This sound still suspicious:
O4 - HKLM..\Run: [dwnejkb] C:\WINDOWS\dwnejkb.exe
You could scan the file here: http://www.kaspersky.com/scanforvirus
or send it to virus@asw.cz