VIRY.CZ

diky

Logfile of random's system information tool 1.08 (written by random/random)
Run by jmlcek at 2011-01-07 10:11:40
Microsoft Windows 7 Professional
System drive C: has 281 GB (59%) free of 477 GB
Total RAM: 3580 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:11:53, on 7.1 ...

dekuji

Logfile of random's system information tool 1.08 (written by random/random)
Run by jmlcek at 2010-12-21 16:17:58
Microsoft Windows 7 Professional
System drive C: has 286 GB (60%) free of 477 GB
Total RAM: 3580 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:18:06, on 21.12 ...

Uff, tak mockrat dekuju
Pravdepodobne tedy MS Security Essential Rootkit neodhalil.
Odinstaloval jsem ho a ponecham asi Avast.

Jeste jednou diky, dobra prace

Logfile of random's system information tool 1.08 (written by random/random)
Run by jmlcek at 2010-12-17 13:46:37
Microsoft Windows 7 Professional
System drive C: has 292 GB (61%) free of 477 GB
Total RAM: 3580 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:46:50, on 17.12 ...

CF je odinstalovany.
Odkaz na T-cleaner mi nejak nefunguje
http://sweb.cz/Marinus/T-Cleaner.exe

Myslim ze normalne, pustil jsem jeste Hitman Pro Scan a nalezl pouze nekolik Tracking Cookies.

ComboFix 10-12-15.07 - jmlcek 17.12.2010 12:40:39.2.2 - x86
Microsoft Windows 7 Professional 6.1.7600.0.1250.420.1033.18.3580.2400 [GMT 1:00]
Spuštěný z: c:\users\jmlcek\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\jmlcek\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated ...

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 6.1.7600 Disk: Hitachi_HTS545050B9A300 rev.PB4OC63G -> Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntkrnlpa.exe ...

2010/12/17 11:04:25.0915 TDSS rootkit removing tool 2.4.11.0 Dec 8 2010 14:46:40
2010/12/17 11:04:25.0915 ================================================================================
2010/12/17 11:04:25.0915 SystemInfo:
2010/12/17 11:04:25.0915
2010/12/17 11:04:25.0915 OS Version: 6.1.7600 ...

Dobry den, pokusim se popsat co se stalo.
MBR probehlo viz log:

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 6.1.7600 Disk: Hitachi_HTS545050B9A300 rev.PB4OC63G -> Harddisk0\DR0 -> \Device\Ide\IdePort0 P0T0L0-0

device: opened successfully
user: MBR ...

dekuji