Here are my logs.
SUPERAntiSpyware Scan Log
http://www.superantispyware.comGenerated 08/01/2010 at 03:50 PM
Application Version : 4.41.1000
Core Rules Database Version : 5298
Trace Rules Database Version: 3110
Scan type : Complete Scan
Total Scan Time : 03:33:46
Memory items scanned : 544
Memory threats detected : 0
Registry items scanned : 6086
Registry threats detected : 0
File items scanned : 99317
File threats detected : 23
Adware.Tracking Cookie
C:\Documents and Settings\Paul2\Cookies\paul2@questionmarket[2].txt
C:\Documents and Settings\Paul2\Cookies\
[email protected][1].txt
C:\Documents and Settings\Paul2\Cookies\paul2@revsci[1].txt
C:\Documents and Settings\Paul2\Cookies\
[email protected][2].txt
C:\Documents and Settings\Paul2\Cookies\paul2@zedo[2].txt
C:\Documents and Settings\Paul2\Cookies\
[email protected][1].txt
C:\Documents and Settings\Paul2\Cookies\paul2@doubleclick[1].txt
C:\Documents and Settings\Paul2\Cookies\paul2@atdmt[2].txt
cdn4.specificclick.net [ C:\Documents and Settings\NetworkService.NT AUTHORITY\Application Data\Macromedia\Flash Player\#SharedObjects\XGVUNPZB ]
media.scanscout.com [ C:\Documents and Settings\NetworkService.NT AUTHORITY\Application Data\Macromedia\Flash Player\#SharedObjects\XGVUNPZB ]
objects.tremormedia.com [ C:\Documents and Settings\NetworkService.NT AUTHORITY\Application Data\Macromedia\Flash Player\#SharedObjects\XGVUNPZB ]
secure-us.imrworldwide.com [ C:\Documents and Settings\NetworkService.NT AUTHORITY\Application Data\Macromedia\Flash Player\#SharedObjects\XGVUNPZB ]
C:\Documents and Settings\NetworkService.NT AUTHORITY\Cookies\system@247realmedia[2].txt
C:\Documents and Settings\NetworkService.NT AUTHORITY\Cookies\system@adbrite[2].txt
C:\Documents and Settings\NetworkService.NT AUTHORITY\Cookies\
[email protected][1].txt
C:\Documents and Settings\NetworkService.NT AUTHORITY\Cookies\system@advertise[2].txt
C:\Documents and Settings\NetworkService.NT AUTHORITY\Cookies\system@bizzclick[1].txt
C:\Documents and Settings\NetworkService.NT AUTHORITY\Cookies\
[email protected][1].txt
C:\Documents and Settings\NetworkService.NT AUTHORITY\Cookies\
[email protected][1].txt
C:\Documents and Settings\NetworkService.NT AUTHORITY\Cookies\
[email protected][2].txt
C:\Documents and Settings\NetworkService.NT AUTHORITY\Cookies\system@questionmarket[1].txt
C:\Documents and Settings\NetworkService.NT AUTHORITY\Cookies\system@realmedia[2].txt
C:\Documents and Settings\NetworkService.NT AUTHORITY\Cookies\system@tribalfusion[2].txt
ComboFix 10-07-31.04 - Paul2 08/01/2010 18:11:19.2.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1415 [GMT -5:00]
Running from: c:\documents and settings\Paul2\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
c:\windows\system32\tmp.reg
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_NPF
((((((((((((((((((((((((( Files Created from 2010-07-01 to 2010-08-01 )))))))))))))))))))))))))))))))
.
2010-07-30 18:18 . 2010-07-30 18:18 578560 -c--a-w- c:\windows\system32\dllcache\user32.dll
2010-07-30 18:15 . 2010-07-30 18:15 -------- d-----w- c:\windows\ERUNT
2010-07-30 18:11 . 2010-07-30 19:47 -------- d-----w- C:\SDFix
2010-07-30 15:28 . 2010-08-01 17:13 63488 ----a-w- c:\documents and settings\Paul2\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
2010-07-30 15:28 . 2010-07-30 15:28 52224 ----a-w- c:\documents and settings\Paul2\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2010-07-30 15:27 . 2010-08-01 17:13 117760 ----a-w- c:\documents and settings\Paul2\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2010-07-30 15:27 . 2010-07-30 15:27 -------- d-----w- c:\documents and settings\Paul2\Application Data\SUPERAntiSpyware.com
2010-07-30 15:27 . 2010-07-30 15:27 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\SUPERAntiSpyware.com
2010-07-29 21:53 . 2010-07-29 21:53 -------- d-----w- c:\documents and settings\Paul2\Local Settings\Application Data\Temp
2010-07-29 20:48 . 2010-07-29 20:48 -------- d-----w- c:\program files\ESET
2010-07-29 20:14 . 2008-04-13 18:39 14592 -c--a-w- c:\windows\system32\dllcache\kbdhid.sys
2010-07-29 20:14 . 2008-04-13 18:39 14592 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2010-07-24 19:04 . 2010-07-24 19:04 -------- d-----w- c:\program files\Apple Software Update
2010-07-24 19:04 . 2010-07-24 19:04 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\Apple
2010-07-24 19:04 . 2010-07-24 19:04 -------- d-----w- c:\documents and settings\Paul2\Local Settings\Application Data\Apple
2010-07-23 21:00 . 2010-07-23 21:01 -------- d-----w- c:\documents and settings\Paul2\Application Data\HpUpdate
2010-07-23 15:56 . 2010-07-23 15:56 -------- d-----w- c:\documents and settings\Paul2\Application Data\HP
2010-07-23 00:59 . 2010-07-23 00:59 503808 ----a-w- c:\documents and settings\Paul2\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-142772d9-n\msvcp71.dll
2010-07-23 00:59 . 2010-07-23 00:59 499712 ----a-w- c:\documents and settings\Paul2\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-142772d9-n\jmc.dll
2010-07-23 00:59 . 2010-07-23 00:59 348160 ----a-w- c:\documents and settings\Paul2\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-142772d9-n\msvcr71.dll
2010-07-22 02:41 . 2010-07-22 02:41 342256 ----a-w- c:\documents and settings\LocalService.NT AUTHORITY\Local Settings\Application Data\FontCache3.0.0.0.dat
2010-07-21 14:22 . 2010-07-21 14:22 921440 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\avgemc.exe
2010-07-21 14:22 . 2010-07-21 14:22 1615200 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\avgssie.dll
2010-07-21 14:22 . 2010-07-21 14:22 1107296 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\avgxpl.dll
2010-07-21 14:22 . 2010-07-21 14:22 4368224 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\avgcorex.dll
2010-07-18 06:38 . 2010-07-18 06:38 -------- d-----w- c:\documents and settings\Paul2\Application Data\Sonic
2010-07-18 00:20 . 2010-07-18 00:20 -------- d-----w- c:\documents and settings\Paul2\Local Settings\Application Data\Apple Computer
2010-07-16 22:58 . 2010-07-16 22:58 -------- d-----w- c:\documents and settings\Paul2\Application Data\Malwarebytes
2010-07-16 22:26 . 2010-07-20 18:43 -------- d-----w- c:\documents and settings\Paul2\Application Data\Corel
2010-07-16 21:52 . 2010-07-16 22:00 -------- d-----w- c:\documents and settings\Paul2\Local Settings\Application Data\Identities
2010-07-16 21:10 . 2010-07-16 21:10 -------- d-----w- c:\documents and settings\Paul2\Application Data\Yahoo!
2010-07-16 21:10 . 2010-07-16 21:31 -------- d-----w- c:\documents and settings\Paul2\Application Data\HPAppData
2010-07-16 21:10 . 2010-07-31 05:53 -------- d-----w- c:\documents and settings\Paul2\Local Settings\Application Data\Google
2010-07-16 21:09 . 2010-07-16 21:09 -------- d-----w- c:\documents and settings\Paul2\Local Settings\Application Data\ArcSoft
2010-07-16 21:09 . 2010-07-16 21:09 -------- d-----w- c:\documents and settings\Paul2\Application Data\ArcSoft
2010-07-16 21:07 . 2010-07-16 21:07 4093792 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\avgui.exe
2010-07-16 21:07 . 2010-07-16 21:07 3951968 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\avguires.dll
2010-07-16 21:07 . 2010-07-16 21:07 2448224 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\avguiadv.dll
2010-07-16 21:07 . 2010-07-16 21:07 2065760 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\avgtray.exe
2010-07-16 21:07 . 2010-07-16 21:07 1278304 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\avgfrw.exe
2010-07-16 21:07 . 2010-07-16 21:07 1247584 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\avgabout.dll
2010-07-16 21:03 . 2010-07-16 21:03 -------- d-----w- c:\documents and settings\LaNora.SMITH\Application Data\Yahoo!
2010-07-16 21:03 . 2010-07-16 21:05 -------- d-----w- c:\documents and settings\LaNora.SMITH\Application Data\HPAppData
2010-07-16 01:32 . 2010-07-16 01:32 -------- d-----w- c:\documents and settings\Administrator.SMITH\Application Data\Malwarebytes
2010-07-16 01:31 . 2010-07-29 22:01 -------- d-----w- c:\documents and settings\Administrator.SMITH\Local Settings\Application Data\Microsoft
2010-07-16 00:23 . 2010-07-16 20:50 -------- d-----w- c:\documents and settings\Owner.SMITH\Local Settings\Application Data\eimpcmngt
2010-07-15 14:50 . 2010-07-15 14:50 74760 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\UniversalDD.sys
2010-07-15 14:50 . 2010-07-15 14:50 30216 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\AVGIDSFilter.sys
2010-07-15 14:50 . 2010-07-15 14:50 26120 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\AVGIDSShim.sys
2010-07-15 14:50 . 2010-07-15 14:50 25096 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\AVGIDSxx.sys
2010-07-15 14:50 . 2010-07-15 14:50 242896 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\avgtdix.sys
2010-07-15 14:50 . 2010-07-15 14:50 122376 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\AVGIDSDriver.sys
2010-07-15 14:50 . 2010-07-15 14:50 216200 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\avgldx86.sys
2010-07-15 14:49 . 2010-07-15 14:49 12536 ----a-w- c:\windows\system32\avgrsstx.dll
2010-07-15 14:46 . 2010-07-15 14:46 624920 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\avgiproxy.exe
2010-07-15 14:46 . 2010-07-15 14:46 1690464 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\avgupd.dll
2010-07-15 14:46 . 2010-07-15 14:46 1038688 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\avgupd.exe
2010-07-15 14:46 . 2010-07-15 14:46 813336 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\avg9\update\backup\avginet.dll
2010-07-13 23:10 . 2010-06-14 14:31 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-30 22:27 . 2006-01-17 20:08 -------- d-----w- c:\program files\Trend Micro
2010-07-30 15:27 . 2008-01-24 21:36 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-07-16 21:08 . 2010-07-16 21:08 161680 ----a-w- c:\documents and settings\Paul2\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-07-16 20:39 . 2009-10-23 21:34 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-07-16 01:22 . 2009-02-10 20:04 -------- d-----w- c:\documents and settings\Owner.SMITH\Application Data\HPAppData
2010-07-15 14:49 . 2009-05-12 21:13 243024 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-07-15 14:49 . 2010-03-15 03:33 25168 ----a-w- c:\windows\system32\drivers\AVGIDSxx.sys
2010-07-15 14:48 . 2009-05-12 21:13 216400 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-07-06 23:24 . 2010-07-16 01:17 144354 ----a-w- c:\windows\PCHealth\HelpCtr\Config\Cache\Personal_32_1033.dat
2010-07-01 06:54 . 2010-03-31 06:49 439816 ----a-w- c:\documents and settings\Owner.SMITH\Application Data\Real\Update\setup3.10\setup.exe
2010-06-22 19:47 . 2010-06-22 19:47 501936 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\Google\Google Toolbar\Update\gtbF23.tmp.exe
2010-06-17 03:26 . 2010-06-17 03:26 503808 ----a-w- c:\documents and settings\Owner.SMITH\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-4c1be6d1-n\msvcp71.dll
2010-06-17 03:26 . 2010-06-17 03:26 499712 ----a-w- c:\documents and settings\Owner.SMITH\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-4c1be6d1-n\jmc.dll
2010-06-17 03:26 . 2010-06-17 03:26 348160 ----a-w- c:\documents and settings\Owner.SMITH\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-4c1be6d1-n\msvcr71.dll
2010-06-14 14:31 . 2008-04-05 23:20 744448 ----a-w- c:\windows\PCHealth\HelpCtr\Binaries\helpsvc.exe
2010-06-08 23:35 . 2010-06-08 23:35 -------- d-----w- c:\documents and settings\Owner.SMITH\Application Data\Uniblue
2010-06-08 23:35 . 2010-06-08 23:35 -------- d-----w- c:\program files\Uniblue
2010-06-02 13:51 . 2009-05-12 21:13 29584 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-05-04 17:20 . 2006-06-23 16:33 832512 ----a-w- c:\windows\system32\wininet.dll
2010-05-04 17:20 . 2008-04-06 19:26 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-05-04 17:20 . 2003-07-16 20:25 17408 ------w- c:\windows\system32\corpol.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2010-04-19 15:25 2117704 ----a-w- c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]
[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-09-15 68856]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\System32\igfxtray.exe" [2003-04-07 155648]
"HotKeysCmds"="c:\windows\System32\hkcmd.exe" [2003-04-07 114688]
"dla"="c:\windows\system32\dla\tfswctrl.exe" [2003-08-06 114741]
"BCMSMMSG"="BCMSMMSG.exe" [2003-08-29 122880]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-11-04 866584]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-10-15 49152]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2007-08-22 80896]
"ReminderApp"="c:\program files\Nova Development\Greeting Card Factory Photo Card Maker\ReminderApp.exe" [2006-11-02 156160]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-03-18 207360]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-03-29 413696]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"MSN Toolbar"="c:\program files\MSN Toolbar\Platform\4.0.0379.0\mswinext.exe" [2009-12-09 240992]
"Microsoft Default Manager"="c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2009-07-17 288080]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2010-07-16 2065760]
c:\documents and settings\Owner.SMITH\Start Menu\Programs\Startup\
Forget Me Not Reminders Tray Icon.lnk - c:\program files\CreataCard\Plus\FMRemind.exe [2009-2-14 189952]
reminder-ScanSoft Product Registration.lnk - c:\program files\ScanSoft\PaperPort\Config\Ereg\REMIND32.EXE [2008-4-7 45056]
c:\documents and settings\All Users.WINDOWS\Start Menu\Programs\Startup\
CreataCard Plus 3 Forget Me Not Reminders Tray Icon.lnk - c:\program files\CreataCard\Plus\FMRemind.exe [2009-2-14 189952]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360]
PHOTOfunSTUDIO.lnk - c:\program files\Panasonic\PHOTOfunSTUDIO\PhAutoRun.exe [2009-10-21 44176]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-07-15 14:49 12536 ----a-w- c:\windows\SYSTEM32\avgrsstx.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgam.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgdiagex.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgemc.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
R0 AVGIDSErHrxpx;AVG9IDSErHr;c:\windows\SYSTEM32\DRIVERS\AVGIDSxx.sys [3/14/2010 10:33 PM 25168]
R0 AvgRkx86;avgrkx86.sys;c:\windows\SYSTEM32\DRIVERS\avgrkx86.sys [3/14/2010 10:33 PM 52872]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\SYSTEM32\DRIVERS\avgldx86.sys [5/12/2009 4:13 PM 216400]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\SYSTEM32\DRIVERS\avgtdix.sys [5/12/2009 4:13 PM 243024]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2/17/2010 1:25 PM 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5/10/2010 1:41 PM 67656]
R2 avg9emc;AVG E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [7/15/2010 9:48 AM 921952]
R2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [7/15/2010 9:49 AM 308136]
R2 avgfws9;AVG Firewall;c:\program files\AVG\AVG9\avgfws9.exe [7/15/2010 9:48 AM 2331032]
R3 Avgfwdx;Avgfwdx;c:\windows\SYSTEM32\DRIVERS\avgfwdx.sys [3/14/2010 10:33 PM 30104]
R3 AVGIDSDriverxpx;AVG9IDSDriver;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys [3/14/2010 10:33 PM 122448]
R3 AVGIDSFilterxpx;AVG9IDSFilter;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys [3/14/2010 10:33 PM 30288]
R3 AVGIDSShimxpx;AVG9IDSShim;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys [3/14/2010 10:33 PM 26192]
S2 AVGIDSAgent;AVG9IDSAgent;c:\program files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe [7/15/2010 9:49 AM 5897808]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [1/26/2010 5:37 PM 135664]
S2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [11/3/2006 7:19 PM 13592]
S3 Avgfwfd;AVG network filter service;c:\windows\SYSTEM32\DRIVERS\avgfwdx.sys [3/14/2010 10:33 PM 30104]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\SYSTEM32\DRIVERS\mbamswissarmy.sys [10/23/2009 4:34 PM 38224]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contents of the 'Scheduled Tasks' folder
2010-07-24 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 17:34]
2010-08-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-26 22:37]
2010-08-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-26 22:37]
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2010-08-01 18:19
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'winlogon.exe'(900)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\WININET.dll
- - - - - - - > 'explorer.exe'(1592)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2010-08-01 18:23:02
ComboFix-quarantined-files.txt 2010-08-01 23:22
Pre-Run: 2,345,451,520 bytes free
Post-Run: 2,307,633,152 bytes free
- - End Of File - - 1D2A55B4D931E8D9A91DD5A78ECDF2FD