win32:jeefo problem s viry

[davidmarkvart]

ok odkaz smazal moderator dekuji..
tak vcera v noci jsem zapl scan antiviru kaspersky a ted kdyz sem prisel bylo 99%
prosetrilo 226769 objectu a naslo 491 viru......otevrel jsem detailed report a tam mi to pise ze byl vzdicky vir nalezen a pod tim hned disinfected virus takze to vypada ze to hned samo lečí
dalsi kroky budu delat jen na vase pokyny nechci prijit o vysledky s 9ti hodinoveho scanu..predem dekuji za jakoukoli dalsi spolupraci pri reseni meho problemu
co se koukam do teh logu tak v prvni polovine scanu pise ze vir byl nalezenale podtim ze nebyl lecen
uz 28minut je tam 99% asito projizdi nejaky velky soubor

[davidmarkvart]

tak prave jsem doscenoval..ten log s toho proste dobehl ale zadne akce nenabidlo ale jak to lecilo ty soubory tak to ted mam proste vypnout?

[motji]

Ano, mělo by to být vyléčeno.
Ale stejně si zazálohujte důležité soubory

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix

Použijte webcureit z mého podpisu

Bud se tu objeví kolega, nebo tu budu večer já

[davidmarkvart]

dobre ted mam doma nejakou praci tak to pak spustim a pote poslu log nebo vysledky..dekuji za veskere rady a pomoci

[davidmarkvart]

instalace combofixu mne varuje abych vypl Anti vir mam ted toho kasperskyho vypnout?

[Diallix]

ano, vypni ho

[davidmarkvart]

ok..nyni pracuje kombofix ..je ve fazi vyhledavani nakazenych souboru..az to dojede budu pokracovat podle navodu a pote poslu zase log?

[Diallix]

ano, log z combofixu

[davidmarkvart]

tu je muj log s cfixu



ComboFix 11-01-15.01 - Administrator 16.01.2011 12:20:08.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3001.2389 [GMT 1:00]
Spuštěný z: c:\documents and settings\Administrator\Dokumenty\Stažené soubory\ComboFix.exe
AV: Kaspersky Internet Security *Enabled/Outdated* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *Enabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_CDRALW
-------\Legacy_POWERMANAGER
-------\Service_cdralw


((((((((((((((((((((((((( Soubory vytvořené od 2010-12-16 do 2011-01-16 )))))))))))))))))))))))))))))))
.

2011-01-16 00:18 . 2010-10-05 19:26 109240 ----a-w- c:\program files\Mozilla Firefox\extensions\KavAntiBanner@Kaspersky.ru\components\abhelperxpcom.dll
2011-01-16 00:18 . 2010-10-05 19:27 150200 ----a-w- c:\program files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru\components\kavlinkfilter.dll
2011-01-15 23:42 . 2011-01-16 10:52 97859 ----a-w- c:\windows\system32\drivers\klick.dat
2011-01-15 23:42 . 2011-01-16 10:52 114243 ----a-w- c:\windows\system32\drivers\klin.dat
2011-01-15 23:40 . 2011-01-15 23:40 -------- d-----w- c:\program files\Kaspersky Lab
2011-01-15 23:40 . 2011-01-16 11:04 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Kaspersky Lab
2011-01-15 23:19 . 2011-01-15 23:19 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Kaspersky Lab Setup Files
2011-01-15 22:19 . 2011-01-15 22:27 -------- d-----w- c:\program files\trend micro
2011-01-15 22:19 . 2011-01-15 22:27 -------- d-----w- C:\rsit
2011-01-11 16:41 . 2005-06-24 15:24 438272 ----a-r- c:\windows\system32\vp6vfw.dll
2011-01-11 16:41 . 2004-12-10 08:06 327680 ----a-w- c:\windows\system32\vp6dec.ax
2011-01-11 16:05 . 2011-01-15 12:38 -------- d-----w- c:\program files\Electronic Arts
2010-12-25 15:38 . 2010-12-25 15:38 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Conduit
2010-12-25 15:38 . 2010-12-25 15:38 -------- d-----w- c:\program files\Conduit
2010-12-25 15:38 . 2010-12-26 10:20 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\BrotherSoft_Extreme
2010-12-25 15:38 . 2010-12-25 15:38 -------- d-----w- c:\program files\BrotherSoft_Extreme
2010-12-25 15:38 . 2010-12-25 15:38 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Temp
2010-12-25 15:35 . 2010-12-25 15:38 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\GetRightToGo
2010-12-22 17:21 . 2010-12-22 17:25 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\TS3Client
2010-12-22 17:20 . 2010-12-22 17:20 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\WMTools Downloaded Files
2010-12-22 17:05 . 2010-12-22 17:23 -------- d-----w- c:\program files\TeamSpeak 3 Client

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-16 08:48 . 2010-09-23 06:39 315392 ----a-w- c:\windows\HideWin.exe
2011-01-16 08:47 . 2010-09-23 06:52 1196032 ----a-w- c:\windows\RtlUpd.exe
2011-01-16 08:47 . 2010-09-23 08:20 293376 ----a-w- c:\windows\system32\browserchoice.exe
2011-01-16 08:47 . 2010-09-23 06:53 170520 ----a-w- c:\windows\system32\igfxzoom.exe
2011-01-16 08:47 . 2010-09-23 06:53 920088 ----a-w- c:\windows\system32\igxpun.exe
2011-01-15 23:52 . 2006-10-26 11:45 293376 ----a-w- c:\windows\system32\WISPTIS.EXE
2010-12-01 13:29 . 2010-12-01 13:29 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-11-18 18:15 . 2010-09-22 11:15 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-09 14:52 . 2008-04-14 06:51 249856 ----a-w- c:\windows\system32\odbc32.dll
2010-11-06 00:23 . 2008-04-14 06:52 916480 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:23 . 2008-04-14 06:52 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-11-06 00:23 . 2008-04-14 06:51 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-11-03 12:25 . 2008-04-14 05:50 385024 ----a-w- c:\windows\system32\html.iec
2010-11-02 15:17 . 2008-04-13 22:27 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
2010-10-28 13:09 . 2008-04-14 06:37 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-10-26 13:58 . 2008-04-14 05:45 1853312 ----a-w- c:\windows\system32\win32k.sys
.

------- Sigcheck -------

[-] 2009-06-04 . 1E603EA2A3FDBAE9E5B88A8CB3C03124 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{51a86bb3-6602-4c85-92a5-130ee4864f13}"= "c:\program files\BrotherSoft_Extreme\tbBrot.dll" [2010-12-09 3911776]

[HKEY_CLASSES_ROOT\clsid\{51a86bb3-6602-4c85-92a5-130ee4864f13}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-12-09 11:51 3911776 ----a-w- c:\program files\ConduitEngine\ConduitEngine.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{51a86bb3-6602-4c85-92a5-130ee4864f13}]
2010-12-09 11:51 3911776 ----a-w- c:\program files\BrotherSoft_Extreme\tbBrot.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{51a86bb3-6602-4c85-92a5-130ee4864f13}"= "c:\program files\BrotherSoft_Extreme\tbBrot.dll" [2010-12-09 3911776]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]

[HKEY_CLASSES_ROOT\clsid\{51a86bb3-6602-4c85-92a5-130ee4864f13}]

[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{51A86BB3-6602-4C85-92A5-130EE4864F13}"= "c:\program files\BrotherSoft_Extreme\tbBrot.dll" [2010-12-09 3911776]

[HKEY_CLASSES_ROOT\clsid\{51a86bb3-6602-4c85-92a5-130ee4864f13}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-09-02 13351304]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2005-12-07 30208]
"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2006-05-18 49152]
"AzMixerSel"="c:\program files\Realtek\Audio\InstallShield\AzMixerSel.exe" [2006-07-17 53248]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-02-22 1032192]
"RTHDCPL"="RTHDCPL.EXE" [2008-05-16 16862720]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-06-17 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-06-17 170520]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-06-17 141848]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 1012160]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0aswBoot.exe /A:* /L:1029 /heur:80 /pup /archives /IA:0 /KBD:2 /dir:C:\Program

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 Si3531;Si3531;c:\windows\system32\drivers\Si3531.sys [23.4.2009 14:01 210224]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [1.12.2010 14:29 691696]
R0 ulsata2;ulsata2;c:\windows\system32\drivers\ulsata2.sys [23.4.2009 14:01 192256]
R1 kl2;kl2;c:\windows\system32\drivers\kl2.sys [9.6.2010 16:43 11352]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [7.5.2010 11:06 32856]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2.11.2009 19:27 19472]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2776682
uInternet Connection Wizard,ShellNext = hxxp://www.faststone.org/ThankYou.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Handler: gameboxchrome - {494D4E3B-FA53-4487-8AF6-3F50FE1167A9} - c:\program files\GameBox\gamebox_toolbar.dll
FF - ProfilePath - c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\af90t96l.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2776682&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - BrotherSoft Extreme Customized Web Search
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Skype extension for Firefox: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF - Ext: Anti-Banner: KavAntiBanner@Kaspersky.ru - c:\program files\Mozilla Firefox\extensions\KavAntiBanner@Kaspersky.ru
FF - Ext: Kaspersky URL Advisor: linkfilter@kaspersky.ru - c:\program files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: DAEMON Tools Toolbar: DTToolbar@toolbarnet.com - %profile%\extensions\DTToolbar@toolbarnet.com
FF - Ext: Conduit Engine : engine@conduit.com - %profile%\extensions\engine@conduit.com
FF - Ext: BrotherSoft Extreme Community Toolbar: {51a86bb3-6602-4c85-92a5-130ee4864f13} - %profile%\extensions\{51a86bb3-6602-4c85-92a5-130ee4864f13}
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-Ashampoo Burning Studio 6 FREE_is1 - c:\program files\Ashampoo\Ashampoo Burning Studio 6 FREE\unins000.exe
AddRemove-Mozilla Firefox (3.5.5) - c:\program files\Mozilla Firefox\uninstall\helper.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-16 12:35
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-796845957-1275210071-1801674531-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,be,e0,04,2a,f0,e5,2b,4e,9e,26,6e,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,75,61,70,99,99,88,25,4c,8c,52,d1,\
"6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,75,61,70,99,99,88,25,4c,8c,52,d1,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(476)
c:\windows\system32\webcheck.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
c:\program files\CyberLink\Shared files\RichVideo.exe
c:\windows\system32\wdfmgr.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\igfxsrvc.exe
c:\windows\system32\wscntfy.exe
c:\docume~1\ADMINI~1\LOCALS~1\Temp\RtkBtMnt.exe
.
**************************************************************************
.
Celkový čas: 2011-01-16 12:40:03 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-01-16 11:40

Před spuštěním: Volných bajtů: 229 543 845 888
Po spuštění: Volných bajtů: 235 026 120 704

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - 9A6C85C1EE1F2D008DED9A9FC4A7A3DB

[Diallix]

Toto otestuj na virustotal.com:

c:\windows\system32\wdfmgr.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\igfxsrvc.exe
c:\windows\system32\wscntfy.exe
c:\docume~1\ADMINI~1\LOCALS~1\Temp\RtkBtMnt.exe
c:\windows\system32\sfcfiles.dll

kazdy subor upni. ak naskoci okno, odklikni mozno REANALYSE.

Vysledky (url) skopiruj sem.

[davidmarkvart]

u prvniho souboru my vyjelo tohle..to si myslel?

AhnLab-V3 2011.01.15.01 2011.01.15 -
AntiVir 7.11.1.145 2011.01.15 -
Antiy-AVL 2.0.3.7 2011.01.16 -
Avast 4.8.1351.0 2011.01.16 -
Avast5 5.0.677.0 2011.01.15 -
BitDefender 7.2 2011.01.16 -
CAT-QuickHeal 11.00 2011.01.15 -
ClamAV 0.96.4.0 2011.01.16 -
Command 5.2.11.5 2011.01.15 -
Comodo 7403 2011.01.15 -
DrWeb 5.0.2.03300 2011.01.16 -
Emsisoft 5.1.0.1 2011.01.15 -
eSafe 7.0.17.0 2011.01.13 -
eTrust-Vet 36.1.8100 2011.01.14 -
F-Prot 4.6.2.117 2011.01.15 -
F-Secure 9.0.16160.0 2011.01.16 -
Fortinet 4.2.254.0 2011.01.16 -
GData 21 2011.01.16 -
Ikarus T3.1.1.97.0 2011.01.16 -
Jiangmin 13.0.900 2011.01.16 -
K7AntiVirus 9.75.3548 2011.01.14 -
Kaspersky 7.0.0.125 2011.01.16 -
McAfee 5.400.0.1158 2011.01.16 -
McAfee-GW-Edition 2010.1C 2011.01.16 -
Microsoft 1.6402 2011.01.16 -
NOD32 5791 2011.01.16 -
Norman 6.06.12 2011.01.16 -
nProtect 2011-01-16.01 2011.01.16 -
Panda 10.0.2.7 2011.01.16 -
PCTools 7.0.3.5 2011.01.16 -
Prevx 3.0 2011.01.16 -
Rising 22.82.05.00 2011.01.15 -
Sophos 4.61.0 2011.01.16 -
SUPERAntiSpyware 4.40.0.1006 2011.01.16 -
Symantec 20101.3.0.103 2011.01.16 -
TheHacker 6.7.0.1.115 2011.01.14 -
TrendMicro 9.120.0.1004 2011.01.16 -
TrendMicro-HouseCall 9.120.0.1004 2011.01.16 -
VBA32 3.12.14.2 2011.01.14 -
VIPRE 8086 2011.01.16 -
ViRobot 2011.1.15.4256 2011.01.16 -
VirusBuster 13.6.148.0 2011.01.15 -



nebo odkaz http://www.virustotal.com/file-scan/rep ... 1295183452

[Diallix]

.hej to, staci url

[davidmarkvart]

2. http://www.virustotal.com/file-scan/rep ... 1295184368
3. http://www.virustotal.com/file-scan/rep ... 1295184687
4. http://www.virustotal.com/file-scan/rep ... 1295184817
5. ten sem nenasel
6. http://www.virustotal.com/file-scan/rep ... 1295185202

[Diallix]

ok.

stiahni, nainstaluj a aktualizuj tento nastroj podla navodu : http://www.viry.cz/forum/viewtopic.php?t=4097

potom v nudzovom rezime ho spusti, podla navodu ho nastav a preskenuj s nim pc. Log (vid. navod) sem daj.

[davidmarkvart]

tak eScan mam updatovany ale mam problem s http://www.viry.cz/forum/viewtopic.php?t=6701
v ovladacih panelej zadny java nemam:(