facebook vir

[davidmarkvart]

FB jede..internet jede ses B.O.R.E.C.

[stell]

No nespustaj nic, nakolko este to mas zavirene, len to rob co pisem, ak budeme hotovy napisem.
dobre vloz sem vsetky logy aby som videl, aj 3,4,5,
nakolko tento smejd mi zabil virtualku

a potom pokracuj Malwarebytes, uplny skan, co najde odstranit, log vloz sem.

[davidmarkvart]

3

RogueKiller V5.2.7 [06/30/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Administrator [Admin rights]
Mode: HOSTSFix -- Date : 07/17/2011 16:08:00

Bad processes: 0

HOSTS File:
127.0.0.1 localhost


Resetted HOSTS:
127.0.0.1 localhost

Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt



4


RogueKiller V5.2.7 [06/30/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Administrator [Admin rights]
Mode: ProxyFix -- Date : 07/17/2011 16:08:06

Bad processes: 0

Registry Entries: 0

Finished : << RKreport[3].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt



5

RogueKiller V5.2.7 [06/30/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Administrator [Admin rights]
Mode: DNSFix -- Date : 07/17/2011 16:08:12

Bad processes: 0

Registry Entries: 0

Finished : << RKreport[4].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt ; RKreport[4].txt

[davidmarkvart]

jinak tento vir je dost zavazny ..kazdy nema zkusenost s viry.cz takze pokdu by se vam ho povedlo vyhledat nebo zrusit bylo by to jeste lepsi

[stell]

dobre Pokracuj Malwarebytes uplny skan,

[davidmarkvart]

zapl jsem to..nevim jak to bude dlouho bezet ale uz ted tam je 50 detekci asi jsem tu toho mnel vic takze jdu ven..do 45 min napisu

[stell]

ok, len kludne co najde vsetko zmaz, a log vloz sem,ano je to smejd z Ukrajiny,
Potom vypnes obnovu systemu>>restartujes do windows>>zapnes obnovu systemu, a spustis zasa uplnu kontrolu malwarebytes, co najde zmaz, log vloz sem, a potom uvidime ako dalej

[davidmarkvart]

hruby odhad doby jak dlouho by to mnelo bezet?
mam 109 000 souboru scened a infikovane 81..takze mi tu neco zustalo z minuleho odvirovavani..

[stell]

aha, no podla toho aky velky disk, vykon pocitaca, ak este pritom nieco aj robis, tak este dlhsie.
no zmaz vsetko a log vloz sem

[davidmarkvart]

no dostals mne ted sem na FB ale ok donutil si mne zapnout naz stary komp z II. svetovy..
a poznamka jak ze se to pak maze?:D

[stell]

http://www.viry.cz/forum/viewtopic.php?f=29&t=67229

[davidmarkvart]

jezis zase mi ted nesel FB ale fakt nevim proc..jinak co z tou slozkou RK_quarantine

[stell]

RK_mozes zmazat.

[davidmarkvart]

koukni jeste na ten 6 novej log..ted mi fb rika ze nenalezne stranku ne nic s proxy serverem

RogueKiller V5.2.7 [06/30/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Administrator [Admin rights]
Mode: Scan -- Date : 07/17/2011 18:25:23

Bad processes: 1
[SVCHOST] svchost.exe -- c:\windows\update.2\svchost.exe -> KILLED

Registry Entries: 0

HOSTS File:
127.0.0.1 localhost
127.0.0.1 vkontakte.ru
127.0.0.1 www.vkontakte.ru
127.0.0.1 login.vk.com
127.0.0.1 vk.com
127.0.0.1 www.vk.com
127.0.0.1 odnoklassniki.ru
127.0.0.1 www.odnoklassniki.ru
127.0.0.1 facebook.com
127.0.0.1 www.facebook.com
127.0.0.1 af-za.facebook.com
127.0.0.1 az-az.facebook.com
127.0.0.1 id-id.facebook.com
127.0.0.1 ms-my.facebook.com
127.0.0.1 bs-ba.facebook.com
127.0.0.1 ca-es.facebook.com
127.0.0.1 cs-cz.facebook.com
127.0.0.1 cy-gb.facebook.com
127.0.0.1 da-dk.facebook.com
127.0.0.1 de-de.facebook.com
[...]


Finished : << RKreport[6].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt ; RKreport[4].txt ; RKreport[5].txt ;
RKreport[6].txt

[stell]

no netreba nic insie robit kym to neodviryme, len to co pisem, , nakolko znova to nainfikujes, takze zatvor vsetko co mas spustene a cakaj na log z Malwarebytes, ked zmazes, vsetko s Malwarebytes, spustis znova Roguekiller a pouzijes moznosti
3 a 4 .