Tak skús to v núdzovom režime so sieťou.
----
• Spusť OTL ako správca,
• Do spodného okienka Vlastné skenovanie/opravy (Custom Scans/Fixes) vlož script:
:otl
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\Senfilt.sys -- (SenFiltService)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (ay5g9s5p)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (aeaab7a5)
IE - HKU\S-1-5-21-3314771282-3977894261-815355269-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-3314771282-3977894261-815355269-1000\..\SearchScopes\{170DA7C8-FBBC-41E2-BBB4-95D23EEBC727}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253
IE - HKU\S-1-5-21-3314771282-3977894261-815355269-1000\..\SearchScopes\{5F8346E0-A250-1FC1-B8A9-14E6F0D77EDB}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
IE - HKU\S-1-5-21-3314771282-3977894261-815355269-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-3314771282-3977894261-815355269-1000\..\SearchScopes\{FEDF4BB8-BA82-46D2-92F9-82EF0872971B}: "URL" = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=iron2&chnl=iron2&cd=2XzutAtN2Y1L1QzutDtDtC0AzytByB0CtA0DyCtAyCyCzzzztN0D0TzutBtDtCtBtDyCtDzy&cr=687135589
IE - HKU\S-1-5-21-3314771282-3977894261-815355269-1000\..\SearchScopes\{FF5B20FC-7E97-4320-B5E1-3FE23904F2E4}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYCZ&apn_uid=34D47C63-3F99-4D83-8B04-A1613A6247F9&apn_sauid=C1444401-3AA2-40EB-98AF-3825043AB63F
IE - HKU\S-1-5-21-3314771282-3977894261-815355269-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.bigseekpro.com/hypercam/{27A3C7DF-04CE-4D80-99CC-B67EDC796269}
IE - HKU\S-1-5-21-3314771282-3977894261-815355269-1001\..\URLSearchHook: {CA3EB689-8F09-4026-AA10-B9534C691CE0} - No CLSID value found
IE - HKU\S-1-5-21-3314771282-3977894261-815355269-1001\..\SearchScopes,DefaultScope =
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&ilc=12&type=937811"
FF - user.js - File not found
CHR - default_search_provider: Ask (Enabled)
CHR - default_search_provider: search_url = http://websearch.ask.com/redirect?client=cr&src=kw&tb=ORJ&o=&locale=&apn_uid=34D47C63-3F99-4D83-8B04-A1613A6247F9&apn_ptnrs=U3&apn_sauid=C1444401-3AA2-40EB-98AF-3825043AB63F&apn_dtid=OSJ000YYCZ&q={searchTerms}
CHR - default_search_provider: suggest_url = http://ss.websearch.ask.com/query?qsrc=2922&li=ff&sstype=prefix&q={searchTerms}
:files
C:\Windows\*.tmp
C:\Users\uzivatel\Desktop\*.tmp
C:\*.tmp
C:\Users\uzivatel\AppData\Roaming\Autodesk
C:\Users\uzivatel\AppData\Roaming\Hive Cluster
C:\Users\uzivatel\AppData\Roaming\ICQ
C:\Users\uzivatel\AppData\Roaming\ICQ Search
C:\Users\uzivatel\AppData\Roaming\LolClient
C:\Users\uzivatel\AppData\Roaming\LucasArts
C:\Users\uzivatel\AppData\Roaming\MAXON
C:\Users\uzivatel\AppData\Roaming\QipGuard
:reg
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Guard.Mail.ru]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\QipGuard]
[-HKEY_CURRENT_USER\Software\qip.ru\QipGuard]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Mail.Ru\Guard]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Guard.Mail.ru]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Guard.Mail.ru]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\Guard.Mail.ru]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet005\Services\Guard.Mail.ru]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Services\Guard.Mail.ru]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet007\Services\Guard.Mail.ru]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet008\Services\Guard.Mail.ru]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet009\Services\Guard.Mail.ru]
[-HKEY_USERS\S-1-5-21-3314771282-3977894261-815355269-1000\Software\qip.ru\QipGuard]
:commands
[PURITY]
[EMPTYTEMP]
[EMPTYFLASH]
[EMPTYJAVA]
[RESETHOSTS]
[REBOOT]• OTL vykoná príkazy zo scriptu, reštartuje PC a vyskočí log, jeho obsah sem skopíruj.
----
Potom sprav ešte raz sken v OTL ešte raz (Run Scan) a vlož sem log OTL.txt.