Prosím o preventivku AspireOne

[s16strnadova]

Dobrý den,
předem se omlouvám za tak pozdní odpověď, byla jsem pracovně 2 týdny pryč. Pokud můžeme dále pokračovat zde je link na požadovaný soubor: http://leteckaposta.cz/658621654

děkuji

[altrok]

Pro jistotu zazalohujte dulezita data.


Start -> Vsechny programy -> Prislusenstvi -> pravej klik na Prikazovy radek a Spustit jako spravce (v pripade XP obycejne dvojklikem)

• vepiste chkdsk /r
• enter a restartujte PC
• tato kontrola a opravovani probihaji pred nactenim OS a trvaji az nekolik hodin

Ulozte na plochu rkill.exe, ukoncete vsechny aplikace a spustte - kdyby ho havet blokovala, pouzijte alternativni odkaz

• http://download.bleepingcomputer.com/grinler/rkill.exe
• http://download.bleepingcomputer.com/grinler/rkill.com
• obsah logu vytvoreneho take na plose (rkill.txt) zaslete v pristi odpovedi
• nerestartujte ted pocitac jinak prijdete o ucinek rkillu

POZOR - TATO UTILITA MA VELKOU SCHOPNOST MAZAT - NESPOUSTEJTE JI BEZ DOPORUCENI RADCE
Ulozte na plochu ComboFix.exe - http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete antiviry a vsechny real-time ochrany
• spustte ComboFix jako spravce (lepe pod uctem s administratorskym opravnenim)
• s licencnimi podminkami souhlaste - Ano
• pokud je nabidnuta instalace konzoly pro zotaveni, souhlaste
• v prubehu skenovani nechte PC v klidu - nic nespoustejte a do okna CombFixu neklikejte
• vysledek skenu naleznete v C:\ComboFix.txt, jehoz obsah mi zkopirujte do pristi odpovedi.

[s16strnadova]

kontrola proběhla v pořádku,

zde je log z rkill.exe:

Rkill 2.7.0 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2015 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 02/28/2015 01:13:06 AM in x86 mode.
Windows Version: Microsoft Windows XP Service Pack 3

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* No issues found.

Checking Windows Service Integrity:

* No issues found.

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* HOSTS file entries found:

127.0.0.1 localhost

Program finished at: 02/28/2015 01:14:38 AM
Execution time: 0 hours(s), 1 minute(s), and 32 seconds(s)


bohužel při spuštěstí programu combofix.exe po odsouhlasení podmínek, se mi ukázalo okénko, že vypršela platnost tohoto programu, a že pokud kliknu na ANO, bude program omezen pouze na určité funkce, pokud kliknu NE, program se vypne, klikla jsem na ANO a zatím se nic s pc neděje...

[altrok]

Spustil se nejakym zpusobem ComboFix? Kouknete jestli se uz nevytvoril log v C:\ComboFix.txt

[s16strnadova]

bohužel zkusila jsem to znova a opět se ukázalo toto okno:



ani žádný adresář v C: ComboFix se také nevytvořil....

[cernohous13]

Zdravím a vážený kolega promine

Odinstaluj starý CF http://tharifas.sweb.cz/T-Cleaner.exe

a zkus aktuální http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pardon a já mizím

[s16strnadova]

bohužel i s Vaší radou, stáhla jsem si tu novější verzi CF a ukazuje se mi to samé okénko! Je to zvláštní, malý netbook a dělá takovou neplechu.

[altrok]

Zkuste ComboFix spustit v nouzovem rezimu.

[s16strnadova]

bohužel ani v nouzovém režimu to nefunguje, vyskakuje stejné okénko o tom, že platnost combofixu vypršela, zjistila jsem, že na netbooku mi nefunguje wifi, nemohu se s netbookem připojit k internetu a jsem na jiném pc, nesvítí modrá kontrolka pro wifi, i když se ji snažím ručně zapnout, stále světýlko je zhaslé,...asi jsou vymazané ovladače ?

[altrok]

Ulozte na plochu FSS http://www.bleepingcomputer.com/downloa ... e-scanner/

• spustte a zaskrtnete vsechny ramecky (checkboxy) vlevo
• kliknete na Scan, obsah logu FSS.txt (ulozeny v miste umisteni FSS.exe) vlozte do pristiho prispevku.

[s16strnadova]

Farbar Service Scanner Version: 17-01-2015
Ran by Dana (administrator) on 28-02-2015 at 17:32:29
Running from "C:\Documents and Settings\Dana\Plocha"
Microsoft Windows XP Home Edition Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
There is no connection to network.
Attempt to access Google IP returned error. Google IP is unreachable
Attempt to access Google.com returned error: Other errors
Attempt to access Yahoo.com returned error: Other errors


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Policy:
========================


Security Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Other Services:
==============


File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\afd.sys => File is digitally signed
C:\WINDOWS\system32\Drivers\netbt.sys => File is digitally signed
C:\WINDOWS\system32\Drivers\tcpip.sys => File is digitally signed
C:\WINDOWS\system32\Drivers\ipsec.sys => File is digitally signed
C:\WINDOWS\system32\dnsrslvr.dll => File is digitally signed
C:\WINDOWS\system32\ipnathlp.dll => File is digitally signed
C:\WINDOWS\system32\netman.dll => File is digitally signed
C:\WINDOWS\system32\wbem\WMIsvc.dll => File is digitally signed
C:\WINDOWS\system32\srsvc.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\sr.sys => File is digitally signed
C:\WINDOWS\system32\wscsvc.dll => File is digitally signed
C:\WINDOWS\system32\wbem\WMIsvc.dll => File is digitally signed
C:\WINDOWS\system32\wuauserv.dll => File is digitally signed
C:\WINDOWS\system32\qmgr.dll => File is digitally signed
C:\WINDOWS\system32\es.dll => File is digitally signed
C:\WINDOWS\system32\cryptsvc.dll => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed

Extra List:
=======
aswTdi(9) Gpc(6) IPSec(4) NetBT(5) PSched(7) Tcpip(3)
0x09000000040000000100000002000000030000000900000008000000050000000600000007000000
IpSec Tag value is correct.

**** End of log ****

[altrok]

Ulozte na plochu Services Repair http://kb.eset.com/library/ESET/KB%20Te ... Repair.exe

• spustte jako spravce, prvni tabulku odkliknete Ano
• souhlaste s restartem klikem na Ano
• dejte log, ktery bude ulozen na plose ve slozce CC Support\Logs\SvcRepair.txt

Ulozte na plochu FSS http://www.bleepingcomputer.com/downloa ... e-scanner/

• spustte a zaskrtnete vsechny ramecky (checkboxy) vlevo
• kliknete na Scan, obsah logu FSS.txt (ulozeny v miste umisteni FSS.exe) vlozte do pristiho prispevku.

[s16strnadova]

Zdravim,

omlouvam se za svoji několika měsíční neaktivitu. Bylo by možné v tomto topicu stále pokračovat? NTB Aspire One stale nema pristup na internet, nefunguje vůbec wifi, ani pri kliknuti na wifi tlacitko na ntb, pouze datovym kabelem rozbehneme internet. Podle navodu prikladam a pokracuji z předchozího příspěvku.

Log SVc Repair:

Log Opened: 2015-11-15 @ 20:03:40
20:03:40 - -----------------
20:03:40 - | Begin Logging |
20:03:40 - -----------------
20:03:40 - Fix started on a WIN_XP X86 computer
20:03:40 - Prep in progress. Please Wait.
20:03:44 - Prep complete
20:03:44 - Repairing Services Now. Please wait...
20:03:44 - Services Repair Complete.
20:03:53 - Reboot Initiated

Druhý log FSS:

Farbar Service Scanner Version: 17-01-2015
Ran by Dana (administrator) on 15-11-2015 at 20:11:10
Running from "C:\Documents and Settings\Dana\Plocha"
Microsoft Windows XP Home Edition Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Policy:
========================


Security Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Other Services:
==============


File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\afd.sys => File is digitally signed
C:\WINDOWS\system32\Drivers\netbt.sys => File is digitally signed
C:\WINDOWS\system32\Drivers\tcpip.sys => File is digitally signed
C:\WINDOWS\system32\Drivers\ipsec.sys => File is digitally signed
C:\WINDOWS\system32\dnsrslvr.dll => File is digitally signed
C:\WINDOWS\system32\ipnathlp.dll => File is digitally signed
C:\WINDOWS\system32\netman.dll => File is digitally signed
C:\WINDOWS\system32\wbem\WMIsvc.dll => File is digitally signed
C:\WINDOWS\system32\srsvc.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\sr.sys => File is digitally signed
C:\WINDOWS\system32\wscsvc.dll => File is digitally signed
C:\WINDOWS\system32\wbem\WMIsvc.dll => File is digitally signed
C:\WINDOWS\system32\wuauserv.dll => File is digitally signed
C:\WINDOWS\system32\qmgr.dll => File is digitally signed
C:\WINDOWS\system32\es.dll => File is digitally signed
C:\WINDOWS\system32\cryptsvc.dll => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed

Extra List:
=======
aswTdi(9) Gpc(6) IPSec(4) NetBT(5) PSched(7) Tcpip(3)
0x09000000040000000100000002000000030000000900000008000000050000000600000007000000
IpSec Tag value is correct.

**** End of log ****

[altrok]

Stisknete Win + R (klavesa Win je mezi levym Altem a levym Ctrl) a vepiste devmgmt.msc
Zkontrolujte, zda u nektereho zarizeni neni vykricnik.


Dejte pak jeste nove logy z FRST (FRST.txt i Addition.txt) - neni nutne pouzivat FRSTLauncher http://forum.viry.cz/viewtopic.php?f=30&t=133101

[s16strnadova]

ahojky, dekuji, ano zkusila jsem, a bohužel se ukazuje zluty vykricnik u "Sitovy adapter Ethernet". Bohužel mi to nenašlo žádný ovladač z internetu a cd bohužel nemám. Mohu poprosit lin, kde bych tento ovladač mohla stáhnout? A zaroven poprosím o link pro FRST, dekuji moc.