VIRY.CZ

jeste sem pustil Avast free pro restartu a ten vynasel toto:

27.07.2011 16:00
Testují se všechny lokální disky

Soubor C:\HP\Bin\EndProcess.exe je infikován virem Win32:KillApp-W [PUP]
Soubor C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\resources\guid.zip|>HPSAMessageBox.exe ...

Logfile of random's system information tool 1.09 (written by random/random)
Run by miloň at 2011-07-27 13:33:37
Microsoft Windows 7 Home Premium
System drive C: has 541 GB (93%) free of 580 GB
Total RAM: 3894 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:33:55, on 27.7 ...

Avast naistalovat sel

instalace AV konci hlaskou viz priloha

========== FILES ==========
C:\Windows\sysdriver32_.exe moved successfully.

OTM by OldTimer - Version 3.1.18.0 log created on 07272011_113402

SystemLook 04.09.10 by jpshortstuff
Log created at 11:16 on 27/07/2011 by miloň
Administrator - Elevation successful
WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.

========== filefind ==========

Searching for "sysdriver32_.exe"
C:\Windows\sysdriver32_.exe --a ...

========== FILES ==========
File/Folder sysdriver32_.exe not found.

OTM by OldTimer - Version 3.1.18.0 log created on 07272011_110937

neslo nainstalovat AV od microsoftu, po startu vyskoci hlaska:

Chcete nasledujicimu programu od neznameho vydavatele povolit provedeni zmen v tomto pocitaci?

Nazev programu: sysdriver32_.exe
Vydavatel: neznamy
Umisteni: C:\Windows\sysdriver32_.exe rezerv

vypada ok, av od microsoftu je ted asi odinstalovan?

All processes killed
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\\tray_ico0 deleted ...

tady sou logy:

RogueKiller V5.2.8 [07/23/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html

Operating System: Windows 7 (6.1.7600 ) 64 bits version
Started in : Normal mode
User ...

ComboFix 11-07-26.03 - miloň 27.07.2011 9:01.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.3894.2553 [GMT 2:00]
Spuštěný z: c:\combofix\ComboFix.exe
Použité ovládací přepínače :: c:\users\milo˛\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated ...

ComboFix 11-07-26.02 - miloň 26.07.2011 16:42:41.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.3894.2202 [GMT 2:00]
Spuštěný z: c:\users\milo˛\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft ...

Dobry den, antivir na esetu me nasel nejake trojany, antivir od microsoftu co byl nainstalovan na pc pise: MSE operates under enhanced protection mode. This is a temporary measure necessary for immediate response to the threat from virus. No action is required from you. nejde odinstalovat - vubec ...