Behöver guidning genom borttagande av specifik trojan

Hej, kört malwarebytes ett antal gånger, och filen uacinit.dll kommer alltid upp. Går inte att ta bort, utan man måste starta om datorn enligt malwarebytes. Men även om jag gör det så finns det kvar när jag startar upp. Tar jag bort den manuellt, altså deletar den, finns den endå där igen vid nästa systemstart. Vill verkligen rensa bort den. :/

hämta gmer, bocka för services och registry och scanna. spara scanloggen och kopiera in den här

http://www.gmer.net/#files

Formatera datorn. Du blir av med viruset OCH får en ny och fräsch dator på köpet!

Ska göra detta.

Hade gjort detta om det inte var så mycket saker som jag inte orkar installera om/konfigurera om.

Sådär, log incoming:


GMER 1.0.15.15077 [p6zk7kmb.exe] - http://www.gmer.net
Rootkit scan 2009-09-04 17:12:40
Windows 5.1.2600 Service Pack 3


---- Services - GMER 1.0.15 ----

Service C:\Windows\system32\drivers\UACwcmexrmoby.sys (*** hidden *** ) [SYSTEM] UACd.sys <-- ROOTKIT !!!

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools\
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4@khjeh 0x78 0xE1 0x0E 0xE5 ...
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4\00000001@khjeh 0xEB 0x6B 0x12 0x81 ...
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x00 0x2A 0x99 0xCA ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Pro\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x85 0x16 0xAE 0x4F ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xE7 0xA5 0xB0 0xDE ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xA3 0x2C 0x6A 0x92 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19 659239224E364682FA4BAF72C53EA4
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19 659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19 659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19 659239224E364682FA4BAF72C53EA4@khjeh 0x78 0xE1 0x0E 0xE5 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19 659239224E364682FA4BAF72C53EA4\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19 659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19 659239224E364682FA4BAF72C53EA4\00000001@khjeh 0xEB 0x6B 0x12 0x81 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19 659239224E364682FA4BAF72C53EA4\00000001\0Jf40
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19 659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khje h 0x0A 0x00 0x42 0xD9 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys@st art 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys@ty pe 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys@im agepath \systemroot\system32\drivers\UACwcmexrmoby.sys
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys@gr oup file system
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys\mo dules
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys\mo dules@UACd \\?\globalroot\systemroot\system32\drivers\UACwcme xrmoby.sys
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys\mo dules@UACc \\?\globalroot\systemroot\system32\UACqpavhxymxf.d ll
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys\mo dules@uacbbr \\?\globalroot\systemroot\system32\UACvxtkkyviuk.d ll
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys\mo dules@uacsr \\?\globalroot\systemroot\system32\UACuiqpqxbwnv.d at
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys\mo dules@uacserf \\?\globalroot\systemroot\system32\UACaswevtnnbm.d ll
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Pro\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC@h0 1
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC@hdf12 0x85 0x16 0xAE 0x4F ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xE7 0xA5 0xB0 0xDE ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)

Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xA3 0x2C 0x6A 0x92 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4@khjeh 0x78 0xE1 0x0E 0xE5 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4\00000001@khjeh 0xEB 0x6B 0x12 0x81 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x65 0x2E 0xB4 0xA8 ...
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Pro\
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC@h0 1
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC@hdf12 0x85 0x16 0xAE 0x4F ...
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xE7 0xA5 0xB0 0xDE ...
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xA3 0x2C 0x6A 0x92 ...
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools\
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4@khjeh 0x78 0xE1 0x0E 0xE5 ...
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4\00000001@khjeh 0xEB 0x6B 0x12 0x81 ...
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\196592 39224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x0A 0x00 0x42 0xD9 ...
Reg HKLM\SYSTEM\ControlSet004\Services\UACd.sys (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\UACd.sys@start
1
Reg HKLM\SYSTEM\ControlSet004\Services\UACd.sys@type 1
Reg HKLM\SYSTEM\ControlSet004\Services\UACd.sys@imagep ath \systemroot\system32\drivers\UACwcmexrmoby.sys
Reg HKLM\SYSTEM\ControlSet004\Services\UACd.sys@group file system
Reg HKLM\SYSTEM\ControlSet004\Services\UACd.sys\module s (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\UACd.sys\module s@UACd \\?\globalroot\systemroot\system32\drivers\UACwcme xrmoby.sys
Reg HKLM\SYSTEM\ControlSet004\Services\UACd.sys\module s@UACc \\?\globalroot\systemroot\system32\UACqpavhxymxf.d ll
Reg HKLM\SYSTEM\ControlSet004\Services\UACd.sys\module s@uacbbr \\?\globalroot\systemroot\system32\UACvxtkkyviuk.d ll
Reg HKLM\SYSTEM\ControlSet004\Services\UACd.sys\module s@uacsr \\?\globalroot\systemroot\system32\UACuiqpqxbwnv.d at
Reg HKLM\SYSTEM\ControlSet004\Services\UACd.sys\module s@uacserf \\?\globalroot\systemroot\system32\UACaswevtnnbm.d ll
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\She ll Extensions\Approved\{DFAF89FA-EF0C-9A9E-4209-D1F86CD57F91}
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\She ll Extensions\Approved\{DFAF89FA-EF0C-9A9E-4209-D1F86CD57F91}@madhmokjmhbmdpadecnboiganh 0x69 0x61 0x6B 0x6E ...
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\She ll Extensions\Approved\{DFAF89FA-EF0C-9A9E-4209-D1F86CD57F91}@nanghkklkchafkbnbcccakeedagl 0x6A 0x61 0x61 0x6C ...

---- EOF - GMER 1.0.15 ----

fy fan va lång logg :O

ett rootkit, testa med combofix

http://www.bleepingcomputer.com/combofix/se/hur-combofix-ska-anvandas

"Du bör inte köra ComboFix om du inte uttryckligen ombetts göra det av en hjälpare." Står det där, är det nåt speciellt jag behöver veta? Antar att du kan tas som en "hjälpare". :P

det enda som kan hända är att uppkopplingen strular efter omstart men det problem har jag inte sätt på 2 år, det gäller bara om man kör trådlöst.
sen återställer combofix vissa saker i windows

Okej, tack, återkommer med resultat.