VIRY.CZ

+ 2011-12-15 22:10 . 2011-11-04 01:39 818688 c:\windows\system32\jscript.dll
+ 2011-12-01 17:17 . 2011-12-01 17:17 103936 c:\windows\system32\inseng.dll
+ 2011-12-01 17:17 . 2011-12-01 17:17 165888 c:\windows\system32\iexpress.exe
+ 2011-12-01 17:17 . 2011-12-01 17:17 173056 c:\windows\system32 ...

ComboFix 11-12-30.01 - Majo . 12. 2011 20:39:05.4.4 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.421.1051.18.3950.1845 [GMT 1:00]
Running from: c:\users\Majo\Desktop\ComboFix.exe
AV: ESET Smart Security 4.2 *Enabled/Updated* {CB0F8167-5331-BA19-698E-64816B6801A5}
FW: ESET personal firewall ...

Dobry den.
Mam taky problem, ze pri beznej praci s PC (explorer+ word) sa mi obcas, (ako aj teraz), sa stava, ze ventilator zacne strasne hucat a mam vyuzitie procesora 100 %. Pritom s PC nic nerobim... Moze to sposobovat nejaky vir? Dakujem za odpoved.

Prikladam log :

Logfile of random's system ...

Pred tymto scanom prebehol este aj NOD skan (nasiel cca 500 virov :shock: ). Prikladam teda log, (ESEt uz nehlasi nic podozrive..)


ComboFix 11-11-03.01 - Majo . 11. 2011 19:36:14.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.421.1051.18.3950.1682 [GMT 1:00]
Running from: c:\users ...

Dobry den.
Prosim Vas o pomoc, ESET mi hlasi skoro na vsetky moje subory Win32/Brontok.AQ červ a uklada ich do karanteny alebo ich maze...
Pls. pomozte :(


Logfile of random's system information tool 1.09 (written by random/random)
Run by Majo at 2011-11-03 12:53:15
Microsoft Windows 7 Home ...

Ospravedlnujem sa , nelegalnu kopiu som odinstaloval, spravil som novy log, ktory prikladam.
Dakujem za pomoc :

Logfile of random's system information tool 1.09 (written by random/random)
Run by Majo at 2011-11-02 21:19:28
Microsoft Windows 7 Home Premium
System drive C: has 81 GB (18%) free of ...

Nie , zial problemy sposobil office aktivator
Cez obnovenie systemu som skusil ´chybu´ odstranit , ta vsak nadalej pretrvava. Nakolko nechcem aby vsetky moje subory boli presunute do karanteny, alebo odstranene , som docasne vypol NOD.
Da sa s tym nieco spravit?

Nainstaloval som OFFICE 2010 (medzicasom ho som aj zmazal) , ale NOD mi vkuse na vsetky subory hlasi vyry :
Win32/Brontok.AQ červ vyliečený zmazaním NT AUTHORITY\SYSTEM Táto skutočnosť bola zistená na modifikovanom súbore.

Vzdy ide o Win32/Brontok.AQ červ.
Prosim Vas o pomoc. Prikladam log ...

Iste:

info.txt logfile of random's system information tool 1.06 2010-05-21 20:31:07

======Uninstall list======

-->"C:\Program Files (x86)\InstallShield Installation Information\{70991E0A-1108-437E-BA7D-085702C670C0}\setup.exe" -runfromtemp -l0x0009 -removeonly
-->"C:\Program Files (x86 ...

Dobry vecer,
Notebook sa mi zda byt troska pribrzdeny , hlavne pri starte, ale aj pocas prace sa pomerne casto huci ventilator, ajked nic narocne nerobim, akoby nieco zatazovalo pamat... Preto Vas prosim o kontrolu logu:

Logfile of random's system information tool 1.08 (written by random/random ...

Dobry!
Prosim Vas o kontrolu logu ., PC je pomaly , casto zamrza a casto ma aj odpaja z netu...
Dakujem .

Logfile of random's system information tool 1.08 (written by random/random)
Run by Alfa at 2010-12-25 22:59:06
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 1 GB ...

Dakujem , myslim si , ze uz je na tom dobre....
Nezasekáva sa , ani NOD ka nehlasi nic , je mozne ze sme to vycistili ?

All processes killed
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64 ...

OTL Extras logfile created on: 04/12/2010 14:20:49 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Majo\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000809 | Country: Slovensko | Language: SKY ...

< MD5 for: ATAPI.SYS >
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft ...