Jag gjorde en scan:
DDS (Ver_09-09-29.01) - NTFSx86
Run by Tolle at 17:00:32,50 on 2009-09-29
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.46.1033.18.3071.1290 [GMT 2:00]
============== Running Processes ===============
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\SysWOW64\Ctxfihlp.exe
C:\Windows\SysWOW64\CTXFISPI.EXE
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Windows\ehome\ehRecvr.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS4\dreamweaver.exe
C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
c:\program files\windows defender\MpCmdRun.exe
C:\Users\Tolle\Desktop\dds.scr
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
============== Pseudo HJT Report ===============
mLocal Page = c:\windows\syswow64\blank.htm
mWinlogon: Userinit=userinit.exe
BHO: D: {0160f9e6-5b25-34a2-81f1-1a25f5defb09} - c:\windows\syswow64\xwr60722.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files (x86)\askbardis\bar\bin\askBar.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files (x86)\common files\microsoft shared\windows live\WindowsLiveLogin.dll
TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files (x86)\askbardis\bar\bin\askBar.dll
uRun: [msnmsgr] "c:\program files (x86)\windows live\messenger\msnmsgr.exe" /background
uRun: [sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [uTorrent] "c:\program files (x86)\utorrent\uTorrent.exe"
mRun: [avast!] "c:\program files\alwil software\avast4\ashDisp.exe"
mRun: [CTxfiHlp] CTXFIHLP.EXE
mRun: [Adobe Reader Speed Launcher] "c:\program files (x86)\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [AdobeCS4ServiceManager] "c:\program files (x86)\common files\adobe\cs4servicemanager\CS4ServiceManager.exe" -launchedbylogin
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-explorer: ForceActiveDesktopOn = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xportera till Microsoft Excel - c:\progra~2\micros~1\office12\EXCEL.EXE/3000
IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\windows\windowsmobile\INetRepl.dll
IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\windows\windowsmobile\INetRepl.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~2\micros~1\office12\REFIEBAR.DLL
DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} - hxxp://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1250371452405
DPF: {6D2EF4B4-CB62-4C0B-85F3-B79C236D702C} - hxxp://www.facebook.com/controls/contactx.dll
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
================= FIREFOX ===================
FF - ProfilePath - c:\users\tolle\appdata\roaming\mozilla\firefox\profiles\oh9hrebt.default\
FF - prefs.js: browser.startup.homepage - hxxp://go.microsoft.com/fwlink/?LinkId=69157
FF - plugin: c:\program files (x86)\microsoft\office live\npOLW.dll
FF - plugin: c:\program files (x86)\win7codecs\rm\browser\plugins\nppl3260.dll
FF - plugin: c:\program files (x86)\win7codecs\rm\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files (x86)\windows live\photo gallery\NPWLPG.dll
---- FIREFOX POLICIES ----
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.visited_color", "#551A8B");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".se");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("browser.videoFeeds.handler", "ask");
============= SERVICES / DRIVERS ===============
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswsp.sys --> c:\windows\system32\drivers\aswSP.sys [?]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswfsblk.sys --> c:\windows\system32\drivers\aswFsBlk.sys [?]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswmonflt.sys --> c:\windows\system32\drivers\aswMonFlt.sys [?]
R3 camdrv42;Philips SPC 900NC PC Camera;c:\windows\system32\drivers\camdrv42.sys --> c:\windows\system32\drivers\camdrv42.sys [?]
R3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\system32\drivers\ct20xut.sys --> c:\windows\system32\drivers\CT20XUT.SYS [?]
R3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\system32\drivers\ctexfifx.sys --> c:\windows\system32\drivers\CTEXFIFX.SYS [?]
R3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\system32\drivers\cthwiut.sys --> c:\windows\system32\drivers\CTHWIUT.SYS [?]
S3 CT20XUT;CT20XUT;c:\windows\system32\drivers\ct20xut.sys --> c:\windows\system32\drivers\CT20XUT.SYS [?]
S3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\ctexfifx.sys --> c:\windows\system32\drivers\CTEXFIFX.SYS [?]
S3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\cthwiut.sys --> c:\windows\system32\drivers\CTHWIUT.SYS [?]
=============== Created Last 30 ================
2009-09-26 01:34 <DIR> --d----- c:\programdata\FLEXnet
2009-09-26 01:32 225,280 a------- c:\windows\system32\xwr60722.dll
2009-09-26 01:17 <DIR> --d----- c:\program files (x86)\common files\Macrovision Shared
2009-09-14 12:13 <DIR> --d----- C:\TokensBackup
2009-09-14 01:23 <DIR> --d----- c:\program files (x86)\Axife Mouse Recorder DEMO
2009-09-14 01:22 <DIR> --d----- c:\windows\system32\XPSViewer
2009-09-14 01:22 <DIR> --d----- c:\windows\system32\wbem\sv-SE
2009-09-14 01:22 <DIR> --d----- c:\windows\system32\sv
2009-09-14 01:22 <DIR> --d----- c:\windows\system32\drivers\sv-SE
2009-09-14 01:21 <DIR> --d----- c:\windows\sv-SE
2009-09-10 00:02 <DIR> --d----- c:\users\tolle\Resor
2009-09-04 23:41 <DIR> --d----- C:\TT
==================== Find3M ====================
2009-09-14 01:20 294,764 a------- c:\windows\inf\perflib\041d\perfi.dat
2009-09-14 01:20 294,764 a------- c:\windows\inf\perflib\041d\perfh.dat
2009-09-14 01:20 37,052 a------- c:\windows\inf\perflib\041d\perfd.dat
2009-09-14 01:20 37,052 a------- c:\windows\inf\perflib\041d\perfc.dat
2009-08-27 08:31 347,648 a------- c:\windows\apppatch\apppatch64\AcLayers.dll
2009-08-27 08:31 135,168 a------- c:\windows\apppatch\apppatch64\AcXtrnal.dll
2009-08-18 02:34 356,352 a------- c:\windows\system32\atipdlxx.dll
2009-08-18 02:34 274,432 a------- c:\windows\system32\Oemdspif.dll
2009-08-18 02:34 43,520 a------- c:\windows\system32\ati2edxx.dll
2009-08-18 02:31 2,469,888 a------- c:\windows\system32\atidxx32.dll
2009-08-18 02:20 3,105,280 a------- c:\windows\system32\atiumdag.dll
2009-08-18 02:11 11,650,560 a------- c:\windows\system32\atioglxx.dll
2009-08-18 02:05 2,868,736 a------- c:\windows\system32\atiumdva.dll
2009-08-18 01:52 51,712 a------- c:\windows\system32\atimpc32.dll
2009-08-18 01:52 51,712 a------- c:\windows\system32\amdpcom32.dll
2009-08-18 01:52 184,320 a------- c:\windows\system32\atiadlxy.dll
2009-08-18 01:49 53,248 a------- c:\windows\system32\aticalrt.dll
2009-08-18 01:49 53,248 a------- c:\windows\system32\aticalcl.dll
2009-08-18 01:48 3,264,512 a------- c:\windows\system32\aticaldd.dll
2009-08-15 01:21 444,952 a------- c:\windows\system32\wrap_oal.dll
2009-08-15 01:21 109,080 a------- c:\windows\system32\OpenAL32.dll
2009-08-15 00:59 319,488 a------- c:\windows\HideWin.exe
2009-08-15 00:46 323,104 a------- c:\windows\AlcRmv64.exe
2009-08-15 00:46 524,288 a------- c:\windows\RtlExUpd.dll
2009-08-15 00:46 475,648 a------- c:\windows\AlcUpd64.exe
2009-07-14 07:37 291,294 a------- c:\windows\inf\perflib\0409\perfi.dat
2009-07-14 07:37 291,294 a------- c:\windows\inf\perflib\0409\perfh.dat
2009-07-14 07:37 31,548 a------- c:\windows\inf\perflib\0409\perfd.dat
2009-07-14 07:37 31,548 a------- c:\windows\inf\perflib\0409\perfc.dat
2009-07-14 06:54 174 a--sh--- c:\program files (x86)\desktop.ini
2009-07-14 03:40 52,736 a------- c:\windows\apppatch\apppatch64\apihex64.dll
2009-07-14 03:40 309,248 a------- c:\windows\apppatch\apppatch64\AcGenral.dll
2009-07-14 03:40 111,104 a------- c:\windows\apppatch\apppatch64\acspecfc.dll
2009-07-14 03:39 10,240 a------- c:\windows\write.exe
2009-07-14 03:39 61,952 a------- c:\windows\splwow64.exe
2009-07-14 03:39 427,008 a------- c:\windows\regedit.exe
2009-07-14 03:39 193,536 a------- c:\windows\notepad.exe
2009-07-14 03:39 733,696 a------- c:\windows\HelpPane.exe
2009-07-14 03:39 16,896 a------- c:\windows\hh.exe
2009-07-14 03:39 2,868,224 a------- c:\windows\explorer.exe
2009-07-14 03:39 15,360 a------- c:\windows\fveupdate.exe
2009-07-14 03:38 71,168 a------- c:\windows\bfsvc.exe
2009-07-14 03:26 21,584 a------- c:\windows\system32\BOOTVID.DLL
2009-07-14 03:23 5,070,848 a------- c:\windows\system32\AuthFWSnapin.dll
2009-07-14 03:22 107,008 a------- c:\windows\system32\NAPHLPR.DLL
2009-07-14 03:22 46,080 a------- c:\windows\system32\NAPCRYPT.DLL
2009-07-14 03:20 3,954,768 a------- c:\windows\system32\ntkrnlpa.exe
2009-07-14 03:20 3,899,472 a------- c:\windows\system32\ntoskrnl.exe
2009-07-14 03:20 91,728 a------- c:\windows\system32\MigAutoPlay.exe
2009-07-14 03:20 126,976 a------- c:\windows\system32\AuthFWWizFwk.dll
2009-07-14 03:19 52,816 a------- c:\windows\system32\PSHED.DLL
2009-07-14 03:17 249,680 a------- c:\windows\system32\bcryptprimitives.dll
2009-07-14 03:17 242,936 a------- c:\windows\system32\rsaenh.dll
2009-07-14 03:17 156,728 a------- c:\windows\system32\dssenh.dll
2009-07-14 03:17 102,448 a------- c:\windows\system32\wbem\Win32_Tpm.dll
2009-07-14 03:17 1,289,712 a------- c:\windows\system32\ntdll.dll
2009-07-14 03:17 143,936 a------- c:\windows\system32\basecsp.dll
2009-07-14 03:15 1,386,496 a------- c:\windows\system32\msxml6.dll
2009-07-14 03:14 171,520 a------- c:\windows\system32\BioCredProv.dll
2009-07-14 03:11 54,272 a------- c:\windows\system32\WsmRes.dll
2009-07-14 03:10 2,560 a------- c:\windows\system32\uxlibres.dll
2009-07-14 03:10 1,164,800 a------- c:\windows\system32\UIRibbonRes.dll
2009-07-14 03:10 2,048 a------- c:\windows\system32\tzres.dll
2009-07-14 03:10 108,544 a------- c:\windows\system32\tapiui.dll
2009-07-14 03:10 7,168 a------- c:\windows\system32\spwizres.dll
2009-07-14 03:10 8,338,432 a------- c:\windows\system32\spwizimg.dll
2009-07-14 03:10 2,560 a------- c:\windows\system32\sfc.dll
2009-07-14 03:10 68,608 a------- c:\windows\system32\nlsbres.dll
2009-07-14 03:08 6,917,120 a------- c:\windows\system32\NlsLexicons0c1a.dll
2009-07-14 03:07 18,944 a------- c:\windows\system32\netevent.dll
2009-07-14 03:07 2,048 a------- c:\windows\system32\netmsg.dll
2009-07-14 03:07 2,048 a------- c:\windows\system32\neth.dll
2009-07-14 03:07 2,048 a------- c:\windows\system32\msxml6r.dll
2009-07-14 03:07 2,048 a------- c:\windows\system32\msxml3r.dll
2009-07-14 03:07 60,928 a------- c:\windows\system32\msvcrt40.dll
2009-07-14 03:07 268,800 a------- c:\windows\system32\msshavmsg.dll
2009-07-14 03:07 8,192 a------- c:\windows\system32\msorc32r.dll
2009-07-14 03:07 60,416 a------- c:\windows\system32\msobjs.dll
2009-07-14 03:07 25,088 a------- c:\windows\system32\msimsg.dll
2009-07-14 03:07 4,608 a------- c:\windows\system32\msidntld.dll
2009-07-14 03:05 3,072 a------- c:\windows\system32\icmp.dll
2009-07-14 03:05 4,240,384 a------- c:\windows\system32\GameUXLegacyGDFs.dll
2009-07-14 03:05 925,184 a------- c:\windows\system32\FXSRESM.dll
2009-07-14 03:04 2,560 a------- c:\windows\system32\dpnlobby.dll
2009-07-14 03:04 2,048 a------- c:\windows\system32\dpnaddr.dll
2009-07-14 03:04 372,224 a------- c:\windows\system32\dmdskres.dll
2009-07-14 03:04 2,048 a------- c:\windows\system32\dmdskres2.dll
2009-07-14 03:04 1,297,408 a------- c:\windows\system32\comres.dll
2009-07-14 03:04 514,048 a------- c:\windows\system32\shellstyle.dll
2009-07-14 03:00 291,294 a------- c:\windows\inf\perflib\0000\perfi.dat
2009-07-14 03:00 291,294 a------- c:\windows\inf\perflib\0000\perfh.dat
2009-07-14 03:00 31,548 a------- c:\windows\inf\perflib\0000\perfd.dat
2009-07-14 03:00 31,548 a------- c:\windows\inf\perflib\0000\perfc.dat
2009-07-14 01:25 293,888 a------- c:\windows\system32\atmfd.dll
2009-07-14 01:16 14,336 a------- c:\windows\system32\wowreg32.exe
2009-07-14 01:16 7,680 a------- c:\windows\system32\instnm.exe
2009-07-14 01:15 2,048 a------- c:\windows\system32\user.exe
2009-07-14 01:15 25,088 a------- c:\windows\system32\mode.com
2009-07-14 01:15 16,384 a------- c:\windows\system32\tree.com
2009-07-14 01:15:17 A------- 20,992 c:\windows\system32\more.com
2009-06-10 22:44 9,633,792 a--shr-- c:\windows\fonts\StaticCache.dat
============= FINISH: 17:04:04,72 ===============
Attach.zip