Kontrola logu Vyřešeno

[PARKR]

aswMBR version 1.0.1.2252 Copyright(c) 2014 AVAST Software
Run date: 2014-12-12 17:16:33
-----------------------------
17:16:33.859 OS Version: Windows x64 6.2.9200
17:16:33.859 Number of processors: 4 586 0x3A09
17:16:33.859 ComputerName: 171978171978RP UserName: Roman
17:16:36.646 Initialize success
17:16:36.693 VM: initialized successfully
17:16:36.693 VM: Intel CPU BiosDisabled
17:16:40.209 AVAST engine defs: 14121100
17:19:20.372 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000002d
17:19:20.372 Disk 0 Vendor: TOSHIBA_MK6459GSXP GT102H Size: 610480MB BusType: 11
17:19:20.607 Disk 0 MBR read successfully
17:19:20.607 Disk 0 MBR scan
17:19:20.607 Disk 0 unknown MBR code
17:19:20.622 Disk 0 Partition 1 00 EE GPT 2097151 MB offset 1
17:19:20.841 Disk 0 scanning C:\WINDOWS\system32\drivers
17:19:47.405 Service scanning
17:20:30.235 Modules scanning
17:20:30.985 AVAST engine scan C:\WINDOWS
17:20:43.829 AVAST engine scan C:\WINDOWS\system32
17:24:40.309 AVAST engine scan C:\WINDOWS\system32\drivers
17:25:42.093 AVAST engine scan C:\Users\Roman
17:32:57.755 File: C:\Users\Roman\OneDrive\Documents\plocha\CAK-PAK\CAK PAK\Keygen\keygen.exe **INFECTED** Win32:Malware-gen
17:33:16.333 File: C:\Users\Roman\OneDrive\Documents\plocha\PhotoshopPortable\App\Photoshop64\sniffer.exe **INFECTED** Win64:Evo-gen [Susp]
17:33:33.491 File: C:\Users\Roman\OneDrive\Documents\plocha\PS CZ\FULL ADOBE PRODUCT\instalace\PhotoshopPortable\App\Photoshop64\sniffer.exe **INFECTED** Win64:Evo-gen [Susp]
17:33:41.194 AVAST engine scan C:\ProgramData
17:38:14.863 Disk 0 statistics 5535277/0/0 @ 2,93 MB/s
17:38:14.863 Scan finished successfully
17:39:02.444 Disk 0 MBR has been saved successfully to "C:\Users\Roman\Desktop\MBR.dat"
17:39:02.459 The log file has been saved successfully to "C:\Users\Roman\Desktop\aswMBR.txt"

[Reklama]

[jaro3]

Spusť znovu aswMBR , dej sken a poté klikni na „Fix“
Zavři program , restartuj PC , po restartu

Po restartu vypni obnovení systému na všech discích.
http://support.microsoft.com/kb/310405/cs
Podívej se sem:
C:\System Volume Information\Microsoft--- pokud tam je tato složka (Microsoft) , tak jí smaž.
Nakonec si znovu zapni obnovu systému.
znovu spusť aswMBR a dej sken , klikni na „Save log“
Obsah logu sem znovu vlož.

[PARKR]

Ten link platí pro WIN XP . Platí to i pro WIN 8 ? U WIN 8 je to asi jinak . Podle toho návodu se řídit nemůžu . Udělal jsem to podle Win 7 snad dobře

za chvíli dám LOG

[jaro3]

Je to tak..

Co problémy?

[PARKR]

aswMBR version 1.0.1.2252 Copyright(c) 2014 AVAST Software
Run date: 2014-12-12 21:38:04
-----------------------------
21:38:04.541 OS Version: Windows x64 6.2.9200
21:38:04.541 Number of processors: 4 586 0x3A09
21:38:04.557 ComputerName: 171978171978RP UserName: Roman
21:38:05.526 Initialize success
21:38:05.526 VM: initialized successfully
21:38:05.526 VM: Intel CPU BiosDisabled
21:38:09.029 AVAST engine defs: 14121100
21:38:12.404 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000002d
21:38:12.404 Disk 0 Vendor: TOSHIBA_MK6459GSXP GT102H Size: 610480MB BusType: 11
21:38:12.545 Disk 0 MBR read successfully
21:38:12.545 Disk 0 MBR scan
21:38:12.545 Disk 0 unknown MBR code
21:38:12.545 Disk 0 Partition 1 00 EE GPT 2097151 MB offset 1
21:38:12.717 Disk 0 scanning C:\WINDOWS\system32\drivers
21:38:45.526 Service scanning
21:39:38.493 Modules scanning
21:39:40.688 AVAST engine scan C:\WINDOWS
21:39:45.048 AVAST engine scan C:\WINDOWS\system32
21:43:03.250 AVAST engine scan C:\WINDOWS\system32\drivers
21:43:39.198 AVAST engine scan C:\Users\Roman
21:50:59.862 File: C:\Users\Roman\OneDrive\Documents\plocha\CAK-PAK\CAK PAK\Keygen\keygen.exe **INFECTED** Win32:Malware-gen
21:51:21.878 File: C:\Users\Roman\OneDrive\Documents\plocha\PhotoshopPortable\App\Photoshop64\sniffer.exe **INFECTED** Win64:Evo-gen [Susp]
21:51:41.996 File: C:\Users\Roman\OneDrive\Documents\plocha\PS CZ\FULL ADOBE PRODUCT\instalace\PhotoshopPortable\App\Photoshop64\sniffer.exe **INFECTED** Win64:Evo-gen [Susp]
21:51:50.518 AVAST engine scan C:\ProgramData
21:56:21.127 Disk 0 statistics 5536375/0/0 @ 3,15 MB/s
21:56:21.127 Scan finished successfully
22:00:12.073 Disk 0 MBR has been saved successfully to "C:\Users\Roman\Desktop\čištění\MBR.dat"
22:00:12.073 The log file has been saved successfully to "C:\Users\Roman\Desktop\čištění\aswMBR ll.txt"

[PARKR]

Cituji : C:\System Volume Information\Microsoft--- pokud tam je tato složka (Microsoft) , tak jí smaž. .

Složka Microsoft tam není .Ale něco špatně asi ano :((

[Orcus]

Jojo, to jsou ty nelegální aplikace. Každopádně určitě vidíš, co máš smazat a tak tak učiň.

[PARKR]

Vymazal jsem ty aplikace tak snad to bude OK .

aswMBR version 1.0.1.2252 Copyright(c) 2014 AVAST Software
Run date: 2014-12-13 00:55:22
-----------------------------
00:55:22.698 OS Version: Windows x64 6.2.9200
00:55:22.699 Number of processors: 4 586 0x3A09
00:55:22.699 ComputerName: 171978171978RP UserName: Roman
00:55:24.003 Initialize success
00:55:24.110 VM: initialized successfully
00:55:24.121 VM: Intel CPU BiosDisabled
00:55:26.952 AVAST engine defs: 14121100
00:55:27.748 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000002d
00:55:27.749 Disk 0 Vendor: TOSHIBA_MK6459GSXP GT102H Size: 610480MB BusType: 11
00:55:28.008 Disk 0 MBR read successfully
00:55:28.010 Disk 0 MBR scan
00:55:28.013 Disk 0 unknown MBR code
00:55:28.019 Disk 0 Partition 1 00 EE GPT 2097151 MB offset 1
00:55:28.266 Disk 0 scanning C:\WINDOWS\system32\drivers
00:56:06.265 Service scanning
00:56:49.623 Modules scanning
00:56:50.804 AVAST engine scan C:\WINDOWS
00:57:08.170 AVAST engine scan C:\WINDOWS\system32
01:00:17.930 AVAST engine scan C:\WINDOWS\system32\drivers
01:00:46.053 AVAST engine scan C:\Users\Roman
01:09:54.866 AVAST engine scan C:\ProgramData
01:14:25.844 Disk 0 statistics 5156221/0/0 @ 2,51 MB/s
01:14:25.848 Scan finished successfully
01:30:54.878 Disk 0 MBR has been saved successfully to "C:\Users\Roman\Desktop\MBR.dat"
01:30:55.082 The log file has been saved successfully to "C:\Users\Roman\Desktop\aswMBRvvv.txt"

[jaro3]

Stáhni si zde DelFix

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem.Jinak je zpráva zde:
v C: \ DelFix.txt

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.

[PARKR]

# DelFix v10.8 - Logfile created 13/12/2014 at 10:32:11
# Updated 29/07/2014 by Xplode
# Username : Roman
# Operating System : Windows 8.1 (64 bits)

~ Removing disinfection tools ...

Deleted : C:\Qoobox
Deleted : C:\32788R22FWJFW
Deleted : C:\FRST
Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\ComboFix.txt
Deleted : C:\zoek-results.log
Deleted : C:\Users\Roman\Desktop\aswMBR.txt
Deleted : C:\Users\Roman\Desktop\aswMBRvvv.txt
Deleted : C:\Users\Roman\Desktop\Fixlog.txt
Deleted : C:\Users\Roman\Desktop\FRST64.exe
Deleted : C:\Users\Roman\Desktop\MBR.dat
Deleted : C:\Users\Roman\Downloads\FRST64 (1).exe
Deleted : C:\Users\Roman\Downloads\FRST64 (2).exe
Deleted : C:\Users\Roman\Downloads\FRST64 (3).exe
Deleted : C:\Users\Roman\Downloads\FRST64 (4).exe
Deleted : C:\Users\Roman\Downloads\FRST64.exe
Deleted : C:\WINDOWS\grep.exe
Deleted : C:\WINDOWS\PEV.exe
Deleted : C:\WINDOWS\NIRCMD.exe
Deleted : C:\WINDOWS\MBR.exe
Deleted : C:\WINDOWS\SED.exe
Deleted : C:\WINDOWS\SWREG.exe
Deleted : C:\WINDOWS\SWSC.exe
Deleted : C:\WINDOWS\SWXCACLS.exe
Deleted : C:\WINDOWS\Zip.exe
Deleted : HKLM\SOFTWARE\OldTimer Tools
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Swearware

~ Cleaning system restore ...

Deleted : RP #8 [Naplánovaný kontrolní bod | 12/13/2014 08:30:49]

New restore point created !

########## - EOF - ##########

[Orcus]

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.

[PARKR]

Jj tak snad oK .Díky za pomoc