Nu tager jeg et par dage til julemarkeder og Berlin - ser ud til Combofix fik løst mit problem. Nu ser alt ud til at være i orden - husk dine points!!
Her Combofix log
ComboFix 07-12-09.1 - Claus Andersen 2007-12-09 5:50:55.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1030.18.1461 [GMT 1:00]
Running from: C:\Documents and Settings\Claus Andersen\Skrivebord\ComboFix.exe
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\Claus Andersen\Dokumenter\PPPATC~1
C:\Programmer\Fælles filer\{A0AED~1
C:\Programmer\Fælles filer\{A0AED~2
C:\WINDOWS\system32\pac.txt
C:\WINDOWS\system32\~.exe . . . . failed to delete
C:\WINDOWS\system32\d3dxofq.dll . . . . failed to delete
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\LEGACY_COM+_MESSAGES
-------\LEGACY_THKKKWSQ
-------\thkkkwsq
((((((((((((((((((((((((( Files Created from 2007-11-09 to 2007-12-09 )))))))))))))))))))))))))))))))
.
2007-12-08 23:56 . 2007-12-08 23:56 19,456 --a------ C:\WINDOWS\system32\drivers\yfyxvpim.dat
2007-12-08 17:00 . 2007-12-08 17:17 <DIR> d-------- C:\Programmer\a-squared Anti-Malware
2007-12-08 16:26 . 2007-12-08 16:26 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab
2007-12-08 16:26 . 2007-12-08 16:26 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2007-12-08 16:23 . 2007-12-08 16:23 <DIR> d-------- C:\Programmer\Trend Micro
2007-12-08 16:18 . 2007-12-09 06:01 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2007-12-08 16:18 . 2007-12-08 16:18 1,409 --a------ C:\WINDOWS\QTFont.for
2007-12-08 14:54 . <DIR> C:\Programmer\Fælles filer\Scanner
2007-12-08 14:54 . 2007-12-08 14:54 <DIR> d-------- C:\Programmer\CA
2007-12-08 14:54 . 2007-12-08 14:54 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\CA
2007-12-08 14:52 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2007-12-08 14:52 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-12-08 14:52 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
2007-12-08 14:52 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-12-08 14:52 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2007-12-08 14:37 . 2007-12-08 14:37 <DIR> d-------- C:\Programmer\XoftSpySE
2007-12-08 14:24 . 2007-12-08 14:25 <DIR> d-------- C:\Programmer\SPYWAREfighter
2007-12-08 14:24 . <DIR> C:\Programmer\Fælles filer\Application
2007-12-08 14:14 . 2007-12-08 16:08 <DIR> d-------- C:\Programmer\Windows Defender
2007-12-08 14:02 . 2007-12-08 14:06 <DIR> d-------- C:\Programmer\Spyware Doctor
2007-12-08 14:02 . 2007-12-08 14:02 <DIR> d-------- C:\Documents and Settings\Claus Andersen\Application Data\PC Tools
2007-12-08 14:02 . 2007-10-18 00:16 79,688 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys
2007-12-08 14:02 . 2007-10-18 00:15 62,280 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys
2007-12-08 14:02 . 2007-10-18 00:14 41,288 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys
2007-12-08 14:02 . 2007-10-18 00:16 29,000 --a------ C:\WINDOWS\system32\drivers\kcom.sys
2007-12-08 13:00 . 2007-12-08 13:00 1,374 --a------ C:\WINDOWS\imsins.BAK
2007-12-08 08:55 . 2007-12-08 08:55 741,632 --a------ C:\WINDOWS\system32\rlmhucmr.dat
2007-12-08 08:55 . 2007-12-08 08:55 246,545 --a------ C:\WINDOWS\system32\libssl32.dll
2007-12-08 08:55 . 2007-12-08 08:55 119,552 --a------ C:\WINDOWS\system32\exouhkbf.dat
2007-12-08 08:55 . 2007-12-08 08:55 42,240 --a------ C:\WINDOWS\system32\huqlclgl.dat
2007-12-08 08:55 . 2007-12-08 08:55 36,096 --a------ C:\WINDOWS\system32\mavptdvp.dat
2007-12-08 08:55 . 2007-12-08 08:55 35,072 --a------ C:\WINDOWS\system32\pjvruthl.dat
2007-12-08 08:47 . 2001-10-09 14:00 84,992 --a------ C:\WINDOWS\system32\d3dxofq.dll.bak
2007-12-08 08:47 . 2007-12-08 08:55 83,456 --a------ C:\WINDOWS\system32\d3dxofq.dll
2007-12-08 08:46 . 2006-10-18 21:47 84,992 --a------ C:\WINDOWS\system32\audiodevo.dll
2007-12-08 08:46 . 19,456 C:\WINDOWS\system32\drivers\kbjfykrg.dat
2007-12-08 08:46 . 2007-12-08 08:46 15,872 --a------ C:\WINDOWS\system32\nog8u4.exe
2007-12-08 08:45 . 2007-12-08 08:45 21,504 --a------ C:\WINDOWS\system32\~.exe
2007-12-01 17:56 . 2007-12-04 17:08 <DIR> d-------- C:\Programmer\Image Echo Software
2007-12-01 15:41 . 2007-12-01 15:41 <DIR> d-------- C:\WINDOWS\system32\QuickTime
2007-12-01 15:41 . 2004-01-28 08:03 1,544,542 --a------ C:\WINDOWS\system32\avcodec.dll
2007-12-01 12:46 . 2007-12-01 12:47 35,840 --a------ C:\WINDOWS\17PHolmes572.exe
2007-12-01 12:44 . 2007-12-01 12:44 <DIR> d-------- C:\WINDOWS\system32\daSgo01
2007-12-01 12:44 . 2007-12-01 12:44 <DIR> d-------- C:\Temp\bkR11
2007-12-01 11:51 . <DIR> C:\Programmer\Fælles filer\DVDVideoSoft
2007-12-01 11:50 . 2007-12-01 11:50 <DIR> d-------- C:\Programmer\DVDVideoSoft
2007-12-01 09:49 . 2007-12-01 09:49 0 --ah----- C:\WINDOWS\99313125
2007-12-01 00:20 . 2007-12-04 17:12 <DIR> d-------- C:\Programmer\VisiFly
2007-12-01 00:20 . <DIR> C:\Programmer\Fælles filer\GeoVid
2007-12-01 00:20 . 2005-06-07 15:11 60,416 --a------ C:\WINDOWS\system32\dsetup.dll
2007-12-01 00:04 . 2006-10-11 19:03 75,264 --a------ C:\WINDOWS\system32\zlib1.dll
2007-12-01 00:04 . 2006-10-11 19:03 53,248 --a------ C:\WINDOWS\system32\MyFlashZip0.ax
2007-11-30 23:56 . 2007-12-08 13:28 <DIR> d-------- C:\Programmer\Search Settings
2007-11-30 23:56 . 2007-11-30 23:56 <DIR> d-------- C:\Documents and Settings\Claus Andersen\Application Data\Search Settings
2007-11-29 07:11 . 2007-12-08 13:28 <DIR> d-------- C:\Programmer\iTunes
2007-11-29 07:11 . 2007-11-29 07:11 <DIR> d-------- C:\Programmer\iPod
2007-11-27 09:53 . 2007-11-27 09:54 <DIR> d-------- C:\Programmer\gs
2007-11-27 09:24 . 2007-11-27 10:26 <DIR> d-------- C:\Programmer\ApFill
2007-11-26 16:34 . 2007-11-26 16:34 2,320,700 --a------ C:\PB170163.amv
2007-11-22 06:04 . 2007-12-08 13:28 <DIR> d-------- C:\Programmer\Media Mouse
2007-11-21 00:01 . 2007-12-04 17:02 <DIR> d-------- C:\Programmer\Flash Favorite
2007-11-20 23:20 . 2007-11-20 23:20 <DIR> d-------- C:\ConverterOutput
2007-11-20 23:19 . 2007-11-20 23:19 <DIR> d-------- C:\Programmer\Cucusoft
2007-11-20 23:19 . 2004-10-12 14:40 2,255,360 --a------ C:\WINDOWS\system32\libavcodec.dll
2007-11-20 23:19 . 2004-10-12 14:46 1,761,280 --a------ C:\WINDOWS\system32\ffdshow.ax
2007-11-20 23:19 . 2004-10-05 16:16 395,776 --a------ C:\WINDOWS\system32\libmplayer.dll
2007-11-20 23:19 . 2004-10-12 14:42 262,144 --a------ C:\WINDOWS\system32\TomsMoComp_ff.dll
2007-11-20 23:19 . 2004-10-04 01:50 112,640 --a------ C:\WINDOWS\system32\libmpeg2_ff.dll
2007-11-20 23:19 . 2003-03-25 06:49 98,304 --a------ C:\WINDOWS\system32\L3CODECX.AX
2007-11-20 23:19 . 2004-09-10 13:50 34,820 --a------ C:\WINDOWS\system32\ffdshow.reg
2007-11-20 22:11 . <DIR> C:\Programmer\Fælles filer\SWF Studio
2007-11-20 22:10 . 2007-11-20 22:10 <DIR> d-------- C:\Programmer\Riva
2007-11-20 21:43 . 2007-11-20 21:43 <DIR> d-------- C:\Programmer\SourceTec
2007-11-20 21:36 . 2007-12-01 00:04 <DIR> d-------- C:\Documents and Settings\Claus Andersen\Application Data\Moyea
2007-11-20 21:35 . 2003-09-04 08:53 16,384 --a------ C:\WINDOWS\system32\rtl3.dat
2007-11-20 20:45 . 2007-12-04 17:10 <DIR> d-------- C:\Programmer\Eltima Software
2007-11-14 23:43 . 2007-11-14 23:43 65,536 --a------ C:\WINDOWS\system32\QuickTimeVR.qtx
2007-11-14 23:43 . 2007-11-14 23:43 49,152 --a------ C:\WINDOWS\system32\QuickTime.qts
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-09 05:01 --------- d-----w C:\Programmer\UltimateZip 2007
2007-12-08 16:44 --------- d-----w C:\Programmer\SUPERAntiSpyware
2007-12-08 12:28 --------- d-----w C:\Programmer\ScanWizard 5
2007-12-08 12:28 --------- d-----w C:\Programmer\PC Connectivity Solution
2007-12-08 12:28 --------- d-----w C:\Programmer\AirLive Wireless LAN Utility
2007-12-08 10:00 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-12-04 16:12 --------- d-----w C:\Documents and Settings\All Users\Application Data\WinZip
2007-12-04 16:11 --------- d-----w C:\Programmer\VIDEOzilla
2007-12-04 16:10 --------- d-----w C:\Documents and Settings\Claus Andersen\Application Data\Eltima Software
2007-12-04 16:07 --------- d-----w C:\Programmer\Moyea
2007-12-04 15:59 --------- d-----w C:\Programmer\Corel
2007-12-01 14:41 --------- d--h--w C:\Programmer\InstallShield Installation Information
2007-11-30 22:46 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2007-11-25 12:05 30 ----a-w C:\Programmer\Exiferupdate.ini
2007-11-24 12:10 --------- d-----w C:\Programmer\Audacity
2007-11-20 13:03 --------- d-----w C:\Programmer\Easy CD-DA Extractor 10
2007-11-15 15:32 --------- d-----w C:\Programmer\Fælles filer\Wise Installation Wizard
2007-11-05 16:03 --------- d-----w C:\Programmer\AusLogics Disk Defrag
2007-11-01 05:40 --------- d-----w C:\Programmer\Fælles filer\Ulead Systems
2007-11-01 05:40 --------- d-----w C:\Documents and Settings\All Users\Application Data\Ulead Systems
2007-11-01 05:37 --------- d-----w C:\Programmer\Alchemy Mindworks
2007-10-31 08:27 --------- d-----w C:\Programmer\SDC udvikling
2007-10-27 09:44 --------- d-----w C:\Programmer\ZSoft
2007-10-19 13:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2007-10-19 13:12 --------- d-----w C:\Documents and Settings\Claus Andersen\Application Data\SUPERAntiSpyware.com
2007-10-14 12:16 --------- d-----w C:\Programmer\Microsoft CAPICOM 2.1.0.2
2007-10-10 12:56 --------- d-----w C:\Documents and Settings\Claus Andersen\Application Data\Corel
2007-10-10 12:55 --------- d-----w C:\Documents and Settings\All Users\Application Data\Corel
2007-10-10 11:32 --------- d-----w C:\Programmer\Picasa2
2007-09-19 12:11 74,752 ----a-w C:\WINDOWS\cadkasdeinst01e.exe
2007-06-19 21:00 92,064 ----a-w C:\Documents and Settings\Claus Andersen\mqdmmdm.sys
2007-06-19 21:00 9,232 ----a-w C:\Documents and Settings\Claus Andersen\mqdmmdfl.sys
2007-06-19 21:00 79,328 ----a-w C:\Documents and Settings\Claus Andersen\mqdmserd.sys
2007-06-19 21:00 66,656 ----a-w C:\Documents and Settings\Claus Andersen\mqdmbus.sys
2007-06-19 21:00 6,208 ----a-w C:\Documents and Settings\Claus Andersen\mqdmcmnt.sys
2007-06-19 21:00 5,936 ----a-w C:\Documents and Settings\Claus Andersen\mqdmwhnt.sys
2007-06-19 21:00 4,048 ----a-w C:\Documents and Settings\Claus Andersen\mqdmcr.sys
2007-06-19 21:00 25,600 ----a-w C:\Documents and Settings\Claus Andersen\usbsermptxp.sys
2007-06-19 21:00 22,768 ----a-w C:\Documents and Settings\Claus Andersen\usbsermpt.sys
2007-05-01 21:39 0 ----a-w C:\Documents and Settings\Claus Andersen\template.dat
2007-03-09 07:12 27,648 --sha-w C:\WINDOWS\system32\AVSredirect.dll
2005-06-26 22:32 616,448 --sha-r C:\WINDOWS\system32\cygwin1.dll
2005-06-22 05:37 45,568 --sha-r C:\WINDOWS\system32\cygz.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{148C180B-3A45-433C-88EE-E875A5F1BAB3}]
2007-12-08 08:55 83456 --a------ c:\windows\system32\d3dxofq.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A78325AE-B2E4-41AA-B315-A31862528429}]
2006-10-18 21:47 84992 --a------ C:\WINDOWS\system32\audiodevo.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]
2007-11-22 21:35 1195360 --a------ C:\Programmer\Search Settings\kb125\SearchSettings.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nog8u4"="C:\WINDOWS\system32\nog8u4.exe" [2007-12-08 08:46]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-26 16:53]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="RUNDLL32.exe" [2004-08-26 16:53 C:\WINDOWS\system32\rundll32.exe]
"REGSHAVE"="C:\Programmer\REGSHAVE\REGSHAVE.exe" [2002-02-04 21:32]
"ASUS Probe"="C:\Program Files\ASUS\Probe\AsusProb.exe" [2002-12-06 16:07]
"PC Pitstop Optimize Scheduler"="C:\Programmer\PCPitstop\Optimize\PCPOptimize.exe" [2007-04-05 11:53]
"TotalRecorderScheduler"="C:\Programmer\HighCriteria\TotalRecorder\TotRecSched.exe" [2006-05-12 00:32]
"NeroFilterCheck"="C:\Programmer\Fælles filer\Ahead\Lib\NeroCheck.exe" []
"PCSuiteTrayApplication"="C:\Programmer\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 14:10]
"FLMOFFICE4DMOUSE"="C:\Programmer\Media Mouse\Muiltmedia.exe" [2007-11-22 06:04]
"iTunesHelper"="C:\Programmer\iTunes\iTunesHelper.exe" [2007-11-15 13:11]
"SearchSettings"="C:\Programmer\Search Settings\SearchSettings.exe" [2007-11-26 12:48]
"nog8u4"="C:\WINDOWS\system32\nog8u4.exe" [2007-12-08 08:46]
"SDTray"="C:\Programmer\Spyware Doctor\SDTrayApp.exe" [2007-11-02 17:24]
"Windows Defender"="C:\Programmer\Windows Defender\MSASCui.exe" [2006-11-03 19:20]
"spywarefighterguard"="C:\Programmer\SPYWAREfighter\spftray.exe" [2007-06-08 11:52]
"CaISSDT"="C:\Programmer\CA\eTrust Internet Security Suite\caissdt.exe" [2006-04-21 14:42]
"eTrustPPAP"="C:\Programmer\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe" [2007-12-08 14:55]
"a-squared"="C:\Programmer\a-squared Anti-Malware\a2guard.exe" [2007-08-31 20:24]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-26 16:53]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe" [2007-10-23 13:50]
"Nokia.PCSync"="C:\Programmer\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 09:17]
"Picasa Media Detector"="C:\Programmer\Picasa2\PicasaMediaDetector.exe" [2007-09-28 02:17]
C:\Documents and Settings\Claus Andersen\Menuen Start\Programmer\Start\
UltimateZip Quick Start.lnk - C:\Programmer\UltimateZip 2007\uzqkst.exe [2007-02-02 06:19:51]
C:\Documents and Settings\All Users\Menuen Start\Programmer\Start\
Adobe Acrobat Hurtigstart.lnk - C:\WINDOWS\Installer\{AC76BA86-1030-D700-7760-100000000002}\SC_Acrobat.exe [2006-12-21 18:44:25]
Adobe Gamma.lnk - C:\Programmer\F‘lles filer\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 20:16:50]
Free WebSite Tools.lnk - C:\Programmer\CoffeeCup Software\CoffeeCup Free FTP\ThirtyDayTimer.exe [2006-12-18 17:50:57]
Scanner Finder.lnk - C:\Programmer\ScanWizard 5\ScannerFinder.exe [2006-12-17 22:56:18]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoStartMenuPinnedList"= 0 (0x0)
"NoStartMenuMFUprogramsList"= 0 (0x0)
"NoUserNameInStartMenu"= 0 (0x0)
"NoStartMenuSubFolders"= 0 (0x0)
"NoCommonGroups"= 0 (0x0)
"NoRecentDocsMenu"= 0 (0x0)
"NoPrinterTabs"= 0 (0x0)
"NoDeletePrinter"= 0 (0x0)
"NoAddPrinter"= 0 (0x0)
"NoPrinters"= 0 (0x0)
"NoFavoritesMenu"= 0 (0x0)
"NoSetFolders"= 0 (0x0)
"NoShellSearchButton"= 0 (0x0)
"NoToolbarCustomize"= 0 (0x0)
"NoRecentDocsNetHood"= 0 (0x0)
"NoChangeAnimation"= 0 (0x0)
"NoChangeKeyboardNavigationIndicators"= 0 (0x0)
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Programmer\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 12:55 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Programmer\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 12:41 294912 C:\Programmer\SUPERAntiSpyware\SASWINLO.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menuen Start^Programmer^Start^Adobe Reader Hurtigstart.lnk]
backup=C:\WINDOWS\pss\Adobe Reader Hurtigstart.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menuen Start^Programmer^Start^WinZip Quick Pick.lnk]
backup=C:\WINDOWS\pss\WinZip Quick Pick.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2007-11-15 13:11 267048 --a------ C:\Programmer\iTunes\iTunesHelper.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TotalRecorderScheduler]
2006-05-12 00:32 86016 --a------ C:\Programmer\HighCriteria\TotalRecorder\TotRecSched.exe
R0 ofubutfn;ofubutfn;C:\WINDOWS\system32\drivers\kbjfykrg.dat
R3 TNET1130;802.11 WLAN;C:\WINDOWS\system32\DRIVERS\TNET1130.sys
S3 APLMp50;APLMp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\APLMp50.sys
S3 motmodem;Motorola USB CDC ACM Driver;C:\WINDOWS\system32\DRIVERS\motmodem.sys
S3 NPF;NetGroup Packet Filter Driver;C:\WINDOWS\system32\drivers\npf.sys
S3 SpyFighter;SpyFighter Guard Device;\??\C:\Programmer\SPYWAREfighter\spyfighter.sys
.
Contents of the 'Scheduled Tasks' folder
"2007-11-29 06:03:01 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Programmer\Apple Software Update\SoftwareUpdate.exe
"2007-12-09 05:04:27 C:\WINDOWS\Tasks\MP Scheduled Scan.job"
- C:\Programmer\Windows Defender\MpCmdRun.exe
"2007-12-09 05:01:19 C:\WINDOWS\Tasks\XoftSpySE 2.job"
- C:\Programmer\XoftSpySE\XoftSpy.exe
"2007-12-08 13:37:58 C:\WINDOWS\Tasks\XoftSpySE.job"
- C:\Programmer\XoftSpySE\XoftSpy.exe
.
**************************************************************************
catchme 0.3.1331 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2007-12-09 06:02:09
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2007-12-09 6:06:44 - machine was rebooted
.
--- E O F ---