [Jan 17 2014] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User ...

Tak už to blokuje MB a nie NOD, a ten MB to aj dal do karentény a identifikoval ako Trojan.BitCointMiner C:\windows\temp\svchost.exe. Žiaľ aj po vymazaní a restarte stale opruzuje.

2014/01/20 04:45:01 +0100 KUBO-PC KUBO MESSAGE Executing scheduled update: Daily
2014/01/20 04:45:07 +0100 KUBO-PC ...

Malwarebytes Anti-Malware (Trial) 1.75.0.1300
www.malwarebytes.org

Database version: v2014.01.18.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
KUBO :: KUBO-PC [administrator]

Protection: Enabled

18. 1. 2014 21:45:54
MBAM-log-2014-01-20 (17-26-53).txt

Scan type: Full ...

Žiaľ pokusy o pripojenie na dané linky pretrváva.

Logfile of random's system information tool 1.09 (written by random/random)
Run by KUBO at 2014-01-18 13:19:36
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 248 GB (26%) free of 954 GB
Total RAM: 16329 MB (84% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:19:37 ...

Logfile of random's system information tool 1.09 (written by random/random)
Run by KUBO at 2014-01-18 10:39:05
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 247 GB (26%) free of 954 GB
Total RAM: 16329 MB (84% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:39:07 ...

# AdwCleaner v3.017 - Report created 17/01/2014 at 08:50:48
# Updated 12/01/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : KUBO - KUBO-PC
# Running from : C:\Users\KUBO\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files ...

Hm vyzera ze nie :/, NOD stale blokuje pokusy o spojenie s danymi adresami.

.
[HKEY_USERS\S-1-5-21-3197162813-2465649940-2098534558-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\S-1-5-21-3197162813-2465649940-2098534558-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug ...

Hotovo

ComboFix 14-01-13.01 - KUBO . 01. 2014 17:59:56.3.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.16329.13935 [GMT 1:00]
Running from: c:\users\KUBO\Desktop\ComboFix.exe
Command switches used :: c:\users\KUBO\Desktop\CFScript.txt.txt
AV: ESET NOD32 Antivirus 7.0 *Disabled ...

Dobre, už sme to riešili vyššie.

druha cast.



.
[HKEY_USERS\S-1-5-21-3197162813-2465649940-2098534558-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\S-1-5-21-3197162813-2465649940-2098534558-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
@DACL=(02 ...

Log na 2x, nepodarilo sa mi to pridat ako prilohu.



ComboFix 14-01-13.01 - KUBO . 01. 2014 19:26:03.2.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.16329.14254 [GMT 1:00]
Running from: c:\users\KUBO\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 7.0 *Disabled/Updated* {19259FAE ...