Dva roky notebook bez antiviru..

[wackie]

Zdravim,

tak jsem se vratil z dovolene.. Zasilám log z USBfixu, doufám že se na to jeste nekdo podiva.. diky..

############################## | UsbFix 7.014 | [Deletion]

User: Bobme (Administrator) # BOBME-PC [FUJITSU SIEMENS AMILO Notebook Pa 3515]
Updated 24/06/10 by El Desaparecido / C_XX
Started at 10:37:42 | 14/08/2011
Website: http://pagesperso-orange.fr/NosTools/index.html
Contact: FindyKill.Contact@gmail.com

CPU: AMD Sempron(tm) SI-40
Microsoft Windows 7 Home Premium (6.1.7600 64-Bit) #
Internet Explorer 8.0.7600.16385

Windows Firewall: Disabled /!\
RAM -> 1790 Mb
C:\ (%systemdrive%) -> Fixed drive # 149 Gb (74 Mb free - 50%) [] # NTFS
D:\ -> CD-ROM
E:\ -> CD-ROM
F:\ -> Fixed drive # 225 Gb (118 Mb free - 52%) [Externí disk] # NTFS
G:\ -> Fixed drive # 8 Gb (7 Mb free - 99%) [disk zaloha] # NTFS

################## | Files # Infected Folders |


################## | Registry |


################## | Mountpoints2 |


################## | Listing |

[14/08/2011 - 10:48:09 | SHD ] C:\$Recycle.Bin
[25/10/2010 - 14:41:04 | A | 236] C:\1287512858_1923.txt
[25/05/2011 - 21:56:44 | D ] C:\ATI
[18/10/2010 - 16:18:25 | A | 0] C:\AUTOEXEC.BAT
[03/08/2011 - 09:57:13 | RASHD ] C:\Autorun.inf
[20/10/2010 - 20:28:22 | SHD ] C:\Boot
[18/10/2010 - 18:18:05 | H | 211] C:\Boot.BAK
[20/10/2010 - 20:28:22 | RASH | 355] C:\Boot.ini.saved
[18/08/2004 - 14:00:00 | RASH | 4952] C:\Bootfont.bin
[14/07/2009 - 03:38:58 | RASH | 383562] C:\bootmgr
[20/10/2010 - 20:28:23 | RASH | 8192] C:\BOOTSECT.BAK
[26/05/2011 - 11:15:22 | D ] C:\colorshock zaloha
[18/10/2010 - 16:18:25 | A | 0] C:\CONFIG.SYS
[07/07/2011 - 21:10:19 | A | 38923] C:\czech.php
[27/05/2011 - 14:58:15 | D ] C:\demo zaloha
[14/07/2009 - 07:08:56 | SHD ] C:\Documents and Settings
[07/07/2011 - 21:16:52 | A | 2766] C:\email_extras.php
[07/07/2011 - 20:56:54 | A | 1658] C:\email_template_direct_email.html
[07/07/2011 - 20:58:04 | A | 1717] C:\email_template_newsletters.html
[27/05/2011 - 18:43:22 | D ] C:\FaceBook clone 2.3
[26/10/2010 - 11:02:25 | D ] C:\file
[20/10/2010 - 19:41:10 | RSH | 203464] C:\grldr
[07/07/2011 - 20:54:49 | A | 187701] C:\header.jpg
[11/08/2011 - 03:40:19 | ASH | 1877000192] C:\hiberfil.sys
[03/08/2011 - 22:10:40 | D ] C:\includes
[06/07/2011 - 03:12:08 | A | 3020] C:\index.php
[18/10/2010 - 16:18:25 | RASH | 0] C:\IO.SYS
[18/10/2010 - 16:18:25 | RASH | 0] C:\MSDOS.SYS
[20/10/2010 - 22:50:20 | RHD ] C:\MSOCache
[18/08/2004 - 14:00:00 | RASH | 47564] C:\NTDETECT.COM
[18/10/2010 - 18:33:56 | RASH | 250576] C:\ntldr
[05/07/2011 - 11:21:40 | D ] C:\OpenCart v1.5.0.5
[11/08/2011 - 03:40:20 | ASH | 1877000192] C:\pagefile.sys
[14/07/2009 - 05:20:08 | D ] C:\PerfLogs
[02/08/2011 - 07:08:30 | RD ] C:\Program Files
[03/08/2011 - 21:51:10 | RD ] C:\Program Files (x86)
[03/08/2011 - 09:00:22 | HD ] C:\ProgramData
[11/11/2010 - 13:15:40 | D ] C:\Programs
[12/06/2011 - 21:40:03 | D ] C:\Python27
[20/10/2010 - 19:40:57 | SHD ] C:\Recovery
[03/08/2011 - 09:32:28 | SHD ] C:\RECYCLER
[27/05/2011 - 21:24:34 | D ] C:\Riot Games
[27/05/2011 - 20:21:21 | D ] C:\roundcubemail-0.5.2
[01/08/2011 - 21:46:41 | D ] C:\rsit
[07/07/2011 - 20:45:38 | D ] C:\shopperpress
[31/12/2010 - 16:47:38 | D ] C:\SWSetup
[13/08/2011 - 00:23:50 | SHD ] C:\System Volume Information
[25/10/2010 - 14:40:17 | D ] C:\totalcmd
[26/06/2011 - 14:35:15 | D ] C:\up
[07/07/2011 - 23:31:03 | D ] C:\upload
[14/08/2011 - 10:48:09 | D ] C:\UsbFix
[14/08/2011 - 10:38:26 | A | 3444] C:\UsbFix.txt
[20/10/2010 - 19:42:52 | RD ] C:\Users
[20/10/2010 - 19:41:10 | RSH | 15] C:\win7.ld
[03/08/2011 - 21:16:38 | D ] C:\Windows
[20/10/2010 - 20:20:26 | D ] C:\Windows.old
[06/07/2011 - 20:31:49 | AD ] C:\zen-cart-1.3.9h-full czech-pipni-cz
[14/08/2011 - 10:48:09 | SHD ] F:\$RECYCLE.BIN
[03/08/2011 - 09:57:13 | RASHD ] F:\Autorun.inf
[03/08/2011 - 09:25:41 | A | 637] F:\del.bat
[03/08/2011 - 09:29:23 | D ] F:\Filmy
[22/01/2011 - 00:54:18 | D ] F:\Fotky
[18/08/2004 - 14:00:00 | N | 737] F:\hosts
[05/08/2011 - 15:13:06 | A | 575306000] F:\Microsoft Office 2007 Enterprise CZ.rar
[23/06/2011 - 13:31:57 | A | 63450000] F:\mpam-fe.exe
[01/12/2006 - 23:37:14 | N | 904704] F:\msdia80.dll
[23/06/2011 - 13:17:29 | A | 8147144] F:\mseinstall.exe
[19/10/2010 - 20:17:09 | D ] F:\Music
[16/05/2011 - 12:36:31 | SHD ] F:\Obrázky
[03/08/2011 - 09:48:43 | D ] F:\Ostatni
[25/07/2011 - 14:21:45 | SHD ] F:\Prográmky
[26/05/2011 - 10:36:41 | SHD ] F:\Práce
[23/12/2010 - 17:06:56 | SHD ] F:\System Volume Information
[04/08/2011 - 15:10:28 | A | 1046000000] F:\the-sims-3-cz-part1.rar
[05/08/2011 - 00:24:13 | A | 1046000000] F:\the-sims-3-cz-part2.rar
[04/08/2011 - 18:42:22 | A | 1046000000] F:\the-sims-3-cz-part3.rar
[04/08/2011 - 23:07:46 | A | 1046000000] F:\the-sims-3-cz-part4.rar
[05/08/2011 - 12:20:44 | A | 1046000000] F:\the-sims-3-cz-part5.rar
[05/08/2011 - 17:31:56 | A | 810240029] F:\the-sims-3-cz-part6.rar
[16/06/2011 - 09:53:50 | N | 1224471] F:\UsbFix (1).exe
[14/08/2011 - 10:48:09 | SHD ] G:\$RECYCLE.BIN
[25/07/2011 - 14:18:39 | A | 1757] G:\$RECYCLE.BIN.lnk
[03/08/2011 - 09:57:13 | RASHD ] G:\Autorun.inf
[16/06/2011 - 09:56:41 | HD ] G:\RECYCLER
[23/12/2010 - 17:06:56 | SHD ] G:\System Volume Information
[25/07/2011 - 14:18:39 | A | 1783] G:\System Volume Information.lnk
[01/10/2010 - 14:29:24 | SHD ] G:\temp
[25/07/2011 - 14:18:39 | A | 1741] G:\temp.lnk

################## | Vaccin |

F:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
G:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)

################## | E.O.F |

[vyosek]

Zapojte oba disky

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix