ComboFix 10-12-16.05 - NAVN 18.12.2010 0:18.9.1 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.47.1033.18.2047.1376 [GMT 1:00] Kjører fra: c:\users\NAVN\Desktop\ComboFix.exe SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ((((((((((((((((((((((((((( Filer Opprettet Fra 2010-11-17 til 2010-12-17 ))))))))))))))))))))))))))))))))) . 2010-12-17 23:24 . 2010-12-17 23:24 -------- d-----w- c:\users\NAVN\AppData\Local\temp 2010-12-17 23:24 . 2010-12-17 23:24 -------- d-----w- c:\users\Public\AppData\Local\temp 2010-12-17 23:24 . 2010-12-17 23:24 -------- d-----w- c:\users\Default\AppData\Local\temp 2010-12-17 18:14 . 2010-12-17 18:14 -------- d-----w- c:\program files\CCleaner 2010-12-17 15:06 . 2010-11-10 04:33 6273872 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{566B0F05-EDDE-4109-AEE7-A1D00A303CF8}\mpengine.dll 2010-12-17 15:04 . 2010-04-05 20:00 221568 ----a-w- c:\windows\system32\drivers\netio.sys 2010-12-16 15:03 . 2010-11-04 18:56 345600 ----a-w- c:\windows\system32\wmicmiplugin.dll 2010-12-16 15:03 . 2010-11-04 18:55 352768 ----a-w- c:\windows\system32\taskschd.dll 2010-12-16 15:03 . 2010-11-04 18:55 601600 ----a-w- c:\windows\system32\schedsvc.dll 2010-12-16 15:03 . 2010-11-04 18:55 270336 ----a-w- c:\windows\system32\taskcomp.dll 2010-12-16 15:03 . 2010-11-04 16:34 171520 ----a-w- c:\windows\system32\taskeng.exe 2010-12-16 15:03 . 2010-10-28 13:20 2048 ----a-w- c:\windows\system32\tzres.dll 2010-12-16 15:03 . 2010-10-28 13:27 292352 ----a-w- c:\windows\system32\atmfd.dll 2010-12-16 15:03 . 2010-10-28 15:44 34304 ----a-w- c:\windows\system32\atmlib.dll 2010-12-16 15:03 . 2010-06-16 15:30 72704 ----a-w- c:\windows\system32\fontsub.dll 2010-12-16 15:03 . 2010-10-18 13:37 81920 ----a-w- c:\windows\system32\consent.exe 2010-12-16 15:03 . 2010-11-03 10:51 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat 2010-12-16 15:01 . 2010-05-04 19:13 231424 ----a-w- c:\windows\system32\msshsq.dll 2010-12-12 15:00 . 2010-12-12 15:00 -------- d-----w- c:\program files\Common Files\Java 2010-12-12 15:00 . 2010-12-16 15:06 -------- d-----w- c:\program files\Java 2010-12-12 14:53 . 2010-12-12 14:53 -------- d-----w- c:\users\NAVN\AppData\Local\Richard_Wang 2010-12-12 14:50 . 2010-12-12 14:50 -------- d-----w- c:\users\NAVN\AppData\Roaming\Titanium 2010-12-12 14:48 . 2010-12-12 14:49 -------- d-----w- c:\programdata\Titanium 2010-12-12 14:48 . 2010-12-12 14:48 -------- d-----w- c:\program files\wunderlist 2010-12-11 15:03 . 2010-12-12 14:50 -------- d-----w- c:\users\NAVN\AppData\Local\Apple Computer 2010-12-11 15:03 . 2010-12-12 14:50 -------- d-----w- c:\users\NAVN\AppData\Roaming\Apple Computer 2010-12-11 15:02 . 2009-05-18 12:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys 2010-12-11 15:02 . 2008-04-17 11:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll 2010-12-11 15:02 . 2010-12-11 15:02 -------- dc----w- c:\windows\system32\DRVSTORE 2010-12-11 15:01 . 2010-12-11 15:01 -------- d-----w- c:\program files\iPod 2010-12-11 15:01 . 2010-12-11 15:02 -------- d-----w- c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521} 2010-12-11 15:01 . 2010-12-11 15:02 -------- d-----w- c:\program files\iTunes 2010-12-11 15:00 . 2010-12-11 15:00 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll 2010-12-11 15:00 . 2010-12-11 15:00 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll 2010-12-11 15:00 . 2010-12-11 15:00 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll 2010-12-11 15:00 . 2010-12-11 15:00 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll 2010-12-11 15:00 . 2010-12-11 15:00 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll 2010-12-11 15:00 . 2010-12-11 15:00 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll 2010-12-11 15:00 . 2010-12-11 15:00 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll 2010-12-11 15:00 . 2010-12-11 15:00 -------- d-----w- c:\program files\QuickTime 2010-12-11 15:00 . 2010-12-11 15:01 -------- d-----w- c:\programdata\Apple Computer 2010-12-11 14:59 . 2010-12-11 14:59 -------- d-----w- c:\users\NAVN\AppData\Local\Apple 2010-12-11 14:59 . 2010-12-11 14:59 -------- d-----w- c:\program files\Apple Software Update 2010-12-11 14:57 . 2010-12-11 14:57 -------- d-----w- c:\program files\Bonjour 2010-12-11 14:57 . 2010-12-11 15:01 -------- d-----w- c:\program files\Common Files\Apple 2010-12-11 14:57 . 2010-12-11 14:57 -------- d-----w- c:\programdata\Apple 2010-12-08 19:26 . 2010-12-08 19:26 -------- d-----w- c:\program files\windroplr 2010-12-04 20:53 . 2010-12-04 23:13 -------- d-----w- c:\users\NAVN\AppData\Local\SugarSync 2010-12-04 20:52 . 2010-12-04 20:52 -------- d-----w- c:\program files\SugarSync 2010-12-04 13:08 . 2010-12-04 13:08 -------- d-----w- c:\users\NAVN\AppData\Roaming\gtk-2.0 2010-12-01 20:37 . 2010-12-01 21:37 -------- d-----w- c:\users\NAVN\AppData\Roaming\Dropbox 2010-11-29 15:29 . 2010-11-29 20:26 -------- d-----w- c:\program files\Common Files\Steam 2010-11-29 15:29 . 2010-12-17 23:10 -------- d-----w- c:\program files\Steam 2010-11-27 16:51 . 2010-11-27 16:51 -------- d-----w- c:\users\NAVN\AppData\Local\Evernote 2010-11-27 16:51 . 2010-12-08 20:49 -------- d-----w- c:\program files\Evernote 2010-11-27 14:30 . 2010-11-12 17:53 472808 ----a-w- c:\windows\system32\deployJava1.dll 2010-11-27 14:22 . 2010-11-27 14:22 -------- d-----w- c:\users\NAVN\AppData\Local\Mozilla 2010-11-26 15:25 . 2010-11-26 15:25 -------- d-----w- c:\users\NAVN\AppData\Roaming\AVG10 2010-11-26 15:25 . 2010-11-26 15:25 -------- d--h--w- c:\programdata\Common Files 2010-11-26 15:23 . 2010-11-26 15:45 -------- d-----w- c:\programdata\AVG10 2010-11-26 15:20 . 2010-11-26 15:23 -------- d-----w- c:\programdata\MFAData 2010-11-25 20:37 . 2010-12-08 17:36 -------- d-----w- c:\users\NAVN\AppData\Local\Adobe 2010-11-25 20:31 . 2010-11-25 20:31 -------- d-----w- c:\users\NAVN\AppData\Local\BiasedBit 2010-11-25 20:18 . 2010-11-25 20:36 -------- d-----w- c:\program files\VS Revo Group 2010-11-25 20:08 . 2010-12-04 13:10 -------- d-----w- c:\users\NAVN\AppData\Roaming\.purple 2010-11-25 20:08 . 2010-11-25 20:08 -------- d-----w- c:\program files\Pidgin 2010-11-25 20:07 . 2010-11-25 20:22 -------- d-----w- c:\users\NAVN\AppData\Roaming\Notepad++ 2010-11-25 20:07 . 2010-11-25 20:22 -------- d-----w- c:\program files\Notepad++ 2010-11-23 20:46 . 2010-12-17 20:43 -------- d-----w- c:\programdata\Spybot - Search & Destroy 2010-11-23 20:46 . 2010-11-23 22:00 -------- d-----w- c:\program files\Spybot - Search & Destroy 2010-11-23 20:35 . 2010-11-23 20:35 -------- d-----w- c:\users\NAVN\AppData\Roaming\SUPERAntiSpyware.com 2010-11-23 20:34 . 2010-11-23 20:35 -------- d-----w- c:\program files\SUPERAntiSpyware 2010-11-23 19:08 . 2010-10-19 04:27 7680 ----a-w- c:\program files\Internet Explorer\iecompat.dll . (((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-11-29 16:42 . 2010-10-21 15:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-11-29 16:42 . 2010-10-21 15:09 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-10-19 09:41 . 2010-10-14 18:05 222080 ------w- c:\windows\system32\MpSigStub.exe 2010-10-15 09:43 . 2006-11-02 10:32 101888 ----a-w- c:\windows\system32\ifxcardm.dll 2010-10-15 09:43 . 2006-11-02 10:32 82432 ----a-w- c:\windows\system32\axaltocm.dll 2010-10-14 23:13 . 2010-10-14 23:13 377344 ----a-w- c:\windows\system32\winhttp.dll 2010-10-14 23:12 . 2010-10-14 23:12 36864 ----a-w- c:\windows\system32\drivers\en-US\http.sys.mui 2010-10-14 23:10 . 2010-10-14 23:10 37888 ----a-w- c:\windows\system32\printcom.dll 2010-10-14 23:09 . 2010-10-14 23:09 14848 ----a-w- c:\windows\system32\wshrm.dll 2010-10-14 23:09 . 2010-10-14 23:09 43520 ----a-w- c:\windows\system32\msdxm.tlb 2010-10-14 23:09 . 2010-10-14 23:09 313344 ----a-w- c:\windows\system32\wmpdxm.dll 2010-10-14 23:09 . 2010-10-14 23:09 18432 ----a-w- c:\windows\system32\amcompat.tlb 2010-10-14 23:08 . 2010-10-14 23:08 7680 ----a-w- c:\windows\system32\spwmp.dll 2010-10-14 23:08 . 2010-10-14 23:08 4096 ----a-w- c:\windows\system32\dxmasf.dll 2010-10-14 23:08 . 2010-10-14 23:08 4096 ----a-w- c:\windows\system32\msdxm.ocx 2010-10-14 22:13 . 2010-10-14 22:13 23552 ----a-w- c:\windows\system32\lpk.dll 2010-10-14 22:13 . 2010-10-14 22:13 10240 ----a-w- c:\windows\system32\dciman32.dll 2010-10-14 22:07 . 2010-10-14 22:07 61440 ----a-w- c:\windows\system32\winipsec.dll 2010-10-14 22:07 . 2010-10-14 22:07 272896 ----a-w- c:\windows\system32\polstore.dll 2010-10-14 21:59 . 2010-10-14 21:59 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE 2010-10-14 21:59 . 2010-10-14 21:59 11264 ----a-w- c:\windows\system32\MRINFO.EXE 2010-10-14 21:59 . 2010-10-14 21:59 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE 2010-10-14 21:59 . 2010-10-14 21:59 27136 ----a-w- c:\windows\system32\NETSTAT.EXE 2010-10-14 21:59 . 2010-10-14 21:59 105984 ----a-w- c:\windows\system32\netiohlp.dll 2010-10-14 21:59 . 2010-10-14 21:59 10240 ----a-w- c:\windows\system32\finger.exe 2010-10-14 21:59 . 2010-10-14 21:59 19968 ----a-w- c:\windows\system32\ARP.EXE 2010-10-14 21:59 . 2010-10-14 21:59 17920 ----a-w- c:\windows\system32\ROUTE.EXE 2010-10-14 21:55 . 2010-10-14 21:55 127488 ----a-w- c:\windows\system32\L2SecHC.dll 2010-10-14 21:55 . 2010-10-14 21:55 68096 ----a-w- c:\windows\system32\wlanhlp.dll 2010-10-14 21:55 . 2010-10-14 21:55 65024 ----a-w- c:\windows\system32\wlanapi.dll 2010-10-14 21:55 . 2010-10-14 21:55 513536 ----a-w- c:\windows\system32\wlansvc.dll 2010-10-14 21:55 . 2010-10-14 21:55 302592 ----a-w- c:\windows\system32\wlansec.dll 2010-10-14 21:55 . 2010-10-14 21:55 293376 ----a-w- c:\windows\system32\wlanmsm.dll 2010-10-14 21:55 . 2010-10-14 21:55 15181 ----a-w- c:\windows\system32\gatherWirelessInfo.vbs 2010-10-14 21:54 . 2010-10-14 21:54 1401856 ----a-w- c:\windows\system32\msxml6.dll 2010-10-14 21:54 . 2010-10-14 21:54 2048 ----a-w- c:\windows\system32\msxml3r.dll 2010-10-14 21:54 . 2010-10-14 21:54 2048 ----a-w- c:\windows\system32\msxml6r.dll 2010-10-14 21:52 . 2010-10-14 21:52 218624 ----a-w- c:\windows\system32\msv1_0.dll 2010-10-14 21:51 . 2010-10-14 21:51 79360 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys 2010-10-14 21:51 . 2010-10-14 21:51 212992 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys 2010-10-14 21:51 . 2010-10-14 21:51 106496 ----a-w- c:\windows\system32\drivers\mrxsmb.sys 2010-10-14 21:48 . 2010-10-14 21:48 2868224 ----a-w- c:\windows\system32\mf.dll 2010-10-14 21:48 . 2010-10-14 21:48 98816 ----a-w- c:\windows\system32\mfps.dll 2010-10-14 21:48 . 2010-10-14 21:48 53248 ----a-w- c:\windows\system32\rrinstaller.exe 2010-10-14 21:48 . 2010-10-14 21:48 24576 ----a-w- c:\windows\system32\mfpmp.exe 2010-10-14 21:48 . 2010-10-14 21:48 2048 ----a-w- c:\windows\system32\mferror.dll 2010-10-14 21:39 . 2010-10-14 21:39 71680 ----a-w- c:\windows\system32\atl.dll 2010-10-14 21:33 . 2010-10-14 21:33 160256 ----a-w- c:\windows\system32\wkssvc.dll 2010-10-14 21:32 . 2010-10-14 21:32 53248 ----a-w- c:\windows\system32\tsgqec.dll 2010-10-14 21:32 . 2010-10-14 21:32 2066432 ----a-w- c:\windows\system32\mstscax.dll 2010-10-14 21:32 . 2010-10-14 21:32 136192 ----a-w- c:\windows\system32\aaclient.dll 2010-10-14 21:28 . 2010-10-14 21:28 714240 ----a-w- c:\windows\system32\timedate.cpl 2010-10-14 21:22 . 2010-10-14 21:22 69632 ----a-w- c:\windows\system32\Mpeg2Data.ax 2010-10-14 21:18 . 2010-10-14 21:18 623616 ----a-w- c:\windows\system32\localspl.dll 2010-10-14 21:14 . 2010-10-14 21:14 499712 ----a-w- c:\windows\system32\kerberos.dll 2010-10-14 21:14 . 2010-10-14 21:14 439864 ----a-w- c:\windows\system32\drivers\ksecdd.sys 2010-10-14 21:14 . 2010-10-14 21:14 175104 ----a-w- c:\windows\system32\wdigest.dll 2010-10-14 21:14 . 2010-10-14 21:14 9728 ----a-w- c:\windows\system32\lsass.exe 2010-10-14 21:14 . 2010-10-14 21:14 72704 ----a-w- c:\windows\system32\secur32.dll 2010-10-14 21:14 . 2010-10-14 21:14 1259008 ----a-w- c:\windows\system32\lsasrv.dll 2010-10-14 21:11 . 2010-10-14 21:11 1793536 ----a-w- c:\windows\system32\NlsLexicons0045.dll 2010-10-14 21:11 . 2010-10-14 21:11 1808896 ----a-w- c:\windows\system32\NlsLexicons0046.dll 2010-10-14 21:11 . 2010-10-14 21:11 1558016 ----a-w- c:\windows\system32\NlsLexicons0049.dll 2010-10-14 21:11 . 2010-10-14 21:11 1411072 ----a-w- c:\windows\system32\NlsLexicons0047.dll 2010-10-14 21:11 . 2010-10-14 21:11 1236992 ----a-w- c:\windows\system32\NlsLexicons0020.dll 2010-10-14 21:11 . 2010-10-14 21:11 1782272 ----a-w- c:\windows\system32\NlsLexicons0039.dll 2010-10-14 21:11 . 2010-10-14 21:11 7964672 ----a-w- c:\windows\system32\NlsLexicons0024.dll 2010-10-14 21:11 . 2010-10-14 21:11 5499904 ----a-w- c:\windows\system32\NlsLexicons0022.dll 2010-10-14 21:11 . 2010-10-14 21:11 2136064 ----a-w- c:\windows\system32\NlsLexicons0021.dll 2010-10-14 21:11 . 2010-10-14 21:11 6224896 ----a-w- c:\windows\system32\NlsLexicons0027.dll 2010-10-14 21:11 . 2010-10-14 21:11 5791232 ----a-w- c:\windows\system32\NlsLexicons0026.dll 2010-10-14 21:11 . 2010-10-14 21:11 4175872 ----a-w- c:\windows\system32\NlsLexicons0010.dll 2010-10-14 21:11 . 2010-10-14 21:11 4981248 ----a-w- c:\windows\system32\NlsLexicons0013.dll 2010-10-14 21:11 . 2010-10-14 21:11 3331072 ----a-w- c:\windows\system32\NlsLexicons0018.dll 2010-10-14 21:11 . 2010-10-14 21:11 2466816 ----a-w- c:\windows\system32\NlsLexicons0011.dll 2010-10-14 21:11 . 2010-10-14 21:11 6781440 ----a-w- c:\windows\system32\NlsLexicons0019.dll 2010-10-14 21:11 . 2010-10-14 21:11 11722752 ----a-w- c:\windows\system32\NlsLexicons0001.dll 2010-10-14 21:11 . 2010-10-14 21:11 4164096 ----a-w- c:\windows\system32\NlsLexicons0002.dll 2010-10-14 21:11 . 2010-10-14 21:11 1452544 ----a-w- c:\windows\system32\NlsLexicons0003.dll 2010-10-14 21:11 . 2010-10-14 21:11 4093440 ----a-w- c:\windows\system32\NlsLexicons004c.dll 2010-10-14 21:11 . 2010-10-14 21:11 3419136 ----a-w- c:\windows\system32\NlsLexicons004a.dll 2010-10-14 21:11 . 2010-10-14 21:11 1972736 ----a-w- c:\windows\system32\NlsLexicons004e.dll 2010-10-14 21:11 . 2010-10-14 21:11 1702912 ----a-w- c:\windows\system32\NlsLexicons004b.dll 2010-10-14 21:11 . 2010-10-14 21:11 6585856 ----a-w- c:\windows\system32\NlsLexicons001b.dll 2010-10-14 21:11 . 2010-10-14 21:11 6014976 ----a-w- c:\windows\system32\NlsLexicons001a.dll 2010-10-14 21:11 . 2010-10-14 21:11 4096 ----a-w- c:\windows\system32\NlsLexicons002a.dll 2010-10-14 21:11 . 2010-10-14 21:11 4045824 ----a-w- c:\windows\system32\NlsLexicons003e.dll 2010-10-14 21:11 . 2010-10-14 21:11 9892864 ----a-w- c:\windows\system32\NlsLexicons000a.dll 2010-10-14 21:11 . 2010-10-14 21:11 6346240 ----a-w- c:\windows\system32\NlsLexicons001d.dll 2010-10-14 21:11 . 2010-10-14 21:11 6237696 ----a-w- c:\windows\system32\NlsLexicons000c.dll 2010-10-14 21:11 . 2010-10-14 21:11 5654528 ----a-w- c:\windows\system32\NlsLexicons000f.dll 2010-10-14 21:11 . 2010-10-14 21:11 4616192 ----a-w- c:\windows\system32\NlsLexicons0414.dll 2010-10-14 21:11 . 2010-10-14 21:11 1722368 ----a-w- c:\windows\system32\NlsLexicons000d.dll 2010-10-14 21:11 . 2010-10-14 21:11 7042560 ----a-w- c:\windows\system32\NlsLexicons081a.dll 2010-10-14 21:11 . 2010-10-14 21:11 5090816 ----a-w- c:\windows\system32\NlsLexicons0416.dll 2010-10-14 21:11 . 2010-10-14 21:11 5031936 ----a-w- c:\windows\system32\NlsLexicons0816.dll 2010-10-14 21:11 . 2010-10-14 21:11 5071872 ----a-w- c:\windows\system32\NlsModels0011.dll 2010-10-14 21:11 . 2010-10-14 21:11 3104768 ----a-w- c:\windows\system32\NlsData0047.dll 2010-10-14 21:11 . 2010-10-14 21:11 3104768 ----a-w- c:\windows\system32\NlsData0046.dll 2010-10-14 21:11 . 2010-10-14 21:11 3104768 ----a-w- c:\windows\system32\NlsData0045.dll . (((((((((((((((((((((((((((((((( Oppstartspunkter I Registeret ))))))))))))))))))))))))))))))))))))))))))))) . . *Merk* tomme oppføringer & gyldige standardoppføringer vises ikke REGEDIT4 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncBackedUp] @="{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}" [HKEY_CLASSES_ROOT\CLSID\{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}] 2010-11-18 02:29 319488 ----a-w- c:\program files\SugarSync\SugarSyncShellExt.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncPending] @="{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}" [HKEY_CLASSES_ROOT\CLSID\{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}] 2010-11-18 02:29 319488 ----a-w- c:\program files\SugarSync\SugarSyncShellExt.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncRoot] @="{A759AFF6-5851-457D-A540-F4ECED148351}" [HKEY_CLASSES_ROOT\CLSID\{A759AFF6-5851-457D-A540-F4ECED148351}] 2010-11-18 02:29 319488 ----a-w- c:\program files\SugarSync\SugarSyncShellExt.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncShared] @="{1574C9EF-7D58-488F-B358-8B78C1538F51}" [HKEY_CLASSES_ROOT\CLSID\{1574C9EF-7D58-488F-B358-8B78C1538F51}] 2010-11-18 02:29 319488 ----a-w- c:\program files\SugarSync\SugarSyncShellExt.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-09-22 4240760] "Google Update"="c:\users\NAVN\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-10-28 136176] "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-10-25 2424560] "Steam"="c:\program files\Steam\steam.exe" [2010-11-29 1242448] "SugarSync"="c:\program files\SugarSync\SugarSyncManager.exe" [2010-11-18 14790656] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-09-08 421888] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-11-17 421160] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Evernote Clipper.lnk - c:\windows\Installer\{F761359C-9CED-45AE-9A51-9D6605CD55C4}\Evernote.ico [2010-11-27 293950] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504] S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872] S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010-05-10 67656] --- Andre tjenester/drivere lastet i minnet --- *Deregistered* - MpNWMon *Deregistered* - NisDrv [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache . . ------- Tilleggsskanning ------- . uInternet Settings,ProxyOverride = *.local IE: Add to Evernote 4.0 - c:\program files\Evernote\Evernote\EvernoteIE.dll/204 IE: {{A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://c:\program files\Evernote\Evernote\EvernoteIE.dll/204 . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-12-18 00:24 Windows 6.0.6002 Service Pack 2 NTFS skanner skjulte prosesser ... skanner skjulte autostart-oppføringer ... skanner skjulte filer ... skanning vellykket skjulte filer: 0 ************************************************************************** . Tidspunkt ferdig: 2010-12-18 00:27:02 ComboFix-quarantined-files.txt 2010-12-17 23:27 ComboFix2.txt 2010-12-17 22:37 Pre-Run: 43 952 439 296 bytes free Post-Run: 43 942 522 880 bytes free - - End Of File - - 3CDDF169990CB6656C2F630C480F7FBB