Neustale padanie internetu

[fry]

Zdravim mam problem z tym ze mi neustale pada internet zo zo začiatku som si myslel ze to je chybou siete ale ked sa pripojim z napr.z mobilu alebo ineho pc internet ide ako ma.Nainstaloval som si eset nod 32 a našlo mi to nejake nezname viry. Log: Logfile of random's system information tool 1.09 (written by random/random)
Run by Rasto at 2012-12-10 16:40:34
Microsoft Windows 7 Home Premium
System drive C: has 148 GB (40%) free of 371 GB
Total RAM: 8044 MB (75% free)

HijackThis download failed

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\WLANExt.exe 4164336
\??\C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Dolby PCEE4\pcee4.exe" -autostart
"C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe" /Automation
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Users\Rasto\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Rasto\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3820.1.1385839196\586280199" --gpu-vendor-id=0x8086 --gpu-device-id=0x0106 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2509 --ignored=" --type=renderer " /prefetch:12
"C:\Users\Rasto\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3820.5.977113321\78426190" --lang=sk --ignored=" --type=renderer " /prefetch:13
"C:\Users\Rasto\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/InstantChannel/Stable/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/7/OneClickSignIn/Standard/Prerender/PrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwnd10/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warm_socket/ --renderer-print-preview --channel="3820.19.514010154\1138604857" /prefetch:3
"C:\Users\Rasto\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/InstantChannel/Stable/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/7/OneClickSignIn/Standard/Prerender/PrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwnd10/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warm_socket/ --renderer-print-preview --channel="3820.21.1241583452\1806446897" /prefetch:3
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe8_ Global\UsGthrCtrlFltPipeMssGthrPipe8 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 504 508 516 65536 512
"C:\Users\Rasto\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/InstantChannel/Stable/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/7/OneClickSignIn/Standard/Prerender/PrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwnd10/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warm_socket/ --renderer-print-preview --channel="3820.22.609215915\1468035640" /prefetch:3
"C:\Users\Rasto\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\rundll32.exe" "C:\Windows\system32\WININET.dll",DispatchAPICall 1
"C:\Windows\system32\rundll32.exe" "C:\Windows\system32\WININET.dll",DispatchAPICall 1

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2483534759-3128910736-556498596-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2483534759-3128910736-556498596-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-11-20 193512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-08-04 12673128]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2012-08-04 2277480]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-08-04 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-08-04 392472]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-08-04 416024]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2012-11-14 6325424]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Rasto\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-04 116648]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-01-24 3478336]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2012-08-04 113288]
"Dolby Advanced Audio v2"=C:\Dolby PCEE4\pcee4.exe [2011-06-01 506712]
"ROCCAT Savu Gaming Mouse"=C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe [2012-08-03 871024]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-08-04 390144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-12-10 16:40:34 ----D---- C:\rsit
2012-12-10 16:40:34 ----D---- C:\Program Files\trend micro
2012-12-08 19:38:36 ----D---- C:\Program Files\CCleaner
2012-12-08 14:02:25 ----D---- C:\ProgramData\ESET
2012-12-08 14:02:25 ----D---- C:\Program Files\ESET
2012-11-24 10:48:07 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2012-11-24 10:48:07 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2012-11-24 10:48:07 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2012-11-24 10:48:07 ----A---- C:\Windows\system32\XAudio2_2.dll
2012-11-24 10:48:07 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2012-11-24 10:48:07 ----A---- C:\Windows\system32\xactengine3_2.dll
2012-11-24 10:48:06 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2012-11-24 10:48:06 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2012-11-24 10:48:06 ----A---- C:\Windows\system32\d3dx10_39.dll
2012-11-24 10:48:06 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2012-11-24 10:48:05 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2012-11-24 10:48:05 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2012-11-24 10:48:05 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2012-11-24 10:48:05 ----A---- C:\Windows\system32\XAudio2_1.dll
2012-11-24 10:48:05 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2012-11-24 10:48:05 ----A---- C:\Windows\system32\D3DX9_39.dll
2012-11-24 10:48:04 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2012-11-24 10:48:04 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2012-11-24 10:48:04 ----A---- C:\Windows\system32\xactengine3_1.dll
2012-11-24 10:48:04 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2012-11-24 10:48:03 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2012-11-24 10:48:03 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2012-11-24 10:48:03 ----A---- C:\Windows\system32\d3dx10_38.dll
2012-11-24 10:48:03 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2012-11-24 10:48:01 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2012-11-24 10:48:01 ----A---- C:\Windows\system32\D3DX9_38.dll
2012-11-24 10:48:00 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2012-11-24 10:48:00 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2012-11-24 10:48:00 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2012-11-24 10:48:00 ----A---- C:\Windows\system32\XAudio2_0.dll
2012-11-24 10:48:00 ----A---- C:\Windows\system32\xactengine3_0.dll
2012-11-24 10:48:00 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2012-11-24 10:47:59 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2012-11-24 10:47:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2012-11-24 10:47:59 ----A---- C:\Windows\system32\d3dx10_37.dll
2012-11-24 10:47:59 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2012-11-24 10:47:57 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2012-11-24 10:47:57 ----A---- C:\Windows\system32\D3DX9_37.dll
2012-11-24 10:47:56 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2012-11-24 10:47:56 ----A---- C:\Windows\system32\xactengine2_10.dll
2012-11-24 10:47:55 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2012-11-24 10:47:55 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2012-11-24 10:47:55 ----A---- C:\Windows\system32\d3dx10_36.dll
2012-11-24 10:47:55 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2012-11-24 10:47:53 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2012-11-24 10:47:53 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2012-11-24 10:47:53 ----A---- C:\Windows\system32\xactengine2_9.dll
2012-11-24 10:47:53 ----A---- C:\Windows\system32\d3dx9_36.dll
2012-11-24 10:47:52 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2012-11-24 10:47:52 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2012-11-24 10:47:52 ----A---- C:\Windows\system32\d3dx10_35.dll
2012-11-24 10:47:52 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2012-11-24 10:47:49 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2012-11-24 10:47:49 ----A---- C:\Windows\system32\d3dx9_35.dll
2012-11-24 10:47:48 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2012-11-24 10:47:48 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2012-11-24 10:47:48 ----A---- C:\Windows\system32\xactengine2_8.dll
2012-11-24 10:47:48 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2012-11-24 10:47:47 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2012-11-24 10:47:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2012-11-24 10:47:47 ----A---- C:\Windows\system32\d3dx10_34.dll
2012-11-24 10:47:47 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2012-11-24 10:47:43 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2012-11-24 10:47:43 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2012-11-24 10:47:43 ----A---- C:\Windows\system32\xinput1_3.dll
2012-11-24 10:47:43 ----A---- C:\Windows\system32\d3dx9_34.dll
2012-11-24 10:47:42 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2012-11-24 10:47:42 ----A---- C:\Windows\system32\xactengine2_7.dll
2012-11-24 10:47:41 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2012-11-24 10:47:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2012-11-24 10:47:41 ----A---- C:\Windows\system32\d3dx10_33.dll
2012-11-24 10:47:41 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2012-11-24 10:47:40 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2012-11-24 10:47:40 ----A---- C:\Windows\system32\d3dx9_33.dll
2012-11-24 10:47:39 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2012-11-24 10:47:39 ----A---- C:\Windows\system32\xactengine2_6.dll
2012-11-24 10:47:38 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2012-11-24 10:47:38 ----A---- C:\Windows\system32\xactengine2_5.dll
2012-11-24 10:47:37 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2012-11-24 10:47:37 ----A---- C:\Windows\system32\d3dx10.dll
2012-11-24 10:47:36 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2012-11-24 10:47:36 ----A---- C:\Windows\system32\d3dx9_32.dll
2012-11-24 10:47:35 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2012-11-24 10:47:35 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2012-11-24 10:47:35 ----A---- C:\Windows\system32\xactengine2_4.dll
2012-11-24 10:47:35 ----A---- C:\Windows\system32\x3daudio1_1.dll
2012-11-24 10:47:34 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2012-11-24 10:47:34 ----A---- C:\Windows\system32\d3dx9_31.dll
2012-11-24 10:47:33 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2012-11-24 10:47:33 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2012-11-24 10:47:33 ----A---- C:\Windows\system32\xinput1_2.dll
2012-11-24 10:47:33 ----A---- C:\Windows\system32\xactengine2_3.dll
2012-11-24 10:47:32 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2012-11-24 10:47:32 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2012-11-24 10:47:32 ----A---- C:\Windows\system32\xinput1_1.dll
2012-11-24 10:47:32 ----A---- C:\Windows\system32\xactengine2_2.dll
2012-11-24 10:47:30 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2012-11-24 10:47:30 ----A---- C:\Windows\system32\xactengine2_1.dll
2012-11-24 10:38:21 ----D---- C:\Users\Rasto\AppData\Roaming\InstallShield
2012-11-20 22:44:38 ----D---- C:\Program Files (x86)\Minecraft
2012-11-20 22:18:47 ----D---- C:\Users\Rasto\AppData\Roaming\.minecraft
2012-11-20 22:14:30 ----A---- C:\Windows\system32\npDeployJava1.dll
2012-11-20 22:14:30 ----A---- C:\Windows\system32\javaws.exe
2012-11-20 22:14:19 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2012-11-19 20:24:53 ----D---- C:\Program Files (x86)\Eidos
2012-11-19 20:09:46 ----D---- C:\Program Files (x86)\SpeedFan
2012-11-17 19:22:05 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2012-11-17 19:22:05 ----A---- C:\Windows\system32\d3dx9_30.dll
2012-11-17 19:22:03 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2012-11-17 19:22:03 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2012-11-17 19:22:03 ----A---- C:\Windows\system32\xactengine2_0.dll
2012-11-17 19:22:03 ----A---- C:\Windows\system32\x3daudio1_0.dll
2012-11-17 19:22:02 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2012-11-17 19:22:02 ----A---- C:\Windows\system32\d3dx9_29.dll
2012-11-17 19:22:01 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2012-11-17 19:22:01 ----A---- C:\Windows\system32\d3dx9_28.dll
2012-11-17 19:22:00 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2012-11-17 19:22:00 ----A---- C:\Windows\system32\d3dx9_27.dll
2012-11-17 19:21:57 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2012-11-17 19:21:57 ----A---- C:\Windows\system32\d3dx9_26.dll
2012-11-17 19:21:55 ----A---- C:\Windows\system32\d3dx9_25.dll
2012-11-17 19:21:52 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2012-11-17 19:21:52 ----A---- C:\Windows\system32\d3dx9_24.dll
2012-11-17 19:10:12 ----D---- C:\Program Files (x86)\THQ
2012-11-15 19:18:27 ----D---- C:\ProgramData\Symantec
2012-11-15 19:18:22 ----D---- C:\ProgramData\Norton
2012-11-15 19:18:20 ----D---- C:\ProgramData\NortonInstaller
2012-11-14 23:32:36 ----D---- C:\Users\Rasto\AppData\Roaming\DivX
2012-11-14 23:32:10 ----D---- C:\Program Files\DivX
2012-11-14 23:30:13 ----D---- C:\Program Files (x86)\DivX
2012-11-14 23:29:32 ----D---- C:\ProgramData\DivX

======List of files/folders modified in the last 1 month======

2012-12-10 16:40:34 ----RD---- C:\Program Files
2012-12-10 16:40:34 ----D---- C:\Windows\Prefetch
2012-12-10 16:40:13 ----D---- C:\Windows\Temp
2012-12-10 15:53:31 ----D---- C:\Windows\system32\config
2012-12-10 15:46:48 ----D---- C:\Windows\System32
2012-12-10 15:46:48 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-12-10 15:46:47 ----D---- C:\Windows\inf
2012-12-10 15:42:05 ----D---- C:\Windows\system32\catroot2
2012-12-09 20:47:36 ----D---- C:\Windows\system32\NDF
2012-12-08 21:47:25 ----D---- C:\Windows
2012-12-08 20:06:33 ----SHD---- C:\System Volume Information
2012-12-08 19:41:39 ----D---- C:\Users\Rasto\AppData\Roaming\DAEMON Tools Lite
2012-12-08 19:41:34 ----D---- C:\Windows\Panther
2012-12-08 19:41:34 ----D---- C:\Windows\Minidump
2012-12-08 19:41:34 ----D---- C:\Windows\Logs
2012-12-08 19:41:34 ----D---- C:\Windows\debug
2012-12-08 19:38:41 ----D---- C:\Windows\system32\Tasks
2012-12-08 19:27:30 ----SHD---- C:\Windows\Installer
2012-12-08 19:27:30 ----SHD---- C:\Config.Msi
2012-12-08 19:27:30 ----RD---- C:\Program Files (x86)
2012-12-08 14:04:01 ----D---- C:\Windows\system32\DriverStore
2012-12-08 14:04:01 ----D---- C:\Windows\system32\drivers
2012-12-08 14:04:01 ----D---- C:\Windows\system32\catroot
2012-12-08 14:02:25 ----HD---- C:\ProgramData
2012-12-08 11:48:22 ----D---- C:\Program Files (x86)\Common Files
2012-12-08 11:48:20 ----D---- C:\Users\Rasto\AppData\Roaming\Skype
2012-12-08 11:28:21 ----D---- C:\Program Files (x86)\Valve
2012-12-08 11:25:16 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-12-08 11:23:56 ----D---- C:\Program Files\Java
2012-11-27 17:33:00 ----D---- C:\Program Files (x86)\Electronic Arts
2012-11-24 10:48:08 ----D---- C:\Windows\SysWOW64
2012-11-24 10:47:30 ----RSD---- C:\Windows\assembly
2012-11-20 22:14:15 ----A---- C:\Windows\system32\javaw.exe
2012-11-20 22:14:15 ----A---- C:\Windows\system32\java.exe
2012-11-20 22:14:15 ----A---- C:\Windows\system32\deployJava1.dll
2012-11-15 19:28:12 ----D---- C:\Windows\Tasks
2012-11-14 23:32:06 ----D---- C:\Windows\winsxs

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2012-03-01 28992]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-08-04 283200]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-10-08 211344]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-10-08 149592]
R1 VWiFiFlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2012-08-23 314016]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2012-10-08 138744]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2012-08-23 43680]
R3 BCM43XX;Broadcom 802.11 - ovládač sieťového adaptéru; C:\Windows\system32\DRIVERS\bcmwl664.sys [2012-08-04 4720704]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-08-04 12306848]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-08-04 3056360]
R3 IntcDAud;Intel(R) Zvuk pre obrazovky; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-08-04 317440]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-08-04 56344]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-07-14 109056]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 InputFilter_Hid_FlexDef2b;Siliten HID Devices(FlexDef2b) Driver Service; C:\Windows\system32\DRIVERS\InputFilter_FlexDef2b.sys [2010-06-19 17920]
S3 MouFilter_Mou_FlexDef4;HID Mouse(FlexDef4) Driver Service; C:\Windows\system32\DRIVERS\MouFilter_FlexDef4.sys [2010-10-20 15360]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2012-11-14 1329304]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-02-29 889664]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-03-01 2348352]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[fry]

Mohol by sa niekto prosim pozriet na moj log?

[vyosek]

Zdravim

Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) http://forum.viry.cz/viewtopic.php?f=29&t=115222

• Provedte aktualizaci
• Provedte uplny sken - nic nemazte
• MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

Stahnete Malwarebytes Anti-Rootkit http://www.bleepingcomputer.com/downloa ... i-rootkit/

• Ulozte nejlepe na Plochu a rozbalte
• Spustte kliknutim na mbanr
• Nyni postupne kliknete na Next a Update
• Po dokonceni update (aktualizace) databaze kliknete opet na Next
• Nechte zaskrtnute vsechny tri moznosti a klinete na Scan cimz spustite prohledavani PC
• Po dokonceni skenu (cca 5 minutek) zkontrolujte, zda-li je u vsech nalezu (samozrejme pokud budou) zatrzitko
• Tez zkontrolujte, jetsli je zatrzitko u Create Restore point
• Nyni kliknete na CleanUp cimz nalezenou infekci odstranime
• PC bude restartovan
• Slozka mbar by mela obsahovat log (a zrejme se i sam otevre) mbar-log-rok-mesic-den (hodina-minuta-sekunda).txt, ten mi sem dejte

[fry]

takze tu je ten prvy log Malwarebytes Anti-Malware (Skúšobná verzia) 1.65.1.1000
www.malwarebytes.org

Verzia databázy: v2012.12.11.06

Windows 7 x64 NTFS
Internet Explorer 8.0.7600.16385
Rasto :: RASTO-PC [administrátor]

Ochrana: Zapnuté

11. 12. 2012 18:02:49
mbam-log-2012-12-11 (18-02-49).txt

Typ kontroly: Úplná kontrola (C:\|D:\|E:\|F:\|)
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 540363
Uplynutý čas: 1 hod, 23 min, 27 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 0
(Škodlivé položky neboli zistené)

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 0
(Škodlivé položky neboli zistené)

(koniec)

[vyosek]

OK, pockam na druhy

[fry]

Malwarebytes Anti-Rootkit 1.01.0.1011
http://www.malwarebytes.org

Database version: v2012.12.11.10

Windows 7 x64 NTFS
Internet Explorer 8.0.7600.16385
Rasto :: RASTO-PC [administrator]

11. 12. 2012 19:41:31
mbar-log-2012-12-11 (19-41-31).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled:
Objects scanned: 28452
Time elapsed: 11 minute(s), 11 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Users\Rasto\Downloads\Minecraft-1.3.1.exe (Password.Stealer) -> Delete on reboot.

(end)
A chcem sa spytat ked mi ESET dal nejake subory do karanteny z tym uz netreba nic robit?

[vyosek]

Muzu poprosit o screen karanteny

Jinak v karantene jsou v bezpeci a neskodne

[fry]

tu je

[vyosek]

Stahnete Farbar Service Scanner http://download.bleepingcomputer.com/farbar/FSS.exe

• Ulozte nejlepe na Plochu
• U vsech polozek udelejte zatrzitko (tim je oznacite pro skenovani)
• Kliknete na Scan
• Po dokonceni skenu se objevi log FSS.txt ten sem vlozte

[fry]

Farbar Service Scanner Version: 10-12-2012
Ran by Rasto (administrator) on 11-12-2012 at 20:57:37
Running from "C:\Users\Rasto\Desktop"
Windows 7 Home Premium (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============

Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys
[2009-07-14 00:25] - [2009-07-14 02:45] - 1898576 ____A (Microsoft Corporation) 912107716BAB424C7870E8E6AF5E07E1

C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

[vyosek]

Dle kolegy

zkontrolujeme ping - Start -> Spustit... zkopíruj ping -l 1024 seznam.cz -t Enter
čas by měl být v řádu desítek ms (výjimečně ve stovkách ms)
Test ukončíš zavřením černého okna - jak to vypadá?

[fry]

Tak 40-50 ale miestami to skace na 2000-3000ms

[vyosek]

Zkuste preinstalovat ovladac k sitove karte

Jaky je typ pripojeni (kabel, wifi)?

[fry]

Mam wifi a ovladac som reinstaloval este pred tym ako som tu pisal skusim este raz.

[vyosek]

Sila signalu je OK