<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">Staci se podivat sem:<br>
<a class="moz-txt-link-freetext" href="https://www.virustotal.com/#/ip-address/92.63.197.48">https://www.virustotal.com/#/ip-address/92.63.197.48</a><br>
<br>
je tam videt, ze rada AV chyta jak tu IP adresu, tak ty exace,
ktere se stahly.<br>
V kazdem pripade na tom pocitaci uz bezelo "neco" pred tim, co
ulozilo nejspis do registru to spousteni PowerShellu, ktery mel za
ukol stahnout nejposlednejsi malicious exe - to jmeno vnc je mozna
jen kourova clona.<br>
Microsofti antivirus je stejne dobry, jako Malovani, ale i ten by
toto mel chytat - takze zkontrolujte jeho logy a karantenu.<br>
<br>
Ja byt vami, tak zkontroluji, ze mam zalohy dulezitych veci a
pocitac smazu a zacnu znovu. Nikdy nevite, kde se ktera komponenta
muze usadit, a tady je videt, ze utocnik uz mel pc pod kontrolou.<br>
<br>
Zdravim,<br>
J.<br>
<br>
On 19.10.2018 16:11, Dodo Racek wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAP5hgLhkcR5HP6RPdJB1MEyqm53bo+9sCLd2gwUQy+UVxUU3xA@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<div dir="ltr">
<div> ta IP adresa z vasho odkazu vyzera byt <br>
</div>
<div><br>
</div>
<div>
<table class="gmail-table gmail-result-table">
<tbody>
<tr>
<th class="gmail-ip_header">IP address</th>
<td><b class="gmail-ip">92.63.197.48</b></td>
</tr>
<tr>
<th>Latitude</th>
<td class="gmail-lat">55.7386</td>
</tr>
<tr>
<th>Longitude</th>
<td class="gmail-lng">37.6068</td>
</tr>
<tr>
<th>Country</th>
<td><span class="gmail-country_name">Russian Federation</span></td>
</tr>
<tr>
<th>Region</th>
<td><span class="gmail-region_name"></span><br>
</td>
</tr>
<tr>
<th>City</th>
<td class="gmail-city"><br>
</td>
</tr>
<tr>
<th>Organization</th>
<td class="gmail-company">IT DeLuxe Ltd.</td>
</tr>
</tbody>
</table>
</div>
<div><br>
</div>
<div>Nemyslim, ze by to bola nova featura Windows od Microsoftu
...<br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Dodo<br>
</div>
<div><br>
</div>
<div class="gmail_quote">
<div dir="ltr">pi 19. 10. 2018 o 15:56 Jaroslav Buchta <<a
href="mailto:jaroslav.buchta@hascomp.cz"
moz-do-not-send="true">jaroslav.buchta@hascomp.cz</a>>
napísal(a):<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">Dnes se mi
2x stalo (po velke aktualizaci windows ;-) ) ze se mi 2x
neco <br>
pokusilo prevzit UI pocitace, v radku pro spusteni programu
se objevilo<br>
<br>
<br>
coz dava smysl. Ma nekdo zkusenost nebo tuseni kudy to neco
napadlo a co <br>
s tim? Heslo jsem zmenil a radsi pracuju offline aspon kdyz
jsem na <br>
verejne adrese... Defender nic nesignalizuje, VNC
nainstalovany nemam.<br>
<br>
Nebo je to nova featura windows? :-P<br>
<br>
_______________________________________________<br>
HW-list mailing list - sponsored by <a rel="noreferrer"
moz-do-not-send="true">www.HW.cz</a><br>
<a moz-do-not-send="true">Hw-list@list.hw.cz</a><br>
<a rel="noreferrer" moz-do-not-send="true">http://list.hw.cz/mailman/listinfo/hw-list</a><br>
</blockquote>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
HW-list mailing list - sponsored by <a class="moz-txt-link-abbreviated" href="http://www.HW.cz">www.HW.cz</a>
<a class="moz-txt-link-abbreviated" href="mailto:Hw-list@list.hw.cz">Hw-list@list.hw.cz</a>
<a class="moz-txt-link-freetext" href="http://list.hw.cz/mailman/listinfo/hw-list">http://list.hw.cz/mailman/listinfo/hw-list</a>
</pre>
</blockquote>
<p><br>
</p>
<pre class="moz-signature" cols="72">--
Jindroush <a class="moz-txt-link-rfc2396E" href="mailto:jindroush@seznam.cz"><jindroush@seznam.cz></a></pre>
</body>
</html>