Zpomalení NTB Dell Vyřešeno

[dominikfirt]

Notebook už jede líp,jak bootování,tak načítání Opery či Chromu. Díky za pomoc,zase Vaše fórum nezklamalo .

[Reklama]

[jaro3]

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

Stáhni si zde DelFix
https://toolslib.net/downloads/viewdownload/2-delfix/

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem.Jinak je zpráva zde:
v C: \ DelFix.txt

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.

[dominikfirt]

# DelFix v10.8 - Logfile created 22/02/2015 at 18:30:23
# Updated 29/07/2014 by Xplode
# Username : Dominik - DOMINIK-PC
# Operating System : Windows 7 Professional Service Pack 1 (32 bits)

~ Removing disinfection tools ...

Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis

~ Cleaning system restore ...

Deleted : RP #62 [Instalační služba modulů systému Windows | 02/07/2015 21:47:17]
Deleted : RP #63 [Removed Java 8 Update 31 | 02/09/2015 13:09:16]
Deleted : RP #64 [Installed Java(TM) 6 Update 26 | 02/09/2015 13:11:29]
Deleted : RP #65 [Removed Java(TM) 6 Update 26 | 02/09/2015 14:43:05]
Deleted : RP #66 [Installed Java 7 Update 13 | 02/09/2015 14:45:11]
Deleted : RP #67 [Removed System Requirements Lab for Intel | 02/09/2015 14:48:07]
Deleted : RP #68 [Windows Update | 02/11/2015 13:17:16]
Deleted : RP #69 [Windows Update | 02/14/2015 19:09:48]
Deleted : RP #70 [Windows Update | 02/18/2015 16:28:54]
Deleted : RP #71 [zoek.exe restore point | 02/21/2015 10:14:53]
Deleted : RP #72 [Windows Update | 02/21/2015 20:29:36]

New restore point created !

########## - EOF - ##########

[dominikfirt]

Mám trochu problém,že když koukám na film online,nebo video na youtube dýl jak 30 min začne se mi to trochu sekat,vypnul jsem hardwarovou akceleraci,ale stejně,neni to nějak hrozné,ale trochu se to občas sekne.

[Orcus]

Vlož jsem teploty z HWMonitoru ve chvíli, kdy se to začne sekat.

[dominikfirt]

Koukal jsem na youtube video v kvalitě 720p a okolo 30 minutu se mi to trochu začlo sekat,když jsem to stopnul na chvíli a znovu pustil tak to bylo dobrý a asi po 5 minutách zase malinké sekání.
dávám jsem i test netu. ping 14 ms, download speed 5.07Mbps, upload speed 0.35 Mbps

[jaro3]

Vyšší teploty.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

[dominikfirt]

ComboFix 15-02-16.01 - Dominik 23.02.2015 14:02:25.2.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.2046.934 [GMT 1:00]
Spuštěný z: c:\users\Dominik\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
SP: Microsoft Security Essentials *Disabled/Updated* {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Roaming
c:\programdata\Roaming\Intel\Wireless\Settings\Settings.ini
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-01-23 do 2015-02-23 )))))))))))))))))))))))))))))))
.
.
2015-02-23 13:12 . 2015-02-23 13:12 -------- d-----w- c:\users\Willy\AppData\Local\temp
2015-02-23 13:12 . 2015-02-23 13:12 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-02-23 12:16 . 2015-01-29 09:49 9041640 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CED97825-D2E0-4A60-B39F-8519248EDE9B}\mpengine.dll
2015-02-22 19:47 . 2015-02-22 19:56 -------- d-----w- c:\program files\SpeedFan
2015-02-21 20:31 . 2014-09-10 14:30 908840 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{615CC1EB-78A4-42E0-AF00-678C577DFAE8}\gapaengine.dll
2015-02-21 20:30 . 2015-01-29 09:49 9041640 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2015-02-21 10:26 . 2015-02-21 10:13 24064 ----a-w- c:\windows\zoek-delete.exe
2015-02-21 10:26 . 2015-02-23 13:14 -------- d-----w- c:\users\Dominik\AppData\Local\Temp
2015-02-20 18:46 . 2015-02-20 18:46 -------- d-----w- c:\users\Willy\AppData\Local\Adobe
2015-02-20 17:42 . 2015-02-21 10:03 35064 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-02-20 17:42 . 2015-02-20 17:42 -------- d-----w- c:\programdata\RogueKiller
2015-02-09 14:49 . 2015-02-09 15:03 -------- d-----w- c:\users\Dominik\AppData\Roaming\.technic
2015-02-09 14:46 . 2015-02-09 14:46 -------- d-----w- c:\program files\Common Files\Java
2015-02-09 14:46 . 2015-02-09 14:45 861088 ----a-w- c:\windows\system32\npDeployJava1.dll
2015-02-09 14:45 . 2015-02-09 14:45 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2015-02-09 13:19 . 2015-02-22 17:49 -------- d-----w- c:\users\Dominik\AppData\Roaming\.minecraft
2015-02-09 13:12 . 2015-02-09 14:45 782240 ----a-w- c:\windows\system32\deployJava1.dll
2015-02-08 02:17 . 2015-02-08 02:17 -------- d-----w- c:\users\Willy\AppData\Roaming\Apple Computer
2015-02-08 01:57 . 2015-02-08 01:57 -------- d-----w- c:\program files\Common Files\IObit
2015-02-07 23:03 . 2015-02-07 23:03 -------- d-----w- c:\users\Dominik\AppData\Local\Microsoft Games
2015-02-07 21:47 . 2015-02-07 21:47 -------- d-----w- c:\program files\Microsoft Games
2015-02-07 21:44 . 2015-02-07 21:44 -------- d-----w- c:\users\Willy\AppData\Local\Programs
2015-02-07 20:16 . 2015-02-07 20:16 -------- d-sh--w- c:\users\Willy\AppData\Local\EmieUserList
2015-02-07 20:16 . 2015-02-07 20:16 -------- d-sh--w- c:\users\Willy\AppData\Local\EmieSiteList
2015-02-07 20:16 . 2015-02-07 20:16 -------- d-sh--w- c:\users\Willy\AppData\Local\EmieBrowserModeList
2015-02-07 19:27 . 2014-06-04 14:17 31008 ----a-w- c:\windows\system32\SmartDefragBootTime.exe
2015-02-07 19:04 . 2015-02-07 19:04 -------- d-sh--w- c:\users\Dominik\AppData\Local\EmieUserList
2015-02-07 19:04 . 2015-02-07 19:04 -------- d-sh--w- c:\users\Dominik\AppData\Local\EmieSiteList
2015-02-07 19:04 . 2015-02-07 19:04 -------- d-sh--w- c:\users\Dominik\AppData\Local\EmieBrowserModeList
2015-02-07 19:04 . 2014-03-05 21:19 7670 --s-a-w- c:\windows\system32\mncibaj.vbe
2015-02-07 18:38 . 2015-02-07 18:38 -------- d-----w- c:\users\Dominik\AppData\Local\Opera Software
2015-02-07 18:38 . 2015-02-07 18:38 -------- d-----w- c:\users\Dominik\AppData\Roaming\Opera Software
2015-02-07 18:36 . 2015-02-23 13:03 -------- d-----w- c:\program files\Opera
2015-02-07 16:18 . 2012-07-26 03:39 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2015-02-07 16:18 . 2012-07-26 03:39 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2015-02-07 16:18 . 2012-07-26 02:46 9728 ----a-w- c:\windows\system32\Wdfres.dll
2015-02-07 16:17 . 2012-07-26 02:33 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2015-02-07 16:17 . 2012-07-26 02:32 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2015-02-07 16:17 . 2012-07-26 03:20 73216 ----a-w- c:\windows\system32\WUDFSvc.dll
2015-02-07 16:17 . 2012-07-26 03:20 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll
2015-02-07 16:17 . 2012-07-26 03:20 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2015-02-07 16:17 . 2012-07-26 03:21 196608 ----a-w- c:\windows\system32\WUDFHost.exe
2015-02-07 16:17 . 2012-07-26 03:20 613888 ----a-w- c:\windows\system32\WUDFx.dll
2015-02-07 16:11 . 2015-02-07 16:11 69632 ----a-w- c:\windows\system32\smss.exe
2015-02-07 16:11 . 2015-02-07 16:11 619520 ----a-w- c:\windows\system32\tdh.dll
2015-02-07 16:11 . 2015-02-07 16:11 3969472 ----a-w- c:\windows\system32\ntkrnlpa.exe
2015-02-07 16:11 . 2015-02-07 16:11 3914176 ----a-w- c:\windows\system32\ntoskrnl.exe
2015-02-07 16:11 . 2015-02-07 16:11 38912 ----a-w- c:\windows\system32\csrsrv.dll
2015-02-07 16:11 . 2015-02-07 16:11 1289096 ----a-w- c:\windows\system32\ntdll.dll
2015-02-07 16:11 . 2015-02-07 16:11 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2015-02-07 16:11 . 2015-02-07 16:11 240496 ----a-w- c:\windows\system32\drivers\netio.sys
2015-02-07 16:11 . 2015-02-07 16:11 231424 ----a-w- c:\windows\system32\mswsock.dll
2015-02-07 16:11 . 2015-02-07 16:11 187752 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2015-02-07 16:11 . 2015-02-07 16:11 1294272 ----a-w- c:\windows\system32\drivers\tcpip.sys
2015-02-07 16:11 . 2015-02-07 16:11 49152 ----a-w- c:\windows\system32\taskhost.exe
2015-02-07 16:08 . 2015-02-07 16:08 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2015-02-07 16:05 . 2015-02-07 16:05 1505280 ----a-w- c:\windows\system32\d3d11.dll
2015-02-07 16:02 . 2011-02-18 05:39 31232 ----a-w- c:\windows\system32\prevhost.exe
2015-02-07 16:02 . 2013-02-27 05:05 101720 ----a-w- c:\windows\system32\consent.exe
2015-02-07 16:02 . 2013-02-27 04:49 1796096 ----a-w- c:\windows\system32\authui.dll
2015-02-07 16:02 . 2013-02-27 04:49 47104 ----a-w- c:\windows\system32\appinfo.dll
2015-02-07 15:45 . 2015-02-07 18:41 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2015-02-07 15:45 . 2015-02-07 18:41 701616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2015-02-07 15:45 . 2015-02-07 15:45 -------- d-----w- c:\windows\system32\Macromed
2015-02-06 15:31 . 2015-02-06 15:31 -------- d-----w- c:\users\Dominik\AppData\Local\Intel
2015-02-06 13:02 . 2015-02-20 13:44 114904 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-02-06 13:01 . 2014-11-21 05:14 51928 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-02-06 13:01 . 2014-11-21 05:14 75480 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-02-06 13:01 . 2014-11-21 05:14 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-02-06 13:01 . 2015-02-06 13:01 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2015-02-06 13:01 . 2015-02-06 13:01 -------- d-----w- c:\programdata\Malwarebytes
2015-02-06 11:30 . 2014-05-14 16:23 45536 ----a-w- c:\windows\system32\wups2.dll
2015-02-06 11:30 . 2014-05-14 16:23 54240 ----a-w- c:\windows\system32\wuauclt.exe
2015-02-06 11:30 . 2014-05-14 16:23 1973728 ----a-w- c:\windows\system32\wuaueng.dll
2015-02-06 11:30 . 2014-05-14 16:17 2425856 ----a-w- c:\windows\system32\wucltux.dll
2015-02-06 11:30 . 2014-05-14 16:23 36320 ----a-w- c:\windows\system32\wups.dll
2015-02-06 11:30 . 2014-05-14 16:17 92672 ----a-w- c:\windows\system32\wudriver.dll
2015-02-06 11:30 . 2014-05-14 16:23 581600 ----a-w- c:\windows\system32\wuapi.dll
2015-02-06 11:30 . 2014-05-14 08:23 179656 ----a-w- c:\windows\system32\wuwebv.dll
2015-02-06 11:30 . 2014-05-14 08:17 33792 ----a-w- c:\windows\system32\wuapp.exe
2015-02-05 19:52 . 2015-02-05 19:52 -------- d-----w- c:\users\Dominik\AppData\Local\Skype
2015-02-05 19:52 . 2015-02-21 17:11 -------- d-----w- c:\users\Dominik\AppData\Roaming\Skype
2015-02-05 19:52 . 2015-02-05 19:52 -------- d-----w- c:\program files\Common Files\Skype
2015-02-05 19:52 . 2015-02-05 19:52 -------- d-----r- c:\program files\Skype
2015-02-05 19:51 . 2015-02-05 19:52 -------- d-----w- c:\programdata\Skype
2015-02-05 17:20 . 2015-02-05 17:20 -------- d-----w- c:\windows\system32\SPReview
2015-02-05 17:19 . 2015-02-05 17:19 -------- d-----w- c:\windows\system32\EventProviders
2015-02-05 17:18 . 2015-02-05 17:18 -------- d-----w- c:\program files\Microsoft Silverlight
2015-02-05 16:59 . 2010-11-05 01:58 1130824 ----a-w- c:\windows\system32\dfshim.dll
2015-02-05 16:59 . 2010-11-20 12:21 11776 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-02-05 16:59 . 2010-11-20 12:19 3215872 ----a-w- c:\windows\system32\mstscax.dll
2015-02-05 16:59 . 2010-11-20 10:24 52224 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys
2015-02-05 16:59 . 2010-11-20 12:19 954752 ----a-w- c:\windows\system32\mfc40.dll
2015-02-05 16:59 . 2010-11-20 12:19 954288 ----a-w- c:\windows\system32\mfc40u.dll
2015-02-05 16:59 . 2010-11-20 12:21 1159168 ----a-w- c:\windows\system32\sysmain.dll
2015-02-05 16:59 . 2010-11-20 12:21 423936 ----a-w- c:\windows\system32\secproc_isv.dll
2015-02-05 16:59 . 2010-11-20 12:17 327168 ----a-w- c:\windows\system32\RMActivate_isv.exe
2015-02-05 16:59 . 2010-11-20 12:20 428032 ----a-w- c:\windows\system32\secproc.dll
2015-02-05 16:59 . 2010-11-20 12:17 322048 ----a-w- c:\windows\system32\RMActivate.exe
2015-02-05 16:59 . 2010-11-20 12:21 253952 ----a-w- c:\windows\system32\spwizui.dll
2015-02-05 16:57 . 2010-11-20 12:29 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2015-02-05 16:56 . 2010-11-20 12:21 198144 ----a-w- c:\windows\system32\wpdwcn.dll
2015-02-05 16:55 . 2010-11-20 12:21 189952 ----a-w- c:\windows\system32\wdscore.dll
2015-02-05 16:55 . 2010-11-20 12:21 363008 ----a-w- c:\windows\system32\wbemcomn.dll
2015-02-05 16:55 . 2010-11-20 12:19 606208 ----a-w- c:\windows\system32\wbem\fastprox.dll
2015-02-04 16:22 . 2015-02-04 16:22 -------- d-----w- c:\users\Default\AppData\Roaming\IObit
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-02-07 16:12 . 2015-02-07 16:12 208384 ----a-w- c:\windows\system32\webcheck.dll
2015-02-05 17:28 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2014-12-31 11:13 . 2014-10-21 13:00 249488 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2014-08-22 974432]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
2015-01-20 21:02 5496600 ----a-w- c:\program files\CCleaner\CCleaner.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2006-10-26 22:47 31016 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mncibajSrv]
2014-03-05 21:19 7670 --s-a-w- c:\windows\System32\mncibaj.vbe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mnciuilSrv]
2014-03-05 20:19 7670 --s-a-w- c:\windows\System32\mnciuil.vbe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mncuelqbbSrv]
2014-01-19 17:57 1342 --s-a-w- c:\windows\inf\mncuelqbb.vbe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvBackend]
2014-07-25 14:02 2403104 ----a-w- c:\program files\NVIDIA Corporation\Update Core\NvBackend.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2014-07-02 19:42 4389848 ----a-w- c:\windows\System32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2014-07-02 19:42 377288 ----a-w- c:\windows\System32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvSvc]
2014-07-02 19:42 3063256 ----a-w- c:\windows\System32\nvsvc.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ShadowPlay]
2014-07-25 14:01 1126480 ----a-w- c:\windows\System32\nvspcap.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2012-07-03 08:04 252848 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2007-04-27 14:35 857648 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
.
R3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [x]
R3 CV2K1;CommView Network Monitor;c:\windows\system32\DRIVERS\cv2k1.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [x]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2015-02-07 102912]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2014-07-17 95920]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2014-08-22 288120]
R3 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2015-01-02 315488]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R4 NvNetworkService;NVIDIA Network Service;c:\program files\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-07-25 1720608]
R4 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-07-25 17536800]
R4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-07-02 413128]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad32v.sys [2014-03-31 34080]
S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-02-20 18:47 1084744 ----a-w- c:\program files\Google\Chrome\Application\40.0.2214.115\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2015-02-08 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-07 18:41]
.
2015-02-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-10-20 18:35]
.
2015-02-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-10-20 18:35]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
MSConfigStartUp-BackgroundContainerV2 - c:\users\Dominik\AppData\Local\Tbccint\BackgroundContainer\BackgroundContainer.dll
MSConfigStartUp-MSStp - c:\windows\inf\msstp.vbe
MSConfigStartUp-msybvySrv - c:\windows\system32\msybvy.vbe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(3140)
c:\windows\System32\ieframe.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Microsoft Security Client\MsMpEng.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\sppsvc.exe
.
**************************************************************************
.
Celkový čas: 2015-02-23 14:17:34 - počítač byl restartován
ComboFix-quarantined-files.txt 2015-02-23 13:17
.
Před spuštěním: Volných bajtů: 264 596 582 400
Po spuštění: Volných bajtů: 264 499 896 320
.
- - End Of File - - 42290BFB8E776C586B21B895169E8017
A36C5E4F47E84449FF07ED3517B43A31

[jaro3]

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::
KillAll::
File::
c:\windows\system32\mncibaj.vbe
c:\windows\System32\mnciuil.vbe
c:\windows\inf\mncuelqbb.vbe
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Folder::
c:\program files\Skype\Updater
c:\program files\Google\Update

Driver::
SkypeUpdate

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mncibajSrv]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mnciuilSrv]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mncuelqbbSrv]

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

[dominikfirt]

ComboFix 15-02-16.01 - Dominik 24.02.2015 15:14:04.3.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.2046.1331 [GMT 1:00]
Spuštěný z: c:\users\Dominik\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Dominik\Desktop\CFScript.txt
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Microsoft Security Essentials *Disabled/Updated* {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Microsoft Security Essentials *Disabled/Updated* {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\inf\mncuelqbb.vbe"
"c:\windows\system32\mncibaj.vbe"
"c:\windows\System32\mnciuil.vbe"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Google\Update
c:\program files\Google\Update\1.3.26.9\GoogleCrashHandler.exe
c:\program files\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
c:\program files\Google\Update\1.3.26.9\GoogleUpdate.exe
c:\program files\Google\Update\1.3.26.9\GoogleUpdateBroker.exe
c:\program files\Google\Update\1.3.26.9\GoogleUpdateComRegisterShell64.exe
c:\program files\Google\Update\1.3.26.9\GoogleUpdateHelper.msi
c:\program files\Google\Update\1.3.26.9\GoogleUpdateOnDemand.exe
c:\program files\Google\Update\1.3.26.9\GoogleUpdateSetup.exe
c:\program files\Google\Update\1.3.26.9\GoogleUpdateWebPlugin.exe
c:\program files\Google\Update\1.3.26.9\goopdate.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_am.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_ar.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_bg.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_bn.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_ca.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_cs.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_da.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_de.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_el.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_en-GB.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_en.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_es-419.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_es.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_et.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_fa.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_fi.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_fil.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_fr.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_gu.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_hi.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_hr.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_hu.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_id.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_is.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_it.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_iw.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_ja.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_kn.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_ko.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_lt.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_lv.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_ml.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_mr.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_ms.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_nl.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_no.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_pl.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_pt-BR.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_pt-PT.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_ro.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_ru.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_sk.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_sl.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_sr.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_sv.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_sw.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_ta.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_te.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_th.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_tr.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_uk.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_ur.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_vi.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_zh-CN.dll
c:\program files\Google\Update\1.3.26.9\goopdateres_zh-TW.dll
c:\program files\Google\Update\1.3.26.9\npGoogleUpdate3.dll
c:\program files\Google\Update\1.3.26.9\psmachine.dll
c:\program files\Google\Update\1.3.26.9\psmachine_64.dll
c:\program files\Google\Update\1.3.26.9\psuser.dll
c:\program files\Google\Update\1.3.26.9\psuser_64.dll
c:\program files\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.26.9\GoogleUpdateSetup.exe
c:\program files\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\40.0.2214.115\40.0.2214.115_40.0.2214.111_chrome_updater.exe
c:\program files\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\40.0.2214.115\40.0.2214.115_chrome_installer.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\program files\Google\Update\Install\{7391CCC2-E558-4934-AC52-DDD50B3B50F6}\GoogleUpdateSetup.exe
c:\program files\Google\Update\Install\{AAB4DD33-86BC-4B00-8712-39C8E208E39D}\40.0.2214.115_40.0.2214.111_chrome_updater.exe
c:\program files\Google\Update\Install\{E9592777-BAC8-44CE-BD0D-7AD9CBDB6D9F}\40.0.2214.115_chrome_installer.exe
c:\program files\Skype\Updater
c:\program files\Skype\Updater\Updater.dll
c:\program files\Skype\Updater\Updater.exe
c:\users\Dominik\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SkypeUpdate
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-01-24 do 2015-02-24 )))))))))))))))))))))))))))))))
.
.
2015-02-24 14:20 . 2015-02-24 14:20 -------- d-----w- c:\users\Willy\AppData\Local\temp
2015-02-24 14:20 . 2015-02-24 14:20 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-02-23 22:09 . 2015-02-23 22:09 -------- d-----w- c:\users\Willy\AppData\Roaming\Avira
2015-02-23 21:33 . 2015-02-23 21:30 37384 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2015-02-23 21:29 . 2015-02-23 21:29 -------- d-----w- c:\users\Dominik\AppData\Roaming\Avira
2015-02-23 21:27 . 2014-11-24 09:23 37352 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2015-02-23 21:27 . 2014-11-24 09:23 136216 ----a-w- c:\windows\system32\drivers\avipbb.sys
2015-02-23 21:27 . 2014-11-24 09:23 98160 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2015-02-23 21:22 . 2015-02-23 21:27 -------- d-----w- c:\programdata\Avira
2015-02-23 21:22 . 2015-02-23 21:27 -------- d-----w- c:\program files\Avira
2015-02-23 21:22 . 2015-02-23 21:22 -------- d-----w- c:\programdata\Package Cache
2015-02-23 13:19 . 2015-01-29 09:49 9041640 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2FCD69D7-7DC1-446E-95FB-114CEEBD77FB}\mpengine.dll
2015-02-22 19:47 . 2015-02-22 19:56 -------- d-----w- c:\program files\SpeedFan
2015-02-21 20:31 . 2014-09-10 14:30 908840 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{615CC1EB-78A4-42E0-AF00-678C577DFAE8}\gapaengine.dll
2015-02-21 10:26 . 2015-02-21 10:13 24064 ----a-w- c:\windows\zoek-delete.exe
2015-02-21 10:26 . 2015-02-24 14:23 -------- d-----w- c:\users\Dominik\AppData\Local\Temp
2015-02-20 18:46 . 2015-02-20 18:46 -------- d-----w- c:\users\Willy\AppData\Local\Adobe
2015-02-20 17:42 . 2015-02-21 10:03 35064 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-02-20 17:42 . 2015-02-20 17:42 -------- d-----w- c:\programdata\RogueKiller
2015-02-09 14:49 . 2015-02-09 15:03 -------- d-----w- c:\users\Dominik\AppData\Roaming\.technic
2015-02-09 14:46 . 2015-02-09 14:46 -------- d-----w- c:\program files\Common Files\Java
2015-02-09 14:46 . 2015-02-09 14:45 861088 ----a-w- c:\windows\system32\npDeployJava1.dll
2015-02-09 14:45 . 2015-02-09 14:45 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2015-02-09 13:19 . 2015-02-23 19:36 -------- d-----w- c:\users\Dominik\AppData\Roaming\.minecraft
2015-02-09 13:12 . 2015-02-09 14:45 782240 ----a-w- c:\windows\system32\deployJava1.dll
2015-02-08 02:17 . 2015-02-08 02:17 -------- d-----w- c:\users\Willy\AppData\Roaming\Apple Computer
2015-02-08 01:57 . 2015-02-08 01:57 -------- d-----w- c:\program files\Common Files\IObit
2015-02-07 23:03 . 2015-02-07 23:03 -------- d-----w- c:\users\Dominik\AppData\Local\Microsoft Games
2015-02-07 21:47 . 2015-02-07 21:47 -------- d-----w- c:\program files\Microsoft Games
2015-02-07 21:44 . 2015-02-07 21:44 -------- d-----w- c:\users\Willy\AppData\Local\Programs
2015-02-07 20:16 . 2015-02-07 20:16 -------- d-sh--w- c:\users\Willy\AppData\Local\EmieUserList
2015-02-07 20:16 . 2015-02-07 20:16 -------- d-sh--w- c:\users\Willy\AppData\Local\EmieSiteList
2015-02-07 20:16 . 2015-02-07 20:16 -------- d-sh--w- c:\users\Willy\AppData\Local\EmieBrowserModeList
2015-02-07 19:27 . 2014-06-04 14:17 31008 ----a-w- c:\windows\system32\SmartDefragBootTime.exe
2015-02-07 19:04 . 2015-02-07 19:04 -------- d-sh--w- c:\users\Dominik\AppData\Local\EmieUserList
2015-02-07 19:04 . 2015-02-07 19:04 -------- d-sh--w- c:\users\Dominik\AppData\Local\EmieSiteList
2015-02-07 19:04 . 2015-02-07 19:04 -------- d-sh--w- c:\users\Dominik\AppData\Local\EmieBrowserModeList
2015-02-07 18:38 . 2015-02-07 18:38 -------- d-----w- c:\users\Dominik\AppData\Local\Opera Software
2015-02-07 18:38 . 2015-02-07 18:38 -------- d-----w- c:\users\Dominik\AppData\Roaming\Opera Software
2015-02-07 18:36 . 2015-02-24 14:10 -------- d-----w- c:\program files\Opera
2015-02-07 16:18 . 2012-07-26 03:39 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2015-02-07 16:18 . 2012-07-26 03:39 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2015-02-07 16:18 . 2012-07-26 02:46 9728 ----a-w- c:\windows\system32\Wdfres.dll
2015-02-07 16:17 . 2012-07-26 02:33 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2015-02-07 16:17 . 2012-07-26 02:32 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2015-02-07 16:17 . 2012-07-26 03:20 73216 ----a-w- c:\windows\system32\WUDFSvc.dll
2015-02-07 16:17 . 2012-07-26 03:20 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll
2015-02-07 16:17 . 2012-07-26 03:20 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2015-02-07 16:17 . 2012-07-26 03:21 196608 ----a-w- c:\windows\system32\WUDFHost.exe
2015-02-07 16:17 . 2012-07-26 03:20 613888 ----a-w- c:\windows\system32\WUDFx.dll
2015-02-07 16:11 . 2015-02-07 16:11 69632 ----a-w- c:\windows\system32\smss.exe
2015-02-07 16:11 . 2015-02-07 16:11 619520 ----a-w- c:\windows\system32\tdh.dll
2015-02-07 16:11 . 2015-02-07 16:11 3969472 ----a-w- c:\windows\system32\ntkrnlpa.exe
2015-02-07 16:11 . 2015-02-07 16:11 3914176 ----a-w- c:\windows\system32\ntoskrnl.exe
2015-02-07 16:11 . 2015-02-07 16:11 38912 ----a-w- c:\windows\system32\csrsrv.dll
2015-02-07 16:11 . 2015-02-07 16:11 1289096 ----a-w- c:\windows\system32\ntdll.dll
2015-02-07 16:11 . 2015-02-07 16:11 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2015-02-07 16:11 . 2015-02-07 16:11 240496 ----a-w- c:\windows\system32\drivers\netio.sys
2015-02-07 16:11 . 2015-02-07 16:11 231424 ----a-w- c:\windows\system32\mswsock.dll
2015-02-07 16:11 . 2015-02-07 16:11 187752 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2015-02-07 16:11 . 2015-02-07 16:11 1294272 ----a-w- c:\windows\system32\drivers\tcpip.sys
2015-02-07 16:11 . 2015-02-07 16:11 49152 ----a-w- c:\windows\system32\taskhost.exe
2015-02-07 16:08 . 2015-02-07 16:08 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2015-02-07 16:05 . 2015-02-07 16:05 1505280 ----a-w- c:\windows\system32\d3d11.dll
2015-02-07 16:02 . 2011-02-18 05:39 31232 ----a-w- c:\windows\system32\prevhost.exe
2015-02-07 16:02 . 2013-02-27 05:05 101720 ----a-w- c:\windows\system32\consent.exe
2015-02-07 16:02 . 2013-02-27 04:49 1796096 ----a-w- c:\windows\system32\authui.dll
2015-02-07 16:02 . 2013-02-27 04:49 47104 ----a-w- c:\windows\system32\appinfo.dll
2015-02-07 15:45 . 2015-02-07 18:41 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2015-02-07 15:45 . 2015-02-07 18:41 701616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2015-02-07 15:45 . 2015-02-07 15:45 -------- d-----w- c:\windows\system32\Macromed
2015-02-06 15:31 . 2015-02-06 15:31 -------- d-----w- c:\users\Dominik\AppData\Local\Intel
2015-02-06 13:02 . 2015-02-20 13:44 114904 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-02-06 13:01 . 2014-11-21 05:14 51928 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-02-06 13:01 . 2014-11-21 05:14 75480 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-02-06 13:01 . 2014-11-21 05:14 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-02-06 13:01 . 2015-02-06 13:01 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2015-02-06 13:01 . 2015-02-06 13:01 -------- d-----w- c:\programdata\Malwarebytes
2015-02-06 11:30 . 2014-05-14 16:23 45536 ----a-w- c:\windows\system32\wups2.dll
2015-02-06 11:30 . 2014-05-14 16:23 54240 ----a-w- c:\windows\system32\wuauclt.exe
2015-02-06 11:30 . 2014-05-14 16:23 1973728 ----a-w- c:\windows\system32\wuaueng.dll
2015-02-06 11:30 . 2014-05-14 16:17 2425856 ----a-w- c:\windows\system32\wucltux.dll
2015-02-06 11:30 . 2014-05-14 16:23 36320 ----a-w- c:\windows\system32\wups.dll
2015-02-06 11:30 . 2014-05-14 16:17 92672 ----a-w- c:\windows\system32\wudriver.dll
2015-02-06 11:30 . 2014-05-14 16:23 581600 ----a-w- c:\windows\system32\wuapi.dll
2015-02-06 11:30 . 2014-05-14 08:23 179656 ----a-w- c:\windows\system32\wuwebv.dll
2015-02-06 11:30 . 2014-05-14 08:17 33792 ----a-w- c:\windows\system32\wuapp.exe
2015-02-05 19:52 . 2015-02-05 19:52 -------- d-----w- c:\users\Dominik\AppData\Local\Skype
2015-02-05 19:52 . 2015-02-21 17:11 -------- d-----w- c:\users\Dominik\AppData\Roaming\Skype
2015-02-05 19:52 . 2015-02-05 19:52 -------- d-----w- c:\program files\Common Files\Skype
2015-02-05 19:52 . 2015-02-24 14:20 -------- d-----r- c:\program files\Skype
2015-02-05 19:51 . 2015-02-05 19:52 -------- d-----w- c:\programdata\Skype
2015-02-05 17:20 . 2015-02-05 17:20 -------- d-----w- c:\windows\system32\SPReview
2015-02-05 17:19 . 2015-02-05 17:19 -------- d-----w- c:\windows\system32\EventProviders
2015-02-05 17:18 . 2015-02-05 17:18 -------- d-----w- c:\program files\Microsoft Silverlight
2015-02-05 16:59 . 2010-11-05 01:58 1130824 ----a-w- c:\windows\system32\dfshim.dll
2015-02-05 16:59 . 2010-11-20 12:21 11776 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-02-05 16:59 . 2010-11-20 12:19 3215872 ----a-w- c:\windows\system32\mstscax.dll
2015-02-05 16:59 . 2010-11-20 10:24 52224 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys
2015-02-05 16:59 . 2010-11-20 12:19 954752 ----a-w- c:\windows\system32\mfc40.dll
2015-02-05 16:59 . 2010-11-20 12:19 954288 ----a-w- c:\windows\system32\mfc40u.dll
2015-02-05 16:59 . 2010-11-20 12:21 1159168 ----a-w- c:\windows\system32\sysmain.dll
2015-02-05 16:59 . 2010-11-20 12:21 423936 ----a-w- c:\windows\system32\secproc_isv.dll
2015-02-05 16:59 . 2010-11-20 12:17 327168 ----a-w- c:\windows\system32\RMActivate_isv.exe
2015-02-05 16:59 . 2010-11-20 12:20 428032 ----a-w- c:\windows\system32\secproc.dll
2015-02-05 16:59 . 2010-11-20 12:17 322048 ----a-w- c:\windows\system32\RMActivate.exe
2015-02-05 16:59 . 2010-11-20 12:21 253952 ----a-w- c:\windows\system32\spwizui.dll
2015-02-05 16:57 . 2010-11-20 12:29 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2015-02-05 16:56 . 2010-11-20 12:21 198144 ----a-w- c:\windows\system32\wpdwcn.dll
2015-02-05 16:55 . 2010-11-20 12:21 189952 ----a-w- c:\windows\system32\wdscore.dll
2015-02-05 16:55 . 2010-11-20 12:21 363008 ----a-w- c:\windows\system32\wbemcomn.dll
2015-02-05 16:55 . 2010-11-20 12:19 606208 ----a-w- c:\windows\system32\wbem\fastprox.dll
2015-02-04 16:22 . 2015-02-04 16:22 -------- d-----w- c:\users\Default\AppData\Roaming\IObit
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-02-07 16:12 . 2015-02-07 16:12 208384 ----a-w- c:\windows\system32\webcheck.dll
2015-02-05 17:28 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2014-12-31 11:13 . 2014-10-21 13:00 249488 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Avira Systray"="c:\program files\Avira\My Avira\Avira.OE.Systray.exe" [2015-01-19 126712]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2014-11-24 702768]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt]
2014-11-24 09:23 702768 ----a-w- c:\program files\Avira\AntiVir Desktop\avgnt.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
2015-01-20 21:02 5496600 ----a-w- c:\program files\CCleaner\CCleaner.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2006-10-26 22:47 31016 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvBackend]
2014-07-25 14:02 2403104 ----a-w- c:\program files\NVIDIA Corporation\Update Core\NvBackend.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2014-07-02 19:42 4389848 ----a-w- c:\windows\System32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2014-07-02 19:42 377288 ----a-w- c:\windows\System32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvSvc]
2014-07-02 19:42 3063256 ----a-w- c:\windows\System32\nvsvc.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ShadowPlay]
2014-07-25 14:01 1126480 ----a-w- c:\windows\System32\nvspcap.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2012-07-03 08:04 252848 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2007-04-27 14:35 857648 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
.
R3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [x]
R3 CV2K1;CommView Network Monitor;c:\windows\system32\DRIVERS\cv2k1.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [x]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2015-02-07 102912]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R4 NvNetworkService;NVIDIA Network Service;c:\program files\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-07-25 1720608]
R4 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-07-25 17536800]
R4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-07-02 413128]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2014-11-24 37352]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2014-11-24 431920]
S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files\Avira\My Avira\Avira.OE.ServiceHost.exe [2015-01-19 182520]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad32v.sys [2014-03-31 34080]
S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-02-20 18:47 1084744 ----a-w- c:\program files\Google\Chrome\Application\40.0.2214.115\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2015-02-08 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-07 18:41]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
.
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(3864)
c:\windows\system32\msls31.dll
c:\progra~1\MICROS~2\Office12\GRA32A~1.DLL
c:\windows\system32\stobject.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Avira\AntiVir Desktop\avshadow.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\sppsvc.exe
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Celkový čas: 2015-02-24 15:28:36 - počítač byl restartován
ComboFix-quarantined-files.txt 2015-02-24 14:28
ComboFix2.txt 2015-02-23 13:17
.
Před spuštěním: Volných bajtů: 263 032 811 520
Po spuštění: Volných bajtů: 262 847 369 216
.
- - End Of File - - 138C509CE10699FE848CB40514825995
A36C5E4F47E84449FF07ED3517B43A31

[dominikfirt]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:31:10, on 24.2.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)


Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\notepad.exe
C:\Windows\Explorer.exe
C:\Program Files\Opera\27.0.1689.76\opera.exe
C:\Program Files\Opera\27.0.1689.76\opera_crashreporter.exe
C:\Program Files\Opera\27.0.1689.76\opera.exe
C:\Program Files\Opera\27.0.1689.76\opera.exe
C:\Program Files\Opera\27.0.1689.76\opera.exe
C:\Program Files\Opera\27.0.1689.76\opera.exe
C:\Program Files\Opera\27.0.1689.76\opera.exe
C:\Program Files\Opera\27.0.1689.76\opera.exe
C:\Users\Dominik\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Avira Systray] C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GRA32A~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Service Host (Avira.OE.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe

--
End of file - 3370 bytes

[dominikfirt]

aswMBR version 1.0.1.2290 Copyright(c) 2014 AVAST Software
Run date: 2015-02-24 15:32:22
-----------------------------
15:32:22.067 OS Version: Windows 6.1.7601 Service Pack 1
15:32:22.067 Number of processors: 2 586 0xF0D
15:32:22.067 ComputerName: DOMINIK-PC UserName: Dominik
15:32:51.785 Initialize success
15:32:51.863 VM: initialized successfully
15:32:51.863 VM: Intel CPU BiosDisabled
15:33:04.214 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-2
15:33:04.292 Disk 0 Vendor: WDC_WD3200BEVT-22ZCT0 11.01A11 Size: 305245MB BusType: 11
15:33:04.432 Disk 0 MBR read successfully
15:33:04.448 Disk 0 MBR scan
15:33:04.448 Disk 0 Windows 7 default MBR code
15:33:04.448 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 294919 MB offset 63
15:33:04.448 Disk 0 Boot: NTFS code=2
15:33:04.464 Disk 0 Partition - 00 05 Extended 10244 MB offset 603995805
15:33:04.495 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 10244 MB offset 603995868
15:33:04.495 Disk 0 scanning sectors +624976695
15:33:04.542 Disk 0 scanning C:\Windows\system32\drivers
15:33:15.150 Service scanning
15:33:33.558 Modules scanning
15:33:33.573 Disk 0 trace - called modules:
15:33:33.620 ntkrnlpa.exe CLASSPNP.SYS disk.sys ataport.SYS halmacpi.dll PCIIDEX.SYS msahci.sys
15:33:33.620 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85a69778]
15:33:33.620 3 CLASSPNP.SYS[8928159e] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-2[0x855b3908]
15:33:33.636 Disk 0 statistics 85306/0/0 @ 4,72 MB/s
15:33:33.651 Scan finished successfully
15:33:47.364 Disk 0 MBR has been saved successfully to "C:\Users\Dominik\Desktop\MBR.dat"
15:33:47.364 The log file has been saved successfully to "C:\Users\Dominik\Desktop\aswMBR.txt"