VIRY.CZ

pred poslednimi akcemi nasel jeste 1 (ale oznacil jej jako skryty soubor a moznou hrozbu) a po poslednim cisteni jsem jej jiz nezkousel. NB jsem jiz vcera musel vratit, vypada to zatim, ze je to dobre. moc diky za pomoc.

rekl bych ze PC se chova normalne

.
DDS (Ver_2011-06-03.01) - NTFSx86
Internet Explorer: 9.0.8112.16421
Run by tomáš at 7:55:23 on 2011-06-07
Microsoft® Windows Vista™ Ultimate 6.0.6002.2.1250.1.1029.18.1014.319 [GMT 2:00]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled ...

OTL Extras logfile created on: 2011-06-06 21:49:22 - Run 1
OTL by OldTimer - Version 3.2.23.0 Folder = C:\Users\tomáš\Desktop
Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká ...

[2010-05-13 16:23:42 | 000,000,000 | ---D | M] -- C:\Users\All Users\Alwil Software
[2006-11-02 15:00:38 | 000,000,000 | -HSD | M] -- C:\Users\All Users\Application Data
[2010-07-08 17:16:08 | 000,000,000 | ---D | M] -- C:\Users\All Users\ChessBase
[2009-10-10 16:20:03 | 000,000,000 | -HSD | M] -- C ...

[2011-06-05 11:32:14 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfdisk.dll
[2011-06-05 11:32:13 | 000,642,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasgcw.dll
[2011-06-05 11:32:13 | 000,595,456 | ---- | C] (Microsoft Corporation) -- C:\Windows ...

OTL logfile created on: 2011-06-06 21:49:22 - Run 1
OTL by OldTimer - Version 3.2.23.0 Folder = C:\Users\tomáš\Desktop
Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika ...

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 6786

Windows 6.0.6002 Service Pack 2
Internet Explorer 9.0.8112.16421

2011-06-06 16:18:10
mbam-log-2011-06-06 (16-18-10).txt

Typ skenu: Úplný sken (C:\|D:\|)
Skenované objekty: 289159
Uplynulý čas: 1 hodina(y), 2 minuta(y), 55 ...

All processes killed
========== OTL ==========
No active process named explorer.exe was found!
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run\\Windows Explorer deleted successfully.
C:\Windows\System32\config\systemprofile\AppData\Roaming\qhyggjpb.dll moved ...

spustil jsem jej 2x a ten druhy report mi to nevyhodilo

[2011-06-05 10:31:27 | 000,000,000 | --SD | C] -- C:\žižala9696ž
[2011-06-05 10:31:27 | 000,000,000 | --SD | C] -- \žižala9696ž
[2011-06-05 10:30:00 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2011-06-05 10:29:13 | 000,318,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CF19960.exe ...

OTL logfile created on: 2011-06-05 22:43:08 - Run 2
OTL by OldTimer - Version 3.2.23.0 Folder = C:\Users\tomáš\Desktop
Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika ...

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 6.0.6002 Disk: Hitachi_HTS541680J9SA00 rev.SB2OC70P -> Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-4

device: opened successfully
user: MBR read successfully
kernel: MBR read successfully
user & kernel MBR ...

Logfile of random's system information tool 1.08 (written by random/random)
Run by tomáš at 2011-06-05 21:46:38
Microsoft® Windows Vista™ Ultimate Service Pack 2
System drive C: has 10 GB (26%) free of 37 GB
Total RAM: 1014 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:46 ...

jeste jsem zkusil jeden kompletni scan celeho NB avastem a nic nenasel.