I thought I should post the report from Avira scan. It looks as though it pegged a number of infections.
Avira AntiVir Personal
Report file date: Thursday, September 11, 2008 22:55
Scanning for 1609795 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 3) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: ERICKA
Version information:
BUILD.DAT : 8.1.0.331 16934 Bytes 8/12/2008 11:46:00
AVSCAN.EXE : 8.1.4.7 315649 Bytes 6/26/2008 17:57:53
AVSCAN.DLL : 8.1.4.0 40705 Bytes 5/26/2008 16:56:40
LUKE.DLL : 8.1.4.5 164097 Bytes 6/12/2008 21:44:19
LUKERES.DLL : 8.1.4.0 12033 Bytes 5/26/2008 16:58:52
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 7/18/2007 19:33:34
ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 6/24/2008 22:54:15
ANTIVIR2.VDF : 7.0.6.94 2998784 Bytes 8/31/2008 05:53:15
ANTIVIR3.VDF : 7.0.6.148 334848 Bytes 9/11/2008 05:53:19
Engineversion : 8.1.1.28
AEVDF.DLL : 8.1.0.5 102772 Bytes 2/25/2008 18:58:21
AESCRIPT.DLL : 8.1.0.70 319866 Bytes 9/12/2008 05:53:38
AESCN.DLL : 8.1.0.23 119156 Bytes 7/10/2008 21:44:49
AERDL.DLL : 8.1.1.1 397683 Bytes 9/12/2008 05:53:36
AEPACK.DLL : 8.1.2.1 364917 Bytes 7/15/2008 21:58:35
AEOFFICE.DLL : 8.1.0.23 196987 Bytes 9/12/2008 05:53:33
AEHEUR.DLL : 8.1.0.51 1397111 Bytes 9/12/2008 05:53:31
AEHELP.DLL : 8.1.0.15 115063 Bytes 7/10/2008 21:44:48
AEGEN.DLL : 8.1.0.36 315764 Bytes 9/12/2008 05:53:24
AEEMU.DLL : 8.1.0.7 430452 Bytes 7/31/2008 17:33:21
AECORE.DLL : 8.1.1.11 172406 Bytes 9/12/2008 05:53:21
AEBB.DLL : 8.1.0.1 53617 Bytes 7/10/2008 21:44:48
AVWINLL.DLL : 1.0.0.12 15105 Bytes 7/9/2008 17:40:05
AVPREF.DLL : 8.0.2.0 38657 Bytes 5/16/2008 18:28:01
AVREP.DLL : 8.0.0.2 98344 Bytes 9/12/2008 05:53:20
AVREG.DLL : 8.0.0.1 33537 Bytes 5/9/2008 20:26:40
AVARKT.DLL : 1.0.0.23 307457 Bytes 2/12/2008 17:29:23
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 6/12/2008 21:27:49
SQLITE3.DLL : 3.3.17.1 339968 Bytes 1/23/2008 02:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 6/12/2008 21:49:40
NETNT.DLL : 8.0.0.1 7937 Bytes 1/25/2008 21:05:10
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 6/12/2008 22:48:07
RCTEXT.DLL : 8.0.52.0 86273 Bytes 6/27/2008 22:34:37
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: Thursday, September 11, 2008 22:55
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'firefox.exe' - '1' Module(s) have been scanned
Scan process 'ZDWlan.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'MSASCui.exe' - '1' Module(s) have been scanned
Scan process 'SOUNDMAN.EXE' - '1' Module(s) have been scanned
Scan process 'eRAgent.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'MsMpEng.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
25 processes with 25 modules were scanned
Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
[WARNING] System error [21]: The device is not ready.
Master boot sector HD2
[INFO] No virus was found!
[WARNING] System error [21]: The device is not ready.
Master boot sector HD3
[INFO] No virus was found!
[WARNING] System error [21]: The device is not ready.
Master boot sector HD4
[INFO] No virus was found!
[WARNING] System error [21]: The device is not ready.
Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!
Starting to scan the registry.
The registry was scanned ( '57' files ).
Starting the file scan:
Begin scan in 'C:\' <ACER>
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\SJGGY89X\index[1].htm
[DETECTION] Contains recognition pattern of the HTML/Dldr.Iframe.FC HTML script virus
[NOTE] The file was moved to '492e063f.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP553\A0075808.old
[DETECTION] Is the TR/VB.dwn Trojan
[NOTE] The file was moved to '48fa099e.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP553\A0075817.old
[DETECTION] Is the TR/VB.dwn Trojan
[NOTE] The file was moved to '48fa09a5.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP554\A0075917.old
[DETECTION] Is the TR/DNSChanger.ikg Trojan
[NOTE] The file was moved to '48fa09ad.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP554\A0075923.old
[DETECTION] Is the TR/DNSChanger.ijw Trojan
[NOTE] The file was moved to '48fa09b1.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP556\A0076005.exe
[DETECTION] Is the TR/Agent.xdd Trojan
[NOTE] The file was moved to '48fa09b9.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP556\A0076025.old
[DETECTION] Is the TR/Click.VB.bzr Trojan
[NOTE] The file was moved to '48fa09bc.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP557\A0076171.old
[DETECTION] Is the TR/DNSChanger.ilw Trojan
[NOTE] The file was moved to '48fa09c3.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP557\A0080188.old
[DETECTION] Is the TR/Click.VB.cap Trojan
[NOTE] The file was moved to '48fa09c6.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP558\A0080212.sys
[DETECTION] Is the TR/DNSChanger.ipg Trojan
[NOTE] The file was moved to '48fa09ca.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP559\A0080254.sys
[DETECTION] Is the TR/DNSChanger.ipq Trojan
[NOTE] The file was moved to '48fa09cf.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP560\A0080270.exe
[DETECTION] Is the TR/Trash.Gen Trojan
[NOTE] The file was moved to '48fa09d7.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP560\A0080271.exe
[DETECTION] Is the TR/Trash.Gen Trojan
[NOTE] The file was moved to '48fa09db.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP560\A0080272.exe
[DETECTION] Is the TR/Trash.Gen Trojan
[NOTE] The file was moved to '48fa09dd.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP560\A0080273.exe
[DETECTION] Is the TR/Trash.Gen Trojan
[NOTE] The file was moved to '48fa09e0.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP560\A0080274.exe
[DETECTION] Is the TR/Trash.Gen Trojan
[NOTE] The file was moved to '48fa09e2.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP560\A0080275.exe
[DETECTION] Is the TR/Trash.Gen Trojan
[NOTE] The file was moved to '48fa09e7.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP560\A0080276.exe
[DETECTION] Is the TR/Trash.Gen Trojan
[NOTE] The file was moved to '49794008.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP560\A0080277.exe
[DETECTION] Is the TR/Trash.Gen Trojan
[NOTE] The file was moved to '48fa09e9.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP560\A0080279.exe
[DETECTION] Is the TR/Trash.Gen Trojan
[NOTE] The file was moved to '4979400a.qua'!
C:\System Volume Information\_restore{1A2FE54D-9D26-4B44-ADCA-479EBEE5A642}\RP560\A0080280.exe
[DETECTION] Is the TR/Trash.Gen Trojan
[NOTE] The file was moved to '48fa09e8.qua'!
C:\WINDOWS\system32\ceswxfst.sys
[DETECTION] Is the TR/Click.VB.bji Trojan
[NOTE] The file was moved to '493d0ba1.qua'!
C:\WINDOWS\system32\otaxyzd.sys
[DETECTION] Is the TR/DNSChanger.gak Trojan
[NOTE] The file was moved to '492b0bca.qua'!
C:\WINDOWS\system32\sxtsyctd.sys
[DETECTION] Is the TR/Delf.dsu Trojan
[NOTE] The file was moved to '493e0bd6.qua'!
C:\WINDOWS\system32\tcexfst.sys
[DETECTION] Is the TR/Click.VB.bkx Trojan
[NOTE] The file was moved to '492f0bc2.qua'!
C:\WINDOWS\system32\tmp0_306668796850.bk.old
[DETECTION] Is the TR/DNSChanger.ipg Trojan
[NOTE] The file was moved to '493a0bcd.qua'!
C:\WINDOWS\system32\udxfytw.sys
[DETECTION] Is the TR/Click.VB.cbx Trojan
[NOTE] The file was moved to '49420bc5.qua'!
Begin scan in 'D:\' <ACERDATA>
End of the scan: Thursday, September 11, 2008 23:26
Used time: 31:26 Minute(s)
The scan has been done completely.
6801 Scanning directories
322046 Files were scanned
27 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
27 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
322017 Files not concerned
7368 Archives were scanned
6 Warnings
27 Notes