VIRY.CZ

ok tak do tretice diky moc

rsit log:
Logfile of random's system information tool 1.06 (written by random/random)
Run by Skegster at 2010-03-25 00:21:38
Microsoft Windows 7 Professional Service Pack 3
System drive C: has 23 GB (15%) free of 153 GB
Total RAM: 3071 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan ...

:arrow: rsit log dodam za par minut :)
log:
Windows Vista SP 0 (build 7600)
Boot Mode: Normal
Ověření souborů Microsoftu: Ano
Whitelist: Ano
Internet Explorer v
Log vygenerován: 24.3.2010 2:49:44
================================================================

Běžící procesy ...

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\msdownld.tmp folder moved successfully.
C:\WINDOWS ...

:arrow: Sem asi takovej problemovej :D … jo UPM sem spoustel :( … no mozna bude neco v logu navic protoze pri scanu jsem mel spustenej GlassFish server a delal sem neco v netbeansech do toho firefox,thunderbird,instantbird a operu :)

:arrow: no s pocitacem … nabehne mi vklidu … nake problemy mi ...

Logfile of random's system information tool 1.06 (written by random/random)
Run by Skegster at 2010-03-24 16:51:01
Microsoft Windows 7 Professional Service Pack 3
System drive C: has 26 GB (17%) free of 153 GB
Total RAM: 3071 MB (43% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16 ...

ok … tak ted uz asi definitivne dekuji!

:arrow: u me ten scan netrva 5 - 10 minut ale tak hodinu :)
log1:
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit quick scan 2010-03-23 23:25:10
Windows 6.1.7600
Running: gmer.exe; Driver: C:\Users\Skegster\AppData\Local\Temp\kgrirkod.sys


---- Devices - GMER 1.0.15 ----

AttachedDevice ...

bohuzel nevim kterou cast z toho mam vycucnout

uz sem rozchodil ten rootkitreveale pres cmd ale ten log ma okolo 37 Mb

c:/cygwin … tento adresar znam, v nem sem mel linuxove knihovny ktere sem vyuzival ve win … ale cely adresar je uz tak pul smazany
mam problem s rootkitreleave … scan mi probehne ale kdyz chci ulozit log tak se mi to kousne

bohuzel rootkitreleave sem nenechal dojet do konce:(

links:
http://www.virustotal.com/cs/analisis/e28c0cf99b17141cc6a49537dae5359f232af0043eed9b26c910bd84aed066bd-1269311576
http://www.virustotal.com/cs/analisis/f115c1ba6a345be82731454e34de0553acc8919a0fab3b4a9fd1502f386667f1-1269311821

log ...

Vse uz funguje jak ma, diky moc
jj Rootkitreveal jsem pred tim spoustel
a logy jsou uz asi nepodstatne
jeste jednou dekuji

ok tak dobre brzke rano :)

log:

ComboFix 10-03-22.02 - Skegster 23.03.2010 2:55.1.2 - x86
Microsoft Windows 7 Professional 6.1.7600.0.1250.420.1029.18.3071.1797 [GMT 1:00]
Spuštěný z: c:\users\Skegster\Downloads\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy ...

Dobry den,
mam takovy mensi problem. Kdyz spustim pocitac, nenaskoci mi explorer.exe. Naskoci mi akorat slozka s dokumenty a jinak cerno. Kdyz si manualne spustim explorer.exe vse pak bezproblemu funguje. Posledni vec co jsem udelal pred zjistenim problemu byla infiltrace"C:\Users\Skegster\AppData ...