VIRY.CZ

díky

Logfile of random's system information tool 1.08 (written by random/random)
Run by Romča at 2010-07-20 16:21:04
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 14 GB (9%) free of 153 GB
Total RAM: 2046 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at ...

fachá OK v rámci možností i rychle:)
díky moc za rady

konečně 2. log:)

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-07-17 11:20:29
Windows 5.1.2600 Service Pack 2
Running: lol.exe; Driver: C:\DOCUME~1\ROMA~1\LOCALS~1\Temp\ffpoikoc.sys


---- Devices - GMER 1.0.15 ----

AttachedDevice \Driver\Tcpip \Device\Ip epfwtdi.sys (ESET Personal ...

Bohužel se mi nepodařilo druhý log vytvořit, vždy se to během tvorby logu restartovalo...

Druhý bude zřejmě na dlouho, tak ho dodám zítra. Jinak zatím díky moc za všechny rady. P.S. Po spuštění defoggera a restartu se pc brutálně zpomalil. Nejde pomalu ani načíst žádná větší aplikace.

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit quick scan 2010-07-15 22:07:26
Windows 5.1.2600 Service Pack 2
Running: gmer.exe; Driver: C:\DOCUME~1\ROMA~1\LOCALS~1\Temp\ffpoikoc.sys


---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys (Microsoft Filesystem Filter ...

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys PCTCore.sys ACPI.sys hal.dll nvata.sys
kernel: MBR read successfully
user & kernel MBR OK

DaonolFix (15.04.09) by jpshortstuff
Log created at 20:30 on 15/07/2010 by Mex
Running from C:\Documents and Settings\Mex\Dokumenty\Stažené soubory\DaonolFix.exe

=====Fix Daonol=====


=====Find Daonol=====

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"aux"="wdmaud ...

OTM - zkoušel jsem podle návodu z webu, nicméně se stalo jen to, že se vymazali temporary files

LOG:
ComboFix 10-07-15.01 - Mex 15.07.2010 19:49:22.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.2046.1522 [GMT 2:00]
Spuštěný z: c:\documents and settings\Mex\Plocha ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options]
"Debugger="svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options]
"Debugger="svchost.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ...

Logfile of random's system information tool 1.08 (written by random/random)
Run by Administrator at 2010-07-15 18:06:20
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 5 GB (3%) free of 153 GB
Total RAM: 2046 MB (81% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan ...

Prosím o radu, co vložit do OTL...
LOG z RSIT:

http://www.uloz.to/5334883/log.txt