VIRY.CZ

Ahoj mám problémek s pc Toshiba satellite L300. Když čirou náhodou po x pokusech najede do normálního režimu, asi po 15 sekundách zmodrá obrazovka a konec. Jinak nabootuje jen do loga windows a pak automaticky vypne. V NR jede o stošest. Už v tom ležím tři dny a nic.... pc jsem rozebrala vizuelně zkontrolovala, pokusila jsem se o obnovu systému, zkusila jsem vyřadit grafickou kartu po spuštění a nic... Prosím prosím poraďte

Zdravím!
Zkuste nejdřiv obnovu systému k datu, kdy korektně fungoval.

Zkusila jsem nejde

Co bylo instalováno těsně před tím, než se problém objevil?

Kdybych to věděla už jsem to možná vyřešila... dal to ke mě dědula protože se v tom trochu hrabu... ale tohle už fakt nedávám....

ComboFix 14-05-29.01 - Admin 02.06.2014 21:05:07.1.2 - x86 NETWORK
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.2940.2336 [GMT 2:00]
Spuštěný z: c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JWST9LG2\ComboFix.exe
AV: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\system32\drivers\etc\hosts.ics
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-05-02 do 2014-06-02 )))))))))))))))))))))))))))))))
.
.
2014-06-02 19:09 . 2014-06-02 19:09 -------- d-----w- c:\users\kosatec\AppData\Local\temp
2014-06-02 19:09 . 2014-06-02 19:09 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-06-02 18:06 . 2014-04-30 14:37 8073384 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{72E14FE9-9B28-4639-94BE-B7F1F0771CF4}\mpengine.dll
2014-05-26 17:14 . 2014-05-26 17:14 -------- d-----w- c:\users\Admin
2014-05-26 15:04 . 2014-05-26 15:03 765968 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{8DE33CE1-91BA-41C7-A8F7-D9393903E991}\gapaengine.dll
2014-05-26 15:04 . 2014-04-30 14:37 8073384 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-05-26 14:54 . 2014-05-26 14:54 -------- d-----w- C:\0626023d1b01fde55e410b90b1fbfe
2014-05-26 14:13 . 2014-05-26 14:13 -------- d-----w- c:\users\kosatec\AppData\Roaming\AVG2014
2014-05-26 14:13 . 2014-05-26 14:13 -------- d-----w- c:\users\kosatec\AppData\Roaming\TuneUp Software
2014-05-26 14:12 . 2014-05-26 14:13 -------- d-----w- c:\programdata\AVG2014
2014-05-26 14:12 . 2014-05-26 14:12 -------- d-----w- C:\$AVG
2014-05-26 14:12 . 2014-05-26 14:12 -------- d-----w- c:\program files\AVG
2014-05-26 14:09 . 2014-05-26 14:24 -------- d-----w- c:\programdata\MFAData
2014-05-26 14:09 . 2014-05-26 14:19 -------- d-----w- c:\users\kosatec\AppData\Local\Avg2014
2014-05-26 14:09 . 2014-05-26 14:09 -------- d--h--w- c:\programdata\Common Files
2014-05-26 14:09 . 2014-05-26 14:09 -------- d-----w- c:\users\kosatec\AppData\Local\MFAData
2014-05-13 12:19 . 2014-05-13 12:19 192280 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2014-05-13 12:17 . 2014-05-13 12:17 237848 ----a-w- c:\windows\system32\drivers\avglogx.sys
2014-05-13 12:17 . 2014-05-13 12:17 210200 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2014-05-13 12:17 . 2014-05-13 12:17 122136 ----a-w- c:\windows\system32\drivers\avgdiskx.sys
2014-05-13 12:17 . 2014-05-13 12:17 149784 ----a-w- c:\windows\system32\drivers\avgidshx.sys
2014-05-13 12:17 . 2014-05-13 12:17 107288 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2014-05-13 12:09 . 2014-05-13 12:09 198936 ----a-w- c:\windows\system32\drivers\avgidsdriverx.sys
2014-05-13 12:04 . 2014-05-13 12:04 27416 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2014-05-13 12:04 . 2014-05-13 12:04 21272 ----a-w- c:\windows\system32\drivers\avgidsshimx.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-12 21:59 . 2012-10-20 21:26 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-03-12 21:59 . 2012-10-20 21:26 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-02-14 19:04 . 2014-02-14 19:04 49940480 ----a-w- c:\program files\GUT647.tmp
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\Sidebar.exe" [2010-11-20 1174016]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG_UI]
2014-05-13 12:18 5181456 ----a-w- c:\program files\AVG\AVG2014\avgui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC]
2013-10-23 13:55 948440 ----a-w- c:\program files\Microsoft Security Client\msseces.exe
.
R1 Avgdiskx;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiskx.sys [2014-05-13 122136]
R1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [2014-05-13 198936]
R1 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [2014-05-13 21272]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [2014-05-13 192280]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2014\avgidsagent.exe [2014-05-13 3644432]
R2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2014\avgwdsvc.exe [2014-05-13 292424]
R2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 104768]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-03-01 108032]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2013-10-23 280288]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-10-19 1343400]
S0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys [2014-05-13 149784]
S0 Avglogx;AVG Logging Driver;c:\windows\system32\DRIVERS\avglogx.sys [2014-05-13 237848]
S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [2014-05-13 27416]
S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [2014-05-13 210200]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
S3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 - síťový adaptér;c:\windows\system32\DRIVERS\RTL8187B.sys [2009-07-13 347136]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-05-26 14:08 1091912 ----a-w- c:\program files\Google\Chrome\Application\35.0.1916.114\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-03-17 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-20 21:59]
.
2014-05-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-10-20 21:27]
.
2014-05-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-10-20 21:27]
.
.
------- Doplňkový sken -------
.
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath -
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-06-02 21:11:32
ComboFix-quarantined-files.txt 2014-06-02 19:11
.
Před spuštěním: Volných bajtů: 17 469 825 024
Po spuštění: Volných bajtů: 21 240 434 688
.
- - End Of File - - 8A7E8AA50A160A1EBB0BE99F2EA460F1
A36C5E4F47E84449FF07ED3517B43A31

o těch dvou antivirech vím, jen nejdou odinstalovat v NR

V prohlížeči událostí je celkem 5038 událostí z toho je 90% chyb a kritických

log z RSITu

Logfile of random's system information tool 1.10 (written by random/random)
Run by Admin at 2014-06-02 22:26:31
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 20 GB (26%) free of 78 GB
Total RAM: 2940 MB (84% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:27:06, on 2.6.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Safe mode with network support

Running processes:
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Admin\Downloads\RSIT.exe
C:\Program Files\trend micro\Admin.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware (cleanup)] "C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe" "C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware"
O4 - HKCU\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - ProtocolDefaults: '@ivt' protocol is in My Computer Zone, should be Intranet Zone
O15 - ProtocolDefaults: 'file' protocol is in My Computer Zone, should be Internet Zone
O15 - ProtocolDefaults: 'ftp' protocol is in My Computer Zone, should be Internet Zone
O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone
O15 - ProtocolDefaults: 'https' protocol is in My Computer Zone, should be Internet Zone
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgwdsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

--
End of file - 3129 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes Anti-Malware (cleanup)"=C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe [2014-05-12 54072]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\Sidebar.exe [2010-11-20 1174016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG_UI]
C:\Program Files\AVG\AVG2014\avgui.exe [2014-05-13 5181456]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC]
c:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 948440]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-06-02 22:14:23 ----D---- C:\rsit
2014-06-02 22:14:23 ----D---- C:\Program Files\trend micro
2014-06-02 22:09:32 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-06-02 22:09:15 ----D---- C:\ProgramData\Malwarebytes
2014-06-02 22:09:15 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2014-06-02 22:09:15 ----A---- C:\Windows\system32\drivers\mwac.sys
2014-06-02 22:09:15 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2014-06-02 22:09:15 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-06-02 21:11:38 ----SHD---- C:\$RECYCLE.BIN
2014-06-02 21:11:34 ----D---- C:\Windows\temp
2014-06-02 21:11:32 ----A---- C:\ComboFix.txt
2014-06-02 21:03:41 ----A---- C:\Windows\zip.exe
2014-06-02 21:03:41 ----A---- C:\Windows\SWSC.exe
2014-06-02 21:03:41 ----A---- C:\Windows\SWREG.exe
2014-06-02 21:03:41 ----A---- C:\Windows\sed.exe
2014-06-02 21:03:41 ----A---- C:\Windows\PEV.exe
2014-06-02 21:03:41 ----A---- C:\Windows\NIRCMD.exe
2014-06-02 21:03:41 ----A---- C:\Windows\MBR.exe
2014-06-02 21:03:41 ----A---- C:\Windows\grep.exe
2014-06-02 21:00:09 ----D---- C:\Qoobox
2014-06-02 20:59:54 ----D---- C:\Windows\erdnt
2014-06-02 20:28:03 ----D---- C:\Users\Admin\AppData\Roaming\Macromedia
2014-06-02 20:14:41 ----D---- C:\Windows\pss
2014-05-26 19:15:21 ----D---- C:\Users\Admin\AppData\Roaming\AVG2014
2014-05-26 19:14:42 ----D---- C:\Users\Admin\AppData\Roaming\Identities
2014-05-26 19:14:24 ----D---- C:\Users\Admin\AppData\Roaming\Adobe
2014-05-26 19:14:01 ----SD---- C:\Users\Admin\AppData\Roaming\Microsoft
2014-05-26 19:14:01 ----D---- C:\Users\Admin\AppData\Roaming\Media Center Programs
2014-05-26 16:54:50 ----D---- C:\0626023d1b01fde55e410b90b1fbfe
2014-05-26 16:12:46 ----D---- C:\ProgramData\AVG2014
2014-05-26 16:12:46 ----D---- C:\$AVG
2014-05-26 16:12:04 ----D---- C:\Program Files\AVG
2014-05-26 16:09:56 ----HD---- C:\ProgramData\Common Files
2014-05-26 16:09:56 ----D---- C:\ProgramData\MFAData
2014-05-13 14:19:14 ----A---- C:\Windows\system32\drivers\avgldx86.sys
2014-05-13 14:17:24 ----A---- C:\Windows\system32\drivers\avglogx.sys
2014-05-13 14:17:22 ----A---- C:\Windows\system32\drivers\avgtdix.sys
2014-05-13 14:17:22 ----A---- C:\Windows\system32\drivers\avgdiskx.sys
2014-05-13 14:17:20 ----A---- C:\Windows\system32\drivers\avgmfx86.sys
2014-05-13 14:17:20 ----A---- C:\Windows\system32\drivers\avgidshx.sys
2014-05-13 14:09:12 ----A---- C:\Windows\system32\drivers\avgidsdriverx.sys
2014-05-13 14:04:36 ----A---- C:\Windows\system32\drivers\avgrkx86.sys
2014-05-13 14:04:34 ----A---- C:\Windows\system32\drivers\avgidsshimx.sys

======List of files/folders modified in the last 1 month======

2014-06-02 22:20:56 ----A---- C:\Windows\ntbtlog.txt
2014-06-02 22:18:06 ----D---- C:\Windows\system32\drivers
2014-06-02 22:14:23 ----RD---- C:\Program Files
2014-06-02 22:09:15 ----D---- C:\ProgramData
2014-06-02 21:46:24 ----D---- C:\Windows\System32
2014-06-02 21:46:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-06-02 21:46:23 ----D---- C:\Windows\inf
2014-06-02 21:18:25 ----D---- C:\Windows\system32\drivers\etc
2014-06-02 21:11:34 ----D---- C:\Windows
2014-06-02 21:10:04 ----A---- C:\Windows\system.ini
2014-06-02 21:08:02 ----D---- C:\Windows\AppPatch
2014-06-02 21:08:00 ----D---- C:\Program Files\Common Files
2014-06-02 20:20:34 ----D---- C:\Windows\system32\config
2014-06-02 20:09:26 ----SD---- C:\ProgramData\Microsoft
2014-05-26 19:14:00 ----RD---- C:\Users
2014-05-26 16:40:58 ----D---- C:\Windows\system32\wbem
2014-05-26 16:13:41 ----SHD---- C:\Windows\Installer
2014-05-26 16:13:40 ----D---- C:\Config.Msi
2014-05-26 16:12:26 ----SHD---- C:\System Volume Information
2014-05-26 16:07:25 ----D---- C:\Windows\system32\catroot2
2014-05-26 16:07:25 ----D---- C:\Windows\system32\catroot
2014-05-26 16:07:09 ----D---- C:\Windows\winsxs
2014-05-26 15:40:09 ----D---- C:\Windows\Tasks
2014-05-26 15:40:09 ----D---- C:\Windows\system32\wfp
2014-05-26 15:40:09 ----D---- C:\Windows\system32\en-US
2014-05-26 15:40:09 ----D---- C:\Windows\system32\DriverStore
2014-05-26 15:40:09 ----D---- C:\Windows\system32\cs-CZ
2014-05-26 15:40:09 ----D---- C:\Windows\PolicyDefinitions
2014-05-26 15:40:09 ----D---- C:\Program Files\Internet Explorer
2014-05-26 15:40:06 ----D---- C:\Windows\system32\Tasks
2014-05-26 15:40:05 ----D---- C:\Windows\system32\CodeIntegrity
2014-05-26 15:40:03 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-05-26 15:40:03 ----D---- C:\Program Files\Mozilla Firefox
2014-05-26 15:40:03 ----D---- C:\Program Files\Microsoft Security Client
2014-05-26 15:40:02 ----D---- C:\99c541fffa1fad69b453
2014-05-26 15:39:59 ----D---- C:\Program Files\Microsoft Silverlight
2014-05-26 15:39:50 ----D---- C:\Windows\registration

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHX;AVGIDSHX; C:\Windows\system32\DRIVERS\avgidshx.sys [2014-05-13 149784]
R0 Avglogx;AVG Logging Driver; C:\Windows\system32\DRIVERS\avglogx.sys [2014-05-13 237848]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2014-05-13 107288]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2014-05-13 27416]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2014-05-13 210200]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-14 139776]
R3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 - síťový adaptér; C:\Windows\system32\DRIVERS\RTL8187B.sys [2009-07-14 347136]
S0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-09-27 214696]
S1 Avgdiskx;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiskx.sys [2014-05-13 122136]
S1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdriverx.sys [2014-05-13 198936]
S1 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\avgidsshimx.sys [2014-05-13 21272]
S1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2014-05-13 192280]
S2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 104768]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 catchme;catchme; \??\C:\Users\Admin\AppData\Local\Temp\catchme.sys []
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-06-10 4756480]
S3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-05-12 23256]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-05-12 51928]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 15872]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-14 207360]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-14 980992]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-14 661504]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 22208]
S2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [2014-05-13 3644432]
S2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [2014-05-13 292424]
S2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-10-20 136176]
S2 MBAMService;MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]
S2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-05-12 1809720]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12 257928]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-10-20 136176]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-01 108032]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-22 119408]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 280288]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-10-19 1343400]

-----------------EOF-----------------

1. CF nepoužívejte bez doporuční rádce a bez kontroly jinou utilitou. Lze di jím snadno poškodit systém, nebo některou aplikaci.
2. Na odinstalování antivirů jsou už dnes utility, např. pro AVG: http://www.techsupportall.com/tag/avg-removal-tool/ . Utility praczjí v nouz. režimu.
3. k logu:

Přesuňte ComboFix na plochu. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

File::
c:\program files\GUT647.tmp
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.



Obávám se ale, že CF nám nepomůže, že jde o problém systému.

Pořád mi to tam hlásí že před spuštěním mám vypnout antivir

Výsledek:

ComboFix 14-05-29.01 - Admin 02.06.2014 22:59:27.3.2 - x86 NETWORK
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.2940.2529 [GMT 2:00]
Spuštěný z: c:\users\Admin\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Admin\Desktop\CFScript.txt
AV: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
FILE ::
"c:\program files\GUT647.tmp"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Předchozí spuštění -------
.
c:\program files\GUT647.tmp
c:\windows\system32\drivers\etc\hosts.ics
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-05-02 do 2014-06-02 )))))))))))))))))))))))))))))))
.
.
2014-06-02 21:04 . 2014-06-02 21:04 -------- d-----w- c:\users\kosatec\AppData\Local\temp
2014-06-02 21:04 . 2014-06-02 21:04 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-06-02 20:14 . 2014-06-02 20:26 -------- d-----w- c:\program files\trend micro
2014-06-02 20:14 . 2014-06-02 20:14 -------- d-----w- C:\rsit
2014-06-02 20:09 . 2014-06-02 20:09 110296 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-06-02 20:09 . 2014-06-02 20:09 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2014-06-02 20:09 . 2014-06-02 20:09 -------- d-----w- c:\programdata\Malwarebytes
2014-06-02 20:09 . 2014-05-12 05:26 51928 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-06-02 20:09 . 2014-05-12 05:25 74456 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-06-02 20:09 . 2014-05-12 05:25 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-06-02 18:06 . 2014-04-30 14:37 8073384 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{72E14FE9-9B28-4639-94BE-B7F1F0771CF4}\mpengine.dll
2014-05-26 17:14 . 2014-05-26 17:14 -------- d-----w- c:\users\Admin
2014-05-26 15:04 . 2014-05-26 15:03 765968 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{8DE33CE1-91BA-41C7-A8F7-D9393903E991}\gapaengine.dll
2014-05-26 15:04 . 2014-04-30 14:37 8073384 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-05-26 14:54 . 2014-05-26 14:54 -------- d-----w- C:\0626023d1b01fde55e410b90b1fbfe
2014-05-26 14:13 . 2014-05-26 14:13 -------- d-----w- c:\users\kosatec\AppData\Roaming\AVG2014
2014-05-26 14:13 . 2014-05-26 14:13 -------- d-----w- c:\users\kosatec\AppData\Roaming\TuneUp Software
2014-05-26 14:12 . 2014-05-26 14:13 -------- d-----w- c:\programdata\AVG2014
2014-05-26 14:12 . 2014-05-26 14:12 -------- d-----w- C:\$AVG
2014-05-26 14:12 . 2014-05-26 14:12 -------- d-----w- c:\program files\AVG
2014-05-26 14:09 . 2014-06-02 20:36 -------- d-----w- c:\programdata\MFAData
2014-05-26 14:09 . 2014-05-26 14:19 -------- d-----w- c:\users\kosatec\AppData\Local\Avg2014
2014-05-26 14:09 . 2014-05-26 14:09 -------- d--h--w- c:\programdata\Common Files
2014-05-26 14:09 . 2014-05-26 14:09 -------- d-----w- c:\users\kosatec\AppData\Local\MFAData
2014-05-13 12:17 . 2014-05-13 12:17 237848 ----a-w- c:\windows\system32\drivers\avglogx.sys
2014-05-13 12:17 . 2014-05-13 12:17 122136 ----a-w- c:\windows\system32\drivers\avgdiskx.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-12 21:59 . 2012-10-20 21:26 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-03-12 21:59 . 2012-10-20 21:26 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\Sidebar.exe" [2010-11-20 1174016]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes Anti-Malware (cleanup)"="c:\programdata\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe" [2014-05-12 54072]
"AvgRemover"="c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TWA20V8C\avg_remover_stf_x86_2012_2125.exe" [2014-06-02 1973368]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG_UI]
2014-05-13 12:18 5181456 ----a-w- c:\program files\AVG\AVG2014\avgui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC]
2013-10-23 13:55 948440 ----a-w- c:\program files\Microsoft Security Client\msseces.exe
.
R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys [x]
R0 Avglogx;AVG Logging Driver;c:\windows\system32\DRIVERS\avglogx.sys [2014-05-13 237848]
R1 Avgdiskx;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiskx.sys [2014-05-13 122136]
R1 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [x]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]
R2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 104768]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-03-01 108032]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-05-12 23256]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2014-05-12 51928]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2013-10-23 280288]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-10-19 1343400]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
S3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 - síťový adaptér;c:\windows\system32\DRIVERS\RTL8187B.sys [2009-07-13 347136]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-05-26 14:08 1091912 ----a-w- c:\program files\Google\Chrome\Application\35.0.1916.114\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-03-17 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-20 21:59]
.
.
------- Doplňkový sken -------
.
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath -
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Microsoft Security Client\MsMpEng.exe
c:\windows\system32\conhost.exe
c:\windows\system32\DllHost.exe
.
**************************************************************************
.
Celkový čas: 2014-06-02 23:10:47 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-06-02 21:10
ComboFix2.txt 2014-06-02 19:11
.
Před spuštěním: Volných bajtů: 21 004 689 408
Po spuštění: Volných bajtů: 20 942 229 504
.
- - End Of File - - CCCE7FD0A7D049B8A86D6C65BEFEBB73
A36C5E4F47E84449FF07ED3517B43A31

pokud je to systémové co s tím? Přeinstalovat nejde

Prosím

Log je již OK. CF odinastalujte pomocí T-Cleaneru. Pokud ani nyní nefunguje normální režim, problém nemá nic společného s viry, budetřeba systém opravit, nebo přeinstalovat., Zkuste opravu systému pomocí:

1.FixIt: http://support.microsoft.com/fixit/cs-cz .
2. Win7managerem: http://www.yamicsoft.com/windows7manager/
3. z instal.média: http://forum.viry.cz/viewtopic.php?f=46&t=106339.

Pokud ani oprava nepomůže, bude třeba reinstal systému.

Tak nic nepomohlo a reinstal se nezdařil, vyběhla modrá obrazovka Stop: 0x000007B....co s tím
prosím