Wyskakujące reklamy i ankiety w Windows – analiza loga ComboFix, podejrzenie infekcji

Cytat:

Task: {AF958E6E-19F6-49EB-A19B-220A6FDEBAD6} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION
Task: {C0734285-8173-418E-8603-4B2A73AD1883} - \DSite No Task File <==== ATTENTION
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 - {A49ABBBB-CAEA-44D7-8BBD-1EB8D0DB4946} URL = http://startsear.ch/?aff=1&q={searchTerms}
SearchScopes: HKCU - {42168F92-DA71-42E6-BC7F-132EAC1F1899} URL = http://startsear.ch/?aff=1&src=sp&cf=6548aeb8-eac7-11e0-95d5-001731afa16a&q={searchTerms}
SearchScopes: HKCU - {A49ABBBB-CAEA-44D7-8BBD-1EB8D0DB4946} URL = http://startsear.ch/?aff=1&q={searchTerms}
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
FF Extension: BrowseMark - C:\Users\Piotr Krakowiak\AppData\Roaming\Mozilla\Firefox\Profiles\fqgp5cg6.default\Extensions\{b99c8534-7800-48fa-bd71-519a46cdc7e1}.xpi [2014-04-15]
CHR Extension: (SNT) - C:\Users\Piotr Krakowiak\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbnkomlkdppejhpngalehpljnbjcpkmk [2014-05-03]
CHR Extension: (No Name) - C:\Users\Piotr Krakowiak\AppData\Local\Google\Chrome\User Data\Default\Extensions\eficmnlpfjnliemcdghfhehadephfdlj [2014-05-03]
CHR Extension: (Speedy Shopper) - C:\Users\Piotr Krakowiak\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcpelgcagfhfoegekianiofphddckof [2014-05-03]
CHR Extension: (No Name) - C:\Users\Piotr Krakowiak\AppData\Local\Google\Chrome\User Data\Default\Extensions\mklokhofogeajmeoedhcheofbhjcdjei [2014-05-03]
S3 connctfy; system32\DRIVERS\connctfy.sys [X]
S3 connctfyMP; system32\DRIVERS\connctfy.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 moufiltr; system32\DRIVERS\moufiltr.sys [X]
S3 NLNdisMP; system32\DRIVERS\nlndis.sys [X]
S3 NLNdisPT; system32\DRIVERS\nlndis.sys [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [X]
S3 vhidmini; system32\DRIVERS\walvhid.sys [X]
2014-05-12 22:32 - 2014-05-12 22:32 - 00197187 _____ () C:\ComboFix.txt
2014-05-12 21:48 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-12 21:48 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-12 21:48 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-12 21:48 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-12 21:48 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-12 21:48 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-12 21:48 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-12 21:48 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-12 21:47 - 2014-05-12 22:32 - 00000000 ____D () C:\Qoobox
2014-05-10 21:40 - 2014-04-28 10:23 - 00061112 _____ (StdLib) C:\Windows\system32\Drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}w64.sys
2014-05-08 23:28 - 2014-05-07 16:06 - 00061112 _____ (StdLib) C:\Windows\system32\Drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64.sys
2014-05-08 21:44 - 2014-05-13 09:46 - 00000000 ____D () C:\AdwCleaner