windows stifinder er holdt op med at fungere

Du har været det meste af 'pakken' igennem.

Ta' også denne ->

--------

Hent Malwarebytes Anti-Malware herfra:
http://www.besttechie.net/tools/mbam-setup.exe
Eller herfra ->
http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html

Installer programmet - når det er gjort skal du lade programmet opdatere sig. Herefter åbner et vindue, hvor du skal flytte prikken til "Kør et fuldstændigt systemscan" - klik på Skan Knappen - lad programmet arbejde. Når det er færdig (det tager lidt tid afhængig af hvor meget du har på computeren).
Derefter - Tryk på "Vis resultater" knappen efter scanningen - og herefter tryk på "Fjern det valgte" - nu åbnes log'en og du skal gemme den et sted, hvor du kan finde den igen.
Kopier indholdet herind sammen med en frisk log fra HiJackThis...

...og her er omtalte HiJackThis ->
http://www.spywareinfo.dk/index.htm#/manualer/hijackthis.htm

Bemærk at HiJackThis.exe programmet skal gemmes i en dertil oprettet mappe og IKKE køres direkte fra nettet...

PS: Brug denne version af HJT -> http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe

Mht.: Vista - HøjreMusseTast på *.EXE filen - Kør som Administrator...

------------------

Har du Nero installeret ?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:02:33, on 02-10-2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Windows\System32\rundll32.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\explorer.exe
C:\Windows\system32\WerFault.exe
C:\Users\Jonas Dyhr Bolvinkel\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Hjælp til tilmelding til Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\PROGRA~1\GOOGLE~1\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files\Sony\ISB Utility\ISBMgr.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Twain.dll Client's 32-Bit Thunking Serv] C:\Windows\system32\drivers\iexplore.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETVÆRKSTJENESTE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send billede til &Bluetooth-enhed... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Send siden til &Bluetooth-enhed... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour-tjeneste (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod-tjeneste (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NSUService - Sony Corporation - C:\Program Files\Sony\Network Utility\NSUService.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Windows\RtkAudioService.exe
O23 - Service: VAIO Media plus Content Importer (SOHCImp) - Sony Corporation - C:\Program Files\Sony\VAIO Media plus\SOHCImp.exe
O23 - Service: VAIO Media plus Digital Media Server (SOHDms) - Sony Corporation - C:\Program Files\Sony\VAIO Media plus\SOHDms.exe
O23 - Service: VAIO Media plus Device Searcher (SOHDs) - Sony Corporation - C:\Program Files\Sony\VAIO Media plus\SOHDs.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: VAIO Power Management - Sony Corporation - C:\Program Files\Sony\VAIO Power Management\SPMService.exe
O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 9484 bytes
Malwarebytes' Anti-Malware 1.41
Database version: 2893
Windows 6.0.6002 Service Pack 2

02-10-2009 16:50:29
mbam-log-2009-10-02 (16-50-29).txt

Skan type: Fuldstændig skanning (C:\|D:\|E:\|F:\|)
Objekter skannet: 264696
Tid tilbagelagt: 1 hour(s), 17 minute(s), 38 second(s)

Inficerede Hukommelses Processer: 0
Inficerede Hukommelses Moduler: 0
Inficerede Registeringsdatabase Nøgler: 0
Inficerede Registeringsdatabase Værdier: 1
Inficerede Registeringsdatabase Filer: 0
Inficerede Mapper: 0
Inficerede Filer: 0

Inficerede Hukommelses Processer:
(Ingen mistænkelige filer fundet)

Inficerede Hukommelses Moduler:
(Ingen mistænkelige filer fundet)

Inficerede Registeringsdatabase Nøgler:
(Ingen mistænkelige filer fundet)

Inficerede Registeringsdatabase Værdier:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Spooler SubSystem App (Backdoor.Bot) -> Quarantined and deleted successfully.

Inficerede Registeringsdatabase Filer:
(Ingen mistænkelige filer fundet)

Inficerede Mapper:
(Ingen mistænkelige filer fundet)

Inficerede Filer:
(Ingen mistænkelige filer fundet)

Tog en evighed :)

Håber du kan finde noget i ovenstående...

MAnge tak

@Sascha : Der har aldrig været Nero på maskinen :)

Ref.: http://www.bleepingcomputer.com/startups/iexplore.exe-20481.html

------------------------------------------------------------------------

Kør en scanning med Hijackthis,
Du får herunder nogle filer, som du skal fixe. Det, du skal gøre, er at sætte et flueben ud for disse filer. Når du har gjort det, så lukker du alle andre vinduer ned. Det er meget vigtigt at det eneste vindue, som er åbent er HijackThis vinduet. Husk også at lukke dette vindue, når du har markeret filerne. Nu må du fixe. Klik på Fix checked.

Det er disse, som skal fixes:

O4 - HKLM\..\Run: [Twain.dll Client's 32-Bit Thunking Serv] C:\Windows\system32\drivers\iexplore.exe

Genstart normalt...

------------------------------------------------------------------------

Manuelt SLET denne (hvis den findes):
C:\Windows\system32\drivers\iexplore.exe

------------------------------------------------------------------------

Hvordan kører PC'en så nu ?

godmorgen
Jeg har nu markeret den ene linie som beskrevet ovenover. Trykket på fix. Genstartet maskineriet.

Så har jeg gået ind og forsøgt at slette iexplore.exe. Det fik jeg ikke lov til. Jeg genstartede i safemode og fik den slettet via dos-prompt.

Efter genstart sker desværre det samme. Den åbner og genstarter ..

Jeg har efterfølgende kørt en HiJackThis - og den linie som blev fixet er væk ...

Håber virkelig du har andre ideer :)

Næste 'pakke' ->

-- Hent Combofix fra et af disse links, og gem den på dit skrivebord:

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://download.bleepingcomputer.com/sUBs/Beta/ComboFix.exe

NB: Du må ikke døbe den Combofix.exe, men eksempelvis BANAN.exe

-- Kør så combofix.exe (BANAN.exe), som du hentede tidligere, og følg anvisningerne.

Du bør ikke klikke på vinduet imens værktøjet kører, idet det kan få din computer til at fryse.
Når combofix er færdig, og efter det har genstartet, skulle der gerne åbnes en logfil: combofix.txt
Indholdet af denne fil må du gerne lægge herind...

ComboFix 09-10-01.05 -  03-10-2009 11:21.1.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium  6.0.6002.2.1252.45.1030.18.3038.1624 [GMT 2:00]
Kører fra: c:\users\Jonas Dyhr Bolvinkel\Desktop\banan.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((((((  Andet, der er slettet  )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-1876642850-3757800175-1317968407-500
c:\$recycle.bin\S-1-5-21-2350347867-4039504890-815605137-500
c:\windows\system32\404Fix.exe
c:\windows\system32\Agent.OMZ.Fix.exe
c:\windows\system32\dumphive.exe
c:\windows\system32\IEDFix.C.exe
c:\windows\system32\IEDFix.exe
c:\windows\system32\o4Patch.exe
c:\windows\system32\Process.exe
c:\windows\system32\SrchSTS.exe
c:\windows\system32\tmp.reg
c:\windows\system32\VACFix.exe
c:\windows\system32\VCCLSID.exe
c:\windows\system32\WS2Fix.exe

.
(((((((((((((((((((((((((((((  Filer skabt fra 2009-09-03 til 2009-10-03  )))))))))))))))))))))))))))))))))))
.

2009-10-03 09:28 . 2009-10-03 09:28    --------    d-----w-    c:\users\Jonas Dyhr Bolvinkel\AppData\Local\temp
2009-10-03 09:28 . 2009-10-03 09:28    --------    d-----w-    c:\users\Default\AppData\Local\temp
2009-10-03 05:43 . 2009-10-01 08:29    195440    ------w-    c:\windows\system32\MpSigStub.exe
2009-10-02 13:02 . 2009-09-10 12:54    38224    ----a-w-    c:\windows\system32\drivers\mbamswissarmy.sys
2009-10-02 13:02 . 2009-10-02 13:02    --------    d-----w-    c:\program files\Malwarebytes' Anti-Malware
2009-10-02 13:02 . 2009-09-10 12:53    19160    ----a-w-    c:\windows\system32\drivers\mbam.sys
2009-09-30 14:48 . 2009-09-30 14:49    --------    d-----w-    c:\windows\system32\ca-ES
2009-09-30 14:48 . 2009-09-30 14:49    --------    d-----w-    c:\windows\system32\eu-ES
2009-09-30 14:48 . 2009-09-30 14:49    --------    d-----w-    c:\windows\system32\vi-VN
2009-09-30 14:22 . 2009-04-11 05:03    12240896    ----a-w-    c:\windows\system32\NlsLexicons0007.dll
2009-09-30 14:22 . 2009-04-11 06:28    1081344    ----a-w-    c:\windows\system32\SLCExt.dll
2009-09-30 14:22 . 2009-04-11 06:27    3408896    ----a-w-    c:\windows\system32\SLsvc.exe
2009-09-30 14:22 . 2009-04-11 06:28    2134528    ----a-w-    c:\windows\system32\FunctionDiscoveryFolder.dll
2009-09-30 14:22 . 2009-04-11 06:27    65536    ----a-w-    c:\windows\system32\DevicePairingWizard.exe
2009-09-30 14:22 . 2009-04-11 05:03    2644480    ----a-w-    c:\windows\system32\NlsLexicons0009.dll
2009-09-30 14:20 . 2009-04-11 06:28    344064    ----a-w-    c:\windows\system32\msrd3x40.dll
2009-09-30 14:19 . 2009-04-11 06:28    342528    ----a-w-    c:\windows\system32\zipfldr.dll
2009-09-30 14:18 . 2009-04-11 06:28    83968    ----a-w-    c:\windows\system32\wbem\wmiutils.dll
2009-09-30 14:18 . 2009-04-11 06:28    744448    ----a-w-    c:\windows\system32\wbem\wbemcore.dll
2009-09-30 14:18 . 2009-04-11 06:28    30208    ----a-w-    c:\windows\system32\wbem\wbemprox.dll
2009-09-30 14:18 . 2009-04-11 06:28    265728    ----a-w-    c:\windows\system32\wbem\repdrvfs.dll
2009-09-30 14:18 . 2009-04-11 06:28    189440    ----a-w-    c:\windows\system32\wbem\mofd.dll
2009-09-30 14:18 . 2009-04-11 06:28    614912    ----a-w-    c:\windows\system32\wbem\fastprox.dll
2009-09-30 14:18 . 2009-04-11 06:28    265728    ----a-w-    c:\windows\system32\wbem\esscli.dll
2009-09-30 14:18 . 2009-04-11 06:28    705536    ----a-w-    c:\windows\system32\SmiEngine.dll
2009-09-30 14:18 . 2009-04-11 06:28    218624    ----a-w-    c:\windows\system32\wdscore.dll
2009-09-30 14:18 . 2009-04-11 06:27    130560    ----a-w-    c:\windows\system32\PkgMgr.exe
2009-09-30 14:18 . 2009-04-11 06:28    247808    ----a-w-    c:\windows\system32\drvstore.dll
2009-09-29 13:04 . 2009-09-29 13:04    --------    d-----w-    c:\windows\system32\EventProviders
2009-09-29 13:04 . 2009-09-30 13:18    --------    d-----w-    C:\2968b315fea69a95e9c1
2009-09-29 11:53 . 2009-09-29 11:53    --------    d-----w-    c:\programdata\Office Genuine Advantage
2009-09-21 23:22 . 2009-09-29 06:52    --------    d-----w-    c:\program files\BearShare
2009-09-21 22:30 . 2009-09-21 22:30    --------    d-----w-    C:\My Downloads
2009-09-21 22:29 . 2009-09-27 12:07    --------    d-----w-    c:\program files\BearShare Pro
2009-09-21 17:19 . 2009-05-18 12:17    26600    ----a-w-    c:\windows\system32\drivers\GEARAspiWDM.sys
2009-09-21 17:19 . 2008-04-17 11:12    107368    ----a-w-    c:\windows\system32\GEARAspi.dll
2009-09-21 17:18 . 2009-09-21 17:18    --------    d-----w-    c:\program files\iPod
2009-09-21 17:18 . 2009-09-21 17:19    --------    d-----w-    c:\programdata\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2009-09-21 17:18 . 2009-09-21 17:19    --------    d-----w-    c:\program files\iTunes
2009-09-21 17:14 . 2009-09-21 17:14    --------    d-----w-    c:\program files\QuickTime
2009-09-16 02:04 . 2009-09-16 02:04    --------    d-----w-    c:\users\Jonas Dyhr Bolvinkel\AppData\Roaming\vlc
2009-09-09 10:31 . 2009-04-11 04:54    2048    ----a-w-    c:\windows\system32\mferror.dll
2009-09-08 01:38 . 2009-09-08 01:38    --------    d-----w-    c:\programdata\WindowsSearch

.
((((((((((((((((((((((((((((((((((((((((  Find3M Rapport  ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-03 05:52 . 2008-08-08 03:43    12    ----a-w-    c:\windows\bthservsdp.dat
2009-10-02 07:49 . 2008-08-08 03:17    81292    ----a-w-    c:\windows\system32\perfc006.dat
2009-10-02 07:49 . 2008-08-08 03:17    467626    ----a-w-    c:\windows\system32\perfh006.dat
2009-10-02 06:50 . 2009-10-02 06:50    691    ----a-w-    c:\users\Jonas Dyhr Bolvinkel\AppData\Roaming\GetValue.vbs
2009-10-02 06:50 . 2009-10-02 06:50    35    ----a-w-    c:\users\Jonas Dyhr Bolvinkel\AppData\Roaming\SetValue.bat
2009-09-30 14:49 . 2006-11-02 12:37    --------    d-----w-    c:\program files\Windows Calendar
2009-09-30 14:49 . 2006-11-02 11:18    --------    d-----w-    c:\program files\Windows Mail
2009-09-30 14:49 . 2006-11-02 12:37    --------    d-----w-    c:\program files\Windows Sidebar
2009-09-30 14:49 . 2006-11-02 12:37    --------    d-----w-    c:\program files\Windows Photo Gallery
2009-09-30 14:49 . 2006-11-02 12:37    --------    d-----w-    c:\program files\Windows Journal
2009-09-30 14:49 . 2006-11-02 12:37    --------    d-----w-    c:\program files\Windows Defender
2009-09-30 14:49 . 2006-11-02 12:37    --------    d-----w-    c:\program files\Windows Collaboration
2009-09-30 13:35 . 2008-08-08 03:22    --------    d-----w-    c:\program files\Google
2009-09-30 13:18 . 2009-07-26 12:19    --------    d-----w-    c:\programdata\Spybot - Search & Destroy
2009-09-30 13:18 . 2009-07-26 12:19    --------    d-----w-    c:\program files\Spybot - Search & Destroy
2009-09-30 13:18 . 2008-08-08 05:19    --------    d-----w-    c:\programdata\FLEXnet
2009-09-30 13:18 . 2008-08-08 05:17    --------    d-----w-    c:\program files\Common Files\Adobe
2009-09-29 16:33 . 2009-07-08 14:22    2032    ----a-w-    c:\users\Jonas Dyhr Bolvinkel\AppData\Local\d3d9caps.dat
2009-09-29 16:14 . 2009-07-08 14:22    82520    ----a-w-    c:\users\Jonas Dyhr Bolvinkel\AppData\Local\GDIPFONTCACHEV1.DAT
2009-09-21 22:30 . 2008-08-20 16:05    2560    ----a-w-    c:\windows\system32\wiupdat.dll
2009-09-21 17:55 . 2009-08-05 17:20    --------    d-----w-    c:\users\Jonas Dyhr Bolvinkel\AppData\Roaming\Apple Computer
2009-09-21 17:18 . 2009-08-05 17:15    --------    d-----w-    c:\program files\Common Files\Apple
2009-09-15 10:59 . 2009-07-26 12:09    1279968    ----a-w-    c:\windows\system32\aswBoot.exe
2009-09-15 10:55 . 2009-07-26 12:10    114768    ----a-w-    c:\windows\system32\drivers\aswSP.sys
2009-09-15 10:55 . 2009-07-26 12:10    20560    ----a-w-    c:\windows\system32\drivers\aswFsBlk.sys
2009-09-15 10:55 . 2009-07-26 12:09    53328    ----a-w-    c:\windows\system32\drivers\aswMonFlt.sys
2009-09-15 10:54 . 2009-07-26 12:10    52368    ----a-w-    c:\windows\system32\drivers\aswTdi.sys
2009-09-15 10:54 . 2009-07-26 12:10    23152    ----a-w-    c:\windows\system32\drivers\aswRdr.sys
2009-09-15 10:53 . 2009-07-26 12:10    97480    ----a-w-    c:\windows\system32\AvastSS.scr
2009-09-02 19:34 . 2009-07-15 21:49    --------    d-----w-    c:\users\Jonas Dyhr Bolvinkel\AppData\Roaming\Ventrilo
2009-09-01 13:01 . 2008-08-08 05:20    --------    d-----w-    c:\program files\Java
2009-08-29 00:27 . 2009-09-02 21:08    4240384    ----a-w-    c:\windows\system32\GameUXLegacyGDFs.dll
2009-08-29 00:14 . 2009-09-02 21:08    28672    ----a-w-    c:\windows\system32\Apphlpdm.dll
2009-08-28 17:42 . 2009-08-28 17:42    40448    ----a-w-    c:\windows\system32\drivers\usbaapl.sys
2009-08-28 17:42 . 2009-08-28 17:42    2065696    ----a-w-    c:\windows\system32\usbaaplrc.dll
2009-08-20 02:24 . 2009-08-20 02:23    --------    d-----w-    c:\programdata\Blizzard Entertainment
2009-08-14 16:27 . 2009-09-09 10:32    904776    ----a-w-    c:\windows\system32\drivers\tcpip.sys
2009-08-14 15:53 . 2009-09-09 10:32    17920    ----a-w-    c:\windows\system32\netevent.dll
2009-08-14 13:49 . 2009-09-09 10:32    9728    ----a-w-    c:\windows\system32\TCPSVCS.EXE
2009-08-14 13:49 . 2009-09-09 10:32    11264    ----a-w-    c:\windows\system32\MRINFO.EXE
2009-08-14 13:49 . 2009-09-09 10:32    17920    ----a-w-    c:\windows\system32\ROUTE.EXE
2009-08-14 13:49 . 2009-09-09 10:32    27136    ----a-w-    c:\windows\system32\NETSTAT.EXE
2009-08-14 13:49 . 2009-09-09 10:32    8704    ----a-w-    c:\windows\system32\HOSTNAME.EXE
2009-08-14 13:49 . 2009-09-09 10:32    19968    ----a-w-    c:\windows\system32\ARP.EXE
2009-08-14 13:49 . 2009-09-09 10:32    10240    ----a-w-    c:\windows\system32\finger.exe
2009-08-14 13:48 . 2009-09-09 10:32    30720    ----a-w-    c:\windows\system32\drivers\tcpipreg.sys
2009-08-14 13:48 . 2009-09-09 10:32    105984    ----a-w-    c:\windows\system32\netiohlp.dll
2009-08-11 01:31 . 2008-08-24 17:14    --------    d-----w-    c:\program files\DivX
2009-08-11 01:30 . 2009-08-11 01:30    --------    d-----w-    c:\program files\Common Files\DivX Shared
2009-08-05 23:48 . 2008-08-08 05:20    --------    d-----w-    c:\programdata\Sony Corporation
2009-08-05 17:20 . 2009-08-05 17:19    --------    d-----w-    c:\programdata\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-08-05 17:19 . 2009-08-05 17:18    --------    d-----w-    c:\programdata\Apple Computer
2009-08-05 17:19 . 2009-08-05 17:19    --------    d-----w-    c:\program files\Bonjour
2009-08-05 17:17 . 2009-08-05 17:17    --------    d-----w-    c:\program files\Apple Software Update
2009-08-05 17:15 . 2009-08-05 17:15    --------    d-----w-    c:\programdata\Apple
2009-08-05 17:05 . 2009-08-05 17:05    --------    d-----w-    c:\program files\YouTube Downloader
2009-08-05 17:03 . 2009-08-05 17:03    --------    d-----w-    c:\program files\VideoLAN
2009-08-04 11:27 . 2009-08-04 11:27    --------    d-----w-    c:\programdata\Uniblue
2009-08-04 11:27 . 2009-08-04 11:27    --------    d-----w-    c:\users\Jonas Dyhr Bolvinkel\AppData\Roaming\Uniblue
2009-08-04 11:27 . 2009-08-04 11:27    --------    d-----w-    c:\program files\Uniblue
2009-08-03 13:07 . 2009-08-03 13:07    403816    ----a-w-    c:\windows\system32\OGACheckControl.dll
2009-08-03 13:07 . 2009-08-03 13:07    322928    ----a-w-    c:\windows\system32\OGAAddin.dll
2009-08-03 13:07 . 2009-08-03 13:07    230768    ----a-w-    c:\windows\system32\OGAEXEC.exe
2009-07-25 03:23 . 2009-07-26 12:22    411368    ----a-w-    c:\windows\system32\deploytk.dll
2009-07-21 21:52 . 2009-07-29 12:59    915456    ----a-w-    c:\windows\system32\wininet.dll
2009-07-21 21:47 . 2009-07-29 12:59    109056    ----a-w-    c:\windows\system32\iesysprep.dll
2009-07-21 21:47 . 2009-07-29 12:59    71680    ----a-w-    c:\windows\system32\iesetup.dll
2009-07-21 20:13 . 2009-07-29 12:59    133632    ----a-w-    c:\windows\system32\ieUnatt.exe
2009-07-17 13:54 . 2009-08-12 10:04    71680    ----a-w-    c:\windows\system32\atl.dll
2009-07-15 12:40 . 2009-08-12 10:04    8147456    ----a-w-    c:\windows\system32\wmploc.DLL
2009-07-15 12:39 . 2009-08-12 10:04    313344    ----a-w-    c:\windows\system32\wmpdxm.dll
2009-07-15 12:39 . 2009-08-12 10:04    4096    ----a-w-    c:\windows\system32\dxmasf.dll
2009-07-15 12:39 . 2009-08-12 10:04    7680    ----a-w-    c:\windows\system32\spwmp.dll
2009-07-11 19:01 . 2009-09-09 10:32    513536    ----a-w-    c:\windows\system32\wlansvc.dll
2009-07-11 19:01 . 2009-09-09 10:32    293376    ----a-w-    c:\windows\system32\wlanmsm.dll
2009-07-11 19:01 . 2009-09-09 10:32    302592    ----a-w-    c:\windows\system32\wlansec.dll
2009-07-11 19:01 . 2009-09-09 10:32    65024    ----a-w-    c:\windows\system32\wlanapi.dll
2009-07-11 17:03 . 2009-09-09 10:32    127488    ----a-w-    c:\windows\system32\L2SecHC.dll
.

(((((((((((((((((((((((((((((((((((  Start steder i reg.basen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Bemærk* tomme linier & lovlige standard linier vises ikke 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WindowsWelcomeCenter"="oobefldr.dll" - c:\windows\System32\oobefldr.dll [2009-04-11 2153472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"Apoint"="c:\program files\Apoint\Apoint.exe" [2008-02-23 122880]
"ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2008-04-04 317280]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-09-15 81000]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2008-07-18 6295552]
"Skytel"="Skytel.exe" - c:\windows\SkyTel.exe [2008-07-18 1826816]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-7-1 768552]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2008-07-16 01:04    98304    ----a-w-    c:\windows\System32\VESWinlogon.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Acrobat Speed Launcher.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk
backup=c:\windows\pss\Adobe Acrobat Speed Launcher.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Acrobat Synchronizer.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Acrobat Synchronizer.lnk
backup=c:\windows\pss\Adobe Acrobat Synchronizer.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"="0x00000000"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):08,f4,1d,1a,de,41,ca,01

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{02D9C080-6ABE-465C-AFBD-F36F89DB6978}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{096D50F2-2953-46FE-971F-383DC645BE9B}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{C4D54859-7456-44B1-901A-E919B0C474C1}"= Disabled:UDP:c:\program files\Adobe\Photoshop Elements 6.0\AdobePhotoshopElementsMediaServer.exe:Adobe Photoshop Elements Media Server
"{7B39A515-9F4E-47A2-A33F-5DA2790FAB58}"= Disabled:TCP:c:\program files\Adobe\Photoshop Elements 6.0\AdobePhotoshopElementsMediaServer.exe:Adobe Photoshop Elements Media Server
"{44EBA3BE-9A1C-46ED-B7B8-091C7BD58AF9}"= UDP:c:\program files\Google\Google Talk\googletalk.exe:Google Talk
"{3ACD2B6B-6682-4568-BB74-C147B38CE31D}"= TCP:c:\program files\Google\Google Talk\googletalk.exe:Google Talk
"{677B370B-5861-4B5A-A8A0-02C5C9663C12}"= UDP:c:\program files\Ventrilo\Ventrilo.exe:Ventrilo.exe
"{E848FB0E-6735-47BB-AE6C-2E7ED5F4432B}"= TCP:c:\program files\Ventrilo\Ventrilo.exe:Ventrilo.exe
"TCP Query User{F02D4D00-EAC1-4542-82F7-AF00FB8F848F}c:\\users\\public\\games\\world of warcraft\\backgrounddownloader.exe"= UDP:c:\users\public\games\world of warcraft\backgrounddownloader.exe:Blizzard Downloader
"UDP Query User{F3707B45-D470-4DAC-B2D7-5012EB2A5C71}c:\\users\\public\\games\\world of warcraft\\backgrounddownloader.exe"= TCP:c:\users\public\games\world of warcraft\backgrounddownloader.exe:Blizzard Downloader
"{5BD3FF66-EC19-4DC9-8C4A-8B950F2873D2}"= UDP:c:\users\Public\Documents\Blizzard Entertainment\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-enGB-downloader.exe:Blizzard Downloader
"{5D995B81-4FAD-4638-B5E8-180E35CD299E}"= TCP:c:\users\Public\Documents\Blizzard Entertainment\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-enGB-downloader.exe:Blizzard Downloader
"TCP Query User{EE851F01-0542-4D89-A0DD-1F69AC155CCA}c:\\users\\public\\games\\world of warcraft\\launcher.exe"= UDP:c:\users\public\games\world of warcraft\launcher.exe:Blizzard Launcher
"UDP Query User{660E9F50-C16D-47B8-A6DE-D1E4A9C94D29}c:\\users\\public\\games\\world of warcraft\\launcher.exe"= TCP:c:\users\public\games\world of warcraft\launcher.exe:Blizzard Launcher
"{619CB117-583B-4ED1-B3C1-AA342407DEE1}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{519F7310-42D0-4C82-A462-B1C0FA6AF51F}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{742624D8-099D-4E81-8CF0-5D05E84148DB}"= UDP:c:\users\Public\Documents\Blizzard Entertainment\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-enGB-downloader.exe:Blizzard Downloader
"{C07392E6-5B30-4AC6-A8BB-D301F4BED79E}"= TCP:c:\users\Public\Documents\Blizzard Entertainment\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-enGB-downloader.exe:Blizzard Downloader
"{6BFD7B28-352B-48F1-8447-B184E14728D0}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{33F0B219-47A0-42EB-A140-0540AF7CCB12}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"TCP Query User{6F5F71F5-DDBE-411C-97B8-49780183BF47}c:\\windows\\system32\\drivers\\iexplore.exe"= UDP:c:\windows\system32\drivers\iexplore.exe:iexplore
"UDP Query User{1F52ECA1-2A50-47EC-AB1B-1AA975AFA5EF}c:\\windows\\system32\\drivers\\iexplore.exe"= TCP:c:\windows\system32\drivers\iexplore.exe:iexplore
"TCP Query User{C6F151DC-A6BC-485B-B742-87FB9A941CCD}c:\\program files\\bearshare pro\\bearshare.exe"= UDP:c:\program files\bearshare pro\bearshare.exe:BearShare Pro
"UDP Query User{C742274C-CF9B-483B-8FDA-3DE778B174B3}c:\\program files\\bearshare pro\\bearshare.exe"= TCP:c:\program files\bearshare pro\bearshare.exe:BearShare Pro
"{2344F8D6-7DE7-441F-993C-B7056D7EA3D3}"= UDP:c:\users\Public\Documents\Blizzard Entertainment\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-enGB-downloader.exe:Blizzard Downloader
"{40E38963-379B-40EE-8E5D-C40A805A227B}"= TCP:c:\users\Public\Documents\Blizzard Entertainment\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-enGB-downloader.exe:Blizzard Downloader
"{5A3E709A-E7A5-4B43-8BA3-DE46427906CD}"= UDP:c:\users\Public\Documents\Blizzard Entertainment\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-enGB-downloader.exe:Blizzard Downloader
"{7359C605-3344-4723-947A-2CAE3448E629}"= TCP:c:\users\Public\Documents\Blizzard Entertainment\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-enGB-downloader.exe:Blizzard Downloader
"TCP Query User{92D1F554-8FFF-4000-87B5-2EC4002536E8}c:\\windows\\system32\\drivers\\iexplore.exe"= UDP:c:\windows\system32\drivers\iexplore.exe:iexplore
"UDP Query User{E262A72E-8D7B-483B-864B-E72172E1573C}c:\\windows\\system32\\drivers\\iexplore.exe"= TCP:c:\windows\system32\drivers\iexplore.exe:iexplore

R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [26-07-2009 14:10 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [26-07-2009 14:10 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [26-07-2009 14:09 53328]
R2 NSUService;NSUService;c:\program files\Sony\Network Utility\NSUService.exe [24-08-2008 19:42 299008]
R2 regi;regi;c:\windows\System32\drivers\regi.sys [18-04-2007 05:09 11032]
R2 RtkAudioService;Realtek Audio Service;c:\windows\RTKAUDIOSERVICE.EXE [08-08-2008 05:36 104992]
R2 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe [08-08-2008 07:22 411488]
R3 NETw5v32;Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit ;c:\windows\System32\drivers\NETw5v32.sys [28-04-2008 15:29 3658752]
R3 SFEP;Sony Firmware Extension Parser;c:\windows\System32\drivers\SFEP.sys [08-08-2008 05:10 9344]
S2 AdobeActiveFileMonitor6.0;Adobe Active File Monitor V6;c:\program files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [11-09-2007 09:45 124832]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\System32\drivers\btwl2cap.sys [08-08-2008 05:45 29736]
S3 SOHCImp;VAIO Media plus Content Importer;c:\program files\Sony\VAIO Media plus\SOHCImp.exe [24-08-2008 19:39 103712]
S3 SOHDms;VAIO Media plus Digital Media Server;c:\program files\Sony\VAIO Media plus\SOHDms.exe [24-08-2008 19:39 353568]
S3 SOHDs;VAIO Media plus Device Searcher;c:\program files\Sony\VAIO Media plus\SOHDs.exe [24-08-2008 19:39 62752]
S3 USBAAPL;Apple Mobile USB Driver;c:\windows\System32\drivers\usbaapl.sys [28-08-2009 19:42 40448]
S3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [24-08-2008 19:35 337184]
S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [24-08-2008 19:35 83232]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs    REG_MULTI_SZ      BthServ

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\System32\rundll32.exe" "c:\windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Indhold af mappen 'Planlagte Opgaver'
.
.
------- Yderligere scanning -------
.
uStart Page = hxxp://www.google.dk/
uInternet Settings,ProxyOverride = *.local
IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Send billede til &Bluetooth-enhed... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Send siden til &Bluetooth-enhed... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-03 11:28
Windows 6.0.6002 Service Pack 2 NTFS

scanner skjulte processer ... 

scanner skjulte autostarter ...

scanner skjulte filer ... 

scanning gennemført med succes
skjulte filer: 0

**************************************************************************
.
--------------------- LÅSTE REGISTRERINGS NØGLER ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b4
.
Gennemført tid: 2009-10-03 11:31
ComboFix-quarantined-files.txt  2009-10-03 09:31

Pre-Kørsel: 281.442.689.024 byte ledig
Post-Kørsel: 280.331.517.952 byte ledig

283    --- E O F ---    2009-10-03 05:43

Utroligt nok!!!!!!!!!!!!!!
Efter at have kørt det der program, så stoppede det? Tør jeg håbe på det er fixet?

Hvis ja... hvad i al verden var det?

Wolfcas

c:\program files\BearShare
c:\program files\BearShare Pro

Sådan går det let når man 'leger' med BEARSHARE - eller retterer reslutater derfra !!!
http://www.spywarefri.dk/forum/viewthread/40284/

Afinstall
* BEARSHARE

Det var det første jeg afinstallerede da jeg så den var der, men der må have ligget en rest et sted...

Tusind tak!!!!!

DU er jo imponerende!!! Virkelig af hjertet tak for hjælpen!!!

smider du et svar?

Wolfcas der er imponeret!!

*Rødme*

... det er ikke selv P2P programmet; men reslutater derfra som har 'drillet' !!!

Slet mapperne
c:\program files\BearShare
c:\program files\BearShare Pro

---

Ta' en oprydning med CCleaner...

---

Microsofts Vista:
1. Højreklik på >Computer >Egenskaber.
2. Klik på > Avancerede system indstillinger"> og vælg > System beskyttelses > fanen fra menuen.
3. Fjern fluebenet ved drev C og tryk OK.
4. Åben start menuen og søg på > Diskoprydning.
5. Vent på at diskoprydning får arbejdet færdig.
6. Klik på fanen > Flere indstillinger.
7. I feltet Systemgendannelse, klik på > Ryd op.
8. Luk nu vinduerne og genstart computeren.
9. Aktiver Systemgendannelse på samme måde du deaktiverede det.

Safe Surfing...