The run was successful, it seems. The problem appears to be fixed, for the time being. I'll go ahead an post the log report here and lay myself within your expertise, if that's ok. Apologies if I'm circumnavigating any protocol in this fashion. I can't make head nor tails of the report, so I was hoping to get a skilled perusal.
Thank y'all so much! Here's the report...
ComboFix 09-03-04.01 - Compaq_Owner 2009-03-05 16:34:01.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.447.82 [GMT -6:00]
Running from: c:\documents and settings\Compaq_Owner\Desktop\ComboFix.exe
AV: Spyware Doctor with AntiVirus *On-access scanning enabled* (Updated)
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\IE4 Error Log.txt
c:\windows\system32\bqpldg.dll
c:\windows\system32\chfefa.dll
c:\windows\system32\cuapophw.dll
c:\windows\system32\cxyngwxm.dll
c:\windows\system32\DKTwHRqr.ini
c:\windows\system32\DKTwHRqr.ini2
c:\windows\system32\fealbmic.ini
c:\windows\system32\gonpidwl.ini
c:\windows\system32\gpmecvum.dll
c:\windows\system32\iosahxvt.dll
c:\windows\system32\iqwuxetk.ini
c:\windows\system32\jkmryl.dll
c:\windows\system32\kipqlhhc.ini
c:\windows\system32\ktexuwqi.dll
c:\windows\system32\lxfiegfy.dll
c:\windows\system32\mcrh.tmp
c:\windows\system32\mgdsxqhu.ini
c:\windows\system32\MSVolume.dll
c:\windows\system32\muvcempg.ini
c:\windows\system32\mxwgnyxc.ini
c:\windows\system32\njslbeyu.ini
c:\windows\system32\nlewwxgx.ini
c:\windows\system32\nmeyil.dll
c:\windows\system32\onctmppc.ini
c:\windows\system32\oyowrdrj.ini
c:\windows\system32\pleewk.dll
c:\windows\system32\pljtotni.dll
c:\windows\system32\pynvubjf.dll
c:\windows\system32\qhjetmpg.ini
c:\windows\system32\qxalkyak.dll
c:\windows\system32\riluki.dll
c:\windows\system32\tgzgpq.dll
c:\windows\system32\twznwf.dll
c:\windows\system32\txkxdb.dll
c:\windows\system32\ujnmfmxn.ini
c:\windows\system32\vaintetl.ini
c:\windows\system32\vdpnsskm.dll
c:\windows\system32\vsugdtrk.dll
c:\windows\system32\vwrindnv.ini
c:\windows\system32\wpvbppog.ini
c:\windows\system32\xwhqkhdn.ini
c:\windows\system32\yfgeifxl.ini
c:\windows\system32\yjpelfre.ini
c:\windows\Tasks\wftdbbya.job
c:\windows\wiaserviv.log
D:\Autorun.inf
.
((((((((((((((((((((((((( Files Created from 2009-02-05 to 2009-03-05 )))))))))))))))))))))))))))))))
.
2009-03-05 13:29 . 2009-03-05 13:30 <DIR> d-------- c:\program files\ATI Technologies
2009-03-05 13:29 . 2004-11-03 21:10 516,096 --------- c:\windows\system32\ati2sgag.exe
2009-03-05 13:29 . 2004-12-20 15:30 294,912 -ra------ c:\windows\system32\atiiiexx.dll
2009-03-05 13:29 . 2004-12-20 15:30 192,512 -ra------ c:\windows\system32\ATIDEMGR.dll
2009-03-05 13:29 . 2004-12-20 15:30 9,054 -ra------ c:\windows\system32\atifglpf.xml
2009-03-05 13:05 . 2009-03-05 13:05 23,392 --a------ c:\windows\system32\nscompat.tlb
2009-03-05 13:05 . 2009-03-05 13:05 16,832 --a------ c:\windows\system32\amcompat.tlb
2009-03-05 12:42 . 2009-03-05 12:42 10 --a------ c:\windows\WININIT.INI
2009-03-01 21:25 . 2009-03-01 21:25 <DIR> d-------- c:\program files\Microsoft Silverlight
2009-02-24 09:16 . 2009-02-24 09:16 38,208 --a------ c:\windows\system32\drivers\TfSysMon.sys
2009-02-24 09:16 . 2009-02-24 09:16 33,088 --a------ c:\windows\system32\drivers\TfNetMon.sys
2009-02-24 09:15 . 2009-02-24 09:15 51,520 --a------ c:\windows\system32\drivers\TfFsMon.sys
2009-02-24 09:15 . 2009-02-24 09:15 12,608 --a------ c:\windows\system32\drivers\TfKbMon.sys
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-05 22:49 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2009-03-05 22:42 --------- d-----w c:\program files\Steam
2009-03-05 22:22 --------- d-----w c:\program files\Spyware Doctor
2009-03-05 22:07 --------- d-----w c:\program files\Lavasoft
2009-03-05 22:07 --------- d-----w c:\documents and settings\All Users\Application Data\Lavasoft
2009-03-05 21:33 --------- d-----w c:\documents and settings\Compaq_Owner\Application Data\Skype
2009-03-05 19:30 --------- d--h--w c:\program files\InstallShield Installation Information
2009-03-05 19:10 --------- d-----w c:\documents and settings\Compaq_Owner\Application Data\skypePM
2009-03-05 19:05 --------- d-----w c:\program files\Yahoo!
2009-03-05 19:01 --------- d-----w c:\program files\Windows Media Connect 2
2009-03-05 18:58 --------- d-----w c:\documents and settings\All Users\Application Data\Viewpoint
2009-03-05 18:56 --------- d-----w c:\program files\Common Files\Real
2009-03-05 18:53 --------- d-----w c:\program files\WildTangent
2009-03-05 18:53 --------- d-----w c:\program files\Puppy Luv
2009-03-05 18:52 --------- d-----w c:\documents and settings\All Users\Application Data\ATI MMC
2009-03-05 18:50 --------- d-----w c:\program files\Common Files\Symantec Shared
2009-03-05 18:48 --------- d-----w c:\program files\Quicken
2009-03-05 18:47 --------- d-----w c:\program files\Electronic Arts
2009-03-05 18:47 --------- d-----w c:\documents and settings\All Users\Application Data\Electronic Arts
2009-03-05 18:46 --------- d-----w c:\program files\ValuSoft
2009-02-25 04:37 --------- d-----w c:\documents and settings\All Users\Application Data\PC Tools
2009-02-02 15:55 --------- d-----w c:\program files\Barbie(R) idesign(TM) Ultimate Stylist(TM)
2009-01-31 16:32 66,952 ----a-w c:\windows\system32\drivers\iksysflt.sys
2009-01-31 16:31 81,288 ----a-w c:\windows\system32\drivers\iksyssec.sys
2009-01-31 16:31 40,840 ----a-w c:\windows\system32\drivers\ikfilesec.sys
2009-01-31 16:15 --------- d-----w c:\documents and settings\All Users\Application Data\Avira
2009-01-27 21:57 --------- d-----w c:\program files\Common Files\PC Tools
2009-01-27 21:48 --------- d-----w c:\documents and settings\Compaq_Owner\Application Data\PC Tools
2009-01-27 21:41 --------- d-----w c:\program files\Common Files\Download Manager
2009-01-19 22:55 --------- d-----w c:\documents and settings\Compaq_Owner\Application Data\BFGTOOLBAR
2009-01-19 15:15 --------- d-----w c:\program files\AdwarePro
2009-01-18 21:30 64,160 ----a-w c:\windows\system32\drivers\Lbd.sys
2009-01-15 14:37 --------- d-----w c:\documents and settings\All Users\Application Data\PCPitstop
2009-01-15 04:10 --------- d-----w c:\documents and settings\Compaq_Owner\Application Data\Move Networks
2009-01-11 20:27 --------- d-----w c:\program files\Google
2009-01-10 23:01 --------- d-----w c:\documents and settings\Compaq_Owner\Application Data\Apple Computer
2009-01-10 21:41 --------- d-----w c:\program files\Bonjour
2009-01-10 21:40 --------- d-----w c:\program files\iTunes
2009-01-10 21:40 --------- d-----w c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-01-10 21:39 --------- d-----w c:\program files\iPod
2009-01-10 21:39 --------- d-----w c:\program files\Common Files\Apple
2009-01-10 21:37 --------- d-----w c:\program files\QuickTime
2009-01-10 21:13 --------- d-----w c:\program files\Safari
2008-03-09 21:37 0 ----a-w c:\program files\temp01
2006-10-08 14:38 8,808 ----a-w c:\documents and settings\Compaq_Owner\Application Data\wklnhst.dat
2005-05-18 05:09 774,144 ----a-w c:\program files\RngInterstitial.dll
2005-05-11 06:01 56 --sh--r c:\windows\system32\1B42EE0825.sys
2008-08-13 13:05 88 --sh--r c:\windows\system32\2508EE421B.sys
2008-08-13 13:05 2,516 --sha-w c:\windows\system32\KGyGaAvL.sys
.
------- Sigcheck -------
2005-06-10 18:17 57856 ad3d9d191aea7b5445fe1d82ffbb4788 c:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
2004-08-04 06:00 57856 7435b108b935e42ea92ca94f59c8e717 c:\windows\$NtUninstallKB896423$\spoolsv.exe
2008-04-13 18:12 57856 d8e14a61acc1d4a6cd0d38aebac7fa3b c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\spoolsv.exe
2005-06-10 17:53 57856 da81ec57acd4cdc3d4c51cf3d409af9f c:\windows\system32\spoolsv.exe
2005-06-10 17:53 57856 da81ec57acd4cdc3d4c51cf3d409af9f c:\windows\system32\dllcache\spoolsv.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-11-07 21633320]
"Steam"="c:\program files\Steam\Steam.exe" [2008-12-14 1410296]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-25 68856]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 52736]
"KBD"="c:\hp\KBD\KBD.EXE" [2003-02-11 61440]
"UpdateManager"="c:\program files\Common Files\Sonic\Update Manager\sgtray.exe" [2003-08-19 110592]
"Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2004-04-14 233472]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2004-08-20 155648]
"PS2"="c:\windows\system32\ps2.exe" [2003-09-12 98304]
"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 253952]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
"ISTray"="c:\program files\Spyware Doctor\pctsTray.exe" [2009-01-31 1168264]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-11-03 344064]
"VTTimer"="VTTimer.exe" [2004-10-22 c:\windows\system32\VTTimer.exe]
"SiSPower"="SiSPower.dll" [2004-09-24 c:\windows\system32\SiSPower.dll]
"AGRSMMSG"="AGRSMMSG.exe" [2005-03-04 c:\windows\AGRSMMSG.exe]
"AlcxMonitor"="ALCXMNTR.EXE" [2004-09-07 c:\windows\ALCXMNTR.EXE]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-04-11 c:\windows\KHALMNPR.Exe]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-04-11 c:\windows\KHALMNPR.Exe]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2004-11-04 258048]
HP Image Zone Fast Start.lnk - c:\program files\HP\Digital Imaging\bin\hpqthb08.exe [2004-11-04 53248]
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2008-09-22 692224]
NewShortcut1.lnk - c:\program files\HP\HP Mouse\panel.exe [2007-06-05 233472]
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2006-05-29 122880]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.JDCT"= jl_jdct.drv
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Steam\\SteamApps\\glance_left\\half-life 2 deathmatch\\hl2.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"443:TCP"= 443:TCP:*:Disabled:c:\\Program Files\\Internet Content Filter\\TheApp.exe
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-01-19 64160]
R0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys [2009-02-24 51520]
R0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys [2009-02-24 38208]
R1 pctfw2;pctfw2;c:\windows\system32\drivers\pctfw2.sys [2009-01-27 160792]
R2 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [2009-01-27 356920]
R3 HidMouse;HidMouse;c:\windows\system32\drivers\HidMouse.sys [2007-06-05 29184]
R3 TfNetMon;TfNetMon;c:\windows\system32\drivers\TfNetMon.sys [2009-02-24 33088]
R3 ThreatFire;ThreatFire;c:\program files\Spyware Doctor\TFEngine\TFService.exe service --> c:\program files\Spyware Doctor\TFEngine\TFService.exe service [?]
S3 ldiskl;ldiskl;\??\c:\docume~1\COMPAQ~1\LOCALS~1\Temp\ldiskl.sys --> c:\docume~1\COMPAQ~1\LOCALS~1\Temp\ldiskl.sys [?]
--- Other Services/Drivers In Memory ---
*Deregistered* - mchInjDrv
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480
.
Contents of the 'Scheduled Tasks' folder
2009-03-02 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe []
2009-03-02 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
.
- - - - ORPHANS REMOVED - - - -
BHO-{D1499A38-1DC5-4EE7-B54A-7873687FD3F1} - c:\windows\system32\rqRHwTKD.dll
HKCU-Run-PhotoShow Deluxe Media Manager - c:\progra~1\WALGRE~1\WALGRE~1\data\Xtras\mssysmgr.exe
HKCU-Run-EA Core - c:\program files\Electronic Arts\EADM\Core.exe
HKCU-Run-AdwareProMFCT - c:\program files\AdwarePro\StartApp.exe
Notify-cattcp - c:\windows\java\cattcp.dll
Notify-vgabas - c:\windows\java\trustlib\vgabas.dll
Notify-wvUkHBtr - wvUkHBtr.dll
.
------- Supplementary Scan -------
.
uSearch Page = hxxp://www.google.com
uStart Page = hxxp://www.google.com/
uSearch Bar = hxxp://www.google.com/ie
uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop
uInternet Settings,ProxyOverride = localhost;*.local
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &AOL Toolbar search - c:\program files\AOL Toolbar\toolbar.dll/SEARCH.HTML
IE: E&xport to Microsoft Excel - c:\progra~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
IE: Yahoo! &SMS - file:///c:\program files\Yahoo!\Common/ycsms.htm
LSP: c:\program files\Common Files\PC Tools\LSP\PCTLsp.dll
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\senk26dn.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?fr=ffsp1&p=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - www.firefox.com
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=ffds1&p=
FF - plugin: c:\documents and settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\senk26dn.default\extensions\moveplayer@movenetworks.com\platform\WINNT_x86-msvc\plugins\npmnqmp071101000055.dll
FF - plugin: c:\program files\Java\j2re1.4.2_03\bin\NPJava11.dll
FF - plugin: c:\program files\Java\j2re1.4.2_03\bin\NPJava12.dll
FF - plugin: c:\program files\Java\j2re1.4.2_03\bin\NPJava13.dll
FF - plugin: c:\program files\Java\j2re1.4.2_03\bin\NPJava14.dll
FF - plugin: c:\program files\Java\j2re1.4.2_03\bin\NPJava32.dll
FF - plugin: c:\program files\Java\j2re1.4.2_03\bin\NPJPI142_03.dll
FF - plugin: c:\program files\Java\j2re1.4.2_03\bin\NPOJI610.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npracplug.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npWTHost.dll
FF - plugin: c:\program files\Real\RealArcade\Plugins\Mozilla\npracplug.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-05 16:45:42
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'winlogon.exe'(676)
c:\windows\system32\Ati2evxx.dll
c:\program files\Spyware Doctor\TFEngine\TFNI.dll
- - - - - - - > 'lsass.exe'(732)
c:\program files\Common Files\PC Tools\LSP\PCTLsp.dll
c:\program files\Spyware Doctor\TFEngine\TFWAH.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\windows\system32\ati2evxx.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\PSIService.exe
c:\program files\Spyware Doctor\pctsSvc.exe
c:\program files\Common Files\Logitech\KhalShared\KHALMNPR.exe
c:\program files\HP\Digital Imaging\bin\hpqgalry.exe
c:\program files\Common Files\Symantec Shared\Security Center\symwsc.exe
c:\program files\Skype\Plugin Manager\skypePM.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\Common Files\Symantec Shared\Security Center\SymSCUI.exe
c:\program files\Spyware Doctor\TFEngine\TFService.exe
c:\windows\SoftwareDistribution\Download\fd0264849c01086f3c6b505dc02dbd44\update\update.exe
.
**************************************************************************
.
Completion time: 2009-03-05 16:57:46 - machine was rebooted
ComboFix-quarantined-files.txt 2009-03-05 22:57:35
Pre-Run: 157,649,858,560 bytes free
Post-Run: 157,417,771,008 bytes free
283 --- E O F --- 2009-01-15 09:02:21
