Prosím o kontrolu logu

[Haces]

Prosím o kontrolu logu, Notebook je tragicky pomalý ve všech směrech, při najíždění windows, poté při spouštění aplikací, prostě děs...den zpátky hlásil, že má v sobě stádo trojských koňů a hromadu červů. Ale dnes mi Kaspersky AV ani Spyware doctor nic nenašli...tady je výpis z logu. Jo a náhodou nějaký tip jak odstranit VAIO care byste neměli? Stejně notebook akorát 15 minut po zapnutí hodí chybovou hlášku "Vaio care stopped working" Předem díky !!!


Logfile of random's system information tool 1.08 (written by random/random)
Run by Owner at 2010-08-15 21:55:32
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 76 GB (33%) free of 228 GB
Total RAM: 2938 MB (34% free)

HijackThis download failed

======Listing Processes======

\SystemRoot\System32\smss.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {635718C8-8690-4312-8887-CA93C660EC88}
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Spyware Doctor\BDT\BDTUpdateService.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\RocketDock\RocketDock.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files (x86)\Seznam\Postak\Postak.exe"
"C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe" /Stationary
"C:\Windows\system32\spool\DRIVERS\x64\3\HP1006MC.EXE" -Embedding
"C:\Program Files (x86)\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
"C:\Program Files (x86)\Spyware Doctor\pctsTray.exe"
"C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe"
"C:\Program Files\Sony\VAIO Care\collsvc.exe" "/service" "/counter=\Processor(_Total)\% Processor Time:5" "/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:5" "/counter=\Network Interface(*)\Bytes Total/sec:5" "/directory=inteldata"
C:\Program Files\Sony\VAIO Care/listener.exe /silent /slot=0
"C:\Program Files (x86)\Spyware Doctor\pctsAuxs.exe"
"C:\Program Files (x86)\Spyware Doctor\pctsSvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe"
"C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe"
"C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe"
"C:\Program Files\Sony\VAIO Power Management\SPMService.exe"
C:\Windows\SysWOW64\DllHost.exe /Processid:{78FD0120-D39C-45D8-A9BE-2B802B3C23E5}
"C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesApp64.exe" /TUStart /pid:3040
"C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe"
C:\Windows\SysWOW64\DllHost.exe /Processid:{78FD0120-D39C-45D8-A9BE-2B802B3C23E5}
"C:\Program Files (x86)\Sony\VAIO Event Service\VESGfxMgr.exe" -Embedding
C:\Windows\system32\igfxext.exe -Embedding
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe"
"C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe"
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-ffbef0b9-82ac-45af-97f7-cc4bab46303d -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-a79c0c12-2639-4438-88fb-a3e103ccf0bd -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-3a1f9514-4e1f-4133-b4c1-169881d2bad5 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:6d6cbf33-e17d-4ac7-b69c-beef60c513d0
C:\Windows\system32\DRIVERS\xaudio64.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
taskeng.exe {B0AC9F72-758C-4C75-A099-8F337808E390}
"C:\Program Files\Sony\VAIO Power Management\SPMgr.exe" /Start
"C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe" -RunBySCM
"C:\Program Files (x86)\Spyware Doctor\TFEngine\TFService.exe" service
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe"
"C:\Program Files\Windows Media Player\wmpnscfg.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -requestPending -osint -url "http://www.pctools.com/cz/mrc/infection ... latform=64"
"C:\Windows\explorer.exe" /n,/select,"C:\Users\Owner\Downloads\Setup.exe"
"C:\Users\Owner\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Install_NSS.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}]
PC Tools Browser Guard BHO - C:\Program Files (x86)\Spyware Doctor\BDT\PCTBrowserDefender.dll [2010-01-22 567248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.3.7.16.dll [2009-07-16 664888]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files (x86)\Java\jre1.6.0\bin\ssv.dll [2009-04-09 501384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2008-11-18 408952]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431}
{B71B15CF-3093-459C-B764-AEB2486F2273} - &S-Rank - C:\Program Files (x86)\Seznam\Postak\SRank.dll [2005-05-17 266240]
{472734EA-242A-422B-ADF8-83D1E48CC825} - PC Tools Browser Guard - C:\Program Files (x86)\Spyware Doctor\BDT\PCTBrowserDefender.dll [2010-01-22 567248]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-01-05 6956576]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-05-20 1220392]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-11-28 209432]
"Persistence"=C:\Windows\system32\igfxpers.exe [2008-11-28 181784]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"=C:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Unattend0000000001{3CC718C9-E11D-4406-A0A7-50D820DD8369}]
C:\Program Files\Sony\First Experience\VAIOWelcome.exe [2009-04-10 1467696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VAIORegistration]
C:\Program Files\Sony\First Experience\WelcomeLauncher.exe [2008-06-26 16384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VAIOSurvey]
C:\Program Files (x86)\Sony\VAIO Survey\VAIO Sat Survey.exe [2008-07-25 385024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"gupdate1c9cf8f33e9b278"=2
"Norton Internet Security"=2

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
""= []
"SMail"=C:\Program Files (x86)\Seznam\Postak\Postak.exe [2006-05-18 450560]
"Adobe Photo Downloader"=C:\Program Files (x86)\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe [2005-06-06 57344]
"ISTray"=C:\Program Files (x86)\Spyware Doctor\pctsTray.exe [2010-08-13 1287120]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\RegistrationReminder]
C:\Program Files\Sony\First Experience\OOBEFcdRegistration.exe [2009-03-24 2053936]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Java\jre1.6.0\bin\jusched.exe [2009-04-09 77824]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MRI_DISABLED

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2008-11-28 218112]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDesktopCleanupWizard"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-08-15 21:50:13 ----D---- C:\Program Files\trend micro
2010-08-15 21:50:12 ----D---- C:\rsit
2010-08-14 00:41:20 ----D---- C:\Program Files (x86)\Ultimate Process Manager
2010-08-14 00:40:21 ----SHD---- C:\Config.Msi
2010-08-14 00:30:06 ----D---- C:\Program Files (x86)\CCleaner
2010-08-13 23:50:02 ----A---- C:\Windows\system32\drivers\revoflt.sys
2010-08-13 23:49:46 ----D---- C:\Program Files\VS Revo Group
2010-08-13 23:15:02 ----D---- C:\Program Files (x86)\Kaspersky Lab
2010-08-13 22:54:57 ----S---- C:\Windows\system32\drivers\TfSysMon.sys
2010-08-13 22:54:57 ----S---- C:\Windows\system32\drivers\TfNetMon.sys
2010-08-13 22:54:55 ----S---- C:\Windows\system32\drivers\TfFsMon.sys
2010-08-13 22:24:11 ----A---- C:\Windows\SGDetectionTool.dll
2010-08-13 22:24:11 ----A---- C:\Windows\BDTSupport.dll
2010-08-13 22:24:10 ----A---- C:\Windows\PCTBDRes.dll
2010-08-13 22:24:10 ----A---- C:\Windows\PCTBDCore.dll
2010-08-13 22:23:50 ----A---- C:\Windows\system32\drivers\pctwfpfilter64.sys
2010-08-13 22:23:50 ----A---- C:\Windows\system32\drivers\pctgntdi64.sys
2010-08-13 22:23:45 ----A---- C:\Windows\system32\drivers\PCTCore64.sys
2010-08-13 22:23:38 ----A---- C:\Windows\system32\drivers\pctplsg64.sys
2010-08-13 22:23:22 ----D---- C:\Users\Owner\AppData\Roaming\PC Tools
2010-08-13 22:23:22 ----D---- C:\ProgramData\PC Tools
2010-08-13 22:23:22 ----D---- C:\Program Files (x86)\Spyware Doctor
2010-08-13 22:23:10 ----AD---- C:\ProgramData\TEMP
2010-08-10 19:46:55 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-08-10 19:46:51 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-08-10 19:46:51 ----A---- C:\Windows\system32\drivers\srv.sys
2010-08-10 19:46:50 ----A---- C:\Windows\system32\win32k.sys
2010-08-10 19:46:48 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2010-08-10 19:46:48 ----A---- C:\Windows\system32\rtutils.dll
2010-08-10 19:45:43 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2010-08-10 19:45:41 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-08-10 19:45:22 ----A---- C:\Windows\system32\mshtml.dll
2010-08-10 19:45:21 ----A---- C:\Windows\system32\ieframe.dll
2010-08-10 19:45:19 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2010-08-10 19:45:19 ----A---- C:\Windows\system32\iertutil.dll
2010-08-10 19:45:16 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2010-08-10 19:45:12 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2010-08-10 19:45:11 ----A---- C:\Windows\system32\urlmon.dll
2010-08-10 19:45:10 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2010-08-10 19:45:10 ----A---- C:\Windows\system32\wininet.dll
2010-08-10 19:45:09 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2010-08-10 19:45:09 ----A---- C:\Windows\system32\occache.dll
2010-08-10 19:45:09 ----A---- C:\Windows\system32\msfeeds.dll
2010-08-10 19:45:09 ----A---- C:\Windows\system32\iedkcs32.dll
2010-08-10 19:45:08 ----A---- C:\Windows\SYSWOW64\wininet.dll
2010-08-10 19:45:08 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2010-08-10 19:45:08 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2010-08-10 19:45:08 ----A---- C:\Windows\system32\mstime.dll
2010-08-10 19:45:08 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-08-10 19:45:08 ----A---- C:\Windows\system32\jsproxy.dll
2010-08-10 19:45:08 ----A---- C:\Windows\system32\ieui.dll
2010-08-10 19:45:08 ----A---- C:\Windows\system32\iernonce.dll
2010-08-10 19:45:08 ----A---- C:\Windows\system32\iepeers.dll
2010-08-10 19:45:07 ----A---- C:\Windows\SYSWOW64\mstime.dll
2010-08-10 19:45:06 ----A---- C:\Windows\SYSWOW64\occache.dll
2010-08-10 19:45:06 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2010-08-10 19:45:06 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2010-08-10 19:45:06 ----A---- C:\Windows\SYSWOW64\ieui.dll
2010-08-10 19:45:06 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2010-08-10 19:45:06 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2010-08-10 19:45:06 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2010-08-10 19:45:06 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2010-08-10 19:45:06 ----A---- C:\Windows\system32\ieUnatt.exe
2010-08-10 19:45:06 ----A---- C:\Windows\system32\iesysprep.dll
2010-08-10 19:45:06 ----A---- C:\Windows\system32\iesetup.dll
2010-08-10 19:45:05 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2010-08-10 19:45:05 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2010-08-10 19:45:05 ----A---- C:\Windows\system32\msfeedssync.exe
2010-08-10 19:45:05 ----A---- C:\Windows\system32\ie4uinit.exe
2010-08-10 19:44:50 ----A---- C:\Windows\system32\msxml3.dll
2010-08-10 19:44:49 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2010-08-10 19:44:47 ----A---- C:\Windows\SYSWOW64\schannel.dll
2010-08-10 19:44:47 ----A---- C:\Windows\system32\schannel.dll
2010-08-08 21:25:59 ----D---- C:\Windows\Sun
2010-08-02 15:25:55 ----A---- C:\Windows\system32\shell32.dll
2010-08-02 15:25:48 ----A---- C:\Windows\SYSWOW64\shell32.dll
2010-08-01 18:37:49 ----A---- C:\Windows\system32\TURegOpt.exe
2010-08-01 18:37:43 ----A---- C:\Windows\SYSWOW64\uxtuneup.dll
2010-08-01 18:37:43 ----A---- C:\Windows\system32\uxtuneup.dll
2010-08-01 18:37:43 ----A---- C:\Windows\system32\authuitu.dll
2010-08-01 18:37:42 ----A---- C:\Windows\SYSWOW64\authuitu.dll
2010-08-01 18:36:55 ----D---- C:\Users\Owner\AppData\Roaming\TuneUp Software
2010-08-01 18:36:41 ----D---- C:\Program Files (x86)\TuneUp Utilities 2010
2010-08-01 18:35:37 ----D---- C:\ProgramData\TuneUp Software
2010-08-01 18:35:30 ----SHD---- C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2010-07-28 21:53:36 ----A---- C:\Windows\SYSWOW64\GEARAspi.dll
2010-07-28 21:53:36 ----A---- C:\Windows\system32\GEARAspi64.dll
2010-07-28 21:53:36 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys
2010-07-28 21:52:22 ----D---- C:\Program Files\iPod
2010-07-28 21:52:20 ----D---- C:\Program Files\iTunes
2010-07-28 20:11:17 ----D---- C:\Windows\Minidump

======List of files/folders modified in the last 1 months======

2010-08-15 21:55:31 ----D---- C:\Windows\Temp
2010-08-15 21:52:42 ----D---- C:\Windows\Prefetch
2010-08-15 21:50:13 ----RD---- C:\Program Files
2010-08-15 21:45:54 ----D---- C:\Windows\Tasks
2010-08-15 21:45:54 ----D---- C:\Windows\system32\Tasks
2010-08-15 21:43:49 ----D---- C:\Program Files (x86)\Mozilla Firefox
2010-08-14 00:44:21 ----D---- C:\ProgramData\Kaspersky Lab
2010-08-14 00:43:05 ----SHD---- C:\Windows\Installer
2010-08-14 00:42:18 ----HD---- C:\ProgramData
2010-08-14 00:41:20 ----RD---- C:\Program Files (x86)
2010-08-14 00:41:18 ----D---- C:\Windows\system32\catroot
2010-08-14 00:41:17 ----D---- C:\Windows\inf
2010-08-14 00:41:16 ----D---- C:\Windows\system32\drivers
2010-08-14 00:41:01 ----D---- C:\Windows\System32
2010-08-14 00:32:24 ----D---- C:\Windows\Debug
2010-08-14 00:32:24 ----D---- C:\Windows
2010-08-13 23:21:32 ----SHD---- C:\System Volume Information
2010-08-13 22:57:54 ----D---- C:\Windows\system32\WDI
2010-08-13 22:46:17 ----D---- C:\Downloads
2010-08-13 22:23:32 ----D---- C:\Windows\winsxs
2010-08-13 22:23:22 ----D---- C:\Program Files (x86)\Common Files
2010-08-13 19:34:12 ----D---- C:\Windows\Logs
2010-08-12 22:56:04 ----D---- C:\MOJE
2010-08-12 22:52:24 ----D---- C:\Program Files (x86)\BitComet
2010-08-12 21:12:32 ----D---- C:\Windows\system32\catroot2
2010-08-12 14:57:01 ----D---- C:\Windows\Microsoft.NET
2010-08-12 14:56:17 ----RSD---- C:\Windows\assembly
2010-08-12 14:46:53 ----D---- C:\Users\Owner\AppData\Roaming\Skype
2010-08-12 11:20:02 ----D---- C:\Users\Owner\AppData\Roaming\skypePM
2010-08-11 03:18:58 ----D---- C:\Windows\SysWOW64
2010-08-11 03:18:58 ----D---- C:\Program Files\Internet Explorer
2010-08-11 03:18:58 ----D---- C:\Program Files (x86)\Internet Explorer
2010-08-11 03:18:56 ----D---- C:\Program Files\Windows Mail
2010-08-11 03:18:56 ----D---- C:\Program Files\Movie Maker
2010-08-11 03:18:56 ----D---- C:\Program Files (x86)\Windows Mail
2010-08-11 03:18:55 ----D---- C:\Windows\SYSWOW64\migration
2010-08-11 03:18:52 ----D---- C:\Windows\system32\migration
2010-08-09 02:21:14 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-08-03 14:52:33 ----A---- C:\Windows\system32\mrt.exe
2010-08-02 18:30:18 ----D---- C:\Intel
2010-08-01 19:03:45 ----D---- C:\ProgramData\WinZip
2010-07-28 21:53:36 ----DC---- C:\Windows\system32\DRVSTORE
2010-07-28 21:53:33 ----D---- C:\Program Files (x86)\iTunes
2010-07-22 15:29:39 ----D---- C:\Kremrole Joe
2010-07-18 19:44:25 ----RD---- C:\Windows\Fonts

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2008-04-29 388120]
R0 PCTCore;PCTools KDS; C:\Windows\system32\drivers\PCTCore64.sys [2010-03-29 233488]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2008-06-16 55024]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2009-08-20 871408]
R0 TfFsMon;TfFsMon; C:\Windows\system32\drivers\TfFsMon.sys [2010-02-02 65072]
R0 TfSysMon;TfSysMon; C:\Windows\system32\drivers\TfSysMon.sys [2010-02-02 60416]
R1 pctgntdi;pctgntdi; \??\C:\Windows\system32\drivers\pctgntdi64.sys [2010-02-05 306648]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2008-04-27 17024]
R2 risdptsk;risdptsk; C:\Windows\system32\DRIVERS\risdsn64.sys [2008-10-22 76288]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio64.sys [2008-04-27 9728]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect; C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2008-04-24 19968]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2008-10-20 1168384]
R3 CAXHWAZL;CAXHWAZL; C:\Windows\system32\DRIVERS\CAXHWAZL.sys [2008-04-27 300032]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 34152]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\CAX_DPV.sys [2008-04-27 1511936]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2008-11-28 7907872]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-01-05 1582880]
R3 pctplsg;pctplsg; \??\C:\Windows\System32\drivers\pctplsg64.sys [2010-04-08 92896]
R3 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimssn64.sys [2008-10-22 85504]
R3 SFEP;Sony Firmware Extension Parser; C:\Windows\system32\DRIVERS\SFEP.sys [2008-11-18 11392]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-05-20 321072]
R3 TfNetMon;TfNetMon; \??\C:\Windows\system32\drivers\TfNetMon.sys [2010-02-02 41888]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys [2010-02-25 11856]
R3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-20 168704]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\CAX_CNXT.sys [2008-04-27 731648]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-20 108544]
R3 yukonx64;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x64.sys [2008-04-27 391680]
S1 DMICall;Sony DMI Call service; C:\Windows\system32\DRIVERS\DMICall.sys []
S1 SRTSP;SRTSP; \??\C:\Windows\system32\drivers\NISx64\1000000.07D\SRTSP64.SYS []
S1 SRTSPX;SRTSPX; \??\C:\Windows\system32\drivers\NISx64\1000000.07D\SRTSPX64.SYS []
S3 amwu8cm1;amwu8cm1; C:\Windows\system32\drivers\amwu8cm1.sys []
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-20 6144]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 273920]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2008-01-20 286720]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-20 11008]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 7040]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 6656]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-20 7936]
S3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20080829.024\ENG64.SYS []
S3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20080829.024\EX64.SYS []
S3 nmwcdcx64;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbox64.sys [2008-05-02 23552]
S3 nmwcdx64;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmbx64.sys [2008-05-02 18432]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2008-05-02 8704]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2010-04-19 50688]
S3 usbser;USB Modem Driver; C:\Windows\system32\DRIVERS\usbser.sys [2009-04-10 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltx64j.sys [2008-05-02 8704]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2008-05-06 14464]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-28 154168]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-09-30 46592]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-20 8704]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-20 438328]
S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-20 111104]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 Bonjour Service;Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 Browser Defender Update Service;Browser Defender Update Service; C:\Program Files (x86)\Spyware Doctor\BDT\BDTUpdateService.exe [2010-01-22 112592]
R2 IviRegMgr;IviRegMgr; C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152]
R2 QBCFMonitorService;QBCFMonitorService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe [2008-09-11 24576]
R2 SampleCollector;Intel(R) Sample Collector; C:\Program Files\Sony\VAIO Care\collsvc.exe [2008-09-29 167424]
R2 sdAuxService;PC Tools Auxiliary Service; C:\Program Files (x86)\Spyware Doctor\pctsAuxs.exe [2010-03-11 366840]
R2 sdCoreService;PC Tools Security Service; C:\Program Files (x86)\Spyware Doctor\pctsSvc.exe [2010-03-15 1142224]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe [2010-04-19 1401672]
R2 uCamMonitor;CamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2008-01-20 27648]
R2 VAIO Event Service;VAIO Event Service; C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe [2009-01-19 203624]
R2 VAIO Power Management;VAIO Power Management; C:\Program Files\Sony\VAIO Power Management\SPMService.exe [2008-12-19 411496]
R2 VCFw;VAIO Content Folder Watcher; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2009-01-14 5184872]
R2 VzCdbSvc;VAIO Entertainment Database Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [2009-01-21 192512]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio64.exe [2008-04-27 410624]
R3 ThreatFire;ThreatFire; C:\Program Files (x86)\Spyware Doctor\TFEngine\TFService.exe [2010-02-02 70928]
R3 Vcsw;VAIO Entertainment UPnP Client Adapter; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [2009-01-21 313264]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-20 27648]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-07-21 654112]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PACSPTISVR;PACSPTISVR; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [2009-01-08 114688]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2008-01-20 19968]
S3 QBFCService;Intuit QuickBooks FCS; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe [2008-08-09 61440]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2007-03-26 292864]
S3 SOHCImp;VAIO Media plus Content Importer; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2009-01-20 120104]
S3 SOHDBSvr;VAIO Media plus Database Manager; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [2009-01-20 70952]
S3 SOHDms;VAIO Media plus Digital Media Server; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2009-01-20 390440]
S3 SOHDs;VAIO Media plus Device Searcher; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2009-01-20 75048]
S3 SOHPlMgr;VAIO Media plus Playlist Manager; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [2009-01-20 91432]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TuneUp.Defrag;@C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe,-1; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe [2010-08-01 607048]
S3 VAIO Entertainment TV Device Arbitration Service;VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [2009-01-21 69632]
S3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2009-01-19 394536]
S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface; C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2009-01-17 110376]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 1020768]
S4 Norton Internet Security;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe /s Norton Internet Security /m C:\Program Files (x86)\Norton Internet Security\Engine\16.0.0.125\diMaster.dll /prefetch:1 []

-----------------EOF-----------------

[Rudy]

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

[Haces]

S tímhle programem nemám zkušenosti, jediný log, který se mi podařilo najít je tento, pokud jste měli na mysli něco jiného, dejte mi prosím vědět, který log mám přesně vyjet, předem děkuji za odpověď.

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4052

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18943

16.8.2010 20:54:48
mbam-log-2010-08-16 (20-54-48).txt

Scan type: Full scan (C:\|)
Objects scanned: 274660
Time elapsed: 1 hour(s), 33 minute(s), 10 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowSearch (Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[Rudy]

Ano, to je ten správný. Položku smažte.