Please. please help!

I really really need help!
i know little what to do about this.
Can i reboot my computer without problems?
Files should be deleted, i figured that much out…


Logfile of HijackThis v1.99.1
Scan saved at 12:24:24, on 2005-05-29
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
C:\Program\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
C:\Program\Panda Software\Panda Antivirus Platinum\apvxdwin.exe
C:\Program\Panda Software\Panda Antivirus Platinum\pavProxy.exe
C:\Program\Delade filer\Real\Update_OB\realsched.exe
C:\Program\Ulead Systems\Ulead Photo Explorer 7.0\Monitor.exe
C:\Program\D-Tools\daemon.exe
C:\Program\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
C:\WINDOWS\atllv.exe
C:\Program\Messenger\msmsgs.exe
C:\Program\PANICW~1\SURECL~1\SRClean.exe
C:\Program\MSN Messenger\MsnMsgr.Exe
C:\Program\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
C:\WINDOWS\System32\svchost.exe
C:\Program\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program\Microsoft AntiSpyware\gcasServ.exe
C:\Program\Microsoft Office\Office10\WINWORD.EXE
C:\Program\Maxthon\Maxthon.exe
C:\Documents and Settings\Gunnar\Skrivbord\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\ixwbi.dll/sp.html#12047
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\ixwbi.dll/sp.html#12047
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\ixwbi.dll/sp.html#12047
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\ixwbi.dll/sp.html#12047
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\ixwbi.dll/sp.html#12047
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\ixwbi.dll/sp.html#12047
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\ixwbi.dll/sp.html#12047
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: GDS module - {A084A565-B09B-4e4c-A497-7CC50AEAB2A7} - C:\WINDOWS\gds.dll
O2 - BHO: Class - {FBFA0821-F15D-97FF-D52D-E906EAEA0F99} - C:\WINDOWS\sdkny.dll
O4 - HKLM\..\Run: [WinampAgent] C:\Program\Winamp\winampa.exe
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [TkBellExe] "C:\Program\Delade filer\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Ulead Memory Card Detector] C:\Program\Ulead Systems\Ulead Photo Explorer 7.0\Monitor.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program\D-Tools\daemon.exe" -lang 1033 -lock
O4 - HKLM\..\Run: [StatusClient] C:\Program\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup] C:\Program\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
O4 - HKLM\..\Run: [Maxthon.exe] C:\Program\Maxthon\Maxthon.exe
O4 - HKLM\..\Run: [atllv.exe] C:\WINDOWS\atllv.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\RunOnce: [sdkic32.exe] C:\WINDOWS\system32\sdkic32.exe
O4 - HKLM\..\RunOnce: [addhn32.exe] C:\WINDOWS\system32\addhn32.exe
O4 - HKLM\..\RunOnce: [apiup32.exe] C:\WINDOWS\apiup32.exe
O4 - HKLM\..\RunOnce: [msnl.exe] C:\WINDOWS\msnl.exe
O4 - HKLM\..\RunOnce: [ipsm32.exe] C:\WINDOWS\ipsm32.exe
O4 - HKLM\..\RunOnce: [adddx.exe] C:\WINDOWS\adddx.exe
O4 - HKLM\..\RunOnce: [apiow.exe] C:\WINDOWS\system32\apiow.exe
O4 - HKLM\..\RunOnce: [apilr32.exe] C:\WINDOWS\system32\apilr32.exe
O4 - HKLM\..\RunOnce: [sysyl.exe] C:\WINDOWS\system32\sysyl.exe
O4 - HKLM\..\RunOnce: [d3rs32.exe] C:\WINDOWS\system32\d3rs32.exe
O4 - HKLM\..\RunOnce: [appnb32.exe] C:\WINDOWS\system32\appnb32.exe
O4 - HKLM\..\RunOnce: [ntlo32.exe] C:\WINDOWS\ntlo32.exe
O4 - HKLM\..\RunOnce: [appfl.exe] C:\WINDOWS\appfl.exe
O4 - HKLM\..\RunOnce: [mskf.exe] C:\WINDOWS\system32\mskf.exe
O4 - HKLM\..\RunOnce: [javasw32.exe] C:\WINDOWS\javasw32.exe
O4 - HKLM\..\RunOnce: [crnm32.exe] C:\WINDOWS\system32\crnm32.exe
O4 - HKLM\..\RunOnce: [mfcsa.exe] C:\WINDOWS\system32\mfcsa.exe
O4 - HKLM\..\RunOnce: [ipau32.exe] C:\WINDOWS\ipau32.exe
O4 - HKLM\..\RunOnce: [sysko.exe] C:\WINDOWS\sysko.exe
O4 - HKLM\..\RunOnce: [ntrq.exe] C:\WINDOWS\system32\ntrq.exe
O4 - HKLM\..\RunOnce: [msxd32.exe] C:\WINDOWS\system32\msxd32.exe
O4 - HKLM\..\RunOnce: [ipdg.exe] C:\WINDOWS\ipdg.exe
O4 - HKLM\..\RunOnce: [msjj32.exe] C:\WINDOWS\msjj32.exe
O4 - HKLM\..\RunOnce: [ipcw32.exe] C:\WINDOWS\system32\ipcw32.exe
O4 - HKLM\..\RunOnce: [crlg.exe] C:\WINDOWS\system32\crlg.exe
O4 - HKLM\..\RunOnce: [appbi32.exe] C:\WINDOWS\system32\appbi32.exe
O4 - HKLM\..\RunOnce: [mfcjn.exe] C:\WINDOWS\mfcjn.exe
O4 - HKLM\..\RunOnce: [addyd.exe] C:\WINDOWS\addyd.exe
O4 - HKLM\..\RunOnce: [netjz.exe] C:\WINDOWS\system32\netjz.exe
O4 - HKLM\..\RunOnce: [d3yo32.exe] C:\WINDOWS\d3yo32.exe
O4 - HKLM\..\RunOnce: [ipsl32.exe] C:\WINDOWS\system32\ipsl32.exe
O4 - HKLM\..\RunOnce: [sdkmu32.exe] C:\WINDOWS\system32\sdkmu32.exe
O4 - HKLM\..\RunOnce: [ntbo.exe] C:\WINDOWS\ntbo.exe
O4 - HKLM\..\RunOnce: [addks.exe] C:\WINDOWS\system32\addks.exe
O4 - HKLM\..\RunOnce: [iecx.exe] C:\WINDOWS\system32\iecx.exe
O4 - HKLM\..\RunOnce: [mfcnt.exe] C:\WINDOWS\mfcnt.exe
O4 - HKLM\..\RunOnce: [apibv32.exe] C:\WINDOWS\apibv32.exe
O4 - HKLM\..\RunOnce: [mfczo.exe] C:\WINDOWS\mfczo.exe
O4 - HKLM\..\RunOnce: [iemq.exe] C:\WINDOWS\iemq.exe
O4 - HKLM\..\RunOnce: [ipqm.exe] C:\WINDOWS\system32\ipqm.exe
O4 - HKLM\..\RunOnce: [ntsd.exe] C:\WINDOWS\system32\ntsd.exe
O4 - HKLM\..\RunOnce: [mskz32.exe] C:\WINDOWS\mskz32.exe
O4 - HKLM\..\RunOnce: [winxg32.exe] C:\WINDOWS\system32\winxg32.exe
O4 - HKLM\..\RunOnce: [javaka32.exe] C:\WINDOWS\javaka32.exe
O4 - HKLM\..\RunOnce: [addrf32.exe] C:\WINDOWS\system32\addrf32.exe
O4 - HKLM\..\RunOnce: [sysvr.exe] C:\WINDOWS\sysvr.exe
O4 - HKLM\..\RunOnce: [ipvx.exe] C:\WINDOWS\system32\ipvx.exe
O4 - HKLM\..\RunOnce: [d3ot32.exe] C:\WINDOWS\d3ot32.exe
O4 - HKLM\..\RunOnce: [addzy32.exe] C:\WINDOWS\system32\addzy32.exe
O4 - HKLM\..\RunOnce: [d3zj32.exe] C:\WINDOWS\system32\d3zj32.exe
O4 - HKLM\..\RunOnce: [sdkmr32.exe] C:\WINDOWS\sdkmr32.exe
O4 - HKLM\..\RunOnce: [mfcrt32.exe] C:\WINDOWS\system32\mfcrt32.exe
O4 - HKLM\..\RunOnce: [winwb32.exe] C:\WINDOWS\winwb32.exe
O4 - HKLM\..\RunOnce: [ntod32.exe] C:\WINDOWS\ntod32.exe
O4 - HKLM\..\RunOnce: [msbk32.exe] C:\WINDOWS\msbk32.exe
O4 - HKLM\..\RunOnce: [appyk32.exe] C:\WINDOWS\system32\appyk32.exe
O4 - HKLM\..\RunOnce: [ntak32.exe] C:\WINDOWS\ntak32.exe
O4 - HKLM\..\RunOnce: [netvu32.exe] C:\WINDOWS\system32\netvu32.exe
O4 - HKLM\..\RunOnce: [addiw.exe] C:\WINDOWS\system32\addiw.exe
O4 - HKLM\..\RunOnce: [javaha32.exe] C:\WINDOWS\system32\javaha32.exe
O4 - HKLM\..\RunOnce: [iefi.exe] C:\WINDOWS\system32\iefi.exe
O4 - HKLM\..\RunOnce: [atlqe32.exe] C:\WINDOWS\atlqe32.exe
O4 - HKLM\..\RunOnce: [javacy32.exe] C:\WINDOWS\system32\javacy32.exe
O4 - HKLM\..\RunOnce: [winvu.exe] C:\WINDOWS\winvu.exe
O4 - HKLM\..\RunOnce: [netyd32.exe] C:\WINDOWS\system32\netyd32.exe
O4 - HKLM\..\RunOnce: [d3pw32.exe] C:\WINDOWS\d3pw32.exe
O4 - HKLM\..\RunOnce: [sysfo32.exe] C:\WINDOWS\system32\sysfo32.exe
O4 - HKLM\..\RunOnce: [javady32.exe] C:\WINDOWS\javady32.exe
O4 - HKLM\..\RunOnce: [mfcfn32.exe] C:\WINDOWS\system32\mfcfn32.exe
O4 - HKLM\..\RunOnce: [ielp.exe] C:\WINDOWS\ielp.exe
O4 - HKLM\..\RunOnce: [mspe32.exe] C:\WINDOWS\system32\mspe32.exe
O4 - HKLM\..\RunOnce: [ntuz.exe] C:\WINDOWS\system32\ntuz.exe
O4 - HKLM\..\RunOnce: [javaoq.exe] C:\WINDOWS\javaoq.exe
O4 - HKLM\..\RunOnce: [sysgm.exe] C:\WINDOWS\system32\sysgm.exe
O4 - HKLM\..\RunOnce: [crkq.exe] C:\WINDOWS\crkq.exe
O4 - HKLM\..\RunOnce: [winvm32.exe] C:\WINDOWS\system32\winvm32.exe
O4 - HKLM\..\RunOnce: [sdkwa32.exe] C:\WINDOWS\sdkwa32.exe
O4 - HKLM\..\RunOnce: [iebq32.exe] C:\WINDOWS\system32\iebq32.exe
O4 - HKLM\..\RunOnce: [sdkok.exe] C:\WINDOWS\system32\sdkok.exe
O4 - HKLM\..\RunOnce: [mfcwt32.exe] C:\WINDOWS\system32\mfcwt32.exe
O4 - HKLM\..\RunOnce: [winud.exe] C:\WINDOWS\system32\winud.exe
O4 - HKLM\..\RunOnce: [ieby32.exe] C:\WINDOWS\system32\ieby32.exe
O4 - HKLM\..\RunOnce: [atlmu.exe] C:\WINDOWS\atlmu.exe
O4 - HKLM\..\RunOnce: [d3vy.exe] C:\WINDOWS\system32\d3vy.exe
O4 - HKLM\..\RunOnce: [ipfr32.exe] C:\WINDOWS\ipfr32.exe
O4 - HKLM\..\RunOnce: [apptl.exe] C:\WINDOWS\apptl.exe
O4 - HKLM\..\RunOnce: [crzn.exe] C:\WINDOWS\system32\crzn.exe
O4 - HKLM\..\RunOnce: [ntdr.exe] C:\WINDOWS\system32\ntdr.exe
O4 - HKLM\..\RunOnce: [msso32.exe] C:\WINDOWS\msso32.exe
O4 - HKLM\..\RunOnce: [addqw.exe] C:\WINDOWS\addqw.exe
O4 - HKLM\..\RunOnce: [ntjw32.exe] C:\WINDOWS\ntjw32.exe
O4 - HKLM\..\RunOnce: [apims32.exe] C:\WINDOWS\apims32.exe
O4 - HKLM\..\RunOnce: [javayk32.exe] C:\WINDOWS\system32\javayk32.exe
O4 - HKLM\..\RunOnce: [netpz.exe] C:\WINDOWS\netpz.exe
O4 - HKLM\..\RunOnce: [addoh32.exe] C:\WINDOWS\addoh32.exe
O4 - HKLM\..\RunOnce: [d3mw32.exe] C:\WINDOWS\system32\d3mw32.exe
O4 - HKLM\..\RunOnce: [msmm32.exe] C:\WINDOWS\msmm32.exe
O4 - HKLM\..\RunOnce: [msbh32.exe] C:\WINDOWS\msbh32.exe
O4 - HKLM\..\RunOnce: [d3pw.exe] C:\WINDOWS\system32\d3pw.exe
O4 - HKLM\..\RunOnce: [msvs.exe] C:\WINDOWS\system32\msvs.exe
O4 - HKLM\..\RunOnce: [netix.exe] C:\WINDOWS\netix.exe
O4 - HKLM\..\RunOnce: [iedi.exe] C:\WINDOWS\system32\iedi.exe
O4 - HKLM\..\RunOnce: [atlnz32.exe] C:\WINDOWS\atlnz32.exe
O4 - HKLM\..\RunOnce: [sdkil.exe] C:\WINDOWS\system32\sdkil.exe
O4 - HKLM\..\RunOnce: [winrr32.exe] C:\WINDOWS\system32\winrr32.exe
O4 - HKLM\..\RunOnce: [atlwv.exe] C:\WINDOWS\atlwv.exe
O4 - HKLM\..\RunOnce: [appfv.exe] C:\WINDOWS\system32\appfv.exe
O4 - HKLM\..\RunOnce: [ntut32.exe] C:\WINDOWS\ntut32.exe
O4 - HKLM\..\RunOnce: [crka32.exe] C:\WINDOWS\crka32.exe
O4 - HKLM\..\RunOnce: [mfctg32.exe] C:\WINDOWS\system32\mfctg32.exe
O4 - HKLM\..\RunOnce: [ipjn32.exe] C:\WINDOWS\system32\ipjn32.exe
O4 - HKLM\..\RunOnce: [winrt32.exe] C:\WINDOWS\winrt32.exe
O4 - HKLM\..\RunOnce: [atlib.exe] C:\WINDOWS\atlib.exe
O4 - HKLM\..\RunOnce: [ipmf32.exe] C:\WINDOWS\system32\ipmf32.exe
O4 - HKLM\..\RunOnce: [apivf.exe] C:\WINDOWS\apivf.exe
O4 - HKLM\..\RunOnce: [apibc32.exe] C:\WINDOWS\system32\apibc32.exe
O4 - HKLM\..\RunOnce: [apipr32.exe] C:\WINDOWS\apipr32.exe
O4 - HKLM\..\RunOnce: [javazp.exe] C:\WINDOWS\system32\javazp.exe
O4 - HKLM\..\RunOnce: [syspm32.exe] C:\WINDOWS\syspm32.exe
O4 - HKLM\..\RunOnce: [atlnu32.exe] C:\WINDOWS\atlnu32.exe
O4 - HKLM\..\RunOnce: [sdkdh32.exe] C:\WINDOWS\system32\sdkdh32.exe
O4 - HKLM\..\RunOnce: [javawa.exe] C:\WINDOWS\javawa.exe
O4 - HKLM\..\RunOnce: [iesw.exe] C:\WINDOWS\iesw.exe
O4 - HKLM\..\RunOnce: [applx32.exe] C:\WINDOWS\applx32.exe
O4 - HKLM\..\RunOnce: [apibe.exe] C:\WINDOWS\apibe.exe
O4 - HKLM\..\RunOnce: [javaxi32.exe] C:\WINDOWS\javaxi32.exe
O4 - HKLM\..\RunOnce: [appul32.exe] C:\WINDOWS\appul32.exe
O4 - HKLM\..\RunOnce: [winpp.exe] C:\WINDOWS\system32\winpp.exe
O4 - HKLM\..\RunOnce: [javaoe32.exe] C:\WINDOWS\system32\javaoe32.exe
O4 - HKLM\..\RunOnce: [netmu.exe] C:\WINDOWS\netmu.exe
O4 - HKLM\..\RunOnce: [mfciv.exe] C:\WINDOWS\mfciv.exe
O4 - HKLM\..\RunOnce: [ntmz32.exe] C:\WINDOWS\system32\ntmz32.exe
O4 - HKLM\..\RunOnce: [netva.exe] C:\WINDOWS\netva.exe
O4 - HKLM\..\RunOnce: [netbx32.exe] C:\WINDOWS\system32\netbx32.exe
O4 - HKLM\..\RunOnce: [netpt32.exe] C:\WINDOWS\netpt32.exe
O4 - HKLM\..\RunOnce: [ntpz.exe] C:\WINDOWS\system32\ntpz.exe
O4 - HKLM\..\RunOnce: [apieo.exe] C:\WINDOWS\system32\apieo.exe
O4 - HKLM\..\RunOnce: [winph32.exe] C:\WINDOWS\winph32.exe
O4 - HKLM\..\RunOnce: [msnu32.exe] C:\WINDOWS\system32\msnu32.exe
O4 - HKLM\..\RunOnce: [ieho.exe] C:\WINDOWS\system32\ieho.exe
O4 - HKLM\..\RunOnce: [appdk.exe] C:\WINDOWS\appdk.exe
O4 - HKLM\..\RunOnce: [ippb32.exe] C:\WINDOWS\ippb32.exe
O4 - HKLM\..\RunOnce: [atlfr32.exe] C:\WINDOWS\system32\atlfr32.exe
O4 - HKLM\..\RunOnce: [mfcfz.exe] C:\WINDOWS\system32\mfcfz.exe
O4 - HKLM\..\RunOnce: [atloz.exe] C:\WINDOWS\atloz.exe
O4 - HKLM\..\RunOnce: [atljq.exe] C:\WINDOWS\system32\atljq.exe
O4 - HKLM\..\RunOnce: [mfcwn.exe] C:\WINDOWS\system32\mfcwn.exe
O4 - HKLM\..\RunOnce: [msck.exe] C:\WINDOWS\msck.exe
O4 - HKLM\..\RunOnce: [sysbp32.exe] C:\WINDOWS\sysbp32.exe
O4 - HKLM\..\RunOnce: [javagt32.exe] C:\WINDOWS\javagt32.exe
O4 - HKLM\..\RunOnce: [winjf.exe] C:\WINDOWS\system32\winjf.exe
O4 - HKLM\..\RunOnce: [msnj.exe] C:\WINDOWS\system32\msnj.exe
O4 - HKLM\..\RunOnce: [javaxq.exe] C:\WINDOWS\javaxq.exe
O4 - HKLM\..\RunOnce: [atllk.exe] C:\WINDOWS\atllk.exe
O4 - HKLM\..\RunOnce: [winpw32.exe] C:\WINDOWS\system32\winpw32.exe
O4 - HKLM\..\RunOnce: [d3fm.exe] C:\WINDOWS\d3fm.exe
O4 - HKLM\..\RunOnce: [javajn32.exe] C:\WINDOWS\system32\javajn32.exe
O4 - HKLM\..\RunOnce: [nter.exe] C:\WINDOWS\system32\nter.exe
O4 - HKLM\..\RunOnce: [appdh32.exe] C:\WINDOWS\system32\appdh32.exe
O4 - HKLM\..\RunOnce: [ietw32.exe] C:\WINDOWS\ietw32.exe
O4 - HKLM\..\RunOnce: [sysbe.exe] C:\WINDOWS\sysbe.exe
O4 - HKLM\..\RunOnce: [netfw32.exe] C:\WINDOWS\system32\netfw32.exe
O4 - HKLM\..\RunOnce: [netee.exe] C:\WINDOWS\system32\netee.exe
O4 - HKLM\..\RunOnce: [apife.exe] C:\WINDOWS\apife.exe
O4 - HKLM\..\RunOnce: [crdt32.exe] C:\WINDOWS\system32\crdt32.exe
O4 - HKLM\..\RunOnce: [ietj32.exe] C:\WINDOWS\system32\ietj32.exe
O4 - HKLM\..\RunOnce: [mfcjw32.exe] C:\WINDOWS\mfcjw32.exe
O4 - HKLM\..\RunOnce: [apicp.exe] C:\WINDOWS\system32\apicp.exe
O4 - HKLM\..\RunOnce: [javagl.exe] C:\WINDOWS\system32\javagl.exe
O4 - HKLM\..\RunOnce: [msqm32.exe] C:\WINDOWS\system32\msqm32.exe
O4 - HKLM\..\RunOnce: [addht.exe] C:\WINDOWS\system32\addht.exe
O4 - HKLM\..\RunOnce: [apilx32.exe] C:\WINDOWS\system32\apilx32.exe
O4 - HKLM\..\RunOnce: [javaph32.exe] C:\WINDOWS\javaph32.exe
O4 - HKLM\..\RunOnce: [netnw32.exe] C:\WINDOWS\system32\netnw32.exe
O4 - HKLM\..\RunOnce: [ipnm.exe] C:\WINDOWS\ipnm.exe
O4 - HKLM\..\RunOnce: [netwn.exe] C:\WINDOWS\system32\netwn.exe
O4 - HKLM\..\RunOnce: [netqw32.exe] C:\WINDOWS\system32\netqw32.exe
O4 - HKLM\..\RunOnce: [winva32.exe] C:\WINDOWS\system32\winva32.exe
O4 - HKLM\..\RunOnce: [ipqm32.exe] C:\WINDOWS\system32\ipqm32.exe
O4 - HKLM\..\RunOnce: [addya32.exe] C:\WINDOWS\addya32.exe
O4 - HKLM\..\RunOnce: [crrt32.exe] C:\WINDOWS\crrt32.exe
O4 - HKLM\..\RunOnce: [d3rb.exe] C:\WINDOWS\d3rb.exe
O4 - HKLM\..\RunOnce: [crsb.exe] C:\WINDOWS\system32\crsb.exe
O4 - HKLM\..\RunOnce: [winpy32.exe] C:\WINDOWS\winpy32.exe
O4 - HKLM\..\RunOnce: [iela.exe] C:\WINDOWS\iela.exe
O4 - HKLM\..\RunOnce: [javavt32.exe] C:\WINDOWS\system32\javavt32.exe
O4 - HKLM\..\RunOnce: [crom.exe] C:\WINDOWS\crom.exe
O4 - HKLM\..\RunOnce: [wintw.exe] C:\WINDOWS\wintw.exe
O4 - HKLM\..\RunOnce: [sdkga.exe] C:\WINDOWS\system32\sdkga.exe
O4 - HKLM\..\RunOnce: [addbm.exe] C:\WINDOWS\addbm.exe
O4 - HKLM\..\RunOnce: [ieqt.exe] C:\WINDOWS\ieqt.exe
O4 - HKLM\..\RunOnce: [sdkbm32.exe] C:\WINDOWS\sdkbm32.exe
O4 - HKLM\..\RunOnce: [crmf.exe] C:\WINDOWS\system32\crmf.exe
O4 - HKLM\..\RunOnce: [ipls.exe] C:\WINDOWS\ipls.exe
O4 - HKLM\..\RunOnce: [crpw.exe] C:\WINDOWS\system32\crpw.exe
O4 - HKLM\..\RunOnce: [syszp32.exe] C:\WINDOWS\syszp32.exe
O4 - HKLM\..\RunOnce: [appxw.exe] C:\WINDOWS\appxw.exe
O4 - HKLM\..\RunOnce: [netta32.exe] C:\WINDOWS\system32\netta32.exe
O4 - HKLM\..\RunOnce: [mfcdb.exe] C:\WINDOWS\mfcdb.exe
O4 - HKLM\..\RunOnce: [syswa.exe] C:\WINDOWS\system32\syswa.exe
O4 - HKLM\..\RunOnce: [d3ae.exe] C:\WINDOWS\system32\d3ae.exe
O4 - HKLM\..\RunOnce: [addpt32.exe] C:\WINDOWS\addpt32.exe
O4 - HKLM\..\RunOnce: [apifi.exe] C:\WINDOWS\apifi.exe
O4 - HKLM\..\RunOnce: [sdkje32.exe] C:\WINDOWS\sdkje32.exe
O4 - HKLM\..\RunOnce: [nettn.exe] C:\WINDOWS\nettn.exe
O4 - HKLM\..\RunOnce: [ipzc32.exe] C:\WINDOWS\ipzc32.exe
O4 - HKLM\..\RunOnce: [nthp32.exe] C:\WINDOWS\nthp32.exe
O4 - HKLM\..\RunOnce: [crmu.exe] C:\WINDOWS\system32\crmu.exe
O4 - HKLM\..\RunOnce: [javamu32.exe] C:\WINDOWS\javamu32.exe
O4 - HKLM\..\RunOnce: [sdkbr32.exe] C:\WINDOWS\system32\sdkbr32.exe
O4 - HKLM\..\RunOnce: [atlgn.exe] C:\WINDOWS\atlgn.exe
O4 - HKLM\..\RunOnce: [winkz.exe] C:\WINDOWS\system32\winkz.exe
O4 - HKLM\..\RunOnce: [iptf32.exe] C:\WINDOWS\system32\iptf32.exe
O4 - HKLM\..\RunOnce: [atljn.exe] C:\WINDOWS\atljn.exe
O4 - HKLM\..\RunOnce: [ieid32.exe] C:\WINDOWS\ieid32.exe
O4 - HKLM\..\RunOnce: [javags32.exe] C:\WINDOWS\system32\javags32.exe
O4 - HKLM\..\RunOnce: [crga.exe] C:\WINDOWS\crga.exe
O4 - HKLM\..\RunOnce: [sdkpi.exe] C:\WINDOWS\system32\sdkpi.exe
O4 - HKLM\..\RunOnce: [ipzh32.exe] C:\WINDOWS\system32\ipzh32.exe
O4 - HKLM\..\RunOnce: [syszp.exe] C:\WINDOWS\syszp.exe
O4 - HKLM\..\RunOnce: [d3dt.exe] C:\WINDOWS\system32\d3dt.exe
O4 - HKLM\..\RunOnce: [addsi32.exe] C:\WINDOWS\addsi32.exe
O4 - HKLM\..\RunOnce: [apiqx.exe] C:\WINDOWS\apiqx.exe
O4 - HKLM\..\RunOnce: [sdkmt32.exe] C:\WINDOWS\system32\sdkmt32.exe
O4 - HKLM\..\RunOnce: [iezl32.exe] C:\WINDOWS\system32\iezl32.exe
O4 - HKLM\..\RunOnce: [javapb32.exe] C:\WINDOWS\javapb32.exe
O4 - HKLM\..\RunOnce: [crxj.exe] C:\WINDOWS\crxj.exe
O4 - HKLM\..\RunOnce: [javaxj.exe] C:\WINDOWS\system32\javaxj.exe
O4 - HKLM\..\RunOnce: [sysny32.exe] C:\WINDOWS\sysny32.exe
O4 - HKLM\..\RunOnce: [atllg32.exe] C:\WINDOWS\atllg32.exe
O4 - HKLM\..\RunOnce: [sdkbb32.exe] C:\WINDOWS\system32\sdkbb32.exe
O4 - HKLM\..\RunOnce: [javaum.exe] C:\WINDOWS\javaum.exe
O4 - HKLM\..\RunOnce: [ieqq.exe] C:\WINDOWS\ieqq.exe
O4 - HKLM\..\RunOnce: [appjr32.exe] C:\WINDOWS\appjr32.exe
O4 - HKLM\..\RunOnce: [apizy.exe] C:\WINDOWS\apizy.exe
O4 - HKLM\..\RunOnce: [sdkvc32.exe] C:\WINDOWS\sdkvc32.exe
O4 - HKLM\..\RunOnce: [addsf32.exe] C:\WINDOWS\addsf32.exe
O4 - HKLM\..\RunOnce: [sysni.exe] C:\WINDOWS\system32\sysni.exe
O4 - HKLM\..\RunOnce: [javamy32.exe] C:\WINDOWS\system32\javamy32.exe
O4 - HKLM\..\RunOnce: [netko.exe] C:\WINDOWS\netko.exe
O4 - HKLM\..\RunOnce: [winjd32.exe] C:\WINDOWS\winjd32.exe
O4 - HKLM\..\RunOnce: [d3zl32.exe] C:\WINDOWS\system32\d3zl32.exe
O4 - HKLM\..\RunOnce: [adden32.exe] C:\WINDOWS\system32\adden32.exe
O4 - HKLM\..\RunOnce: [ntsk.exe] C:\WINDOWS\system32\ntsk.exe
O4 - HKLM\..\RunOnce: [javarr.exe] C:\WINDOWS\javarr.exe
O4 - HKLM\..\RunOnce: [ipbs32.exe] C:\WINDOWS\ipbs32.exe
O4 - HKLM\..\RunOnce: [iehh32.exe] C:\WINDOWS\iehh32.exe
O4 - HKLM\..\RunOnce: [ntbg.exe] C:\WINDOWS\ntbg.exe
O4 - HKLM\..\RunOnce: [sdkpu.exe] C:\WINDOWS\sdkpu.exe
O4 - HKLM\..\RunOnce: [appuz.exe] C:\WINDOWS\system32\appuz.exe
O4 - HKLM\..\RunOnce: [javapk.exe] C:\WINDOWS\javapk.exe
O4 - HKLM\..\RunOnce: [iper.exe] C:\WINDOWS\iper.exe
O4 - HKLM\..\RunOnce: [msum.exe] C:\WINDOWS\system32\msum.exe
O4 - HKLM\..\RunOnce: [crdn32.exe] C:\WINDOWS\crdn32.exe
O4 - HKLM\..\RunOnce: [crrk32.exe] C:\WINDOWS\system32\crrk32.exe
O4 - HKLM\..\RunOnce: [apiwg32.exe] C:\WINDOWS\apiwg32.exe
O4 - HKLM\..\RunOnce: [winbs32.exe] C:\WINDOWS\winbs32.exe
O4 - HKLM\..\RunOnce: [addvc32.exe] C:\WINDOWS\system32\addvc32.exe
O4 - HKLM\..\RunOnce: [mfcur32.exe] C:\WINDOWS\system32\mfcur32.exe
O4 - HKLM\..\RunOnce: [apppv.exe] C:\WINDOWS\apppv.exe
O4 - HKLM\..\RunOnce: [msok32.exe] C:\WINDOWS\msok32.exe
O4 - HKLM\..\RunOnce: [sdkma32.exe] C:\WINDOWS\system32\sdkma32.exe
O4 - HKLM\..\RunOnce: [sdkmi.exe] C:\WINDOWS\sdkmi.exe
O4 - HKLM\..\RunOnce: [winpr.exe] C:\WINDOWS\winpr.exe
O4 - HKLM\..\RunOnce: [croh32.exe] C:\WINDOWS\croh32.exe
O4 - HKLM\..\RunOnce: [wincr.exe] C:\WINDOWS\wincr.exe
O4 - HKLM\..\RunOnce: [netex32.exe] C:\WINDOWS\system32\netex32.exe
O4 - HKLM\..\RunOnce: [appsh32.exe] C:\WINDOWS\system32\appsh32.exe
O4 - HKLM\..\RunOnce: [netkg.exe] C:\WINDOWS\system32\netkg.exe
O4 - HKLM\..\RunOnce: [ntkl.exe] C:\WINDOWS\ntkl.exe
O4 - HKLM\..\RunOnce: [d3gp.exe] C:\WINDOWS\d3gp.exe
O4 - HKLM\..\RunOnce: [javaek.exe] C:\WINDOWS\javaek.exe
O4 - HKLM\..\RunOnce: [crhz.exe] C:\WINDOWS\crhz.exe
O4 - HKLM\..\RunOnce: [netrs32.exe] C:\WINDOWS\netrs32.exe
O4 - HKLM\..\RunOnce: [ipld32.exe] C:\WINDOWS\system32\ipld32.exe
O4 - HKLM\..\RunOnce: [addmv.exe] C:\WINDOWS\addmv.exe
O4 - HKLM\..\RunOnce: [d3vc32.exe] C:\WINDOWS\d3vc32.exe
O4 - HKLM\..\RunOnce: [javaec.exe] C:\WINDOWS\system32\javaec.exe
O4 - HKLM\..\RunOnce: [javakz32.exe] C:\WINDOWS\javakz32.exe
O4 - HKLM\..\RunOnce: [javazw32.exe] C:\WINDOWS\system32\javazw32.exe
O4 - HKLM\..\RunOnce: [mfcds32.exe] C:\WINDOWS\system32\mfcds32.exe
O4 - HKLM\..\RunOnce: [javaye32.exe] C:\WINDOWS\system32\javaye32.exe
O4 - HKLM\..\RunOnce: [apigs32.exe] C:\WINDOWS\apigs32.exe
O4 - HKLM\..\RunOnce: [syszt32.exe] C:\WINDOWS\syszt32.exe
O4 - HKLM\..\RunOnce: [winzb.exe] C:\WINDOWS\winzb.exe
O4 - HKLM\..\RunOnce: [sysab.exe] C:\WINDOWS\system32\sysab.exe
O4 - HKLM\..\RunOnce: [mfcxq32.exe] C:\WINDOWS\mfcxq32.exe
O4 - HKLM\..\RunOnce: [winip.exe] C:\WINDOWS\winip.exe
O4 - HKLM\..\RunOnce: [sdkwl.exe] C:\WINDOWS\sdkwl.exe
O4 - HKLM\..\RunOnce: [winqx.exe] C:\WINDOWS\winqx.exe
O4 - HKLM\..\RunOnce: [iexm.exe] C:\WINDOWS\iexm.exe
O4 - HKLM\..\RunOnce: [addlo32.exe] C:\WINDOWS\addlo32.exe
O4 - HKLM\..\RunOnce: [ipga32.exe] C:\WINDOWS\system32\ipga32.exe
O4 - HKLM\..\RunOnce: [javase.exe] C:\WINDOWS\javase.exe
O4 - HKLM\..\RunOnce: [ntte32.exe] C:\WINDOWS\system32\ntte32.exe
O4 - HKLM\..\RunOnce: [ntib.exe] C:\WINDOWS\ntib.exe
O4 - HKLM\..\RunOnce: [javahh.exe] C:\WINDOWS\system32\javahh.exe
O4 - HKLM\..\RunOnce: [ipxw.exe] C:\WINDOWS\ipxw.exe
O4 - HKLM\..\RunOnce: [msvj.exe] C:\WINDOWS\system32\msvj.exe
O4 - HKLM\..\RunOnce: [d3vj32.exe] C:\WINDOWS\d3vj32.exe
O4 - HKLM\..\RunOnce: [atleq.exe] C:\WINDOWS\system32\atleq.exe
O4 - HKLM\..\RunOnce: [atlhh.exe] C:\WINDOWS\system32\atlhh.exe
O4 - HKLM\..\RunOnce: [syssy32.exe] C:\WINDOWS\system32\syssy32.exe
O4 - HKLM\..\RunOnce: [msqt.exe] C:\WINDOWS\system32\msqt.exe
O4 - HKLM\..\RunOnce: [iekk.exe] C:\WINDOWS\iekk.exe
O4 - HKLM\..\RunOnce: [nteb32.exe] C:\WINDOWS\nteb32.exe
O4 - HKLM\..\RunOnce: [crdo.exe] C:\WINDOWS\system32\crdo.exe
O4 - HKLM\..\RunOnce: [ntsw.exe] C:\WINDOWS\system32\ntsw.exe
O4 - HKLM\..\RunOnce: [mfcxf32.exe] C:\WINDOWS\mfcxf32.exe
O4 - HKLM\..\RunOnce: [atlec32.exe] C:\WINDOWS\atlec32.exe
O4 - HKLM\..\RunOnce: [winkq32.exe] C:\WINDOWS\winkq32.exe
O4 - HKLM\..\RunOnce: [syszk.exe] C:\WINDOWS\syszk.exe
O4 - HKLM\..\RunOnce: [javaeh.exe] C:\WINDOWS\javaeh.exe
O4 - HKLM\..\RunOnce: [apioz32.exe] C:\WINDOWS\system32\apioz32.exe
O4 - HKLM\..\RunOnce: [atlkj.exe] C:\WINDOWS\system32\atlkj.exe
O4 - HKLM\..\RunOnce: [netxl.exe] C:\WINDOWS\system32\netxl.exe
O4 - HKLM\..\RunOnce: [apiax.exe] C:\WINDOWS\apiax.exe
O4 - HKLM\..\RunOnce: [atlbx.exe] C:\WINDOWS\atlbx.exe
O4 - HKLM\..\RunOnce: [atlwh32.exe] C:\WINDOWS\system32\atlwh32.exe
O4 - HKLM\..\RunOnce: [apivu.exe] C:\WINDOWS\apivu.exe
O4 - HKLM\..\RunOnce: [apitn.exe] C:\WINDOWS\apitn.exe
O4 - HKLM\..\RunOnce: [atlii.exe] C:\WINDOWS\atlii.exe
O4 - HKLM\..\RunOnce: [iebz.exe] C:\WINDOWS\iebz.exe
O4 - HKLM\..\RunOnce: [netlf32.exe] C:\WINDOWS\netlf32.exe
O4 - HKLM\..\RunOnce: [apipu.exe] C:\WINDOWS\apipu.exe
O4 - HKLM\..\RunOnce: [sdktw.exe] C:\WINDOWS\system32\sdktw.exe
O4 - HKLM\..\RunOnce: [apisj32.exe] C:\WINDOWS\apisj32.exe
O4 - HKLM\..\RunOnce: [addqx32.exe] C:\WINDOWS\system32\addqx32.exe
O4 - HKLM\..\RunOnce: [atlqk.exe] C:\WINDOWS\atlqk.exe
O4 - HKLM\..\RunOnce: [addof.exe] C:\WINDOWS\addof.exe
O4 - HKLM\..\RunOnce: [mszw32.exe] C:\WINDOWS\system32\mszw32.exe
O4 - HKLM\..\RunOnce: [crwr.exe] C:\WINDOWS\system32\crwr.exe
O4 - HKLM\..\RunOnce: [apiwz32.exe] C:\WINDOWS\system32\apiwz32.exe
O4 - HKLM\..\RunOnce: [netpi32.exe] C:\WINDOWS\system32\netpi32.exe
O4 - HKLM\..\RunOnce: [netwf32.exe] C:\WINDOWS\netwf32.exe
O4 - HKLM\..\RunOnce: [winbb32.exe] C:\WINDOWS\system32\winbb32.exe
O4 - HKLM\..\RunOnce: [neten32.exe] C:\WINDOWS\neten32.exe
O4 - HKLM\..\RunOnce: [mfcot32.exe] C:\WINDOWS\mfcot32.exe
O4 - HKLM\..\RunOnce: [ieik.exe] C:\WINDOWS\ieik.exe
O4 - HKLM\..\RunOnce: [mfcff32.exe] C:\WINDOWS\system32\mfcff32.exe
O4 - HKLM\..\RunOnce: [apirr32.exe] C:\WINDOWS\system32\apirr32.exe
O4 - HKLM\..\RunOnce: [syswn32.exe] C:\WINDOWS\syswn32.exe
O4 - HKLM\..\RunOnce: [iptq.exe] C:\WINDOWS\iptq.exe
O4 - HKLM\..\RunOnce: [ntym32.exe] C:\WINDOWS\ntym32.exe
O4 - HKLM\..\RunOnce: [appsd.exe] C:\WINDOWS\appsd.exe
O4 - HKLM\..\RunOnce: [javamp.exe] C:\WINDOWS\javamp.exe
O4 - HKLM\..\RunOnce: [apphy32.exe] C:\WINDOWS\system32\apphy32.exe
O4 - HKLM\..\RunOnce: [addqm32.exe] C:\WINDOWS\system32\addqm32.exe
O4 - HKLM\..\RunOnce: [sysil.exe] C:\WINDOWS\system32\sysil.exe
O4 - HKLM\..\RunOnce: [mswe32.exe] C:\WINDOWS\mswe32.exe
O4 - HKLM\..\RunOnce: [ipba32.exe] C:\WINDOWS\system32\ipba32.exe
O4 - HKLM\..\RunOnce: [apiwm.exe] C:\WINDOWS\system32\apiwm.exe
O4 - HKLM\..\RunOnce: [atluf32.exe] C:\WINDOWS\system32\atluf32.exe
O4 - HKLM\..\RunOnce: [apinq.exe] C:\WINDOWS\apinq.exe
O4 - HKLM\..\RunOnce: [sdkru32.exe] C:\WINDOWS\sdkru32.exe
O4 - HKLM\..\RunOnce: [MicrosoftAntiSpywareCleaner] C:\Program\Microsoft AntiSpyware\gcASCleaner.exe
O4 - HKLM\..\RunOnce: [netbv.exe] C:\WINDOWS\netbv.exe
O4 - HKLM\..\RunOnce: [ieqy.exe] C:\WINDOWS\ieqy.exe
O4 - HKLM\..\RunOnce: [addyr32.exe] C:\WINDOWS\system32\addyr32.exe
O4 - HKLM\..\RunOnce: [iexs.exe] C:\WINDOWS\iexs.exe
O4 - HKLM\..\RunOnce: [appqj.exe] C:\WINDOWS\system32\appqj.exe
O4 - HKLM\..\RunOnce: [netxn.exe] C:\WINDOWS\netxn.exe
O4 - HKLM\..\RunOnce: [javabr32.exe] C:\WINDOWS\javabr32.exe
O4 - HKLM\..\RunOnce: [netoz32.exe] C:\WINDOWS\system32\netoz32.exe
O4 - HKLM\..\RunOnce: [winub32.exe] C:\WINDOWS\system32\winub32.exe
O4 - HKLM\..\RunOnce: [sysfi32.exe] C:\WINDOWS\system32\sysfi32.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PopUpStopperProfessional] C:\Program\PANICW~1\SURECL~1\PopUpStopperProfessional.exe
O4 - HKCU\..\Run: [SureCleanProfessional] "C:\Program\PANICW~1\SURECL~1\SRClean.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O15 - Trusted Zone: http://office.microsoft.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1117203336969
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse…pdownloader.cab
O23 - Service: Workstation NetLogon Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\sdkic32.exe
O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe

I performed another hijack-scan
The computer is still extremely slow.

heres the log

Logfile of HijackThis v1.99.1
Scan saved at 15:50:36, on 2005-05-29
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
C:\Program\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
C:\Program\Panda Software\Panda Antivirus Platinum\apvxdwin.exe
C:\Program\Panda Software\Panda Antivirus Platinum\pavProxy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\ipdg.exe
C:\Program\Winamp\winampa.exe
C:\Program\Delade filer\Real\Update_OB\realsched.exe
C:\Program\Ulead Systems\Ulead Photo Explorer 7.0\Monitor.exe
C:\Program\D-Tools\daemon.exe
C:\Program\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
C:\WINDOWS\atllv.exe
C:\Program\Microsoft AntiSpyware\gcasServ.exe
C:\Program\Messenger\msmsgs.exe
C:\Program\PANICW~1\SURECL~1\SRClean.exe
C:\Program\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
C:\Program\MSN Messenger\MsnMsgr.Exe
C:\Program\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\lbjjy.dll/sp.html#12047
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\lbjjy.dll/sp.html#12047
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\lbjjy.dll/sp.html#12047
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\lbjjy.dll/sp.html#12047
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\lbjjy.dll/sp.html#12047
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\lbjjy.dll/sp.html#12047
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\lbjjy.dll/sp.html#12047
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {04CC9879-98F0-52FD-EAE4-6308513DF393} - C:\WINDOWS\system32\addtw32.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Class - {0958BFE2-0B32-DB04-80FC-3F165E4F5062} - C:\WINDOWS\crug.dll
O2 - BHO: Class - {236CBCF1-98BD-0E63-A4F4-F481A508A3BA} - C:\WINDOWS\system32\sdkwe.dll
O2 - BHO: Class - {2D608CA0-4EC1-C20A-EE3A-96289DB036BF} - C:\WINDOWS\system32\iech.dll
O2 - BHO: Class - {38C5B834-A322-B57E-5E70-389C168DEC39} - C:\WINDOWS\system32\mfcdj.dll
O2 - BHO: Class - {40D6F83D-86FD-8240-7138-AB5122CB9036} - C:\WINDOWS\system32\d3kb32.dll
O2 - BHO: Class - {4B55AAC4-8396-3C0B-42E6-D49FF81038E9} - C:\WINDOWS\system32\ntup32.dll
O2 - BHO: Class - {4C8EF58C-1E8B-772E-B285-50C063477787} - C:\WINDOWS\system32\ippe.dll
O2 - BHO: Class - {741A224A-0928-455C-96D0-0B9E0AF542C3} - C:\WINDOWS\netza32.dll
O2 - BHO: Class - {790066A1-58C7-6A3E-EDD2-1EC115CFF1A9} - C:\WINDOWS\appjs.dll
O2 - BHO: Class - {79096202-C8BF-3015-7CE9-2404D6BD6D1A} - C:\WINDOWS\ipll.dll
O2 - BHO: Class - {8169E72F-AC12-C710-4D44-63150836180F} - C:\WINDOWS\ipnu.dll
O2 - BHO: Class - {875B618B-4CE8-C142-6FBE-5F35522E2AB0} - C:\WINDOWS\atlxn32.dll
O2 - BHO: Class - {93235C1A-4087-6BFB-2FBA-24A41BE46E88} - C:\WINDOWS\system32\d3yr.dll
O2 - BHO: Class - {A08177D7-8544-A546-ADBE-242AF76010DD} - C:\WINDOWS\system32\addpd32.dll
O2 - BHO: GDS module - {A084A565-B09B-4e4c-A497-7CC50AEAB2A7} - C:\WINDOWS\gds.dll
O2 - BHO: Class - {A18BEE2C-3F27-F542-BD83-3797E5C42B5A} - C:\WINDOWS\msou32.dll
O2 - BHO: Class - {ABDD8204-86B2-35B6-177E-11D54FCF3A03} - C:\WINDOWS\appvy32.dll
O2 - BHO: Class - {AF4B5B80-CD07-0D06-FD03-077EBB4D0093} - C:\WINDOWS\system32\ntey32.dll
O2 - BHO: Class - {BD48201E-CC0F-19E5-6199-DD26BA727B9D} - C:\WINDOWS\system32\msml32.dll
O2 - BHO: Class - {CFC5C5FC-6D84-5BCC-6D1A-D6F80E3BC949} - C:\WINDOWS\system32\mfcfr32.dll
O2 - BHO: Class - {D32FD27A-ECDB-EE56-1C5D-D4FA210397CB} - C:\WINDOWS\ntga32.dll
O2 - BHO: Class - {E75E8B2B-38F5-CA1C-2066-2D236A2C8500} - C:\WINDOWS\iega.dll
O2 - BHO: Class - {E8A3A3D2-81BE-F4E1-1930-22B1DD3D9C09} - C:\WINDOWS\d3ia32.dll
O2 - BHO: Class - {ECF3202C-49B7-5B79-B7D9-007AEDEE64A3} - C:\WINDOWS\addrn32.dll
O2 - BHO: Class - {EEAFF53B-A766-3A0B-3D24-F62B60E391B8} - C:\WINDOWS\system32\apphj.dll
O2 - BHO: Class - {EF01F15D-1C88-898A-CFE9-8CA24B095BC3} - C:\WINDOWS\system32\mfczw32.dll
O2 - BHO: Class - {EFA0CDD8-79FB-118B-3E66-89D764D7F24A} - C:\WINDOWS\system32\atlnd.dll
O2 - BHO: Class - {F1B9DA5C-979C-674E-BDC1-14B48E7FDF72} - C:\WINDOWS\system32\msqw32.dll
O2 - BHO: Class - {F84C0E21-1182-61D7-7FD0-D1260EFE3C77} - C:\WINDOWS\ntow.dll
O4 - HKLM\..\Run: [WinampAgent] C:\Program\Winamp\winampa.exe
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [TkBellExe] "C:\Program\Delade filer\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Ulead Memory Card Detector] C:\Program\Ulead Systems\Ulead Photo Explorer 7.0\Monitor.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program\D-Tools\daemon.exe" -lang 1033 -lock
O4 - HKLM\..\Run: [StatusClient] C:\Program\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup] C:\Program\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
O4 - HKLM\..\Run: [Maxthon.exe] C:\Program\Maxthon\Maxthon.exe
O4 - HKLM\..\Run: [atllv.exe] C:\WINDOWS\atllv.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\RunOnce: [sdkic32.exe] C:\WINDOWS\system32\sdkic32.exe
O4 - HKLM\..\RunOnce: [addhn32.exe] C:\WINDOWS\system32\addhn32.exe
O4 - HKLM\..\RunOnce: [msnl.exe] C:\WINDOWS\msnl.exe
O4 - HKLM\..\RunOnce: [d3rs32.exe] C:\WINDOWS\system32\d3rs32.exe
O4 - HKLM\..\RunOnce: [sysvr.exe] C:\WINDOWS\sysvr.exe
O4 - HKLM\..\RunOnce: [ipvx.exe] C:\WINDOWS\system32\ipvx.exe
O4 - HKLM\..\RunOnce: [d3ot32.exe] C:\WINDOWS\d3ot32.exe
O4 - HKLM\..\RunOnce: [apppv.exe] C:\WINDOWS\apppv.exe
O4 - HKLM\..\RunOnce: [sdkma32.exe] C:\WINDOWS\system32\sdkma32.exe
O4 - HKLM\..\RunOnce: [winpr.exe] C:\WINDOWS\winpr.exe
O4 - HKLM\..\RunOnce: [croh32.exe] C:\WINDOWS\croh32.exe
O4 - HKLM\..\RunOnce: [appsh32.exe] C:\WINDOWS\system32\appsh32.exe
O4 - HKLM\..\RunOnce: [netkg.exe] C:\WINDOWS\system32\netkg.exe
O4 - HKLM\..\RunOnce: [ntkl.exe] C:\WINDOWS\ntkl.exe
O4 - HKLM\..\RunOnce: [d3gp.exe] C:\WINDOWS\d3gp.exe
O4 - HKLM\..\RunOnce: [javaek.exe] C:\WINDOWS\javaek.exe
O4 - HKLM\..\RunOnce: [netrs32.exe] C:\WINDOWS\netrs32.exe
O4 - HKLM\..\RunOnce: [javakz32.exe] C:\WINDOWS\javakz32.exe
O4 - HKLM\..\RunOnce: [javazw32.exe] C:\WINDOWS\system32\javazw32.exe
O4 - HKLM\..\RunOnce: [mfcds32.exe] C:\WINDOWS\system32\mfcds32.exe
O4 - HKLM\..\RunOnce: [javaye32.exe] C:\WINDOWS\system32\javaye32.exe
O4 - HKLM\..\RunOnce: [apigs32.exe] C:\WINDOWS\apigs32.exe
O4 - HKLM\..\RunOnce: [syszt32.exe] C:\WINDOWS\syszt32.exe
O4 - HKLM\..\RunOnce: [sysab.exe] C:\WINDOWS\system32\sysab.exe
O4 - HKLM\..\RunOnce: [mfcxq32.exe] C:\WINDOWS\mfcxq32.exe
O4 - HKLM\..\RunOnce: [winip.exe] C:\WINDOWS\winip.exe
O4 - HKLM\..\RunOnce: [sdkwl.exe] C:\WINDOWS\sdkwl.exe
O4 - HKLM\..\RunOnce: [winqx.exe] C:\WINDOWS\winqx.exe
O4 - HKLM\..\RunOnce: [crnm32.exe] C:\WINDOWS\system32\crnm32.exe
O4 - HKLM\..\RunOnce: [mfcsa.exe] C:\WINDOWS\system32\mfcsa.exe
O4 - HKLM\..\RunOnce: [ipau32.exe] C:\WINDOWS\ipau32.exe
O4 - HKLM\..\RunOnce: [ipdg.exe] C:\WINDOWS\ipdg.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PopUpStopperProfessional] C:\Program\PANICW~1\SURECL~1\PopUpStopperProfessional.exe
O4 - HKCU\..\Run: [SureCleanProfessional] "C:\Program\PANICW~1\SURECL~1\SRClean.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O15 - Trusted Zone: http://office.microsoft.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1117203336969
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse…pdownloader.cab
O23 - Service: Network Security Service (NSS) ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\sdkic32.exe" /s (file missing)
O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe

Back again
both logs are from safe mode


first log:



(5-29-05 16:24:53) SPSeHjFix started v1.1.2
(5-29-05 16:24:53) OS: WinXP Service Pack 2 (5.1.2600)
(5-29-05 16:24:53) Language: svenska
(5-29-05 16:24:53) Win-Path: C:\WINDOWS
(5-29-05 16:24:53) System-Path: C:\WINDOWS\system32
(5-29-05 16:24:53) Temp-Path: C:\DOCUME~1\Gunnar\LOKALA~1\Temp\
(5-29-05 16:24:55) Disinfection started
(5-29-05 16:24:55) Bad-Dll(IEP): c:\windows\system32\lbjjy.dll
(5-29-05 16:24:55) UBF: 4 - UBB: 51 - UBR: 41
(5-29-05 16:24:55) UBF: 4 - UBB: 51 - UBR: 41
(5-29-05 16:24:55) Bad IE-pages:
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\lbjjy.dll/sp.html#12047
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\lbjjy.dll/sp.html#12047
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKCU\Software\Microsoft\Internet Explorer\Search, SearchAssistant: res://c:\windows\system32\lbjjy.dll/sp.html#12047
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\lbjjy.dll/sp.html#12047
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\lbjjy.dll/sp.html#12047
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Page_URL: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Search_URL: res://c:\windows\system32\lbjjy.dll/sp.html#12047
deleted: HKLM\Software\Microsoft\Internet Explorer\Search, SearchAssistant: res://c:\windows\system32\lbjjy.dll/sp.html#12047
(5-29-05 16:24:55) Stealth-String not found
(5-29-05 16:24:55) No locked Files to delete. End without Reboot
(5-29-05 16:25:16) Disinfection started
(5-29-05 16:25:16) Bad-Dll(IEP): c:\windows\system32\lbjjy.dll
(5-29-05 16:25:16) UBF: 4 - UBB: 51 - UBR: 41
(5-29-05 16:25:16) UBF: 4 - UBB: 51 - UBR: 41
(5-29-05 16:25:16) Bad IE-pages: (none)
(5-29-05 16:25:16) Stealth-String not found
(5-29-05 16:25:16) No locked Files to delete. End without Reboot
(5-29-05 16:26:02) Disinfection started
(5-29-05 16:26:02) Bad-Dll(IEP): c:\windows\system32\lbjjy.dll
(5-29-05 16:26:02) UBF: 4 - UBB: 51 - UBR: 41
(5-29-05 16:26:03) UBF: 4 - UBB: 51 - UBR: 41
(5-29-05 16:26:03) Bad IE-pages: (none)
(5-29-05 16:26:03) Stealth-String not found
(5-29-05 16:26:03) No locked Files to delete. End without Reboot
(5-29-05 16:26:03) Disinfection started
(5-29-05 16:26:03) Bad-Dll(IEP): c:\windows\system32\lbjjy.dll
(5-29-05 16:26:03) UBF: 4 - UBB: 51 - UBR: 41
(5-29-05 16:26:03) UBF: 4 - UBB: 51 - UBR: 41
(5-29-05 16:26:03) Bad IE-pages: (none)
(5-29-05 16:26:03) Stealth-String not found
(5-29-05 16:26:03) No locked Files to delete. End without Reboot


(5-29-05 16:26:08) SPSeHjFix started v1.1.2
(5-29-05 16:26:08) OS: WinXP Service Pack 2 (5.1.2600)
(5-29-05 16:26:08) Language: svenska
(5-29-05 16:26:08) Win-Path: C:\WINDOWS
(5-29-05 16:26:08) System-Path: C:\WINDOWS\system32
(5-29-05 16:26:08) Temp-Path: C:\DOCUME~1\Gunnar\LOKALA~1\Temp\
(5-29-05 16:26:09) Disinfection started
(5-29-05 16:26:09) Bad-Dll(IEP): (not found)
(5-29-05 16:26:09) Bad-Dll(IEP) in BHO: (not found)
(5-29-05 16:26:09) UBF: 4 - UBB: 51 - UBR: 41
(5-29-05 16:26:09) UBF: 4 - UBB: 51 - UBR: 41
(5-29-05 16:26:09) Bad IE-pages: (none)
(5-29-05 16:26:09) Stealth-String not found
(5-29-05 16:26:09) Not infected->END


(5-29-05 16:30:12) SPSeHjFix started v1.1.2
(5-29-05 16:30:12) OS: WinXP Service Pack 2 (5.1.2600)
(5-29-05 16:30:12) Language: svenska
(5-29-05 16:30:12) Win-Path: C:\WINDOWS
(5-29-05 16:30:12) System-Path: C:\WINDOWS\system32
(5-29-05 16:30:12) Temp-Path: C:\DOCUME~1\Gunnar\LOKALA~1\Temp\
(5-29-05 16:30:13) Disinfection started
(5-29-05 16:30:13) Bad-Dll(IEP): (not found)
(5-29-05 16:30:13) Bad-Dll(IEP) in BHO: (not found)
(5-29-05 16:30:13) UBF: 4 - UBB: 51 - UBR: 41
(5-29-05 16:30:13) UBF: 4 - UBB: 51 - UBR: 41
(5-29-05 16:30:13) Bad IE-pages: (none)
(5-29-05 16:30:13) Stealth-String not found
(5-29-05 16:30:13) Not infected->END






and here the hijack-log:

Logfile of HijackThis v1.99.1
Scan saved at 16:33:20, on 2005-05-29
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {00104261-366C-F5DC-AF52-372D821F4505} - C:\WINDOWS\system32\addpw.dll (file missing)
O2 - BHO: Class - {01C6CDF5-AA54-D057-9086-211EEA30E063} - C:\WINDOWS\addrx.dll
O2 - BHO: (no name) - {04CC9879-98F0-52FD-EAE4-6308513DF393} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Class - {092DB4EF-A153-233B-B473-7DD7913C97E5} - C:\WINDOWS\ntgs.dll (file missing)
O2 - BHO: (no name) - {0958BFE2-0B32-DB04-80FC-3F165E4F5062} - (no file)
O2 - BHO: Class - {09D6E9D5-A43E-FBA5-1F3C-92CDA7424EE9} - C:\WINDOWS\system32\ipqo32.dll (file missing)
O2 - BHO: Class - {0C3E92AC-0ABC-571E-83F2-B29E2DAD4BFA} - C:\WINDOWS\system32\ierp.dll
O2 - BHO: Class - {11BA77F1-683B-FBF7-B61E-4821BC229D98} - C:\WINDOWS\appvq.dll (file missing)
O2 - BHO: (no name) - {236CBCF1-98BD-0E63-A4F4-F481A508A3BA} - (no file)
O2 - BHO: (no name) - {2D608CA0-4EC1-C20A-EE3A-96289DB036BF} - (no file)
O2 - BHO: Class - {2D9A5F30-BB39-3C3B-1DB0-A4572E5E7077} - C:\WINDOWS\ipmd32.dll
O2 - BHO: (no name) - {38C5B834-A322-B57E-5E70-389C168DEC39} - (no file)
O2 - BHO: Class - {3DEDC85F-9AF4-A827-0655-10C0CCD8F206} - C:\WINDOWS\appfs32.dll
O2 - BHO: Class - {3EAC3BA5-7412-4A8A-1395-BE66BF71FF3C} - C:\WINDOWS\system32\d3xa32.dll (file missing)
O2 - BHO: (no name) - {40D6F83D-86FD-8240-7138-AB5122CB9036} - (no file)
O2 - BHO: (no name) - {4B55AAC4-8396-3C0B-42E6-D49FF81038E9} - (no file)
O2 - BHO: (no name) - {4C8EF58C-1E8B-772E-B285-50C063477787} - (no file)
O2 - BHO: Class - {6F8BD72A-A449-9B34-E881-3708BE2A7336} - C:\WINDOWS\apiql32.dll (file missing)
O2 - BHO: Class - {71E94D83-8173-542B-9A66-5DEB602D769D} - C:\WINDOWS\ipon32.dll
O2 - BHO: (no name) - {741A224A-0928-455C-96D0-0B9E0AF542C3} - (no file)
O2 - BHO: (no name) - {790066A1-58C7-6A3E-EDD2-1EC115CFF1A9} - (no file)
O2 - BHO: (no name) - {79096202-C8BF-3015-7CE9-2404D6BD6D1A} - (no file)
O2 - BHO: (no name) - {8169E72F-AC12-C710-4D44-63150836180F} - (no file)
O2 - BHO: Class - {81EDCC5B-FEB9-6F3B-4CB7-4D767A1A3655} - C:\WINDOWS\ntsy32.dll (file missing)
O2 - BHO: (no name) - {875B618B-4CE8-C142-6FBE-5F35522E2AB0} - (no file)
O2 - BHO: (no name) - {93235C1A-4087-6BFB-2FBA-24A41BE46E88} - (no file)
O2 - BHO: Class - {9651FF3B-C2B5-C2EF-5AC4-78D61ADF97C4} - C:\WINDOWS\d3jl.dll
O2 - BHO: (no name) - {A08177D7-8544-A546-ADBE-242AF76010DD} - (no file)
O2 - BHO: GDS module - {A084A565-B09B-4e4c-A497-7CC50AEAB2A7} - C:\WINDOWS\gds.dll
O2 - BHO: (no name) - {A18BEE2C-3F27-F542-BD83-3797E5C42B5A} - (no file)
O2 - BHO: Class - {A5181EB4-FBCD-5B6F-4454-F9FEB6BD85FB} - C:\WINDOWS\system32\ntcz32.dll
O2 - BHO: Class - {ABD7967C-3F51-655C-C22D-34A94C9679EE} - C:\WINDOWS\system32\javaab.dll (file missing)
O2 - BHO: (no name) - {ABDD8204-86B2-35B6-177E-11D54FCF3A03} - (no file)
O2 - BHO: (no name) - {AF4B5B80-CD07-0D06-FD03-077EBB4D0093} - (no file)
O2 - BHO: Class - {AF55EAC5-8455-2908-1E9D-27B7CD74067B} - C:\WINDOWS\system32\netku.dll
O2 - BHO: (no name) - {BD48201E-CC0F-19E5-6199-DD26BA727B9D} - (no file)
O2 - BHO: Class - {C7739568-F83A-1E0D-AC44-FF449FEFF4B2} - C:\WINDOWS\system32\mslu.dll
O2 - BHO: Class - {C872B373-FBFA-6A47-1C64-47E4EB6B9A99} - C:\WINDOWS\msnw.dll (file missing)
O2 - BHO: (no name) - {CFC5C5FC-6D84-5BCC-6D1A-D6F80E3BC949} - (no file)
O2 - BHO: (no name) - {D32FD27A-ECDB-EE56-1C5D-D4FA210397CB} - (no file)
O2 - BHO: Class - {E10FC589-CE8A-8D18-40D8-08485E4D322A} - C:\WINDOWS\system32\d3zb32.dll
O2 - BHO: (no name) - {E75E8B2B-38F5-CA1C-2066-2D236A2C8500} - (no file)
O2 - BHO: (no name) - {E8A3A3D2-81BE-F4E1-1930-22B1DD3D9C09} - (no file)
O2 - BHO: (no name) - {ECF3202C-49B7-5B79-B7D9-007AEDEE64A3} - (no file)
O2 - BHO: (no name) - {EEAFF53B-A766-3A0B-3D24-F62B60E391B8} - (no file)
O2 - BHO: (no name) - {EF01F15D-1C88-898A-CFE9-8CA24B095BC3} - (no file)
O2 - BHO: (no name) - {EFA0CDD8-79FB-118B-3E66-89D764D7F24A} - (no file)
O2 - BHO: (no name) - {F1B9DA5C-979C-674E-BDC1-14B48E7FDF72} - (no file)
O2 - BHO: Class - {F84C0E21-1182-61D7-7FD0-D1260EFE3C77} - C:\WINDOWS\ntow.dll (file missing)
O2 - BHO: Class - {FB403460-5205-9C0D-68F5-071490BA8A0D} - C:\WINDOWS\mspf.dll (file missing)
O2 - BHO: Class - {FE20707E-55DD-02AB-49D8-AE6258A0B4A7} - C:\WINDOWS\system32\ieda32.dll
O4 - HKLM\..\Run: [WinampAgent] C:\Program\Winamp\winampa.exe
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [TkBellExe] "C:\Program\Delade filer\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Ulead Memory Card Detector] C:\Program\Ulead Systems\Ulead Photo Explorer 7.0\Monitor.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program\D-Tools\daemon.exe" -lang 1033 -lock
O4 - HKLM\..\Run: [StatusClient] C:\Program\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup] C:\Program\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
O4 - HKLM\..\Run: [Maxthon.exe] C:\Program\Maxthon\Maxthon.exe
O4 - HKLM\..\Run: [atllv.exe] C:\WINDOWS\atllv.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\RunOnce: [sdkic32.exe] C:\WINDOWS\system32\sdkic32.exe
O4 - HKLM\..\RunOnce: [addhn32.exe] C:\WINDOWS\system32\addhn32.exe
O4 - HKLM\..\RunOnce: [msnl.exe] C:\WINDOWS\msnl.exe
O4 - HKLM\..\RunOnce: [d3rs32.exe] C:\WINDOWS\system32\d3rs32.exe
O4 - HKLM\..\RunOnce: [d3ot32.exe] C:\WINDOWS\d3ot32.exe
O4 - HKLM\..\RunOnce: [apppv.exe] C:\WINDOWS\apppv.exe
O4 - HKLM\..\RunOnce: [winpr.exe] C:\WINDOWS\winpr.exe
O4 - HKLM\..\RunOnce: [croh32.exe] C:\WINDOWS\croh32.exe
O4 - HKLM\..\RunOnce: [appsh32.exe] C:\WINDOWS\system32\appsh32.exe
O4 - HKLM\..\RunOnce: [netkg.exe] C:\WINDOWS\system32\netkg.exe
O4 - HKLM\..\RunOnce: [ntkl.exe] C:\WINDOWS\ntkl.exe
O4 - HKLM\..\RunOnce: [d3gp.exe] C:\WINDOWS\d3gp.exe
O4 - HKLM\..\RunOnce: [javaek.exe] C:\WINDOWS\javaek.exe
O4 - HKLM\..\RunOnce: [netrs32.exe] C:\WINDOWS\netrs32.exe
O4 - HKLM\..\RunOnce: [apigs32.exe] C:\WINDOWS\apigs32.exe
O4 - HKLM\..\RunOnce: [syszt32.exe] C:\WINDOWS\syszt32.exe
O4 - HKLM\..\RunOnce: [sysab.exe] C:\WINDOWS\system32\sysab.exe
O4 - HKLM\..\RunOnce: [mfcxq32.exe] C:\WINDOWS\mfcxq32.exe
O4 - HKLM\..\RunOnce: [winip.exe] C:\WINDOWS\winip.exe
O4 - HKLM\..\RunOnce: [sdkwl.exe] C:\WINDOWS\sdkwl.exe
O4 - HKLM\..\RunOnce: [winqx.exe] C:\WINDOWS\winqx.exe
O4 - HKLM\..\RunOnce: [ipdg.exe] C:\WINDOWS\ipdg.exe
O4 - HKLM\..\RunOnce: [sysvr.exe] C:\WINDOWS\sysvr.exe
O4 - HKLM\..\RunOnce: [iesw32.exe] C:\WINDOWS\iesw32.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PopUpStopperProfessional] C:\Program\PANICW~1\SURECL~1\PopUpStopperProfessional.exe
O4 - HKCU\..\Run: [SureCleanProfessional] "C:\Program\PANICW~1\SURECL~1\SRClean.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O15 - Trusted Zone: http://office.microsoft.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1117203336969
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse…pdownloader.cab
O23 - Service: Network Security Service (NSS) ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\sdkic32.exe" /s (file missing)
O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe

When i ran shredder earlier it crashed the computer again.

Here's the log (from normal mode)


Logfile of HijackThis v1.99.1
Scan saved at 16:45:23, on 2005-05-29
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
C:\Program\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
C:\Program\Panda Software\Panda Antivirus Platinum\apvxdwin.exe
C:\Program\Panda Software\Panda Antivirus Platinum\pavProxy.exe
C:\Program\Winamp\winampa.exe
C:\Program\Delade filer\Real\Update_OB\realsched.exe
C:\Program\Ulead Systems\Ulead Photo Explorer 7.0\Monitor.exe
C:\Program\D-Tools\daemon.exe
C:\Program\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
C:\WINDOWS\atllv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program\Microsoft AntiSpyware\gcasServ.exe
C:\Program\Messenger\msmsgs.exe
C:\Program\PANICW~1\SURECL~1\SRClean.exe
C:\Program\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
C:\Program\MSN Messenger\MsnMsgr.Exe
C:\Program\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\sppfi.dll/sp.html#12047
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\lbjjy.dll/sp.html#12047
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\sppfi.dll/sp.html#12047
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\sppfi.dll/sp.html#12047
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\lbjjy.dll/sp.html#12047
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\sppfi.dll/sp.html#12047
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\sppfi.dll/sp.html#12047
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {00104261-366C-F5DC-AF52-372D821F4505} - C:\WINDOWS\system32\addpw.dll (file missing)
O2 - BHO: Class - {01C6CDF5-AA54-D057-9086-211EEA30E063} - C:\WINDOWS\addrx.dll
O2 - BHO: (no name) - {04CC9879-98F0-52FD-EAE4-6308513DF393} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Class - {092DB4EF-A153-233B-B473-7DD7913C97E5} - C:\WINDOWS\ntgs.dll (file missing)
O2 - BHO: (no name) - {0958BFE2-0B32-DB04-80FC-3F165E4F5062} - (no file)
O2 - BHO: Class - {09D6E9D5-A43E-FBA5-1F3C-92CDA7424EE9} - C:\WINDOWS\system32\ipqo32.dll (file missing)
O2 - BHO: Class - {0C3E92AC-0ABC-571E-83F2-B29E2DAD4BFA} - C:\WINDOWS\system32\ierp.dll
O2 - BHO: Class - {11BA77F1-683B-FBF7-B61E-4821BC229D98} - C:\WINDOWS\appvq.dll (file missing)
O2 - BHO: (no name) - {236CBCF1-98BD-0E63-A4F4-F481A508A3BA} - (no file)
O2 - BHO: (no name) - {2D608CA0-4EC1-C20A-EE3A-96289DB036BF} - (no file)
O2 - BHO: Class - {2D9A5F30-BB39-3C3B-1DB0-A4572E5E7077} - C:\WINDOWS\ipmd32.dll
O2 - BHO: (no name) - {38C5B834-A322-B57E-5E70-389C168DEC39} - (no file)
O2 - BHO: Class - {3DEDC85F-9AF4-A827-0655-10C0CCD8F206} - C:\WINDOWS\appfs32.dll
O2 - BHO: Class - {3EAC3BA5-7412-4A8A-1395-BE66BF71FF3C} - C:\WINDOWS\system32\d3xa32.dll (file missing)
O2 - BHO: (no name) - {40D6F83D-86FD-8240-7138-AB5122CB9036} - (no file)
O2 - BHO: Class - {426EDEFF-CDC8-DC86-55B6-2F72C00B7C3E} - C:\WINDOWS\msyy.dll
O2 - BHO: Class - {4318F737-F6A3-CF27-A22F-1F761BF98080} - C:\WINDOWS\appse32.dll
O2 - BHO: (no name) - {4B55AAC4-8396-3C0B-42E6-D49FF81038E9} - (no file)
O2 - BHO: (no name) - {4C8EF58C-1E8B-772E-B285-50C063477787} - (no file)
O2 - BHO: Class - {4EAAF6E2-F1CB-E7F1-EBAA-50DD78D3DCEB} - C:\WINDOWS\system32\javaja32.dll
O2 - BHO: Class - {6F8BD72A-A449-9B34-E881-3708BE2A7336} - C:\WINDOWS\apiql32.dll (file missing)
O2 - BHO: Class - {71E94D83-8173-542B-9A66-5DEB602D769D} - C:\WINDOWS\ipon32.dll
O2 - BHO: (no name) - {741A224A-0928-455C-96D0-0B9E0AF542C3} - (no file)
O2 - BHO: (no name) - {790066A1-58C7-6A3E-EDD2-1EC115CFF1A9} - (no file)
O2 - BHO: (no name) - {79096202-C8BF-3015-7CE9-2404D6BD6D1A} - (no file)
O2 - BHO: (no name) - {8169E72F-AC12-C710-4D44-63150836180F} - (no file)
O2 - BHO: Class - {81EDCC5B-FEB9-6F3B-4CB7-4D767A1A3655} - C:\WINDOWS\ntsy32.dll (file missing)
O2 - BHO: (no name) - {875B618B-4CE8-C142-6FBE-5F35522E2AB0} - (no file)
O2 - BHO: (no name) - {93235C1A-4087-6BFB-2FBA-24A41BE46E88} - (no file)
O2 - BHO: Class - {9651FF3B-C2B5-C2EF-5AC4-78D61ADF97C4} - C:\WINDOWS\d3jl.dll
O2 - BHO: (no name) - {A08177D7-8544-A546-ADBE-242AF76010DD} - (no file)
O2 - BHO: GDS module - {A084A565-B09B-4e4c-A497-7CC50AEAB2A7} - C:\WINDOWS\gds.dll
O2 - BHO: (no name) - {A18BEE2C-3F27-F542-BD83-3797E5C42B5A} - (no file)
O2 - BHO: Class - {A5181EB4-FBCD-5B6F-4454-F9FEB6BD85FB} - C:\WINDOWS\system32\ntcz32.dll
O2 - BHO: Class - {AA53BA3B-9FED-4A5C-2B3E-69B936827B93} - C:\WINDOWS\system32\ipzh32.dll
O2 - BHO: Class - {ABD7967C-3F51-655C-C22D-34A94C9679EE} - C:\WINDOWS\system32\javaab.dll (file missing)
O2 - BHO: (no name) - {ABDD8204-86B2-35B6-177E-11D54FCF3A03} - (no file)
O2 - BHO: (no name) - {AF4B5B80-CD07-0D06-FD03-077EBB4D0093} - (no file)
O2 - BHO: Class - {AF55EAC5-8455-2908-1E9D-27B7CD74067B} - C:\WINDOWS\system32\netku.dll
O2 - BHO: (no name) - {BD48201E-CC0F-19E5-6199-DD26BA727B9D} - (no file)
O2 - BHO: Class - {C7739568-F83A-1E0D-AC44-FF449FEFF4B2} - C:\WINDOWS\system32\mslu.dll
O2 - BHO: Class - {C872B373-FBFA-6A47-1C64-47E4EB6B9A99} - C:\WINDOWS\msnw.dll (file missing)
O2 - BHO: Class - {C9591F47-0E57-8A0E-DF99-903141A2D878} - C:\WINDOWS\atluf32.dll
O2 - BHO: (no name) - {CFC5C5FC-6D84-5BCC-6D1A-D6F80E3BC949} - (no file)
O2 - BHO: (no name) - {D32FD27A-ECDB-EE56-1C5D-D4FA210397CB} - (no file)
O2 - BHO: Class - {E10FC589-CE8A-8D18-40D8-08485E4D322A} - C:\WINDOWS\system32\d3zb32.dll
O2 - BHO: Class - {E6611E19-DA71-8953-FDF7-A417FCAC22F0} - C:\WINDOWS\system32\d3hc32.dll
O2 - BHO: (no name) - {E75E8B2B-38F5-CA1C-2066-2D236A2C8500} - (no file)
O2 - BHO: (no name) - {E8A3A3D2-81BE-F4E1-1930-22B1DD3D9C09} - (no file)
O2 - BHO: (no name) - {ECF3202C-49B7-5B79-B7D9-007AEDEE64A3} - (no file)
O2 - BHO: (no name) - {EEAFF53B-A766-3A0B-3D24-F62B60E391B8} - (no file)
O2 - BHO: (no name) - {EF01F15D-1C88-898A-CFE9-8CA24B095BC3} - (no file)
O2 - BHO: (no name) - {EFA0CDD8-79FB-118B-3E66-89D764D7F24A} - (no file)
O2 - BHO: (no name) - {F1B9DA5C-979C-674E-BDC1-14B48E7FDF72} - (no file)
O2 - BHO: Class - {F7283C59-38AE-4267-0320-D017AE595DEF} - C:\WINDOWS\addaq.dll
O2 - BHO: Class - {F84C0E21-1182-61D7-7FD0-D1260EFE3C77} - C:\WINDOWS\ntow.dll (file missing)
O2 - BHO: Class - {FB403460-5205-9C0D-68F5-071490BA8A0D} - C:\WINDOWS\mspf.dll (file missing)
O2 - BHO: Class - {FE20707E-55DD-02AB-49D8-AE6258A0B4A7} - C:\WINDOWS\system32\ieda32.dll
O4 - HKLM\..\Run: [WinampAgent] C:\Program\Winamp\winampa.exe
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [TkBellExe] "C:\Program\Delade filer\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Ulead Memory Card Detector] C:\Program\Ulead Systems\Ulead Photo Explorer 7.0\Monitor.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program\D-Tools\daemon.exe" -lang 1033 -lock
O4 - HKLM\..\Run: [StatusClient] C:\Program\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup] C:\Program\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
O4 - HKLM\..\Run: [Maxthon.exe] C:\Program\Maxthon\Maxthon.exe
O4 - HKLM\..\Run: [atllv.exe] C:\WINDOWS\atllv.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\RunOnce: [sdkic32.exe] C:\WINDOWS\system32\sdkic32.exe
O4 - HKLM\..\RunOnce: [addhn32.exe] C:\WINDOWS\system32\addhn32.exe
O4 - HKLM\..\RunOnce: [msnl.exe] C:\WINDOWS\msnl.exe
O4 - HKLM\..\RunOnce: [d3rs32.exe] C:\WINDOWS\system32\d3rs32.exe
O4 - HKLM\..\RunOnce: [winpr.exe] C:\WINDOWS\winpr.exe
O4 - HKLM\..\RunOnce: [croh32.exe] C:\WINDOWS\croh32.exe
O4 - HKLM\..\RunOnce: [appsh32.exe] C:\WINDOWS\system32\appsh32.exe
O4 - HKLM\..\RunOnce: [netkg.exe] C:\WINDOWS\system32\netkg.exe
O4 - HKLM\..\RunOnce: [ntkl.exe] C:\WINDOWS\ntkl.exe
O4 - HKLM\..\RunOnce: [d3gp.exe] C:\WINDOWS\d3gp.exe
O4 - HKLM\..\RunOnce: [javaek.exe] C:\WINDOWS\javaek.exe
O4 - HKLM\..\RunOnce: [netrs32.exe] C:\WINDOWS\netrs32.exe
O4 - HKLM\..\RunOnce: [winip.exe] C:\WINDOWS\winip.exe
O4 - HKLM\..\RunOnce: [sdkwl.exe] C:\WINDOWS\sdkwl.exe
O4 - HKLM\..\RunOnce: [winqx.exe] C:\WINDOWS\winqx.exe
O4 - HKLM\..\RunOnce: [sysab.exe] C:\WINDOWS\system32\sysab.exe
O4 - HKLM\..\RunOnce: [d3ot32.exe] C:\WINDOWS\d3ot32.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PopUpStopperProfessional] C:\Program\PANICW~1\SURECL~1\PopUpStopperProfessional.exe
O4 - HKCU\..\Run: [SureCleanProfessional] "C:\Program\PANICW~1\SURECL~1\SRClean.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O15 - Trusted Zone: http://office.microsoft.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1117203336969
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse…pdownloader.cab
O23 - Service: Network Security Service (NSS) ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\sdkic32.exe" /s (file missing)
O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe

ok… here it goes






(5-29-05 17:04:50) SPSeHjFix started v1.1.2
(5-29-05 17:04:50) OS: WinXP Service Pack 2 (5.1.2600)
(5-29-05 17:04:50) Language: svenska
(5-29-05 17:04:50) Win-Path: C:\WINDOWS
(5-29-05 17:04:50) System-Path: C:\WINDOWS\system32
(5-29-05 17:04:50) Temp-Path: C:\DOCUME~1\Gunnar\LOKALA~1\Temp\
(5-29-05 17:04:52) Disinfection started
(5-29-05 17:04:52) Bad-Dll(IEP): c:\windows\sppfi.dll
(5-29-05 17:04:52) UBF: 4 - UBB: 59 - UBR: 28
(5-29-05 17:04:52) UBF: 4 - UBB: 59 - UBR: 28
(5-29-05 17:04:52) Bad IE-pages:
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\sppfi.dll/sp.html#12047
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Page_URL: about:blank
(5-29-05 17:04:52) Stealth-String not found
(5-29-05 17:04:52) No locked Files to delete. End without Reboot
(5-29-05 17:06:48) Disinfection started
(5-29-05 17:06:48) Bad-Dll(IEP): c:\windows\system32\lbjjy.dll
(5-29-05 17:06:48) UBF: 4 - UBB: 59 - UBR: 28
(5-29-05 17:06:48) UBF: 4 - UBB: 59 - UBR: 28
(5-29-05 17:06:48) Bad IE-pages:
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\lbjjy.dll/sp.html#12047
deleted: HKCU\Software\Microsoft\Internet Explorer\Search, SearchAssistant: res://c:\windows\system32\lbjjy.dll/sp.html#12047
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\lbjjy.dll/sp.html#12047
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\lbjjy.dll/sp.html#12047
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Search_URL: res://c:\windows\system32\lbjjy.dll/sp.html#12047
deleted: HKLM\Software\Microsoft\Internet Explorer\Search, SearchAssistant: res://c:\windows\system32\lbjjy.dll/sp.html#12047
(5-29-05 17:06:48) Stealth-String not found
(5-29-05 17:06:48) No locked Files to delete. End without Reboot
(5-29-05 17:08:05) Disinfection started
(5-29-05 17:08:05) Bad-Dll(IEP): c:\windows\system32\lbjjy.dll
(5-29-05 17:08:05) UBF: 4 - UBB: 59 - UBR: 28
(5-29-05 17:08:05) UBF: 4 - UBB: 59 - UBR: 28
(5-29-05 17:08:05) Bad IE-pages: (none)
(5-29-05 17:08:05) Stealth-String not found
(5-29-05 17:08:05) No locked Files to delete. End without Reboot
(5-29-05 17:08:18) Disinfection started
(5-29-05 17:08:18) Bad-Dll(IEP): c:\windows\system32\lbjjy.dll
(5-29-05 17:08:18) UBF: 4 - UBB: 59 - UBR: 28
(5-29-05 17:08:18) UBF: 4 - UBB: 59 - UBR: 28
(5-29-05 17:08:18) Bad IE-pages: (none)
(5-29-05 17:08:18) Stealth-String not found
(5-29-05 17:08:18) No locked Files to delete. End without Reboot
(5-29-05 17:08:21) Disinfection started
(5-29-05 17:08:21) Bad-Dll(IEP): c:\windows\system32\lbjjy.dll
(5-29-05 17:08:21) UBF: 4 - UBB: 59 - UBR: 28
(5-29-05 17:08:21) UBF: 4 - UBB: 59 - UBR: 28
(5-29-05 17:08:21) Bad IE-pages: (none)
(5-29-05 17:08:21) Stealth-String not found
(5-29-05 17:08:21) No locked Files to delete. End without Reboot














Logfile of HijackThis v1.99.1
Scan saved at 17:13:45, on 2005-05-29
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\sppfi.dll/sp.html#12047
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\lbjjy.dll/sp.html#12047
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\lbjjy.dll/sp.html#12047
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\lbjjy.dll/sp.html#12047
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\lbjjy.dll/sp.html#12047
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\lbjjy.dll/sp.html#12047
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\lbjjy.dll/sp.html#12047
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {00104261-366C-F5DC-AF52-372D821F4505} - C:\WINDOWS\system32\addpw.dll (file missing)
O2 - BHO: Class - {01C6CDF5-AA54-D057-9086-211EEA30E063} - C:\WINDOWS\addrx.dll
O2 - BHO: (no name) - {04CC9879-98F0-52FD-EAE4-6308513DF393} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Class - {092DB4EF-A153-233B-B473-7DD7913C97E5} - C:\WINDOWS\ntgs.dll (file missing)
O2 - BHO: (no name) - {0958BFE2-0B32-DB04-80FC-3F165E4F5062} - (no file)
O2 - BHO: Class - {09D6E9D5-A43E-FBA5-1F3C-92CDA7424EE9} - C:\WINDOWS\system32\ipqo32.dll (file missing)
O2 - BHO: Class - {0C3E92AC-0ABC-571E-83F2-B29E2DAD4BFA} - C:\WINDOWS\system32\ierp.dll
O2 - BHO: Class - {11BA77F1-683B-FBF7-B61E-4821BC229D98} - C:\WINDOWS\appvq.dll (file missing)
O2 - BHO: Class - {1762F757-A98D-E9D2-EABB-16A676699034} - C:\WINDOWS\appgl.dll
O2 - BHO: (no name) - {236CBCF1-98BD-0E63-A4F4-F481A508A3BA} - (no file)
O2 - BHO: (no name) - {2D608CA0-4EC1-C20A-EE3A-96289DB036BF} - (no file)
O2 - BHO: Class - {2D9A5F30-BB39-3C3B-1DB0-A4572E5E7077} - C:\WINDOWS\ipmd32.dll (file missing)
O2 - BHO: (no name) - {38C5B834-A322-B57E-5E70-389C168DEC39} - (no file)
O2 - BHO: Class - {3DEDC85F-9AF4-A827-0655-10C0CCD8F206} - C:\WINDOWS\appfs32.dll (file missing)
O2 - BHO: Class - {3EAC3BA5-7412-4A8A-1395-BE66BF71FF3C} - C:\WINDOWS\system32\d3xa32.dll (file missing)
O2 - BHO: (no name) - {40D6F83D-86FD-8240-7138-AB5122CB9036} - (no file)
O2 - BHO: Class - {426EDEFF-CDC8-DC86-55B6-2F72C00B7C3E} - C:\WINDOWS\msyy.dll
O2 - BHO: Class - {4318F737-F6A3-CF27-A22F-1F761BF98080} - C:\WINDOWS\appse32.dll (file missing)
O2 - BHO: (no name) - {4B55AAC4-8396-3C0B-42E6-D49FF81038E9} - (no file)
O2 - BHO: (no name) - {4C8EF58C-1E8B-772E-B285-50C063477787} - (no file)
O2 - BHO: Class - {4EAAF6E2-F1CB-E7F1-EBAA-50DD78D3DCEB} - C:\WINDOWS\system32\javaja32.dll
O2 - BHO: Class - {6F8BD72A-A449-9B34-E881-3708BE2A7336} - C:\WINDOWS\apiql32.dll (file missing)
O2 - BHO: Class - {71E94D83-8173-542B-9A66-5DEB602D769D} - C:\WINDOWS\ipon32.dll
O2 - BHO: (no name) - {741A224A-0928-455C-96D0-0B9E0AF542C3} - (no file)
O2 - BHO: (no name) - {790066A1-58C7-6A3E-EDD2-1EC115CFF1A9} - (no file)
O2 - BHO: (no name) - {79096202-C8BF-3015-7CE9-2404D6BD6D1A} - (no file)
O2 - BHO: (no name) - {8169E72F-AC12-C710-4D44-63150836180F} - (no file)
O2 - BHO: Class - {81EDCC5B-FEB9-6F3B-4CB7-4D767A1A3655} - C:\WINDOWS\ntsy32.dll (file missing)
O2 - BHO: (no name) - {875B618B-4CE8-C142-6FBE-5F35522E2AB0} - (no file)
O2 - BHO: (no name) - {93235C1A-4087-6BFB-2FBA-24A41BE46E88} - (no file)
O2 - BHO: Class - {9651FF3B-C2B5-C2EF-5AC4-78D61ADF97C4} - C:\WINDOWS\d3jl.dll
O2 - BHO: (no name) - {A08177D7-8544-A546-ADBE-242AF76010DD} - (no file)
O2 - BHO: GDS module - {A084A565-B09B-4e4c-A497-7CC50AEAB2A7} - C:\WINDOWS\gds.dll
O2 - BHO: (no name) - {A18BEE2C-3F27-F542-BD83-3797E5C42B5A} - (no file)
O2 - BHO: Class - {A5181EB4-FBCD-5B6F-4454-F9FEB6BD85FB} - C:\WINDOWS\system32\ntcz32.dll
O2 - BHO: Class - {AA53BA3B-9FED-4A5C-2B3E-69B936827B93} - C:\WINDOWS\system32\ipzh32.dll (file missing)
O2 - BHO: Class - {ABD7967C-3F51-655C-C22D-34A94C9679EE} - C:\WINDOWS\system32\javaab.dll (file missing)
O2 - BHO: (no name) - {ABDD8204-86B2-35B6-177E-11D54FCF3A03} - (no file)
O2 - BHO: (no name) - {AF4B5B80-CD07-0D06-FD03-077EBB4D0093} - (no file)
O2 - BHO: Class - {AF55EAC5-8455-2908-1E9D-27B7CD74067B} - C:\WINDOWS\system32\netku.dll (file missing)
O2 - BHO: (no name) - {BD48201E-CC0F-19E5-6199-DD26BA727B9D} - (no file)
O2 - BHO: Class - {C7739568-F83A-1E0D-AC44-FF449FEFF4B2} - C:\WINDOWS\system32\mslu.dll (file missing)
O2 - BHO: Class - {C872B373-FBFA-6A47-1C64-47E4EB6B9A99} - C:\WINDOWS\msnw.dll (file missing)
O2 - BHO: Class - {C9591F47-0E57-8A0E-DF99-903141A2D878} - C:\WINDOWS\atluf32.dll (file missing)
O2 - BHO: (no name) - {CFC5C5FC-6D84-5BCC-6D1A-D6F80E3BC949} - (no file)
O2 - BHO: (no name) - {D32FD27A-ECDB-EE56-1C5D-D4FA210397CB} - (no file)
O2 - BHO: Class - {E10FC589-CE8A-8D18-40D8-08485E4D322A} - C:\WINDOWS\system32\d3zb32.dll
O2 - BHO: Class - {E6611E19-DA71-8953-FDF7-A417FCAC22F0} - C:\WINDOWS\system32\d3hc32.dll (file missing)
O2 - BHO: (no name) - {E75E8B2B-38F5-CA1C-2066-2D236A2C8500} - (no file)
O2 - BHO: (no name) - {E8A3A3D2-81BE-F4E1-1930-22B1DD3D9C09} - (no file)
O2 - BHO: (no name) - {ECF3202C-49B7-5B79-B7D9-007AEDEE64A3} - (no file)
O2 - BHO: (no name) - {EEAFF53B-A766-3A0B-3D24-F62B60E391B8} - (no file)
O2 - BHO: (no name) - {EF01F15D-1C88-898A-CFE9-8CA24B095BC3} - (no file)
O2 - BHO: (no name) - {EFA0CDD8-79FB-118B-3E66-89D764D7F24A} - (no file)
O2 - BHO: (no name) - {F1B9DA5C-979C-674E-BDC1-14B48E7FDF72} - (no file)
O2 - BHO: Class - {F7283C59-38AE-4267-0320-D017AE595DEF} - C:\WINDOWS\addaq.dll
O2 - BHO: Class - {F84C0E21-1182-61D7-7FD0-D1260EFE3C77} - C:\WINDOWS\ntow.dll (file missing)
O2 - BHO: Class - {FB403460-5205-9C0D-68F5-071490BA8A0D} - C:\WINDOWS\mspf.dll (file missing)
O2 - BHO: Class - {FE20707E-55DD-02AB-49D8-AE6258A0B4A7} - C:\WINDOWS\system32\ieda32.dll
O4 - HKLM\..\Run: [WinampAgent] C:\Program\Winamp\winampa.exe
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [TkBellExe] "C:\Program\Delade filer\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Ulead Memory Card Detector] C:\Program\Ulead Systems\Ulead Photo Explorer 7.0\Monitor.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program\D-Tools\daemon.exe" -lang 1033 -lock
O4 - HKLM\..\Run: [StatusClient] C:\Program\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup] C:\Program\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
O4 - HKLM\..\Run: [Maxthon.exe] C:\Program\Maxthon\Maxthon.exe
O4 - HKLM\..\Run: [atllv.exe] C:\WINDOWS\atllv.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\RunOnce: [sdkic32.exe] C:\WINDOWS\system32\sdkic32.exe
O4 - HKLM\..\RunOnce: [addhn32.exe] C:\WINDOWS\system32\addhn32.exe
O4 - HKLM\..\RunOnce: [msnl.exe] C:\WINDOWS\msnl.exe
O4 - HKLM\..\RunOnce: [appsh32.exe] C:\WINDOWS\system32\appsh32.exe
O4 - HKLM\..\RunOnce: [netkg.exe] C:\WINDOWS\system32\netkg.exe
O4 - HKLM\..\RunOnce: [ntkl.exe] C:\WINDOWS\ntkl.exe
O4 - HKLM\..\RunOnce: [d3gp.exe] C:\WINDOWS\d3gp.exe
O4 - HKLM\..\RunOnce: [javaek.exe] C:\WINDOWS\javaek.exe
O4 - HKLM\..\RunOnce: [netrs32.exe] C:\WINDOWS\netrs32.exe
O4 - HKLM\..\RunOnce: [sysab.exe] C:\WINDOWS\system32\sysab.exe
O4 - HKLM\..\RunOnce: [d3ot32.exe] C:\WINDOWS\d3ot32.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PopUpStopperProfessional] C:\Program\PANICW~1\SURECL~1\PopUpStopperProfessional.exe
O4 - HKCU\..\Run: [SureCleanProfessional] "C:\Program\PANICW~1\SURECL~1\SRClean.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O15 - Trusted Zone: http://office.microsoft.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1117203336969
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse…pdownloader.cab
O23 - Service: Network Security Service (NSS) ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\sdkic32.exe" /s (file missing)
O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe