win32/Fujacks

Så er den satan her igen selv om jeg har fået eksperthjælp her og troede problemet var løst. NOD32 sætter den i karantæne men sletter den ikke.
Sender log

Logfile of HijackThis v1.99.1
Scan saved at 17:38:37, on 09-11-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Programmer\Java\jre1.6.0_03\bin\jusched.exe
C:\Programmer\CyberLink\PowerDVD\PDVDServ.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\Programmer\Acer\Acer eMode Management\AspireService.exe
C:\Programmer\Acer\Acer eConsole\MediaSync.exe
C:\Programmer\ATI Technologies\ATI.ACE\cli.exe
C:\Programmer\D-Tools\daemon.exe
C:\Programmer\Eset\nod32kui.exe
C:\Programmer\QuickTime\qttask.exe
C:\Programmer\SPAMfighter\SFAgent.exe
C:\Programmer\Fælles filer\ACD Systems\EN\DevDetect.exe
C:\Programmer\iTunes\iTunesHelper.exe
C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\MSN Messenger\msnmsgr.exe
C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Programmer\Acer\Acer eConsole\MediaServerService.exe
C:\Programmer\Fælles filer\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Programmer\Eset\nod32krn.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmer\iPod\bin\iPodService.exe
C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Programmer\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Programmer\ATI Technologies\ATI.ACE\cli.exe
C:\Programmer\ATI Technologies\ATI.ACE\cli.exe
C:\Programmer\internet explorer\iexplore.exe
C:\Documents and Settings\Åse Krabbe\Skrivebord\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.signon.stofanet.dk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Programmer\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmer\Spybot\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmer\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmer\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmer\google\googletoolbar2.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [ntiMUI] c:\Programmer\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmer\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [RemoteControl] C:\Programmer\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [AspireService] C:\Programmer\Acer\Acer eMode Management\AspireService.exe
O4 - HKLM\..\Run: [MediaSync] C:\Programmer\Acer\Acer eConsole\MediaSync.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Programmer\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programmer\D-Tools\daemon.exe"  -lang 1033
O4 - HKLM\..\Run: [nod32kui] "C:\Programmer\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Programmer\SPAMfighter\SFAgent.exe" update delay 60
O4 - HKLM\..\Run: [Device Detector] "C:\Programmer\Fælles filer\ACD Systems\EN\DevDetect.exe" -autorun
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmer\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Programmer\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: &Google Search - res://c:\programmer\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\programmer\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\programmer\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\programmer\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\programmer\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\programmer\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Opslag - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://johankrabbe.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1171718099281
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://express.foto.com/Newuploader/ImageUploader4.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Programmer\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Acer Media Server - Acer Inc. - C:\Programmer\Acer\Acer eConsole\MediaServerService.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Programmer\Fælles filer\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Programmer\Fælles filer\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmer\Fælles filer\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod-tjeneste (iPod Service) - Apple Inc. - C:\Programmer\iPod\bin\iPodService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - C:\Programmer\Eset\nod32krn.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe


ComboFix 07-11-08.1 - Åse Krabbe 2007-11-09 17:42:33.4 - NTFSx86
Microsoft Windows XP Home Edition  5.1.2600.2.1252.1.1030.18.454 [GMT 1:00]
Running from: C:\Documents and Settings\Åse Krabbe\Lokale indstillinger\Temporary Internet Files\Content.IE5\ATITSTGF\ComboFix[1].exe
* Created a new restore point
.

(((((((((((((((((((((((((  Files Created from 2007-10-09 to 2007-11-09  )))))))))))))))))))))))))))))))
.

2007-11-09 16:08    <DIR>    d--------    C:\Åse Arbejde
2007-11-08 19:53    125,440    --a------    C:\WINDOWS\system32\schtasks.exe
2007-11-06 16:24    <DIR>    d--------    C:\Documents and Settings\Åse Krabbe\Application Data\ICAClient
2007-11-06 16:21    <DIR>    d--------    C:\WINDOWS\system32\Resource
2007-11-06 16:21    <DIR>    d--------    C:\Programmer\Citrix
2007-11-04 11:04    <DIR>    d--------    C:\Programmer\SUPERAntiSpyware
2007-11-04 11:04    <DIR>    d--------    C:\Documents and Settings\Åse Krabbe\Application Data\SUPERAntiSpyware.com
2007-11-04 11:04    <DIR>    d--------    C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2007-11-04 09:45    51,200    --a------    C:\WINDOWS\NirCmd.exe
2007-10-31 22:01    <DIR>    d--------    C:\Documents and Settings\Åse Krabbe\Application Data\Grisoft
2007-10-31 22:00    <DIR>    d--------    C:\Documents and Settings\All Users\Application Data\Grisoft
2007-10-31 22:00    10,872    --a------    C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-10-31 19:42    <DIR>    d-a------    C:\Documents and Settings\All Users\Application Data\TEMP
2007-10-31 19:41    626,688    --a------    C:\WINDOWS\system32\msvcr80.dll
2007-10-31 18:23    <DIR>    d--------    C:\Programmer\Alwil Software

.
((((((((((((((((((((((((((((((((((((((((  Find3M Report  ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-09 14:56    7,602,176    ----a-w    C:\Documents and Settings\Åse Krabbe\ntuser.dat
2007-11-09 14:56    7,602,176    ----a-w    C:\Documents and Settings\Åse Krabbe\ntuser.dat
2007-11-07 14:32    ---------    d-----w    C:\Documents and Settings\Åse Krabbe\Application Data\ICAClient
2007-11-04 10:04    ---------    d-----w    C:\Documents and Settings\Åse Krabbe\Application Data\SUPERAntiSpyware.com
2007-11-04 10:03    ---------    d-----w    C:\Programmer\Fælles filer\Wise Installation Wizard
2007-11-01 18:03    ---------    d-----w    C:\Programmer\MSN Messenger
2007-10-31 21:01    ---------    d-----w    C:\Documents and Settings\Åse Krabbe\Application Data\Grisoft
2007-10-15 14:39    ---------    d-----w    C:\Programmer\DivX
2007-10-10 08:52    ---------    d-----w    C:\Programmer\Java
2007-09-28 16:08    156,992    ----a-w    C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2007-09-28 16:07    524,288    ----a-w    C:\WINDOWS\system32\DivXsm.exe
2007-09-28 16:07    43,528    ------w    C:\WINDOWS\system32\drivers\PxHelp20.sys
2007-09-28 16:07    3,596,288    ----a-w    C:\WINDOWS\system32\qt-dx331.dll
2007-09-28 16:07    200,704    ----a-w    C:\WINDOWS\system32\ssldivx.dll
2007-09-28 16:07    129,784    ------w    C:\WINDOWS\system32\pxafs.dll
2007-09-28 16:07    120,056    ------w    C:\WINDOWS\system32\pxcpyi64.exe
2007-09-28 16:07    118,520    ------w    C:\WINDOWS\system32\pxinsi64.exe
2007-09-28 16:07    1,044,480    ----a-w    C:\WINDOWS\system32\libdivx.dll
2007-09-28 16:05    823,296    ----a-w    C:\WINDOWS\system32\divx_xx0c.dll
2007-09-28 16:05    823,296    ----a-w    C:\WINDOWS\system32\divx_xx07.dll
2007-09-28 16:05    81,920    ----a-w    C:\WINDOWS\system32\dpl100.dll
2007-09-28 16:05    802,816    ----a-w    C:\WINDOWS\system32\divx_xx11.dll
2007-09-28 16:05    739,840    ----a-w    C:\WINDOWS\system32\DivX.dll
2007-09-28 16:05    593,920    ----a-w    C:\WINDOWS\system32\dpuGUI11.dll
2007-09-28 16:05    57,344    ----a-w    C:\WINDOWS\system32\dpv11.dll
2007-09-28 16:05    53,248    ----a-w    C:\WINDOWS\system32\dpuGUI10.dll
2007-09-28 16:05    344,064    ----a-w    C:\WINDOWS\system32\dpus11.dll
2007-09-28 16:05    294,912    ----a-w    C:\WINDOWS\system32\dpu11.dll
2007-09-28 16:05    294,912    ----a-w    C:\WINDOWS\system32\dpu10.dll
2007-09-28 16:05    196,608    ----a-w    C:\WINDOWS\system32\dtu100.dll
2007-09-28 16:05    12,288    ----a-w    C:\WINDOWS\system32\DivXWMPExtType.dll
2007-08-22 12:57    96,768    ----a-w    C:\WINDOWS\system32\dllcache\inseng.dll
2007-08-22 12:57    667,136    ----a-w    C:\WINDOWS\system32\dllcache\wininet.dll
2007-08-22 12:57    620,032    ----a-w    C:\WINDOWS\system32\dllcache\urlmon.dll
2007-08-22 12:57    55,808    ----a-w    C:\WINDOWS\system32\dllcache\extmgr.dll
2007-08-22 12:57    532,480    ----a-w    C:\WINDOWS\system32\dllcache\mstime.dll
2007-08-22 12:57    474,112    ----a-w    C:\WINDOWS\system32\dllcache\shlwapi.dll
2007-08-22 12:57    449,024    ----a-w    C:\WINDOWS\system32\dllcache\mshtmled.dll
2007-08-22 12:57    39,424    ----a-w    C:\WINDOWS\system32\dllcache\pngfilt.dll
2007-08-22 12:57    357,888    ----a-w    C:\WINDOWS\system32\dllcache\dxtmsft.dll
2007-08-22 12:57    3,085,824    ----a-w    C:\WINDOWS\system32\dllcache\mshtml.dll
2007-08-22 12:57    251,904    ----a-w    C:\WINDOWS\system32\dllcache\iepeers.dll
2007-08-22 12:57    205,824    ----a-w    C:\WINDOWS\system32\dllcache\dxtrans.dll
2007-08-22 12:57    16,384    ----a-w    C:\WINDOWS\system32\dllcache\jsproxy.dll
2007-08-22 12:57    151,552    ----a-w    C:\WINDOWS\system32\dllcache\cdfview.dll
2007-08-22 12:57    146,432    ----a-w    C:\WINDOWS\system32\dllcache\msrating.dll
2007-08-22 12:57    1,498,112    ----a-w    C:\WINDOWS\system32\dllcache\shdocvw.dll
2007-08-22 12:57    1,056,256    ----a-w    C:\WINDOWS\system32\dllcache\danim.dll
2007-08-22 12:57    1,022,976    ----a-w    C:\WINDOWS\system32\dllcache\browseui.dll
2007-08-21 10:19    18,432    ----a-w    C:\WINDOWS\system32\dllcache\iedw.exe
2007-08-21 06:17    683,520    ----a-w    C:\WINDOWS\system32\inetcomm.dll
2007-08-21 06:17    683,520    ----a-w    C:\WINDOWS\system32\dllcache\inetcomm.dll
2007-06-07 14:09    20    ---h--w    C:\Documents and Settings\All Users\Application Data\PKP_DLec.DAT
2006-12-14 10:01    68,512    ----a-w    C:\Documents and Settings\Åse Krabbe\Application Data\GDIPFONTCACHEV1.DAT
.

(((((((((((((((((((((((((((((  snapshot@2007-11-04_ 9.48.54,25  )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-11-04 10:04:22    29,696    ----a-r    C:\WINDOWS\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF11.exe
+ 2007-11-04 10:04:22    18,944    ----a-r    C:\WINDOWS\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF13.exe
+ 2007-11-04 10:04:22    65,024    ----a-r    C:\WINDOWS\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF15.exe
+ 2006-11-08 17:33:20    98,576    ----a-w    C:\WINDOWS\system32\ctxsetup.exe
+ 2006-11-08 17:18:12    24,848    ----a-w    C:\WINDOWS\system32\Resource\en\ctxsetUI.dll
- 2007-04-02 13:21:27    139,776    ----a-w    C:\WINDOWS\system32\swreg.exe
+ 2007-07-22 17:39:27    279,552    ----a-w    C:\WINDOWS\system32\swreg.exe
.
(((((((((((((((((((((((((((((((((((((  Reg Loading Points  ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" []
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2005-01-07 17:07 C:\WINDOWS\system32\HdAShCut.exe]
"RTHDCPL"="RTHDCPL.EXE" [2005-09-22 13:36 C:\WINDOWS\RTHDCPL.exe]
"ntiMUI"="c:\Programmer\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe" [2005-05-11 18:15]
"SunJavaUpdateSched"="C:\Programmer\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11]
"RemoteControl"="C:\Programmer\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 20:24]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-27 06:00]
"MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-27 06:00]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-27 06:00]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-27 06:00]
"eRecoveryService"="C:\Acer\Empowering Technology\eRecovery\Monitor.exe" [2005-11-16 17:00]
"AspireService"="C:\Programmer\Acer\Acer eMode Management\AspireService.exe" [2005-09-29 16:07]
"MediaSync"="C:\Programmer\Acer\Acer eConsole\MediaSync.exe" [2005-09-21 13:48]
"ATICCC"="C:\Programmer\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 17:41]
"NeroCheck"="C:\WINDOWS\system32\\NeroCheck.exe" [2001-07-09 04:50]
"DAEMON Tools-1033"="C:\Programmer\D-Tools\daemon.exe" [2004-08-22 17:05]
"nod32kui"="C:\Programmer\Eset\nod32kui.exe" [2007-05-30 08:12]
"QuickTime Task"="C:\Programmer\QuickTime\qttask.exe" [2007-04-27 08:41]
"SPAMfighter Agent"="C:\Programmer\SPAMfighter\SFAgent.exe" [2007-06-20 14:03]
"Device Detector"="C:\Programmer\Fælles filer\ACD Systems\EN\DevDetect.exe" [2004-09-02 15:51]
"iTunesHelper"="C:\Programmer\iTunes\iTunesHelper.exe" [2007-06-28 08:14]
"!AVG Anti-Spyware"="C:\Programmer\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-27 06:00]
"msnmsgr"="C:\Programmer\MSN Messenger\msnmsgr.exe" [2007-01-19 12:55]
"SUPERAntiSpyware"="C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-06-21 14:06]

C:\Documents and Settings\All Users\Menuen Start\Programmer\Start\
Adobe Gamma Loader.lnk - C:\Programmer\Fælles filer\Adobe\Calibration\Adobe Gamma Loader.exe [2007-04-16 16:49:36]
Adobe Reader Speed Launch.lnk - C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 04:44:06]
hp psc 1000 series.lnk - C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe [2002-12-02 21:08:34]
hpoddt01.exe.lnk - C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [2002-12-02 20:56:10]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Programmer\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Programmer\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Programmer\SUPERAntiSpyware\SASWINLO.dll

R0 m5287;m5287;C:\WINDOWS\system32\drivers\m5287.sys
R1 sdcplh;sdcplh;C:\WINDOWS\system32\drivers\sdcplh.sys
R1 UBHelper;UBHelper;C:\WINDOWS\system32\drivers\UBHelper.sys
R2 int15.sys;int15.sys;\??\C:\Acer\Empowering Technology\eRecovery\int15.sys
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;C:\MAGIX\Common\Database\bin\fbserver.exe
S3 idrmkl;idrmkl;\??\C:\DOCUME~1\SEKRAB~1\LOKALE~1\Temp\idrmkl.sys
S3 WmaCDriverV32;WmaCDriverV32;C:\WINDOWS\system32\drivers\WmaCDriverV32.sys
S3 z530bus;Sony Ericsson Z530 Driver driver (WDM);C:\WINDOWS\system32\DRIVERS\z530bus.sys
S3 z530mdfl;Sony Ericsson Z530 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\z530mdfl.sys
S3 z530mdm;Sony Ericsson Z530 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\z530mdm.sys
S3 z530mgmt;Sony Ericsson Z530 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\z530mgmt.sys
S3 z530obex;Sony Ericsson Z530 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\z530obex.sys

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
\Shell\AutoRun\command - K:\LaunchEAW.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{28538dfa-ba7d-11da-bfa6-00142a7ac92b}]
\Shell\AutoRun\command - F:\setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3ba8a968-b101-11da-bf88-00142a7ac92b}]
\Shell\AutoRun\command - F:\setupSNK.exe

.
**************************************************************************

catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-09 17:44:41
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-11-09 17:45:24
.
    --- E O F ---