Prosim o kontrolu

[spiritza]

Dobry den prajem poprosil by som o kontrolu mojho logu.
Dakujem a prajem pekny den.


Logfile of random's system information tool 1.09 (written by random/random)
Run by spirit at 2012-06-24 15:53:36
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 448 GB (73%) free of 610 GB
Total RAM: 3071 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:54:02, on 24. 6. 2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
C:\Windows\system32\SearchFilterHost.exe
C:\Users\spirit\Desktop\RSIT.exe
C:\Program Files\trend micro\spirit.exe
C:\Users\spirit\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\spirit\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\spirit\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\spirit\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\spirit\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\spirit\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\spirit\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\spirit\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\spirit\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\spirit\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\spirit\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\spirit\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\spirit\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\klwtblfs.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.tsbohemia.cz
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tsbohemia.cz
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\BitTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2016993268-1098181373-2034553571-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2016993268-1098181373-2034553571-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Facebook Messenger.lnk = C:\Users\spirit\AppData\Local\Facebook\Messenger\2.1.4554.0\FacebookMessenger.exe
O8 - Extra context menu item: Přidat do Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm
O9 - Extra button: &Virtuální klávesnice - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll
O9 - Extra button: K&ontrola adres URL - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll
O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{90187844-6ACB-4D33-BD7F-5F1A287F0AB5}: NameServer = 195.146.132.58 195.146.128.62
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: ActiveSMART Service - Ariolic Software, Ltd. (http://www.ariolic.com) - C:\Program Files\ActiveSMART 2.92\ASmartService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Služba Kaspersky Anti-Virus (AVP) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 9228 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2016993268-1098181373-2034553571-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2016993268-1098181373-2034553571-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2016993268-1098181373-2034553571-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2016993268-1098181373-2034553571-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\spirit\AppData\Roaming\Mozilla\Firefox\Profiles\ibqatdwi.default

"linkfilter@kaspersky.ru"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru
"virtualKeyboard@kaspersky.ru"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
"KavAntiBanner@Kaspersky.ru"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.5.1]
"Description"=
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
amazondotcom.xml
bing.xml
eBay.xml
google.xml
twitter.xml
wikipedia.xml
yahoo.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll [2011-04-24 86416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [2012-05-04 453504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-03-30 266240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [2012-05-04 157576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll [2011-04-24 229776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-03-30 266240]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [2009-08-28 1486848]
"AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [2011-04-24 202296]
"NPSStartup"= []
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-17 252296]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2012-06-05 17344176]
"BitTorrent"=C:\Program Files\BitTorrent\BitTorrent.exe [2012-05-15 6380400]
"Steam"=C:\Program Files\Steam\Steam.exe [2012-04-15 1242448]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2012-06-21 3905408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AutoStartNPSAgent]
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [2010-07-04 95576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-04-17 3671872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EEventManager]
C:\Program Files\Epson Software\Event Manager\EEventManager.exe [2010-08-30 979328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON SX130 Series]
C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIHJE.EXE [2010-12-07 208384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update]
C:\Users\spirit\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-05-18 137536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\spirit\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-31 116648]

C:\Users\spirit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Facebook Messenger.lnk - C:\Users\spirit\AppData\Local\Facebook\Messenger\2.1.4554.0\FacebookMessenger.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\Windows\system32\klogon.dll [2011-04-24 229776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-06-24 15:39:15 ----D---- C:\Program Files\trend micro
2012-06-24 15:39:14 ----D---- C:\rsit
2012-06-23 10:11:48 ----A---- C:\Windows\ntbtlog.txt
2012-06-23 09:15:46 ----D---- C:\ProgramData\AVAST Software
2012-06-23 01:51:44 ----A---- C:\Windows\system32\drivers\72070198.sys
2012-06-23 01:30:58 ----D---- C:\Program Files\Common Files\Java
2012-06-23 01:28:52 ----D---- C:\Program Files\Oracle
2012-06-23 01:27:49 ----A---- C:\Windows\system32\npDeployJava1.dll
2012-06-23 01:27:49 ----A---- C:\Windows\system32\javaws.exe
2012-06-23 01:27:06 ----A---- C:\Windows\system32\javaw.exe
2012-06-23 01:27:06 ----A---- C:\Windows\system32\java.exe
2012-06-21 11:52:45 ----A---- C:\Windows\system32\wups2.dll
2012-06-21 11:52:45 ----A---- C:\Windows\system32\wucltux.dll
2012-06-21 11:52:45 ----A---- C:\Windows\system32\wuaueng.dll
2012-06-21 11:52:45 ----A---- C:\Windows\system32\wuauclt.exe
2012-06-21 11:52:23 ----A---- C:\Windows\system32\wups.dll
2012-06-21 11:52:22 ----A---- C:\Windows\system32\wudriver.dll
2012-06-21 11:52:22 ----A---- C:\Windows\system32\wuapi.dll
2012-06-21 11:52:03 ----A---- C:\Windows\system32\wuwebv.dll
2012-06-21 11:52:03 ----A---- C:\Windows\system32\wuapp.exe
2012-06-18 18:25:58 ----D---- C:\Program Files\MAGIX
2012-06-17 18:43:10 ----D---- C:\Program Files\Common Files\MAGIX Services
2012-06-17 15:50:39 ----D---- C:\Users\spirit\AppData\Roaming\MAGIX
2012-06-17 15:48:33 ----D---- C:\ProgramData\MAGIX
2012-06-15 16:03:13 ----D---- C:\Users\spirit\AppData\Roaming\SUPERAntiSpyware.com
2012-06-15 16:02:32 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2012-06-15 16:02:32 ----D---- C:\Program Files\SUPERAntiSpyware
2012-06-15 15:59:32 ----A---- C:\Windows\system32\MSSTDFMT.DLL
2012-06-15 10:46:40 ----D---- C:\Users\spirit\AppData\Roaming\Rainmeter
2012-06-14 20:27:59 ----D---- C:\Users\spirit\AppData\Roaming\Epson
2012-06-14 20:22:21 ----D---- C:\ProgramData\ABBYY
2012-06-14 20:19:50 ----D---- C:\ProgramData\UDL
2012-06-14 20:17:47 ----D---- C:\Users\spirit\AppData\Roaming\InstallShield
2012-06-14 20:16:39 ----D---- C:\Program Files\Epson Software
2012-06-14 20:15:12 ----A---- C:\Windows\system32\esw2ud.dll
2012-06-14 20:15:12 ----A---- C:\Windows\system32\esdevapp.exe
2012-06-14 20:15:12 ----A---- C:\Windows\system32\escdev.dll
2012-06-14 20:05:02 ----D---- C:\Program Files\epson
2012-06-14 19:59:32 ----D---- C:\Program Files\Common Files\EPSON
2012-06-14 19:59:14 ----A---- C:\Windows\system32\E_FLBHJE.DLL
2012-06-14 19:59:14 ----A---- C:\Windows\system32\E_FD4BHJE.DLL
2012-06-14 19:59:14 ----A---- C:\Windows\system32\E_DCINST.DLL
2012-06-14 19:58:58 ----D---- C:\ProgramData\EPSON
2012-06-13 19:04:38 ----SHD---- C:\ProgramData\DSS
2012-06-13 18:53:01 ----D---- C:\Program Files\Electronic Arts
2012-06-13 18:47:28 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2012-06-13 18:47:25 ----D---- C:\Users\spirit\AppData\Roaming\DAEMON Tools Lite
2012-06-13 18:47:23 ----D---- C:\Program Files\DAEMON Tools Lite
2012-06-13 18:46:47 ----D---- C:\ProgramData\DAEMON Tools Lite
2012-06-13 10:12:00 ----A---- C:\Windows\system32\mshtmled.dll
2012-06-13 10:12:00 ----A---- C:\Windows\system32\iertutil.dll
2012-06-13 10:11:58 ----A---- C:\Windows\system32\ieui.dll
2012-06-13 10:11:57 ----A---- C:\Windows\system32\wininet.dll
2012-06-13 10:11:57 ----A---- C:\Windows\system32\url.dll
2012-06-13 10:11:57 ----A---- C:\Windows\system32\jsproxy.dll
2012-06-13 10:11:57 ----A---- C:\Windows\system32\jscript9.dll
2012-06-13 10:11:57 ----A---- C:\Windows\system32\jscript.dll
2012-06-13 10:11:57 ----A---- C:\Windows\system32\ieUnatt.exe
2012-06-13 10:11:56 ----A---- C:\Windows\system32\urlmon.dll
2012-06-13 10:11:55 ----A---- C:\Windows\system32\mshtml.dll
2012-06-13 10:11:55 ----A---- C:\Windows\system32\ieframe.dll
2012-06-13 09:05:15 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-06-13 09:05:11 ----A---- C:\Windows\system32\msi.dll
2012-06-13 09:05:08 ----A---- C:\Windows\system32\win32k.sys
2012-06-13 09:04:48 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-06-13 09:04:48 ----A---- C:\Windows\system32\rdpwsx.dll
2012-06-13 09:04:48 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-06-13 09:04:32 ----A---- C:\Windows\system32\profsvc.dll
2012-06-13 09:04:27 ----A---- C:\Windows\system32\cryptsvc.dll
2012-06-13 09:04:27 ----A---- C:\Windows\system32\cryptnet.dll
2012-06-13 09:04:27 ----A---- C:\Windows\system32\crypt32.dll
2012-06-12 16:00:00 ----D---- C:\Users\spirit\AppData\Roaming\IrfanView
2012-06-12 16:00:00 ----D---- C:\Program Files\IrfanView
2012-06-12 13:12:36 ----D---- C:\Program Files\FDRLab
2012-06-04 21:28:52 ----D---- C:\ProgramData\Mozilla
2012-06-04 21:28:50 ----D---- C:\Program Files\Mozilla Maintenance Service
2012-06-03 11:24:05 ----D---- C:\Program Files\SystemRequirementsLab
2012-06-02 13:09:07 ----D---- C:\Users\spirit\AppData\Roaming\Malwarebytes
2012-06-02 13:09:01 ----D---- C:\ProgramData\Malwarebytes
2012-05-25 09:17:41 ----D---- C:\Users\spirit\AppData\Roaming\Mozilla

======List of files/folders modified in the last 1 month======

2012-06-24 15:53:20 ----D---- C:\Users\spirit\AppData\Roaming\Skype
2012-06-24 15:53:01 ----D---- C:\Windows\Prefetch
2012-06-24 15:52:38 ----D---- C:\Program Files\Steam
2012-06-24 15:52:27 ----D---- C:\Users\spirit\AppData\Roaming\BitTorrent
2012-06-24 15:51:44 ----D---- C:\ProgramData\Kaspersky Lab
2012-06-24 15:51:05 ----D---- C:\ProgramData\NVIDIA
2012-06-24 15:51:01 ----RD---- C:\Program Files
2012-06-24 15:49:20 ----D---- C:\Windows\Temp
2012-06-24 15:28:06 ----D---- C:\Windows\system32\drivers
2012-06-24 12:06:51 ----D---- C:\Windows\system32\config
2012-06-23 20:06:36 ----SHD---- C:\Windows\Installer
2012-06-23 20:06:33 ----D---- C:\Config.Msi
2012-06-23 11:34:27 ----D---- C:\Windows\Setup
2012-06-23 10:17:06 ----D---- C:\Windows\System32
2012-06-23 10:13:56 ----D---- C:\Windows
2012-06-23 09:15:46 ----HD---- C:\ProgramData
2012-06-23 09:15:41 ----SHD---- C:\System Volume Information
2012-06-23 09:03:49 ----D---- C:\Program Files\Common Files
2012-06-23 09:02:20 ----D---- C:\Users\spirit\AppData\Roaming\Dev-Cpp
2012-06-23 01:26:35 ----D---- C:\Program Files\Java
2012-06-22 17:21:05 ----D---- C:\Windows\rescache
2012-06-22 16:55:57 ----D---- C:\Windows\winsxs
2012-06-22 16:55:41 ----D---- C:\Windows\system32\sk-SK
2012-06-21 12:18:21 ----D---- C:\Windows\system32\LogFiles
2012-06-21 11:53:00 ----D---- C:\Windows\system32\catroot2
2012-06-21 11:53:00 ----D---- C:\Windows\system32\catroot
2012-06-20 13:09:53 ----D---- C:\Program Files\Common Files\Steam
2012-06-19 09:28:33 ----D---- C:\Windows\inf
2012-06-19 09:28:33 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-06-18 18:27:33 ----RSD---- C:\Windows\Fonts
2012-06-18 18:03:24 ----D---- C:\Program Files\MSXML 4.0
2012-06-17 20:21:31 ----D---- C:\Windows\Help
2012-06-17 20:21:31 ----D---- C:\Program Files\Common Files\microsoft shared
2012-06-15 15:37:35 ----D---- C:\Windows\Minidump
2012-06-15 15:37:35 ----D---- C:\Windows\Logs
2012-06-15 15:37:35 ----D---- C:\Windows\debug
2012-06-14 20:18:36 ----HD---- C:\Program Files\InstallShield Installation Information
2012-06-14 20:15:49 ----D---- C:\Windows\system32\DriverStore
2012-06-14 20:15:10 ----D---- C:\Windows\twain_32
2012-06-13 19:00:33 ----D---- C:\Windows\system32\directx
2012-06-13 18:58:30 ----HD---- C:\Windows\msdownld.tmp
2012-06-13 14:42:26 ----D---- C:\Windows\Microsoft.NET
2012-06-13 14:41:50 ----RSD---- C:\Windows\assembly
2012-06-13 14:32:50 ----D---- C:\Windows\system32\migration
2012-06-13 10:15:27 ----A---- C:\Windows\system32\MRT.exe
2012-06-12 17:55:31 ----RD---- C:\Program Files\Skype
2012-06-12 17:55:31 ----D---- C:\ProgramData\Skype
2012-06-04 21:28:45 ----D---- C:\Program Files\Mozilla Firefox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 72070198;72070198; C:\Windows\system32\DRIVERS\72070198.sys [2012-06-22 133208]
R0 KL1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2011-03-04 133208]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-06-13 242240]
R1 kl2;kl2; C:\Windows\system32\DRIVERS\kl2.sys [2011-03-04 11352]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2012-03-31 570160]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2011-03-10 23856]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [2011-07-22 12880]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [2011-07-12 67664]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [2010-06-14 36608]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\Windows\system32\DRIVERS\klmouflt.sys [2009-11-02 19984]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-07-16 13216]
R3 NVNET;NVIDIA nForce Ethernet Driver; C:\Windows\system32\DRIVERS\nvmf6232.sys [2010-08-12 298216]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2009-06-28 17920]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2009-07-14 43008]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2009-08-17 1077760]
S0 vmci;VMware VMCI Bus Driver; C:\Windows\system32\DRIVERS\vmci.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files\Garena\safedrv.sys []
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2010-04-27 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2010-04-27 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2010-04-27 123648]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys []
S4 IObitUnlocker;IObitUnlocker; \??\C:\Program Files\IObit\IObit Unlocker\IObitUnlocker.sys [2011-08-26 28016]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [2011-08-12 116608]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-04 63928]
R2 AVP;Služba Kaspersky Anti-Virus; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [2011-04-24 202296]
R2 Fabs;FABS - Helping agent for MAGIX media database; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-08-27 1253376]
R2 ForceWare Intelligent Application Manager (IAM);ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [2009-08-10 387616]
R2 FsUsbExService;FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [2010-07-04 238952]
R2 nSvcIp;ForceWare IP service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [2009-08-10 178720]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-02-29 645440]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-03-01 2348352]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-02-29 382272]
S2 ActiveSMART Service;ActiveSMART Service; C:\Program Files\ActiveSMART 2.92\ASmartService.exe [2012-03-16 2016560]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-06-05 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-05 257696]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-21 129976]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2012-06-19 529232]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-03-31 1343400]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[Roli]

Zdravím, než budeme pokračovat tohle :

C:\Windows\system32\drivers\72070198.sys

otestuj na VIRUSTOTAL

(po načtení stránky klikni na tlačítko Procházet - Choose File, najdi cestu k výše zmíněnému souboru

nebo tam výše zmíněný text nakopíruj a klikni na tlačítko Odeslat soubor - Scan It!

trvá to okolo deseti minut pak mi sem zkopíruj link, to je ten řádek nahoře v prohlížeči)

Pokud ti to napíše že soubor již byl testován nech Otestovat znovu - Reanalyse.

[spiritza]

Virustotal nic nenasiel
https://www.virustotal.com/file/a8c1577 ... 340571331/

[Roli]

V tom případě tam už nic špatného nevidím, je tedy nějaký problém s PC ?

[spiritza]

Nie problem neni len som chcel vediet ci je pc ciste.
Dakujem teda za pomoc.

[Roli]

Není zač.