Sorry for the delay -- I was out of town. Thanks for taking the time to help me with this.
Here are the logs results:
Attach.txt:
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_09-06-26.01)
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 5/27/2007 2:42:30 PM
System Uptime: 7/3/2009 1:07:18 PM (77 hours ago)
Motherboard: Intel Corporation | | WS440BX
Processor: Intel Pentium III processor | J4J1, CPU | 746/100mhz
==== Disk Partitions =========================
A: is Removable
C: is FIXED (FAT32) - 75 GiB total, 21.115 GiB free.
D: is FIXED (FAT32) - 19 GiB total, 9.782 GiB free.
E: is Removable
F: is CDROM ()
G: is CDROM ()
H: is Removable
I: is Removable
==== Disabled Device Manager Items =============
==== System Restore Points ===================
No restore point in system.
==== Installed Programs ======================
AC3Filter (remove only)
Adobe Acrobat 5.0
Adobe Download Manager 1.2 (Remove Only)
Adobe Flash Player 10 Plugin
Adobe Reader 8.1.1
Agent Ransack Version 1.7.3
AutoUpdate
Creative Launcher
Creative PlayCenter
Creative Recorder
DivX
DivX Player
e-Film Reader-5 Ver 3.14
Eudora
Firecracker(TM)
GPL Ghostscript 8.57
GPL Ghostscript Fonts
GSpot Codec Information Appliance
GSview 4.8
HijackThis 2.0.2
Hotfix for Windows XP (KB952287)
HP DeskJet 880C Series (Remove only)
IrfanView (remove only)
Java 2 Runtime Environment, SE v1.4.2_15
Java 2 SDK, SE v1.4.2_15
Java(TM) 6 Update 2
LimeWire 4.16.6
MGI PhotoSuite III SE (Remove Only)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft Excel Viewer 97
Microsoft PowerPoint Viewer 97
Microsoft Visual C++ 6.0 Professional Edition
Microsoft Word 2000
Microsoft Works 2000
Microsoft Works 2000 Setup Launcher
Mozilla (1.7.13)
Mozilla Firefox (3.0.11)
Nero 6 Ultra Edition
Peck's Power Join
QuickAnswers
QuickTime
RealPlayer
Sansa Connect Device Recovery
ScanMaker 3630
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB917734)
Security Update for Windows Media Player 9 (KB936782)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB929969)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931768)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933566)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB937143)
Security Update for Windows XP (KB938127)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB939653)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB941693)
Security Update for Windows XP (KB942615)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows XP (KB944338)
Security Update for Windows XP (KB944533)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB947864)
Security Update for Windows XP (KB948590)
Security Update for Windows XP (KB948881)
Security Update for Windows XP (KB950749)
Security Update for Windows XP (KB950759)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953838)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956390)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958215)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960714)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB963027)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969897)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB970238)
Sound Blaster Live! Value
Update for Windows XP (KB894391)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB908531)
Update for Windows XP (KB910437)
Update for Windows XP (KB911164)
Update for Windows XP (KB911280)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Update for Windows XP (KB933360)
Update for Windows XP (KB936357)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
Update for Windows XP (KB942840)
Update for Windows XP (KB946627)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
VideoLAN VLC media player 0.8.6c
WebFldrs XP
Winamp (remove only)
Windows Defender
Windows Genuine Advantage Notifications (KB905474)
Windows Installer 3.1 (KB893803)
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
Windows XP Uninstall
WinPcap 4.0.2
WinZip
Word in Works Suite add-in
XviD MPEG-4 Video Codec
YOU DON'T KNOW JACK Television
==== Event Viewer Messages From Past Week ========
7/3/2009 12:16:05 PM, error: Service Control Manager [7034] - The Windows Image Acquisition (WIA) service terminated unexpectedly. It has done this 1 time(s).
7/3/2009 12:05:02 PM, error: Service Control Manager [7022] - The drv service hung on starting.
7/3/2009 11:57:08 AM, error: Service Control Manager [7023] - The Windows Firewall/Internet Connection Sharing (ICS) service terminated with the following error: Access is denied.
6/29/2009 10:36:11 PM, error: Print [6161] - The document FaxContents-1.pdf owned by mike failed to print on printer HP DeskJet 882C. Data type: NT EMF 1.008. Size of the spool file in bytes: 1114112. Number of bytes printed: 0. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\COMPUTER. Win32 error code returned by the print processor: 2 (0x2).
6/29/2009 10:35:26 PM, error: Print [6161] - The document FaxContents-1.pdf owned by mike failed to print on printer HP DeskJet 882C. Data type: NT EMF 1.008. Size of the spool file in bytes: 1054764. Number of bytes printed: 0. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\COMPUTER. Win32 error code returned by the print processor: 2 (0x2).
==== End Of File ===========================
DDS.txt:
DDS (Ver_09-06-26.01) - FAT32x86
Run by mike at 18:20:36.81 on Mon 07/06/2009
Internet Explorer: 6.0.2900.2180
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.384.67 [GMT -4:00]
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
SVCHOST.EXE
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
SVCHOST.EXE
SVCHOST.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
SVCHOST.EXE
C:\Download\Profilers\PrcView\PrcView.exe
C:\WINDOWS\system32\svchost.exe -k drv
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Documents and Settings\mike\Desktop\ProcessExp\procexp.exe
svchost
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Windows NT\Accessories\wordpad.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Desktop\tmp\dds.scr
============== Pseudo HJT Report ===============
uStart Page =
hxxp://www.google.com/mDefault_Page_URL =
hxxp://www.msn.comTB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
EB: RealGuide: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\SHDOCVW.DLL
mRun: [SystemTray] SysTray.Exe
mRun: [Windows Defender] "c:\program files\windows defender\MSASCui.exe" -hide
mRun: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\shortc~1.lnk - c:\download\profilers\prcview\PrcView.exe
uPolicies-explorer: <NO NAME> = 00000000
uPolicies-explorer: NoFavoritesMenu = 01000000
uPolicies-explorer: NoNetworkConnections = 01000000
uPolicies-system: EnableProfileQuota = 1 (0x1)
dPolicies-explorer: <NO NAME> = 00000000
dPolicies-explorer: NoFavoritesMenu = 01000000
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\windows\system32\msjava.dll
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\SHDOCVW.DLL
DPF: DirectAnimation Java Classes -
file://c:\windows\system\dajava.cab
DPF: Internet Explorer Classes for Java -
file://c:\windows\system\iejava.cab
DPF: Microsoft XML Parser for Java -
file://c:\windows\java\classes\xmldso.cab
DPF: {00000161-0000-0010-8000-00AA00389B71} -
hxxp://codecs.microsoft.com/codecs/i386/msaudio.cabDPF: {3334504D-9980-0010-8000-00AA00389B71} -
hxxp://download.microsoft.com/download/ ... p43dmo.CABDPF: {33564D57-0000-0010-8000-00AA00389B71} -
hxxp://download.microsoft.com/download/ ... mv9VCM.CABDPF: {33564D57-9980-0010-8000-00AA00389B71} -
hxxp://codecs.microsoft.com/codecs/i386/wmv9dmo.cabDPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} -
hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cabDPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} -
hxxp://v4.windowsupdate.microsoft.com/C ... 4340162037DPF: {CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA} -
hxxp://java.sun.com/products/plugin/aut ... s-i586.cabDPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} -
hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cabDPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} -
hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cabDPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} -
hxxp://download.macromedia.com/pub/shoc ... wflash.cabSEH: Eudora's Shell Extension: {edb0e980-90bd-11d4-8599-0008c7d3b6f8} - c:\program files\qualcomm\eudora\EUSHLEXT.DLL
SEH: Microsoft AntiMalware ShellExecuteHook: {091eb208-39dd-417d-a5dd-7e2c2d8fb9cb} - c:\progra~1\window~4\MpShHook.dll
================= FIREFOX ===================
FF - ProfilePath - c:\docume~1\mike\applic~1\mozilla\firefox\profiles\zit26nr1.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage -
hxxp://www.mozilla.org/start/FF - plugin: c:\program files\netscape\communicator\program\plugins\NPAdbESD.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\NPDOC.DLL
FF - plugin: c:\program files\netscape\communicator\program\plugins\NPDocBox.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\npdrmv2.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\npdsplay.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\NPJava11.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\NPJava12.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\NPJava13.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\NPJava14.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\NPJava32.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\NPJPI142_15.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\NPMHPNS.DLL
FF - plugin: c:\program files\netscape\communicator\program\plugins\NPOJI610.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\nppdf32.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\npqtplugin.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\npqtplugin2.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\npqtplugin3.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\npqtplugin4.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\npqtplugin5.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\npqtplugin6.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\nprfxins.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\NPSVGVw.dll
FF - plugin: c:\program files\netscape\communicator\program\plugins\npwmsdrm.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
============= SERVICES / DRIVERS ===============
R?2 drv;drv;c:\windows\system32\svchost.exe -k drv [2007-5-27 14336]
R1 drvdrv;drvdrv;c:\program files\drv\drv.sys [2009-7-3 9344]
R2 WinDefend;Windows Defender;c:\program files\windows defender\MsMpEng.exe [2006-11-3 13592]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-11-6 34064]
=============== Created Last 30 ================
2009-07-04 06:57 208,744 a------- c:\windows\system32\muweb.dll
2009-07-03 12:49 <DIR> --d----- c:\program files\Trend Micro
2009-07-03 12:06 12,544 a------- c:\windows\system32\iehelper.dll
2009-07-03 10:39 <DIR> --d----- c:\program files\drv
2009-07-03 10:39 306,432 a------- c:\windows\sysguard.bak
2009-07-03 10:38 28,672 a------- c:\windows\ld12.bak
==================== Find3M ====================
2009-07-03 18:59 1,632 a------- c:\windows\system32\d3d8caps.dat
2009-05-07 11:44 344,064 a------- c:\windows\system32\localspl.dll
2009-05-07 11:44 344,064 a------- c:\windows\system32\dllcache\localspl.dll
2009-04-27 05:17 18,432 a------- c:\windows\system32\dllcache\iedw.exe
2009-04-17 05:58 1,846,656 a------- c:\windows\system32\win32k.sys
2009-04-17 05:58 1,846,656 a------- c:\windows\system32\dllcache\win32k.sys
2009-04-15 11:11 584,192 a------- c:\windows\system32\rpcrt4.dll
2009-04-15 11:11 584,192 a------- c:\windows\system32\dllcache\rpcrt4.dll
2008-09-20 19:09 48,408 a------- c:\docume~1\mike\applic~1\GDIPFONTCACHEV1.DAT
2005-03-14 13:01 266 ---sh--- c:\program files\desktop.ini
2005-03-14 13:01 11,079 ----h--- c:\program files\folder.htt
============= FINISH: 18:21:06.93 ===============
Gmer.txt:
GMER 1.0.15.14972 -
http://www.gmer.netRootkit scan 2009-07-06 18:29:05
Windows 5.1.2600 Service Pack 2
---- Devices - GMER 1.0.15 ----
AttachedDevice \Driver\Tcpip \Device\Tcp drv.sys (drv/drv)
---- EOF - GMER 1.0.15 ----
You do not have the required permissions to view the files attached to this post.