Brutálni zpomalení PC, nejde skoro žiadna stránka ,ani googl

[MrKrosian]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.2 (09.22.2013:1)
OS: Windows 7 Professional x86
Ran by Macino-Radka on po 23. 09. 2013 at 14:56:19,66
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\genericasktoolbar.dll
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\sprotector
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1364703567-554631620-1449353944-1000\Software\SweetIM
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\etype_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\etype_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\etypesetup_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\etypesetup_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\etypeuninstall_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\etypeuninstall_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\etypeupdate_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\etypeupdate_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\sweetim_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\sweetim_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\sweetpacksupdatemanager_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_directx-redistributable_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_directx-redistributable_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Successfully deleted: [Registry Key] "hkey_current_user\software\appdatalow\asktoolbarinfo"
Successfully deleted: [Registry Key] "hkey_current_user\software\appdatalow\software\asktoolbar"
Successfully deleted: [Registry Key] "hkey_current_user\software\microsoft\internet explorer\low rights\elevationpolicy\{a5aa24ea-11b8-4113-95ae-9ed71deaf12a}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\appid\{9b0cb95c-933a-4b8c-b6d4-edcd19a43874}"



~~~ Files

Successfully deleted: [File] "C:\Windows\System32\Tasks\scheduled update for ask toolbar"
Successfully deleted: [File] C:\Windows\System32\Tasks\epupdater
Successfully deleted: [File] "C:\Windows\system32\roboot.exe"
Successfully deleted: [File] "C:\end"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\babylon"
Successfully deleted: [Folder] "C:\ProgramData\ibupdaterservice"
Successfully deleted: [Folder] "C:\ProgramData\premium"
Successfully deleted: [Folder] "C:\ProgramData\simplitec"
Successfully deleted: [Folder] "C:\ProgramData\starapp"
Successfully deleted: [Folder] "C:\Users\Macino-Radka\AppData\Roaming\etype"
Successfully deleted: [Folder] "C:\Users\Macino-Radka\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\Macino-Radka\appdata\locallow\boost_interprocess"
Successfully deleted: [Folder] "C:\Program Files\continuetosave"
Successfully deleted: [Folder] "C:\Program Files\delta"
Successfully deleted: [Empty Folder] C:\Users\Macino-Radka\appdata\local\{1E652401-118D-4AE5-A93C-BB890B21C2F3}
Successfully deleted: [Folder] "C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 23. 09. 2013 at 15:01:27,79
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[Reklama]

[memphisto]

Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "
- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje "Smazání- Finished "
- Klikni na "Zprávy " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

+ ještě jednou Rogue a dej pak možnost FIXHOST a znovu log


Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je oznaèen pro odstranění, stačí restartovat počítač.

[MrKrosian]

RogueKiller V8.6.12 [Sep 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spustené v : Normálny režim
Užívateľ : Macino-Radka [Práva Správcu]
Režim : Odebrať -- Dátum : 09/23/2013 19:18:25
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy : 0 ¤¤¤

¤¤¤ Záznamy Registrov : 10 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> VYMAZANÉ
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> VYMAZANÉ
[HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> NAHRADENÉ (1)
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> NAHRADENÉ (1)
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRADENÉ (0)
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRADENÉ (0)
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRADENÉ (0)
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRADENÉ (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRADENÉ (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRADENÉ (0)

¤¤¤ naplánované úlohy : 1 ¤¤¤
[V2][SUSP PATH] Funmoods : C:\Users\MACINO~1\AppData\Roaming\Funmoods\UPDATE~1\UPDATE~1.EXE - /Check [x] -> VYMAZANÉ

¤¤¤ spustenie položky : 0 ¤¤¤

¤¤¤ webové prehliadače : 0 ¤¤¤

¤¤¤ Zvláštne súbory / Adresáre: ¤¤¤

¤¤¤ Ovládač : [NAHRATÉ] ¤¤¤

¤¤¤ Vonkajšie Hives: ¤¤¤

¤¤¤ Nákaza : Mal.Hosts ¤¤¤

¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts

127.0.0.1 www.facebook.com --> Potentially malicious!
127.0.0.1 www.google.com --> Potentially malicious!
127.0.0.1 www.yahoo.com --> Potentially malicious!
127.0.0.1 www.yahoo.uk --> Potentially malicious!
127.0.0.1 www.yahoo.de --> Potentially malicious!
127.0.0.1 www.bing.com --> Potentially malicious!
127.0.0.1 www.bing.sk --> Potentially malicious!
127.0.0.1 www.bing.cz --> Potentially malicious!

127.0.0.1 www.pokec.sk
127.0.0.1 pokec.sk
127.0.0.1 www.pokec.azet.sk
127.0.0.1 pokec.azet.sk
127.0.0.1 www.facebook.com
127.0.0.1 facebook.com
127.0.0.1 www.facebook.sk
127.0.0.1 facebook.sk
127.0.0.1 www.skype.com
127.0.0.1 skype.com
127.0.0.1 www.skype.sk
127.0.0.1 skype.sk
127.0.0.1 www.explorer.com
127.0.0.1 explorer.com
127.0.0.1 www.explorer.sk
127.0.0.1 explorer.sk
127.0.0.1 www.explorer.cz
127.0.0.1 explorer.cz
127.0.0.1 www.minecraft.com
127.0.0.1 minecraft.com
[...]


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ SCSI) (Standard disk drives) - Hitachi HDT725025VLA SCSI Disk Device +++++
--- User ---
[MBR] 9d33d49a80997e31ecd0fb8b19dc8ce4
[BSP] f408cbd94fa0f3618bf14f8314b3bdd4 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 99897 Mo
2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 204796620 | Size: 138466 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Dokončené : << RKreport[0]_D_09232013_191825.txt >>
RKreport[0]_S_09232013_145327.txt;RKreport[0]_S_09232013_191816.txt

[MrKrosian]

RogueKiller V8.6.12 [Sep 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spustené v : Normálny režim
Užívateľ : Macino-Radka [Práva Správcu]
Režim : Oprava HOSTS -- Dátum : 09/23/2013 19:25:03
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy : 0 ¤¤¤

¤¤¤ Záznamy Registrov : 0 ¤¤¤

¤¤¤ Ovládač : [NAHRATÉ] ¤¤¤

¤¤¤ Vonkajšie Hives: ¤¤¤

¤¤¤ Nákaza : Mal.Hosts ¤¤¤

¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts

127.0.0.1 www.facebook.com --> Potentially malicious!
127.0.0.1 www.google.com --> Potentially malicious!
127.0.0.1 www.yahoo.com --> Potentially malicious!
127.0.0.1 www.yahoo.uk --> Potentially malicious!
127.0.0.1 www.yahoo.de --> Potentially malicious!
127.0.0.1 www.bing.com --> Potentially malicious!
127.0.0.1 www.bing.sk --> Potentially malicious!
127.0.0.1 www.bing.cz --> Potentially malicious!

127.0.0.1 www.pokec.sk
127.0.0.1 pokec.sk
127.0.0.1 www.pokec.azet.sk
127.0.0.1 pokec.azet.sk
127.0.0.1 www.facebook.com
127.0.0.1 facebook.com
127.0.0.1 www.facebook.sk
127.0.0.1 facebook.sk
127.0.0.1 www.skype.com
127.0.0.1 skype.com
127.0.0.1 www.skype.sk
127.0.0.1 skype.sk
127.0.0.1 www.explorer.com
127.0.0.1 explorer.com
127.0.0.1 www.explorer.sk
127.0.0.1 explorer.sk
127.0.0.1 www.explorer.cz
127.0.0.1 explorer.cz
127.0.0.1 www.minecraft.com
127.0.0.1 minecraft.com
[...]


¤¤¤ Resetovaný HOSTS: ¤¤¤
127.0.0.1 localhost


Dokončené : << RKreport[0]_H_09232013_192503.txt >>
RKreport[0]_D_09232013_191825.txt;RKreport[0]_S_09232013_145327.txt;RKreport[0]_S_09232013_191816.txt
RKreport[0]_S_09232013_192500.txt

[MrKrosian]

ComboFix 13-09-23.02 - Macino-Radka . 09. 2013 19:32:52.1.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.421.1051.18.2047.1397 [GMT 2:00]
Running from: C:\Users\Macino-Radka\Desktop\ComboFix.exe
AV: Advanced SystemCare Ultimate *Enabled/Outdated* {1C304DC4-1D72-5DB9-B33A-43B638ECFD30}
AV: Panda Internet Security 2013 *Disabled/Updated* {86971480-9989-6750-B122-681A86518D59}
FW: Panda Personal Firewall 2013 *Disabled* {BEAC95A5-D3E6-6608-9A7D-C12F7882CA22}
SP: Panda Internet Security 2013 *Disabled/Updated* {3DF6F564-BFB3-68DE-8B92-5368FDD6C7E4}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\Windows\security\Database\tmp.edb
C:\Windows\system32\frapsvid.dll
C:\Windows\unin0405.exe


((((((((((((((((((((((((( Files Created from 2013-08-23 to 2013-09-23 )))))))))))))))))))))))))))))))


2013-09-23 17:43:22 . 2013-09-23 17:45:12 -------- d-----w- C:\Users\Macino-Radka\AppData\Local\temp
2013-09-23 12:56:16 . 2013-09-23 12:56:16 -------- d-----w- C:\Windows\ERUNT
2013-09-23 12:15:03 . 2013-09-23 12:15:03 -------- d-----w- C:\Users\Macino-Radka\AppData\Local\Macromedia
2013-09-23 09:24:22 . 2013-09-23 12:11:16 -------- d-----w- C:\Users\Macino-Radka\AppData\Roaming\TP-LINK
2013-09-23 09:23:56 . 2013-09-23 09:23:56 -------- d-----w- C:\Program Files\TP-LINK
2013-09-23 09:23:35 . 2011-04-20 01:06:02 1570304 ----a-w- C:\Windows\system32\drivers\athur.sys
2013-09-23 09:23:35 . 2011-04-20 01:06:02 1570304 ----a-w- C:\Windows\system32\athur.sys
2013-09-20 22:06:29 . 2013-09-20 22:06:29 -------- d-----w- C:\Users\Macino-Radka\AppData\Local\ElevatedDiagnostics
2013-09-20 20:37:09 . 2013-09-20 20:37:09 -------- d-----w- C:\Users\Macino-Radka\AppData\Roaming\Malwarebytes
2013-09-20 20:36:18 . 2013-09-20 20:36:18 -------- d-----w- C:\ProgramData\Malwarebytes
2013-09-20 20:30:40 . 2013-09-20 20:31:39 -------- d-----w- C:\AdwCleaner
2013-09-20 20:29:19 . 2013-09-21 08:50:45 -------- d-----w- C:\Users\Macino-Radka\AppData\Local\Adobe
2013-09-20 18:26:32 . 2013-09-20 18:26:32 388096 ----a-r- C:\Users\Macino-Radka\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-09-19 13:18:03 . 2013-09-19 13:18:03 -------- d-----w- C:\Users\Macino-Radka\AppData\Roaming\Nový priečinok
2013-09-16 18:04:18 . 2013-09-16 18:04:18 -------- d-----w- C:\ProgramData\Adobe Systems
2013-09-11 14:44:03 . 2013-09-21 07:27:31 -------- d-----w- C:\Program Files\pazera-software
2013-09-11 13:26:11 . 2013-09-23 17:15:00 -------- d-----w- C:\Users\Macino-Radka\AppData\Roaming\TS3Client
2013-09-11 13:25:40 . 2013-09-11 13:26:51 -------- d-----w- C:\Users\Macino-Radka\AppData\Local\TeamSpeak 3 Client
2013-09-10 14:58:21 . 2013-09-10 14:58:21 -------- d-----w- C:\Program Files\Common Files\Java
2013-09-10 14:57:58 . 2013-09-10 14:57:50 94632 ----a-w- C:\Windows\system32\WindowsAccessBridge.dll
2013-09-09 19:45:47 . 2013-09-09 19:45:46 139904 ----a-w- C:\Windows\system32\drivers\PnkBstrK.sys
2013-09-09 19:45:06 . 2013-09-09 19:45:02 291096 ----a-w- C:\Windows\system32\PnkBstrB.exe
2013-09-09 19:45:02 . 2013-09-09 19:45:02 291096 ----a-w- C:\Windows\system32\PnkBstrB.xtr
2013-09-09 19:44:27 . 2013-09-09 19:44:27 76888 ----a-w- C:\Windows\system32\PnkBstrA.exe
2013-09-09 19:44:26 . 2013-09-09 19:44:26 -------- d-----w- C:\Users\Macino-Radka\AppData\Local\PunkBuster
2013-09-09 15:35:25 . 2013-09-09 19:42:22 -------- d-----w- C:\Program Files\dumps
2013-09-08 15:22:37 . 2013-09-08 15:22:37 -------- d-----w- C:\Program Files\Trend Micro
2013-09-04 13:40:40 . 2013-09-04 13:40:40 -------- d-----w- C:\Users\Macino-Radka\AppData\Local\Razer
2013-09-04 13:39:56 . 2013-09-04 13:43:11 -------- d-----w- C:\ProgramData\Razer
2013-09-03 12:15:05 . 2013-09-03 12:15:05 -------- d-----w- C:\Program Files\Common Files\Skype
2013-09-03 12:15:04 . 2013-09-03 12:15:05 -------- d-----r- C:\Program Files\Skype
2013-09-01 16:16:30 . 2013-07-09 04:50:42 652800 ----a-w- C:\Windows\system32\rpcrt4.dll
2013-09-01 16:16:27 . 2013-07-09 04:46:31 1166848 ----a-w- C:\Windows\system32\crypt32.dll
2013-09-01 16:16:26 . 2013-07-09 04:52:10 175104 ----a-w- C:\Windows\system32\wintrust.dll
2013-09-01 16:16:26 . 2013-07-09 04:46:31 140288 ----a-w- C:\Windows\system32\cryptsvc.dll
2013-09-01 16:16:26 . 2013-07-09 04:46:31 103936 ----a-w- C:\Windows\system32\cryptnet.dll
2013-09-01 16:16:21 . 2013-07-09 05:03:34 3913664 ----a-w- C:\Windows\system32\ntoskrnl.exe
2013-09-01 16:16:20 . 2013-07-09 05:03:34 3968960 ----a-w- C:\Windows\system32\ntkrnlpa.exe
2013-09-01 16:16:20 . 2013-07-09 04:53:46 1289096 ----a-w- C:\Windows\system32\ntdll.dll
2013-09-01 16:16:05 . 2013-07-25 08:57:27 1620992 ----a-w- C:\Windows\system32\WMVDECOD.DLL
2013-09-01 16:16:04 . 2013-07-06 05:05:35 1293760 ----a-w- C:\Windows\system32\drivers\tcpip.sys
2013-09-01 16:16:01 . 2013-07-19 01:41:01 2048 ----a-w- C:\Windows\system32\tzres.dll
2013-09-01 16:15:40 . 2013-06-15 03:38:43 31232 ----a-w- C:\Windows\system32\drivers\tssecsrv.sys
2013-08-29 17:38:37 . 2013-08-29 17:38:37 -------- d-----w- C:\Users\Macino-Radka\AppData\Roaming\Publish Providers
2013-08-24 18:44:16 . 2013-08-24 18:45:41 -------- d-----w- C:\Users\Macino-Radka\AppData\Roaming\skyz
.


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2013-09-10 14:57:46 . 2012-06-27 14:37:07 867240 ----a-w- C:\Windows\system32\npdeployJava1.dll
2013-09-10 14:57:46 . 2011-12-18 17:18:05 789416 ----a-w- C:\Windows\system32\deployJava1.dll
2013-07-11 08:09:54 . 2013-07-11 08:09:54 2347520 ----a-w- C:\Windows\system32\win32k.sys
2013-07-11 08:09:40 . 2013-07-11 08:09:40 509440 ----a-w- C:\Windows\system32\qedit.dll
2013-07-11 08:04:21 . 2013-07-11 08:04:21 1247744 ----a-w- C:\Windows\system32\DWrite.dll

[memphisto]

COmbofix není celý navíc to máš zaplácáno ochranami... Nech jen jeden antivir a zbytek odinstaluj a potom zase znovu Combofix

AV: Advanced SystemCare Ultimate *Enabled/Outdated* {1C304DC4-1D72-5DB9-B33A-43B638ECFD30}
AV: Panda Internet Security 2013 *Disabled/Updated* {86971480-9989-6750-B122-681A86518D59}
FW: Panda Personal Firewall 2013 *Disabled* {BEAC95A5-D3E6-6608-9A7D-C12F7882CA22}
SP: Panda Internet Security 2013 *Disabled/Updated* {3DF6F564-BFB3-68DE-8B92-5368FDD6C7E4}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

[MrKrosian]

Už to asi neni nutné, kedže ste mi fakt moc pomohli, určite prispejem navaše fórum, a budem ho všade reklamovat, všetko už ide YouTube FB uplne všetko moc vám 10000 krát dakujem :) moc moc moc moc moc moc :) Ďakujem Moc ešte raz Ďakujem :)

[Žbeky]

Je to nutne, doktorovi taky ze salu neuteces hned po transplantaci ale pockas, az te zasije

Odesláno z mého Galaxy Nexus pomocí Tapatalk 4

[MrKrosian]

Eh .. Keby mi ide ComboFix spustit, ono to spraví tu inštalačku, potom to skončí a už nič .....

[memphisto]

Zkus to v nouzovém režimu

[MrKrosian]

Nouzák asi težko když, mám stolnej PC, a klávesnica se nenačte když se dáva nouzovej režím, načte se až když se zapne win7..

[jaro3]

To není pravda , klávesnice pracuje i v nouz. režimu. Je do USB? Zkontroluj v Biosu.