Thanks!
Here is the Combofix Log, the Hijackthis log will follow after it:
ComboFix 09-02-05.01 - Andy II 2009-02-05 20:44:20.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.958.628 [GMT -5:00]
Running from: c:\documents and settings\Andy II\Desktop\ComboFix.exe
AV: Norton Internet Security 2006 *On-access scanning enabled* (Outdated)
FW: Norton Internet Worm Protection *disabled*
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Aaron\Application Data\GetModule
c:\documents and settings\Aaron\Application Data\GetModule\dicik.gz
c:\documents and settings\Aaron\Application Data\GetModule\kwdik.gz
c:\documents and settings\Aaron\Application Data\GetModule\ofadik.gz
c:\documents and settings\Aaron\Application Data\Google\T-Scan
c:\documents and settings\Aaron\Application Data\Google\T-Scan\n.gif
c:\documents and settings\Aaron\Application Data\Google\T-Scan\t.gif
c:\documents and settings\Aaron\Application Data\Google\T-Scan\y.gif
c:\documents and settings\Aaron\Local Settings\Temporary Internet Files\CPV.stt
c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat
c:\documents and settings\Andy II\Application Data\GetModule
c:\documents and settings\Andy II\Application Data\GetModule\dicik.gz
c:\documents and settings\Andy II\Application Data\GetModule\kwdik.gz
c:\documents and settings\Andy II\Application Data\GetModule\ofadik.gz
c:\documents and settings\Andy II\Application Data\twain\Twain.exe
c:\documents and settings\Andy II\Local Settings\Temporary Internet Files\bestwiner.stt
c:\documents and settings\Andy II\Local Settings\Temporary Internet Files\CPV.stt
c:\documents and settings\Andy II\Local Settings\Temporary Internet Files\fbk.sts
C:\mimic.log
c:\program files\GetModule
c:\program files\GetModule\GetModule33.exe
c:\program files\GetModule\GetModule34.exe
c:\program files\GetModule\GetModule35.exe
c:\program files\GetModule\GetModule36.exe
c:\program files\GetPack
c:\program files\GetPack\dictame.gz
c:\program files\GetPack\GetPack27.exe
c:\program files\GetPack\GetPack28.exe
c:\program files\GetPack\trgtame.gz
c:\program files\iCheck
c:\program files\iCheck\Uninstall.exe
c:\program files\Mjcore
c:\program files\VnrPack
c:\program files\VnrPack\dicts.gz
c:\program files\VnrPack\trgts.gz
c:\program files\VnrPack\VnrPack23.exe
c:\windows\IE4 Error Log.txt
c:\windows\system32\40iswvBJ.exe.a_a
c:\windows\system32\62fvcAH3.exe.a_a
c:\windows\system32\akmusq.dll
c:\windows\system32\amwoctvo.dll
c:\windows\system32\aufjseeu.dll
c:\windows\system32\chert5-998.exe
c:\windows\system32\cymouw.dll
c:\windows\system32\digeste.dll
c:\windows\system32\drivers\seneka.sys
c:\windows\system32\drivers\senekarkvusecr.sys
c:\windows\system32\eaksgbfb.dll
c:\windows\system32\fypoopjl.dll
c:\windows\system32\geBrpnLd.dll
c:\windows\system32\ipgwvsff.dll
c:\windows\system32\ismjlkar.dll
c:\windows\system32\jwgcfdwp.dll
c:\windows\system32\kswejq.dll
c:\windows\system32\lfuhvq.dll
c:\windows\system32\ltjetpli.dll
c:\windows\system32\ltjgar.dll
c:\windows\system32\mcrh.tmp
c:\windows\system32\mlJBTkKA.dll
c:\windows\system32\mlJBuvtr.dll
c:\windows\system32\mvxmny.dll
c:\windows\system32\MWFfgMoq.ini
c:\windows\system32\MWFfgMoq.ini2
c:\windows\system32\nnnkJCVn.dll
c:\windows\system32\opnopOHA.dll
c:\windows\system32\pmnkJyxx.dll
c:\windows\system32\prunnet.exe
c:\windows\system32\qkmpmtxd.dll
c:\windows\system32\qmhpbk.dll
c:\windows\system32\qoMgfFWM.dll
c:\windows\system32\qordna.dll
c:\windows\system32\rkbkkh.dll
c:\windows\system32\senekahmjqpvpg.dll
c:\windows\system32\senekancbhordn.dll
c:\windows\system32\senekaniwwnupl.dat
c:\windows\system32\senekavdersqsb.dat
c:\windows\system32\snqmbg.dll
c:\windows\system32\srgywhqu.dll
c:\windows\system32\srpfwema.dll
c:\windows\system32\tqmsmekr.dll
c:\windows\system32\urqQjkkL.dll
c:\windows\system32\vshdndku.dll
c:\windows\system32\vWn3Vdef.exe.a_a
c:\windows\system32\wjowpc.dll
c:\windows\system32\wnlfxpjw.dll
c:\windows\system32\wpv021232248330.cpx
c:\windows\system32\wpv151232083597.cpx
c:\windows\system32\wpv291232809034.cpx
c:\windows\system32\wpv711232809217.cpx
c:\windows\system32\wpv961232809217.cpx
c:\windows\system32\xfxglpay.dll
c:\windows\system32\xxkchcpy.dll
c:\windows\system32\xxsnrr.dll
c:\windows\system32\xxyJknmp.ini
c:\windows\system32\xxyJknmp.ini2
c:\windows\system32\yjvotgod.dll
c:\windows\Tasks\hjcybicl.job
c:\windows\wiaserviv.log
----- BITS: Possible infected sites -----
hxxp://childhe.com.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Service_SENEKA
((((((((((((((((((((((((( Files Created from 2009-01-06 to 2009-02-06 )))))))))))))))))))))))))))))))
.
2009-02-02 17:45 . 2009-02-02 17:45 <DIR> d-------- c:\documents and settings\Andy II\Application Data\vlc
2009-01-30 01:51 . 2009-02-01 17:23 1,483,072 --ahs---- c:\windows\system32\ovtcowma.ini
2009-01-30 00:34 . 2009-01-30 00:34 1,515,358 --ahs---- c:\windows\system32\ilptejtl.ini
2009-01-28 23:15 . 2009-02-05 20:47 <DIR> d-------- c:\documents and settings\Andy II\Application Data\Twain
2009-01-28 23:11 . 2009-01-29 23:13 1,515,358 --ahs---- c:\windows\system32\opdharhu.ini
2009-01-28 23:10 . 2009-01-28 23:10 <DIR> d-------- c:\program files\WebShow
2009-01-25 13:53 . 2009-01-25 13:29 15,688 --a------ c:\windows\system32\lsdelete.exe
2009-01-25 13:29 . 2009-01-25 13:29 64,160 --a------ c:\windows\system32\drivers\Lbd.sys
2009-01-25 13:28 . 2009-01-25 13:28 <DIR> d--h-c--- c:\documents and settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}
2009-01-25 02:56 . 2009-01-25 02:56 <DIR> d-------- c:\program files\Trend Micro
2009-01-25 02:30 . 2009-01-25 02:30 <DIR> d-------- c:\program files\Enigma Software Group
2009-01-25 01:29 . 2009-01-25 01:29 134,144 --a------ c:\windows\awotowuwuq.dll
2009-01-25 01:25 . 2009-01-25 01:25 49,664 --a------ c:\windows\system32\jkkHYOHB.dll
2009-01-25 01:24 . 2009-01-25 01:24 <DIR> d-------- c:\documents and settings\Andy II\Application Data\VirusRemover2008
2009-01-25 01:20 . 2009-01-25 01:20 1,434,061 --ahs---- c:\windows\system32\ukdndhsv.ini
2009-01-25 01:17 . 2009-01-25 01:17 41,984 --a------ c:\windows\Kvadulazexizuxaw.dll
2009-01-25 01:10 . 2009-01-25 01:10 48,640 --a------ c:\windows\system32\cbXOIxyW.dll
2009-01-25 01:02 . 2009-01-25 01:02 49,664 --a------ c:\windows\system32\wvUkLdCt.dll
2009-01-24 23:58 . 2009-01-25 13:21 <DIR> d-------- c:\documents and settings\Andy II\Application Data\cogad
2009-01-24 04:50 . 2009-01-24 04:51 1,434,061 --ahs---- c:\windows\system32\ffsvwgpi.ini
2009-01-23 19:35 . 2008-08-15 23:22 198,941 --a------ c:\windows\system32\nvapps.nvb
2009-01-23 19:34 . 2008-08-06 07:51 453,152 --a------ c:\windows\system32\NVUNINST.EXE
2009-01-23 19:33 . 2009-01-23 19:33 <DIR> d-------- C:\NVIDIA
2009-01-23 18:24 . 2008-10-10 04:52 4,379,984 --a------ c:\windows\system32\D3DX9_40.dll
2009-01-23 18:24 . 2008-10-10 04:52 2,036,576 --a------ c:\windows\system32\D3DCompiler_40.dll
2009-01-23 18:24 . 2008-10-27 10:04 514,384 --a------ c:\windows\system32\XAudio2_3.dll
2009-01-23 18:24 . 2008-10-10 04:52 452,440 --a------ c:\windows\system32\d3dx10_40.dll
2009-01-23 18:24 . 2008-10-27 10:04 235,856 --a------ c:\windows\system32\xactengine3_3.dll
2009-01-23 18:24 . 2008-10-27 10:04 70,992 --a------ c:\windows\system32\XAPOFX1_2.dll
2009-01-23 18:24 . 2008-10-27 10:04 23,376 --a------ c:\windows\system32\X3DAudio1_5.dll
2009-01-23 18:23 . 2009-01-23 18:28 <DIR> d--h----- c:\windows\msdownld.tmp
2009-01-23 18:05 . 2009-01-23 18:07 <DIR> d-------- c:\program files\Microsoft Games for Windows - LIVE
2009-01-23 17:54 . 2009-01-23 17:54 <DIR> d-------- c:\windows\system32\xlive
2009-01-23 15:55 . 2006-11-29 13:06 3,426,072 --a------ c:\windows\system32\d3dx9_32.dll
2009-01-23 15:55 . 2006-12-08 12:02 251,672 --a------ c:\windows\system32\xactengine2_5.dll
2009-01-23 15:54 . 2009-01-23 15:54 <DIR> d-------- c:\windows\Logs
2009-01-23 14:19 . 2009-02-05 21:06 <DIR> d-------- c:\program files\Steam
2009-01-23 04:50 . 2009-01-23 04:50 1,434,061 --ahs---- c:\windows\system32\gwaufbeh.ini
2009-01-22 10:16 . 2009-02-05 00:07 <DIR> d-------- c:\documents and settings\Andy II\Application Data\OpenOffice.org2
2009-01-22 10:16 . 2009-01-22 10:16 <DIR> d-------- c:\documents and settings\Andy II\Application Data\NJStar
2009-01-22 04:47 . 2009-01-22 04:47 1,435,294 --ahs---- c:\windows\system32\ypchckxx.ini
2009-01-21 04:50 . 2009-01-21 04:50 1,432,799 --ahs---- c:\windows\system32\khikatrm.ini
2009-01-20 06:04 . 2009-02-03 02:18 <DIR> d-------- c:\documents and settings\Andy II\Application Data\BitTorrent
2009-01-20 04:47 . 2009-01-21 04:48 1,432,799 --ahs---- c:\windows\system32\ofhclomg.ini
2009-01-19 18:41 . 2009-01-19 18:41 <DIR> d-------- c:\documents and settings\Andy II\Application Data\AdobeUM
2009-01-19 17:37 . 2009-01-19 18:07 56 --a------ c:\windows\kgt2k.INI
2009-01-19 17:36 . 53,052 c:\windows\,Q,cSi"ªŸcŸN?[Ÿ<,Q,Z,,.mid
2009-01-19 16:29 . 2009-01-19 16:29 <DIR> d-------- c:\documents and settings\Andy II\Application Data\acccore
2009-01-19 16:28 . 2009-01-19 16:29 <DIR> d-------- c:\program files\AIM Toolbar
2009-01-19 16:28 . 2009-01-19 16:28 <DIR> d-------- c:\program files\AIM Search
2009-01-19 04:47 . 2009-01-19 04:47 1,403,021 --ahs---- c:\windows\system32\asruxdnb.ini
2009-01-19 04:45 . 2009-01-19 04:45 <DIR> d-------- c:\documents and settings\Andy II\Application Data\HP
2009-01-17 14:12 . 2009-01-18 14:12 1,403,021 --ahs---- c:\windows\system32\yjnlrudd.ini
2009-01-16 02:17 . 2009-01-17 02:18 1,402,999 --ahs---- c:\windows\system32\dcwspssj.ini
2009-01-11 22:17 . 2009-02-05 21:06 54,156 --ah----- c:\windows\QTFont.qfn
2009-01-11 22:17 . 2009-01-11 22:17 1,409 --a------ c:\windows\QTFont.for
2009-01-11 07:07 . 2009-01-11 07:07 <DIR> d-------- c:\windows\system32\XPSViewer
2009-01-11 07:07 . 2009-01-11 07:07 <DIR> d-------- c:\program files\Reference Assemblies
2009-01-11 07:05 . 2009-01-11 07:11 <DIR> d-------- c:\windows\SxsCaPendDel
2009-01-11 07:05 . 2009-01-11 07:07 <DIR> d-------- C:\ed730cada51539590ca06baec8c5
2009-01-11 07:05 . 2008-07-06 07:06 1,676,288 --a------ c:\windows\system32\xpssvcs.dll
2009-01-11 07:05 . 2008-07-06 07:06 1,676,288 --------- c:\windows\system32\dllcache\xpssvcs.dll
2009-01-11 07:05 . 2008-07-06 05:50 597,504 --------- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2009-01-11 07:05 . 2008-07-06 07:06 575,488 --a------ c:\windows\system32\xpsshhdr.dll
2009-01-11 07:05 . 2008-07-06 07:06 575,488 --------- c:\windows\system32\dllcache\xpsshhdr.dll
2009-01-11 07:05 . 2008-07-06 07:06 117,760 --a------ c:\windows\system32\prntvpt.dll
2009-01-11 07:05 . 2008-07-06 07:06 89,088 --------- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2009-01-11 07:00 . 2009-01-11 07:00 <DIR> d-------- c:\program files\MSXML 6.0
2009-01-11 06:56 . 2009-01-11 06:56 <DIR> d-------- c:\program files\Wizards of the Coast
2009-01-06 02:22 . 2009-01-06 02:22 <DIR> d-------- c:\program files\Common Files\DirectX
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-06 02:05 --------- d-----w c:\documents and settings\Andy II\Application Data\WTablet
2009-02-06 02:03 --------- d-----w c:\documents and settings\LocalService\Application Data\WTablet
2009-01-30 07:16 --------- d-----w c:\documents and settings\Aaron\Application Data\DNA
2009-01-30 06:46 --------- d-----w c:\program files\DNA
2009-01-30 06:46 --------- d-----w c:\documents and settings\Aaron\Application Data\OpenOffice.org2
2009-01-30 06:45 --------- d-----w c:\documents and settings\Aaron\Application Data\WTablet
2009-01-25 18:28 --------- d-----w c:\program files\Lavasoft
2009-01-25 18:28 --------- d-----w c:\documents and settings\All Users\Application Data\Lavasoft
2009-01-19 21:29 --------- d-----w c:\program files\AIM6
2009-01-19 21:28 --------- d-----w c:\documents and settings\All Users\Application Data\Viewpoint
2009-01-17 19:43 --------- d-----w c:\documents and settings\Aaron\Application Data\Skype
2009-01-16 06:47 --------- d-----w c:\documents and settings\Aaron\Application Data\BitTorrent
2009-01-15 08:01 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
2008-12-30 08:38 --------- d-----w c:\program files\Common Files\Blizzard Entertainment
2008-12-12 08:13 --------- d-----w c:\program files\Common Files\Software Update Utility
2008-12-12 08:13 --------- d-----w c:\documents and settings\All Users\Application Data\AIM Toolbar
2008-12-12 08:13 --------- d-----w c:\documents and settings\All Users\Application Data\acccore
2008-12-12 07:59 --------- d-----w c:\documents and settings\All Users\Application Data\AOL Downloads
2008-12-11 11:57 333,184 ----a-w c:\windows\system32\drivers\srv.sys
2007-01-20 00:36 88 --sh--r c:\windows\system32\4032A62C6F.sys
2007-01-20 00:36 2,516 -csha-w c:\windows\system32\KGyGaAvL.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{15421B84-3488-49A7-AD18-CBF84A3EFAF6}]
2009-01-28 23:10 105984 --a------ c:\program files\WebShow\WebShow.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
"Aim6"="c:\program files\AIM6\aim6.exe" [2008-10-31 50480]
"Steam"="c:\program files\Steam\Steam.exe" [2009-01-23 1410296]
"cogad"="c:\documents and settings\Andy II\Application Data\cogad\cogad.exe" [2009-01-25 56832]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UserFaultCheck"="c:\windows\system32\dumprep 0 -u" [X]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-08-15 13570048]
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2007-01-22 52840]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2007-02-20 185896]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-04 59392]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-07-27 81920]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-04 208952]
"DMXLauncher"="c:\program files\Dell\Media Experience\DMXLauncher.exe" [2005-10-05 94208]
"DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2005-09-08 122940]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"Symantec PIF AlertEng"="c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 517768]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-12-10 49152]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-10-26 136600]
"EPSON Stylus CX4800 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIADA.EXE" [2005-02-02 98304]
"EPSON Stylus CX4800 Series (Copy 1)"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIADA.EXE" [2005-02-02 98304]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-01-31 385024]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-02-19 267048]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-08-15 86016]
"Vdunivagoxoyi"="c:\windows\Kvadulazexizuxaw.dll" [2009-01-25 41984]
"Shurave"="c:\windows\awotowuwuq.dll" [2009-01-25 134144]
"Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-01-25 507224]
"SigmatelSysTrayApp"="stsystra.exe" [2006-08-15 c:\windows\stsystra.exe]
"nwiz"="nwiz.exe" [2008-08-15 c:\windows\system32\nwiz.exe]
c:\documents and settings\Aaron\Start Menu\Programs\Startup\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 113664]
OpenOffice.org 2.3.lnk - c:\program files\OpenOffice.org 2.3\program\quickstart.exe [2007-08-17 393216]
c:\documents and settings\Andy II\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-07 101440]
OpenOffice.org 2.3.lnk - c:\program files\OpenOffice.org 2.3\program\quickstart.exe [2007-08-17 393216]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 29696]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-01-02 210520]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=rkbkkh.dll
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 c:\windows\system32\qoMgfFWM
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"AOL ACS"=2 (0x2)
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\America Online 9.0\\waol.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"c:\\Program Files\\PlayOnline\\SquareEnix\\PlayOnlineViewer\\pol.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-01-25 64160]
R2 Dynex DX-WGPUSB WLService;Dynex Wireless G Enhanced Adapter Service;c:\program files\Dynex Wireless G Enhanced Adapter\WLService.exe [2008-05-12 49152]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2009-01-18 942416]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [2007-02-15 24652]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2007-04-06 106808]
S3 padenum;Enumerador de dispositivos de NTPAD;c:\windows\system32\DRIVERS\padenum.sys --> c:\windows\system32\DRIVERS\padenum.sys [?]
S3 VendorJoystickEnabler;Driver para joystick paralelo de consola;c:\windows\system32\drivers\ntpad.sys --> c:\windows\system32\drivers\ntpad.sys [?]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contents of the 'Scheduled Tasks' folder
2009-02-01 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-01-25 13:29]
2009-02-04 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
2009-02-05 c:\windows\Tasks\At25.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At26.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At27.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At28.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At29.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At30.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At31.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At32.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At33.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At34.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At35.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At36.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At37.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At38.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At39.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At40.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At41.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At42.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At43.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-06 c:\windows\Tasks\At44.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-06 c:\windows\Tasks\At45.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At46.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At47.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At48.job
- c:\windows\system32\vWn3Vdef.exe []
2009-02-05 c:\windows\Tasks\At49.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At50.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At51.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At52.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At53.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At54.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At55.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At56.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At57.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At58.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At59.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At60.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At61.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At62.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At63.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At64.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At65.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At66.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At67.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-06 c:\windows\Tasks\At68.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-06 c:\windows\Tasks\At69.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At70.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At71.job
- c:\windows\system32\62fvcAH3.exe []
2009-02-05 c:\windows\Tasks\At72.job
- c:\windows\system32\62fvcAH3.exe []
2009-01-31 c:\windows\Tasks\Norton AntiVirus - Run Full System Scan - Aaron.job
- c:\progra~1\NORTON~1\NORTON~1\Navw32.exe []
.
- - - - ORPHANS REMOVED - - - -
URLSearchHooks-HookURL - (no file)
URLSearchHooks-Rank - (no file)
BHO-{698FCC61-DB15-4DD9-9B3A-A2345A8EA570} - c:\windows\system32\qoMgfFWM.dll
BHO-{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - c:\windows\system32\opnopOHA.dll
BHO-{99C6D1BB-7555-474C-91DA-D8FB62A9CC75} - c:\windows\system32\38hxeCJ0.dll
BHO-{c753bfbe-e2f1-4442-8c2b-4d116ab28572} - c:\windows\system32\rkbkkh.dll
HKCU-Run-GetModule35 - c:\program files\GetModule\GetModule35.exe
HKCU-Run-prunnet - c:\windows\system32\prunnet.exe
HKCU-Run-GetPack28 - c:\program files\GetPack\GetPack28.exe
HKCU-Run-VnrPack23 - c:\program files\VnrPack\VnrPack23.exe
HKCU-Run-GetModule36 - c:\program files\GetModule\GetModule36.exe
HKLM-Run-prunnet - c:\windows\system32\prunnet.exe
ShellExecuteHooks-{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - c:\windows\system32\opnopOHA.dll
.
------- Supplementary Scan -------
.
uStart Page =
mStart Page =
hxxp://www.dell.comIE: &AIM Toolbar Search - c:\documents and settings\All Users\Application Data\AIM Toolbar\ieToolbar\resources\en-US\local\search.html
IE: E&xport to Microsoft Excel - c:\progra~1\MI1933~1\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Andy II\Application Data\Mozilla\Firefox\Profiles\ato97zw1.default\
FF - prefs.js: browser.search.defaulturl -
hxxp://slirsredirect.search.aol.com/sli ... ie7&query=FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage -
www.google.comFF - prefs.js: keyword.URL -
hxxp://slirsredirect.search.aol.com/sli ... rab&query=FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\NPTURNMED.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npunagi2.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npViewpoint.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2009-02-05 21:05:55
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Common Files\Symantec Shared\CCSETMGR.EXE
c:\program files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Symantec\LiveUpdate\AluSchedulerSvc.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Dynex Wireless G Enhanced Adapter\WLanCfgG.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\nvsvc32.exe
c:\program files\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe
c:\program files\Compact Wireless-G USB Adapter Wireless Network Monitor\WUSB54GC.exe
c:\windows\system32\Tablet.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Viewpoint\Viewpoint Manager\ViewMgr.exe
c:\windows\system32\WTablet\TabUserW.exe
c:\windows\system32\Tablet.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\rundll32.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\OpenOffice.org 2.3\program\soffice.exe
c:\program files\OpenOffice.org 2.3\program\soffice.bin
c:\program files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
c:\program files\HP\Digital Imaging\bin\hpqste08.exe
c:\program files\AIM6\aolsoftware.exe
.
**************************************************************************
.
Completion time: 2009-02-05 21:11:30 - machine was rebooted
ComboFix-quarantined-files.txt 2009-02-06 02:11:27
Pre-Run: 1,424,470,016 bytes free
Post-Run: 7,162,290,176 bytes free
WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
492 --- E O F --- 2009-01-15 08:01:09
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:16:30 PM, on 2/5/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Dynex Wireless G Enhanced Adapter\WLService.exe
C:\Program Files\Dynex Wireless G Enhanced Adapter\WLanCfgG.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe
C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor\WUSB54GC.exe
C:\WINDOWS\system32\Tablet.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\WTablet\TabUserW.exe
C:\WINDOWS\system32\Tablet.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADA.EXE
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AIM6\aim6.exe
C:\Documents and Settings\Andy II\Application Data\cogad\cogad.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.dell.comR1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL =
www.google.com/ig/dell?hl=en&client=del ... bd=5070117R3 - URLSearchHook: AIM Toolbar Search Class - {03402f96-3dc7-4285-bc50-9e81fefafe43} - C:\Program Files\AIM Toolbar\aimtb.dll
R3 - URLSearchHook: AOLSearchHook Class - {54EB34EA-E6BE-4CFD-9F4F-C4A0C2EAFA22} - C:\Program Files\AIM Search\AOLSearch.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: CPV - {15421B84-3488-49A7-AD18-CBF84A3EFAF6} - C:\Program Files\WebShow\WebShow.dll
O2 - BHO: AOL Search Enhancement - {54EB34EA-E6BE-4CFD-9F4F-C4A0C2EAFA22} - C:\Program Files\AIM Search\AOLSearch.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll (file missing)
O2 - BHO: HP Smart Web Printing 1.0 - {AE84A6AA-A333-4B92-B276-C11E2212E4FE} - C:\Program Files\HP\Smart Web Printing\SmartWebPrinting.dll
O2 - BHO: AIM Toolbar Loader - {b0cda128-b425-4eef-a174-61a11ac5dbf8} - C:\Program Files\AIM Toolbar\aimtb.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll (file missing)
O3 - Toolbar: AIM Toolbar - {61539ecd-cc67-4437-a03c-9aaccbd14326} - C:\Program Files\AIM Toolbar\aimtb.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [EPSON Stylus CX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADA.EXE /P26 "EPSON Stylus CX4800 Series" /O6 "USB004" /M "Stylus CX4800"
O4 - HKLM\..\Run: [EPSON Stylus CX4800 Series (Copy 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADA.EXE /P35 "EPSON Stylus CX4800 Series (Copy 1)" /O6 "USB004" /M "Stylus CX4800"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Vdunivagoxoyi] rundll32.exe "C:\WINDOWS\Kvadulazexizuxaw.dll",e
O4 - HKLM\..\Run: [Shurave] rundll32.exe "C:\WINDOWS\awotowuwuq.dll",e
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US
ee://aol/imAppO4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [cogad] "C:\Documents and Settings\Andy II\Application Data\cogad\cogad.exe" 61A847B5BBF728173599284503996897C881250221C8670836AC4FA7C8833201749139
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &AIM Toolbar Search - C:\Documents and Settings\All Users\Application Data\AIM Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel -
res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
O9 - Extra button: AIM Toolbar - {0b83c99c-1efa-4259-858f-bcb33e007a5b} - C:\Program Files\AIM Toolbar\aimtb.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} (HGPlugin9USA Class) -
http://gamedownload.ijjimax.com/gamedow ... in9USA.cabO18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: rkbkkh.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Dynex Wireless G Enhanced Adapter Service (Dynex DX-WGPUSB WLService) - Unknown owner - C:\Program Files\Dynex Wireless G Enhanced Adapter\WLService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Unknown owner - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe (file missing)
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Symantec AVScan (SAVScan) - Unknown owner - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe (file missing)
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\system32\Tablet.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: WUSB54GCSVC - GEMTEKS - C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe
--
End of file - 14697 bytes