VIRY.CZ

Od smazání 8e2185ace8825c71.sys již zcela standardně.
Díky. Jdu prostudovat "Podpořte fórum".

ComboFix 12-11-14.01 - t1 15.11.2012 0:24.3.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.4029.2875 [GMT 1:00]
Spuštěný z: c:\users\t1\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\t1\Desktop\CFScript.txt
FW: COMODO Firewall *Enabled* {7DB03214-694B-060B-1600 ...

Tak internet se rozeběhl. TDSSiller.log:

00:10:02.0038 2572 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
00:10:04.0046 2572 ============================================================
00:10:04.0046 2572 Current date / time: 2012/11/15 00:10:04.0046
00:10:04.0046 2572 SystemInfo:
00:10 ...

2. půlka

23:45:58.0267 2376 srv ( LockedFile.Multi.Generic ) - warning
23:45:58.0267 2376 srv - detected LockedFile.Multi.Generic (1)
23:45:58.0283 2376 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
23:45:58.0283 2376 Suspicious file (NoAccess): C:\Windows\system32 ...

Combofix hlásil nesprávné datum v PC, srovnal jsem ho, ale nevím, zda bylo právě 1. 11. 2012.
23:45:07.0705 0960 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
23:45:07.0721 0960 ============================================================
23:45:07.0721 0960 Current date / time: 2012/11/14 ...

All processes killed
========== SERVICES/DRIVERS ==========
Error: No service named 8e2185ace8825c71 was found to stop!
Service\Driver key 8e2185ace8825c71 not found.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM ...

ComboFix 12-11-13.03 - t1 14.11.2012 21:55:10.2.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.4029.3049 [GMT 1:00]
Spuštěný z: c:\users\t1\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\t1\Desktop\CFScript.txt
FW: COMODO Firewall *Enabled* {7DB03214-694B-060B-1600 ...

FSS:
Farbar Service Scanner Version: 09-11-2012
Ran by t1 (administrator) on 06-11-2012 at 19:43:05
Running from "C:\Users\t1\Desktop"
Windows 7 Professional Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services ...

Dobrý den,
po kliknutí na odkaz Skype se odkaz začal rozesílat ode mě a poté přestalo fungovat připojení k internetu. Přikládám log z RSit:

Logfile of random's system information tool 1.09 (written by random/random)
Run by t1 at 2012-11-06 11:45:46
Microsoft Windows 7 Professional Service Pack 1 ...

provedeno...
http://www.ulozto.cz/8298934/minidump-zip

jasne...

info.txt logfile of random's system information tool 1.08 2011-03-14 10:34:36

======Uninstall list======

-->"C:\Program Files\InstallShield Installation Information\{A8200008-BE06-4C26-BB8D-717FE18F74B7}\setup.exe" -runfromtemp -l0x0005 -removeonly
-->C:\Program Files\DivX ...

jeste log y z Combofix...

ComboFix 11-03-13.02 - t1 14.03.2011 19:00:43.4.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2046.1450 [GMT 1:00]
Spuštěný z: C:\Documents and Settings\t1\Plocha\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA ...

tak zatim stale zlobi, prikladam vypis RSIT a Combofix (pri vytvareni logu BSOD, nicmene log Combofix vytvori)

Logfile of random's system information tool 1.08 (written by random/random)
Run by t1 at 2011-03-14 19:14:15
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 37 GB (24 ...

dobry den,
pri startu winXP a nekdy i pri praci notebook spadne do BSOD "bad_pool_header",
pri spusteni Combofixu dojde k vytvareni logu, ale nedokonci se a spadne do modre smrti "bad_pool_header",
budu rad za kazdou radu,
posilam log RSIT:

Logfile of random's system information tool 1.08 (written ...