Kolega me poprosil o soucinnost. Mackejte po startu PC F8 a zvolte Posledni znama funkcni konfigurace. System nam snad nabehne. bohuzel stale problem pretrvava Start - spustit - napsat cmd - OK - spusti se prikazovy radek - tam napiste sfc /scannow - enter - zacne probiha kontrola souboru Ale puvodni problem s vyskakovacimi reklamami je tu staleKód: Vybrat vše
HitmanPro 3.7.6.201
www.hitmanpro.com
Computer name . . . . : MAŘENA-PC
Windows . . . . . . . : 6.1.1.7601.X64/4
User name . . . . . . : Mařena-PC\Mařena
UAC . . . . . . . . . : Enabled
License . . . . . . . : Free
Scan date . . . . . . : 2013-07-08 22:44:41
Scan mode . . . . . . : Normal
Scan duration . . . . : 9m 7s
Disk access mode . . : Direct disk access (SRB)
Cloud . . . . . . . . : Internet
Reboot . . . . . . . : No
Threats . . . . . . . : 0
Traces . . . . . . . : 5
Objects scanned . . . : 2 113 843
Files scanned . . . . : 53 218
Remnants scanned . . : 615 045 files / 1 445 580 keys
Suspicious files ____________________________________________________________
C:\Windows\PEV.exe
Size . . . . . . . : 256 000 bytes
Age . . . . . . . : 2.2 days (2013-07-06 17:47:14)
Entropy . . . . . : 8.0
SHA-256 . . . . . : AE0F5CC54E4B133DF66A54572A7CE52FAFF11F8FD0CAEAB088AAD3699D6EC924
Fuzzy . . . . . . : 22.0
Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
The .rsrc (resources) section in this program is set to executable. This is an indication of malware infection.
Authors name is missing in version info. This is not common to most programs.
Version control is missing. This file is probably created by an individual. This is not typical for most programs.
Time indicates that the file appeared recently on this computer.
The file is located in a folder that contains core operating system files from Windows. This is not typical for most programs and is only common to system tools, drivers and hacking utilities.
Program contains PE structure anomalies. This is not typical for most programs.
Forensic Cluster
-7.5s C:\Qoobox\Quarantine\Registry_backups\
-7.5s C:\Qoobox\
-7.5s C:\Qoobox\Quarantine\
-2.6s C:\Qoobox\BackEnv\
-2.5s C:\Qoobox\Quarantine\catchme.log
-0.0s C:\Windows\SWXCACLS.exe
-0.0s C:\Windows\SWSC.exe
-0.0s C:\Windows\sed.exe
-0.0s C:\Windows\grep.exe
-0.0s C:\Windows\zip.exe
0.0s C:\Windows\SWREG.exe
0.0s C:\Windows\PEV.exe
0.0s C:\Windows\NIRCMD.exe
0.0s C:\Windows\MBR.exe
