Prosím o kontrolu využití procesoru 100% windows 7

[Erich]

ComboFix 12-12-31.01 - Erich 31.12.2012 16:21:58.3.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.2047.1211 [GMT 1:00]
Spuštěný z: c:\users\Erich\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\Erich\Desktop\CFScript.txt
AV: ESET Smart Security 6.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 6.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý
.
.
FILE ::
"c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2426028671-3903526055-3441222264-1001Core.job"
"c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2426028671-3903526055-3441222264-1001UA.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\Updater.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Skype\Updater
c:\program files\Skype\Updater\Updater.dll
c:\program files\Skype\Updater\Updater.exe
c:\programdata\WombatUpdater
c:\programdata\WombatUpdater\WombatUpdater.exe
c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2426028671-3903526055-3441222264-1001Core.job
c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2426028671-3903526055-3441222264-1001UA.job
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\Updater.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SkypeUpdate
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-11-28 do 2012-12-31 )))))))))))))))))))))))))))))))
.
.
2012-12-31 15:44 . 2012-12-31 15:50 -------- d-----w- c:\users\Erich\AppData\Local\temp
2012-12-30 18:01 . 2012-12-30 18:01 -------- d-----w- c:\users\Erich\AppData\Roaming\Malwarebytes
2012-12-30 18:01 . 2012-12-30 18:01 -------- d-----w- c:\programdata\Malwarebytes
2012-12-30 18:01 . 2012-12-30 18:01 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-12-30 18:01 . 2012-12-14 15:49 21104 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-12-30 18:01 . 2012-12-30 18:01 -------- d-----w- c:\users\Erich\AppData\Local\Programs
2012-12-30 17:37 . 2012-12-30 17:37 -------- d-----w- c:\users\Erich\AppData\Roaming\PerformerSoft
2012-12-22 02:02 . 2012-12-16 14:13 295424 ----a-w- c:\windows\system32\atmfd.dll
2012-12-22 02:02 . 2012-12-16 14:13 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-13 09:47 . 2012-11-16 16:33 149536 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2012-12-13 09:47 . 2012-11-14 01:44 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-12-13 09:47 . 2012-11-14 01:51 194048 ----a-w- c:\program files\Internet Explorer\IEShims.dll
2012-12-13 09:47 . 2012-11-14 01:49 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-12-13 09:47 . 2012-11-14 01:48 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-12-13 02:03 . 2012-11-22 02:56 2345984 ----a-w- c:\windows\system32\win32k.sys
2012-12-12 22:33 . 2012-12-12 22:33 -------- d-----w- c:\program files\ESET
2012-12-08 18:59 . 2012-12-08 18:59 -------- d-----w- c:\program files\Haali
2012-12-08 18:59 . 2012-12-08 18:59 -------- d-----w- c:\program files\PC Performer
2012-12-08 18:59 . 2012-12-08 18:59 -------- d-----w- c:\users\Erich\AppData\Roaming\StatusWinks
2012-12-08 18:59 . 2012-12-08 18:59 -------- d-----w- c:\program files\File Scout
2012-12-07 10:23 . 2012-12-07 10:23 -------- d-----w- c:\program files\Budik v.11
2012-12-07 10:23 . 1996-07-18 12:06 297472 ----a-w- c:\windows\uninst.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-11 20:52 . 2012-11-21 20:50 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-12-11 20:52 . 2011-06-29 08:43 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-11-28 08:07 . 2012-11-28 08:07 47056 ----a-w- c:\windows\system32\drivers\epfwwfp.sys
2012-11-12 14:13 . 2011-10-27 15:28 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-11-12 14:13 . 2011-10-27 15:27 103736 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-11-12 14:13 . 2011-10-27 15:27 103736 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-11-08 18:00 . 2012-12-30 00:02 6812136 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D80B432A-F4BF-41F9-830E-CACC44FC4D35}\mpengine.dll
2012-10-16 07:39 . 2012-11-29 08:36 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-11 18:09 . 2012-10-11 18:09 348160 ----a-w- c:\windows\system32\msvcr71.dll
2012-10-11 18:09 . 2012-10-11 18:09 1700352 ----a-w- c:\windows\system32\gdiplus.dll
2012-10-11 18:09 . 2012-10-11 18:09 1060864 ----a-w- c:\windows\system32\mfc71.dll
2012-10-09 17:40 . 2012-11-14 04:57 44032 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2012-10-09 17:40 . 2012-11-14 04:57 193536 ----a-w- c:\windows\system32\dhcpcore6.dll
2012-10-08 09:30 . 2012-10-08 09:32 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-08 09:30 . 2012-04-29 10:57 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-08 07:21 . 2012-10-08 07:21 46056 ----a-w- c:\windows\system32\drivers\EpfwLWF.sys
2012-10-08 07:21 . 2012-10-08 07:21 149568 ----a-w- c:\windows\system32\drivers\epfw.sys
2012-10-08 07:21 . 2012-10-08 07:21 121216 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2012-10-08 07:21 . 2012-10-08 07:21 170656 ----a-w- c:\windows\system32\drivers\eamonm.sys
2012-10-03 16:58 . 2012-11-14 04:59 1293680 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-10-03 16:42 . 2012-11-14 04:58 242176 ----a-w- c:\windows\system32\nlasvc.dll
2012-10-03 16:42 . 2012-11-14 04:58 52224 ----a-w- c:\windows\system32\nlaapi.dll
2012-10-03 16:42 . 2012-11-14 04:59 175104 ----a-w- c:\windows\system32\netcorehc.dll
2012-10-03 16:42 . 2012-11-14 04:58 18944 ----a-w- c:\windows\system32\netevent.dll
2012-10-03 16:42 . 2012-11-14 04:59 156672 ----a-w- c:\windows\system32\ncsi.dll
2012-10-03 16:40 . 2012-11-14 04:59 499712 ----a-w- c:\windows\system32\iphlpsvc.dll
2012-10-03 15:21 . 2012-11-14 04:58 35328 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2012-10-11 01:05 . 2012-10-23 18:07 261600 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="d:\hry\utorrent\uTorrent.exe" [2012-11-13 968592]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2012-11-26 5074384]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]
@="Service"
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Google Update"="c:\users\Erich\AppData\Local\Google\Update\GoogleUpdate.exe" /c
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"SiteRanker"="c:\program files\SiteRanker\SiteRankTray.exe"
.
R0 pxqwoh;pxqwoh;c:\windows\System32\drivers\agiu.sys [x]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [x]
R3 ATP;Comodo EasyVPN Miniport Driver;c:\windows\system32\DRIVERS\cmdatp.sys [x]
R3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\Drivers\btnetBus.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [x]
R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]
R3 FileMonitor;FileMonitor;c:\program files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys [x]
R3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\Drivers\IvtBtBus.sys [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [x]
R3 NTIOLib_1_0_C;NTIOLib_1_0_C;E:\NTIOLib.sys [x]
R3 PAC207;VideoCAM GF112;c:\windows\system32\DRIVERS\pfc027.sys [x]
R3 Ph3xIB32;Philips 713x Inbox PCI TV Card;c:\windows\system32\DRIVERS\Ph3xIB32.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 RegFilter;RegFilter;c:\program files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 UrlFilter;UrlFilter;c:\program files\IObit\IObit Malware Fighter\drivers\win7_x86\UrlFilter.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files\IObit\Game Booster 3\Driver\WinRing0.sys [x]
R3 yukonw7;Ovladač NDIS6.2 Miniport pro řadič Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [x]
S0 BtHidBus;Bluetooth HID Bus Service;c:\windows\System32\Drivers\BtHidBus.sys [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [x]
S2 IMFservice;IMF Service;c:\program files\IObit\IObit Malware Fighter\IMFsrv.exe [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
GPSvcGroup REG_MULTI_SZ GPSvc
iissvcs REG_MULTI_SZ w3svc was
apphost REG_MULTI_SZ apphostsvc
.
Obsah adresáře 'Naplánované úlohy'
.
2012-12-31 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-21 20:52]
.
2012-12-31 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2012-10-11 06:46]
.
2012-12-31 c:\windows\Tasks\PC Performer_DEFAULT.job
- c:\program files\PC Performer\PCPerformer.exe [2012-12-08 14:47]
.
2012-12-19 c:\windows\Tasks\PC Performer_UPDATES.job
- c:\program files\PC Performer\PCPerformer.exe [2012-12-08 14:47]
.
.
------- Doplňkový sken -------
.
mStart Page = hxxp://www.google.com
IE: {{781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - d:\hry\icq\ICQ7M\ICQ.exe
TCP: DhcpNameServer = 10.10.10.1
FF - ProfilePath - c:\users\Erich\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\
.
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(2708)
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\PnkBstrA.exe
c:\windows\System32\PAStiSvc.exe
c:\windows\system32\taskhost.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\windows\system32\conhost.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Celkový čas: 2012-12-31 16:58:15 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-12-31 15:58
ComboFix2.txt 2012-12-31 14:54
.
Před spuštěním: Volných bajtů: 25 315 123 200
Po spuštění: Volných bajtů: 25 163 837 440
.
- - End Of File - - BDBC88FDDDBB5A0F0043A129F10B3B18

[Reklama]

[Erich]

toto je vše :))

[jaro3]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::

KillAll::
Collect::
c:\windows\System32\drivers\agiu.sys

Driver::
pxqwoh

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

[Erich]

ComboFix 13-01-01.02 - Erich 01.01.2013 20:56:49.4.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.2047.1331 [GMT 1:00]
Spuštěný z: c:\users\Erich\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\Erich\Desktop\CFScript.txt
AV: ESET Smart Security 6.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 6.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý
.
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_pxqwoh
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-01 do 2013-01-01 )))))))))))))))))))))))))))))))
.
.
2013-01-01 20:18 . 2013-01-01 20:18 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-12-31 15:44 . 2013-01-01 20:37 -------- d-----w- c:\users\Erich\AppData\Local\temp
2012-12-30 18:01 . 2012-12-30 18:01 -------- d-----w- c:\users\Erich\AppData\Roaming\Malwarebytes
2012-12-30 18:01 . 2012-12-30 18:01 -------- d-----w- c:\programdata\Malwarebytes
2012-12-30 18:01 . 2012-12-30 18:01 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-12-30 18:01 . 2012-12-14 15:49 21104 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-12-30 18:01 . 2012-12-30 18:01 -------- d-----w- c:\users\Erich\AppData\Local\Programs
2012-12-30 17:37 . 2012-12-30 17:37 -------- d-----w- c:\users\Erich\AppData\Roaming\PerformerSoft
2012-12-22 02:02 . 2012-12-16 14:13 295424 ----a-w- c:\windows\system32\atmfd.dll
2012-12-22 02:02 . 2012-12-16 14:13 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-13 09:47 . 2012-11-16 16:33 149536 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2012-12-13 09:47 . 2012-11-14 01:44 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-12-13 09:47 . 2012-11-14 01:51 194048 ----a-w- c:\program files\Internet Explorer\IEShims.dll
2012-12-13 09:47 . 2012-11-14 01:49 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-12-13 09:47 . 2012-11-14 01:48 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-12-13 02:03 . 2012-11-22 02:56 2345984 ----a-w- c:\windows\system32\win32k.sys
2012-12-12 22:33 . 2012-12-12 22:33 -------- d-----w- c:\program files\ESET
2012-12-08 18:59 . 2012-12-08 18:59 -------- d-----w- c:\program files\Haali
2012-12-08 18:59 . 2012-12-08 18:59 -------- d-----w- c:\program files\PC Performer
2012-12-08 18:59 . 2012-12-08 18:59 -------- d-----w- c:\users\Erich\AppData\Roaming\StatusWinks
2012-12-08 18:59 . 2012-12-08 18:59 -------- d-----w- c:\program files\File Scout
2012-12-07 10:23 . 2012-12-07 10:23 -------- d-----w- c:\program files\Budik v.11
2012-12-07 10:23 . 1996-07-18 12:06 297472 ----a-w- c:\windows\uninst.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-11 20:52 . 2012-11-21 20:50 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-12-11 20:52 . 2011-06-29 08:43 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-11-28 08:07 . 2012-11-28 08:07 47056 ----a-w- c:\windows\system32\drivers\epfwwfp.sys
2012-11-12 14:13 . 2011-10-27 15:28 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-11-12 14:13 . 2011-10-27 15:27 103736 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-11-12 14:13 . 2011-10-27 15:27 103736 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-11-08 18:00 . 2013-01-01 16:43 6812136 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{0F6647EA-B0BD-42CB-B32A-265C733F2B19}\mpengine.dll
2012-10-16 07:39 . 2012-11-29 08:36 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-11 18:09 . 2012-10-11 18:09 348160 ----a-w- c:\windows\system32\msvcr71.dll
2012-10-11 18:09 . 2012-10-11 18:09 1700352 ----a-w- c:\windows\system32\gdiplus.dll
2012-10-11 18:09 . 2012-10-11 18:09 1060864 ----a-w- c:\windows\system32\mfc71.dll
2012-10-09 17:40 . 2012-11-14 04:57 44032 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2012-10-09 17:40 . 2012-11-14 04:57 193536 ----a-w- c:\windows\system32\dhcpcore6.dll
2012-10-08 09:30 . 2012-10-08 09:32 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-08 09:30 . 2012-04-29 10:57 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-08 07:21 . 2012-10-08 07:21 46056 ----a-w- c:\windows\system32\drivers\EpfwLWF.sys
2012-10-08 07:21 . 2012-10-08 07:21 149568 ----a-w- c:\windows\system32\drivers\epfw.sys
2012-10-08 07:21 . 2012-10-08 07:21 121216 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2012-10-08 07:21 . 2012-10-08 07:21 170656 ----a-w- c:\windows\system32\drivers\eamonm.sys
2012-10-11 01:05 . 2012-10-23 18:07 261600 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="d:\hry\utorrent\uTorrent.exe" [2012-11-13 968592]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2012-11-26 5074384]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]
@="Service"
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Google Update"="c:\users\Erich\AppData\Local\Google\Update\GoogleUpdate.exe" /c
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"SiteRanker"="c:\program files\SiteRanker\SiteRankTray.exe"
.
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [x]
R3 ATP;Comodo EasyVPN Miniport Driver;c:\windows\system32\DRIVERS\cmdatp.sys [x]
R3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\Drivers\btnetBus.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [x]
R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]
R3 FileMonitor;FileMonitor;c:\program files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys [x]
R3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\Drivers\IvtBtBus.sys [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [x]
R3 NTIOLib_1_0_C;NTIOLib_1_0_C;E:\NTIOLib.sys [x]
R3 PAC207;VideoCAM GF112;c:\windows\system32\DRIVERS\pfc027.sys [x]
R3 Ph3xIB32;Philips 713x Inbox PCI TV Card;c:\windows\system32\DRIVERS\Ph3xIB32.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 RegFilter;RegFilter;c:\program files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 UrlFilter;UrlFilter;c:\program files\IObit\IObit Malware Fighter\drivers\win7_x86\UrlFilter.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files\IObit\Game Booster 3\Driver\WinRing0.sys [x]
R3 yukonw7;Ovladač NDIS6.2 Miniport pro řadič Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [x]
S0 BtHidBus;Bluetooth HID Bus Service;c:\windows\System32\Drivers\BtHidBus.sys [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [x]
S2 IMFservice;IMF Service;c:\program files\IObit\IObit Malware Fighter\IMFsrv.exe [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
GPSvcGroup REG_MULTI_SZ GPSvc
iissvcs REG_MULTI_SZ w3svc was
apphost REG_MULTI_SZ apphostsvc
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-01 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-21 20:52]
.
2013-01-01 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2012-10-11 06:46]
.
2013-01-01 c:\windows\Tasks\PC Performer_DEFAULT.job
- c:\program files\PC Performer\PCPerformer.exe [2012-12-08 14:47]
.
2012-12-19 c:\windows\Tasks\PC Performer_UPDATES.job
- c:\program files\PC Performer\PCPerformer.exe [2012-12-08 14:47]
.
.
------- Doplňkový sken -------
.
mStart Page = hxxp://www.google.com
IE: {{781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - d:\hry\icq\ICQ7M\ICQ.exe
TCP: DhcpNameServer = 10.10.10.1
FF - ProfilePath - c:\users\Erich\AppData\Roaming\Mozilla\Firefox\Profiles\b8r0riet.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - ExtSQL: !HIDDEN! 2012-12-08 20:04; statuswinks@StatusWinks; c:\users\Erich\AppData\Roaming\Mozilla\Extensions\statuswinks@StatusWinks
.
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(3924)
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\PnkBstrA.exe
c:\windows\System32\PAStiSvc.exe
c:\windows\system32\taskhost.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\windows\system32\conhost.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Celkový čas: 2013-01-01 21:44:31 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-01-01 20:44
ComboFix2.txt 2012-12-31 15:58
ComboFix3.txt 2012-12-31 14:54
.
Před spuštěním: Volných bajtů: 21 633 941 504
Po spuštění: Volných bajtů: 21 522 157 568
.
- - End Of File - - 82BA7B22E10FB2FB5E02C9030B5991AE

[Erich]

aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software
Run date: 2013-01-01 21:48:00
-----------------------------
21:48:00.866 OS Version: Windows 6.1.7601 Service Pack 1
21:48:00.867 Number of processors: 2 586 0x407
21:48:00.869 ComputerName: ERICH-PC UserName: Erich
21:48:18.193 Initialize success
21:48:24.764 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2
21:48:24.780 Disk 0 Vendor: SAMSUNG_SP2504C VT100-50 Size: 238475MB BusType: 3
21:48:24.780 Disk 0 MBR read successfully
21:48:24.796 Disk 0 MBR scan
21:48:24.796 Disk 0 Windows 7 default MBR code
21:48:24.796 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 60000 MB offset 63
21:48:24.796 Disk 0 Partition - 00 0F Extended LBA 178464 MB offset 122881185
21:48:24.811 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 178464 MB offset 122881248
21:48:24.827 Disk 0 scanning sectors +488376000
21:48:24.874 Disk 0 scanning C:\Windows\system32\drivers
21:48:31.098 Service scanning
21:48:37.978 Service NTIOLib_1_0_C E:\NTIOLib.sys **LOCKED** 21
21:48:44.296 Modules scanning
21:48:51.908 Disk 0 trace - called modules:
21:48:52.439 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS intelide.sys PCIIDEX.SYS atapi.sys
21:48:52.454 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x86658a78]
21:48:52.454 3 CLASSPNP.SYS[895c559e] -> nt!IofCallDriver -> [0x8617e900]
21:48:52.470 5 ACPI.sys[840d33d4] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-2[0x861d6030]
21:48:52.486 Scan finished successfully
21:49:18.669 Disk 0 MBR has been saved successfully to "C:\Users\Erich\Desktop\MBR.dat"
21:49:18.685 The log file has been saved successfully to "C:\Users\Erich\Desktop\aswMBR.txt"

[jaro3]

Spusť znovu aswMBR , dej sken a poté klikni na „Fix“ (FixMBR)
Zavři program , restartuj PC , po restartu nový log log z aswMBR.

Vlož nový log z HJT+ info o problémech.

[Erich]

mám docela velký problem po restartnutí PC se mi neobjeví log :((

[memphisto]

Znovu udělej ten aswMBR.

[Erich]

udělal jsem to a pořád nic

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.

Jak to vypadá nyní?

[Erich]

všechno jsem udělal a žadny log nebo něco podobnýho se mi neukazalo

[jaro3]

Jak je to s využitím CPU?