VIRY.CZ

Zhodnot ty, ak by to malo byt na dlho s neistym koncom, tak kaslem na to a reinstalnem.
Najhorsie, ze tento posledny nalez mam na datovom disku, z ktoreho nemam ako spravit zalohu a bojim sa ze po reinstale bude repete.

V priecinku aplikacie som nasiel aplikaciu, ktorej cas zmeny sa zhodoval cca s casom kedy mi napadlo pc.
Scan cez virus total pozitivny
https://www.virustotal.com/file/fd457accc845f0131f7e55a48ff31b261788ed4a9291ecd9b919ef2ba0f2b691/analysis/1357850139/

Ak sa takto virus nakopiroval do viacerych ...

Vraciam spat.Pri spusteny aplikacie ktora mi doteraz sla vzdy korektne, vyhodilo chybu, a hned nato antivir opat zdetekoval svchost.com.

Vdaka, vyzera ze pomohlo.Av nasiel niake hrozby aj v bode obnovy, tak som vypol vytvaranie.Nasiel som o tom vire cosi http://www.viruskasino.com/2011/05/win32neshta.html
Odporucas nieco z toho navodu, ci tvoj skript je dostacujuci?
Idem sa pustit do zmeny hesiel.

OTL Extras logfile created on: 10. 1. 2013 17:53:13 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Jozifek\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000041B ...

< MD5 for: NVRD32.SYS >
[2007.07.27 21:15:56 | 000,116,736 | ---- | M] (NVIDIA Corporation) MD5=77AC69AC4F07BD9D29528B8FCC71FB49 -- C:\WINDOWS\DriverPacks\M\N\6\nvrd32.sys

< MD5 for: REGEDIT.EXE >
[2008.04.14 07:52:44 | 000,147,968 | ---- | M] (Microsoft Corporation) MD5 ...

OTL logfile created on: 10. 1. 2013 17:53:13 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Jozifek\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000041B | Country ...

Qubox: http://czshare.com/4614841/Qoobox.rar

Winrar hlasil:
Cannot read contents of qoobox/backenv/*
Pristup bol odopreny.

Idem otl

Virus total:
dirext.sys bez nalezu (0/48)
svchost.com je zmazany.

Bol to crack (hambim sa), z pc je vymazany.

ComboFix quarantined files


2013-01-10 15:05:10 . 2013-01-10 15:05:10 57 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\directx.sys.vir
2013-01-10 15:04:51 . 2013-01-10 15:04:51 41,472 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\svchost.com.vir
2013-01-09 00:55:47 . 2013-01-09 01:28:57 3,780 ----a-w- C ...

CF 04

ComboFix 13-01-06.01 - Jozifek . 01. 2013 20:38:18.1.1 - x86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.421.1029.18.1527.1234 [GMT 1:00]
Running from: c:\documents and settings\Jozifek\Plocha\ComboFix.exe
AV: COMODO Antivirus *Enabled/Updated* {043803A5-4F86-4ef7-AFC5 ...

CF 03

ComboFix 13-01-06.01 - Jozifek . 01. 2013 21:48:17.2.1 - x86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.421.1029.18.1527.1253 [GMT 1:00]
Running from: d:\download\ComboFix.exe
AV: COMODO Antivirus *Enabled/Updated* {043803A5-4F86-4ef7-AFC5-F6E02A79969B}
FW: COMODO ...

Vedel som ze pouzitie CF ma rizika, nevedel som vsak, ze nezaznamena vsetky akcie do logu a tym vam stazi robotu.Vzdy si vsetko v pc snazim robit sam.

dirext.sys bez nalezu.
svchost.com je zmazany.

momentalne problem zase pretrvava, .exe sa daju spustit, len obklukou, cez spustit ako spravca a tam ...

Nasiel som aj tie txtcka, mam ich sem dat, alebo kde je problem?

Combofix

ComboFix 13-01-06.01 - Jozifek . 01. 2013 16:06:44.4.1 - x86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.421.1029.18.1527.1151 [GMT 1:00]
Running from: c:\docume~1\Jozifek\LOCALS~1\Temp\3582-490\ComboFix.exe
AV: COMODO Antivirus *Enabled/Updated* {043803A5-4F86-4ef7 ...