VIRY.CZ

Ďakujem za kontrolu ahoj.

Logfile of random's system information tool 1.08 (written by random/random)
Run by kral at 2010-09-07 16:53:50
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 233 GB (76%) free of 305 GB
Total RAM: 3326 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at ...

PC sa chová normálne.

Zdravím všetkých.

ComboFix 10-09-04.06 - kral . 09. 2010 16:12:59.3.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.421.1051.18.3326.2393 [GMT 2:00]
Running from: c:\users\kral\Desktop\ComboFix.exe
Command switches used :: c:\users\kral\Desktop\CFScript.txt
SP: Windows Defender ...

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys iastor.sys hal.dll
kernel: MBR read successfully
user & kernel MBR OK

Pri SPTD bola možnosť Uninstall neaktívna.
--------------------------------------------
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 19:03 on 06/09/2010 (kral)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers ...

ComboFix 10-09-04.06 - kral . 09. 2010 17:39:00.2.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.421.1051.18.3326.2224 [GMT 2:00]
Running from: c:\users\kral\Desktop\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46 ...

Pri kontrole sektora 1-62 na hd som zisťil že nie je prázdny.Kontaktoval som zákaznícku podporu ESET.Na ich doporučenie som spustil programy : mbrdump,gmer,autoruns.combofix,emebremover.
Po analíze došli k záveru citát :
Z logu co ste nam poslali, sme zistili pravdepodobnu infiltraciu mbr rootkita ...