tak se opět po delší době ozývám, vše provedeno, níže přikládám log. Jen se chci ještě zeptat ten Defender vypnout natrvalo už? Ostatně ani přesně nevím jakou funkci přesně by měl vykonávat já napřed myslel že je to Firewall

ComboFix 13-12-06.01 - Jirka 06.12.2013 20:02:44.4.4 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3062.1849 [GMT 1:00]
Spuštěný z: c:\users\Jirka\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Jirka\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-11-06 do 2013-12-06 )))))))))))))))))))))))))))))))
.
.
2013-12-06 19:11 . 2013-12-06 19:11 -------- d-----w- c:\users\Public\AppData\Local\temp
2013-12-06 19:11 . 2013-12-06 19:11 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-12-03 18:13 . 2013-12-06 19:13 -------- d-----w- c:\users\Jirka\AppData\Local\temp
2013-12-03 17:59 . 2013-11-08 01:15 7772552 ------w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{01BA4ED2-41E4-4AAE-B94C-7E4FB909652C}\mpengine.dll
2013-12-01 08:07 . 2013-12-01 08:07 -------- d-----w- c:\program files\Defraggler
2013-11-29 20:37 . 2013-11-29 20:37 -------- d-----w- c:\users\Jirka\AppData\Roaming\Malwarebytes
2013-11-16 09:23 . 2013-11-16 09:23 -------- d-----w- c:\program files\Youda Jewel Shop
2013-11-15 18:19 . 2013-09-04 01:14 76288 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2013-11-15 18:19 . 2013-09-04 01:14 43008 ----a-w- c:\windows\system32\drivers\usbehci.sys
2013-11-15 18:19 . 2013-09-04 01:15 258560 ----a-w- c:\windows\system32\drivers\usbhub.sys
2013-11-15 18:19 . 2013-09-04 01:14 284672 ----a-w- c:\windows\system32\drivers\usbport.sys
2013-11-15 18:19 . 2013-09-04 01:14 20480 ----a-w- c:\windows\system32\drivers\usbohci.sys
2013-11-15 18:19 . 2013-09-04 01:14 24064 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2013-11-15 18:19 . 2013-09-04 01:14 6016 ----a-w- c:\windows\system32\drivers\usbd.sys
2013-11-15 08:28 . 2013-10-04 01:56 1796096 ----a-w- c:\windows\system32\authui.dll
2013-11-15 08:28 . 2013-10-04 01:58 152576 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll
2013-11-15 08:28 . 2013-10-04 01:56 168960 ----a-w- c:\windows\system32\credui.dll
2013-11-15 08:28 . 2013-09-25 01:57 247808 ----a-w- c:\windows\system32\schannel.dll
2013-11-15 08:28 . 2013-09-25 02:01 136640 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2013-11-15 08:28 . 2013-09-25 02:01 67520 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2013-11-15 08:28 . 2013-09-25 01:56 1038848 ----a-w- c:\windows\system32\lsasrv.dll
2013-11-15 08:28 . 2013-07-04 12:16 369848 ----a-w- c:\windows\system32\drivers\cng.sys
2013-11-15 08:27 . 2013-09-25 01:57 99840 ----a-w- c:\windows\system32\sspicli.dll
2013-11-15 08:27 . 2013-09-25 01:57 22016 ----a-w- c:\windows\system32\secur32.dll
2013-11-15 08:27 . 2013-09-25 01:56 220160 ----a-w- c:\windows\system32\ncrypt.dll
2013-11-15 08:27 . 2013-09-25 00:49 22016 ----a-w- c:\windows\system32\lsass.exe
2013-11-15 08:27 . 2013-09-25 00:49 15872 ----a-w- c:\windows\system32\sspisrv.dll
2013-11-15 08:27 . 2013-10-03 01:58 305152 ----a-w- c:\windows\system32\gdi32.dll
2013-11-15 08:27 . 2013-10-12 02:01 679424 ----a-w- c:\windows\system32\IKEEXT.DLL
2013-11-15 08:27 . 2013-10-12 02:03 656896 ----a-w- c:\windows\system32\nshwfp.dll
2013-11-15 08:27 . 2013-10-12 02:01 216576 ----a-w- c:\windows\system32\FWPUCLNT.DLL
2013-11-15 08:27 . 2013-10-05 19:57 1168384 ----a-w- c:\windows\system32\crypt32.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-24 06:47 . 2011-06-26 10:00 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-11-18 18:59 . 2011-04-10 17:21 774392 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-11-18 18:59 . 2010-06-27 17:14 35656 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-11-18 18:59 . 2010-06-27 17:14 70384 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-11-18 18:59 . 2010-06-27 17:14 57672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-11-18 18:59 . 2010-07-02 18:17 43152 ----a-w- c:\windows\avastSS.scr
2013-11-18 18:59 . 2010-06-27 17:14 269216 ----a-w- c:\windows\system32\aswBoot.exe
2013-11-11 04:50 . 2010-06-04 18:40 230048 ------w- c:\windows\system32\MpSigStub.exe
2013-11-08 21:37 . 2010-06-27 17:14 403440 ----a-w- c:\windows\system32\drivers\aswsp.sys
2013-11-01 20:57 . 2013-11-01 20:58 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-10-18 20:57 . 2013-03-02 07:40 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-10-18 20:57 . 2013-03-02 07:40 178304 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-10-18 20:57 . 2012-03-24 19:28 79720 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-10-11 20:34 . 2013-10-11 20:34 17813896 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe
2013-10-05 17:32 . 2013-10-05 17:32 19730922 ----a-w- c:\windows\system32\Fotoknihy online_Fotoknihy online_uninstaller.exe
2013-09-25 01:57 . 2013-11-15 08:28 247808 ----a-w- c:\windows\system32\schannel.dll
2013-09-14 00:48 . 2013-10-11 20:19 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2013-09-08 02:07 . 2013-10-11 20:19 1294272 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-09-08 02:03 . 2013-10-11 20:19 231424 ----a-w- c:\windows\system32\mswsock.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-11-18 18:59 321752 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Toshiba TEMPRO"="c:\program files\Toshiba TEMPRO\TemproTray.exe" [2011-02-10 1546720]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2009-10-02 284696]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-10-21 7858720]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2013-11-18 3568312]
"KeNotify"="c:\program files\TOSHIBA\Utilities\KeNotify.exe" [2009-01-13 34088]
"AvastUI.exe"="c:\program files\Alwil Software\Avast5\AvastUI.exe" [2013-11-18 3568312]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"NCInstallQueue"="netman.dll" [2009-07-14 280576]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
TRDCReminder.lnk - c:\program files\TOSHIBA\TRDCReminder\TRDCReminder.exe [2009-9-1 481184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2011-05-04 17:54 551296 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
R3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Home Edition\kerneld.wnt [x]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2013-11-28 108032]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-09-22 174592]
R3 TMachInfo;TMachInfo;c:\program files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2011-02-11 54136]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-06-05 1343400]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-06-05 691696]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2013-11-18 774392]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2013-11-08 403440]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2011-07-22 12880]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2011-07-12 67664]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [2012-09-12 116608]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-09-08 172032]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2013-11-18 35656]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-11-18 70384]
S2 cfWiMAXService;ConfigFree WiMAX Service;c:\program files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe [2009-10-27 185712]
S2 ConfigFree Service;ConfigFree Service;c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe [2009-03-10 46448]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-10-02 13336]
S2 TemproMonitoringService;Notebook Performance Tuning Service (TEMPRO);c:\program files\Toshiba TEMPRO\TemproSvc.exe [2011-02-10 112080]
S2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;c:\program files\TOSHIBA\TECO\TecoService.exe [2009-09-28 185712]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-09-30 2314240]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [2009-10-26 125696]
S3 PGEffect;Pangu effect driver;c:\windows\system32\DRIVERS\pgeffect.sys [2009-06-22 24064]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-11-05 230912]
S3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;c:\windows\system32\DRIVERS\rtl8192se.sys [2010-04-27 1011232]
.
.
.
------- Doplňkový sken -------
.
uStart Page =
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\qieabtyh.default\
FF - prefs.js: browser.startup.homepage - www.centrum.cz
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Home Edition\kerneld.wnt"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(3356)
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\atieclxx.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
c:\windows\system32\TODDSrv.exe
c:\program files\TOSHIBA\Power Saver\TosCoSrv.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
c:\program files\TOSHIBA\ConfigFree\NDSTray.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\TOSHIBA\ConfigFree\CFSwMgr.exe
c:\windows\system32\sppsvc.exe
.
**************************************************************************
.
Celkový čas: 2013-12-06 20:17:45 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-12-06 19:17
ComboFix2.txt 2013-12-03 18:13
.
Před spuštěním: Volných bajtů: 82 042 368 000
Po spuštění: Volných bajtů: 81 974 288 384
.
- - End Of File - - B026E50BE7132CE871197F67A74C3E9E
A36C5E4F47E84449FF07ED3517B43A31