VIRY.CZ

vyjeli mi dva logy: Logfile of random's system information tool 1.06 (written by random/random)
Run by Tomba Bomba at 2010-02-02 09:57:07
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 63 GB (26%) free of 238 GB
Total RAM: 511 MB (36% free)

Logfile of Trend Micro ...

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-01-30 18:07:06
Windows 5.1.2600 Service Pack 2
Running: gmer.exe; Driver: C:\DOCUME~1\TOMBAB~1\LOCALS~1\Temp\pwqoipoc.sys


---- System - GMER 1.0.15 ----

SSDT 81B848A0 ZwAssignProcessToJobObject
SSDT Lbd.sys (Boot Driver/Lavasoft AB ...

už se to doskenovalo ale ja jsem to omylem neulozil... cervene nebylo nic,dam to znovu ale myslim si ze uz je vse v poradku,pomalu tomu ani nechci verit zes to dokazal, protoze ze zacatku se mi to jevilo ze to nepujde bez formatovani... mockrat dekuju zes obetoval cely den nekomu koho ani neznas ...

Mám otázku, jak se dají získat takové zkušenosti s viry jaké máte vy?

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit quick scan 2010-01-30 16:11:47
Windows 5.1.2600 Service Pack 2
Running: gmer.exe; Driver: C:\DOCUME~1\TOMBAB~1\LOCALS~1\Temp\pwqoipoc.sys


---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Ntfs \Ntfs eamon.sys (Amon monitor/ESET ...

fix
========== FILES ==========
AGP440.sys extracted to C:\
atapi.sys extracted to C:\

OTL by OldTimer - Version 3.1.27.0 log created on 01302010_154713
log avenger
Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP ...

ten soubor agp440.sys nemam v c:/windows/system32/drivers a ten řádek nejde smazat protože program nemohl nalezt uvedenou cestu...

jak mam zjistit zda agp440.sys je ve slozce C:\WINDOWS\system32\drivers\atapi.sys?

log z GMERU(pořád jeden řadek cerveny):
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit quick scan 2010-01-30 14:53:01
Windows 5.1.2600 Service Pack 2
Running: gmer.exe; Driver: C:\DOCUME~1\TOMBAB~1\LOCALS~1\Temp ...

full scan MBAM
Malwarebytes' Anti-Malware 1.44
Verze databáze: 3657
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

30.1.2010 14:36:07
mbam-log-2010-01-30 (14-35-56).txt

Typ kontroly: Kompletní kontrola (C:\|)
Zkontrolované objekty: 184418
Uplynulý čas: 34 minute(s), 42 second(s ...

log avenger
Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to ...

ještě jsem zapomněl dodat že kdyz jsem to skenoval GMER tak byly 2 soubory(už nevím které) napsany cervene i s adresou,soubory byly v adresari C:/windows/system32/drivers

zde je log z Gmer:

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit quick scan 2010-01-30 12:14:29
Windows 5.1.2600 Service Pack 2
Running: gmer.exe; Driver: C:\DOCUME~1\TOMBAB~1\LOCALS~1\Temp\pwqoipoc.sys


---- System - GMER 1.0.15 ----

Code 8207C770 ZwEnumerateKey
Code 8207C490 ...

tady je log z avengeru (opět jsem tam vložil ten script).

Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C ...

nod pořád hlásí to samé, a zde je report:

RkUnhooker report generator v0.7
==============================================
Rootkit Unhooker kernel version: 3.8.386.588
==============================================
Windows Major Version: 5
Windows Minor Version: 1
Windows Build Number: 2600 ...