Analiza loga OTL - podejrzenie infekcji komputera

Cytat:

:OTL
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\ComboFix\mbr.sys -- (mbr)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\Users\User\AppData\Local\Temp\catchme.sys -- (catchme)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
IE - HKCU\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredibar.com/?a=6PR7wJcGRU&loc=skw&search={searchTerms}&i=26
FF - prefs.js..browser.search.selectedEngine: "MyStart Search"
[2013-04-07 20:00:10 | 000,001,294 | ---- | M] () -- C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\jz95prf7.default\searchplugins\delta.xml
[2013-09-28 14:49:03 | 000,002,115 | ---- | M] () -- C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\jz95prf7.default\searchplugins\MyStart Search.xml
[2013-09-22 12:56:09 | 000,004,120 | ---- | M] () -- C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\jz95prf7.default\searchplugins\SweetIM Search.xml
[2013-04-07 19:59:53 | 000,006,468 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4 - HKLM..\RunOnce: [upt4pc_pl_5.exe] C:\Users\User\AppData\Local\tuto4pc_pl_5\upt4pc_pl_5.exe ()
O20 - AppInit_DLLs: (c:\progra~2\bitguard\271832~1.68\{c16c1~1\bitguard.dll) - File not found
[2014-04-14 23:53:42 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2014-04-14 23:53:41 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2014-04-14 23:53:41 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2014-04-14 23:53:41 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe
[2014-04-14 23:53:30 | 000,000,000 | ---D | C] -- C:\ComboFix
[2014-04-14 23:53:22 | 000,000,000 | ---D | C] -- C:\Qoobox
[2014-04-14 23:53:42 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2014-04-14 23:53:42 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2014-04-14 23:53:41 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2014-04-14 23:53:41 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2014-04-14 23:53:41 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe

:Commands
[emptytemp]