So here is my problem so far:
-When starting up the My Documents folder comes up instead of explorer.exe. I have read this boards posts to try and fix it, but nothing does. And my computer will not connect to the internet. In BWMonitor it shows some bandwidth is being used but that may just be because I'm connected to a router.
I have attached some log files for you guys to look at.
Anything helps
2009-08-15 00:22:16 . 2009-08-15 00:22:16 171 ----a-w- C:\Qoobox\Quarantine\Registry_backups\WebBrowser-{A057A204-BACC-4D26-C39E-35F1D2A32EC8}.reg.dat
2009-08-15 00:08:13 . 2009-08-15 00:08:13 852 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Legacy_sysdrv.reg.dat
2009-08-15 00:08:12 . 2009-08-15 00:08:12 766 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Legacy_sys.reg.dat
2009-06-24 20:13:40 . 2009-08-14 20:15:31 163 ----a-w- C:\Qoobox\Quarantine\Registry_backups\BHO-{71848431-9c3e-4217-9f76-4772c41e44e5}.reg.dat
2009-06-24 19:12:53 . 2009-06-24 19:12:53 2,414 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_ossrv.reg.dat
2009-06-24 19:12:53 . 2009-06-24 19:12:53 1,228 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Legacy_ossrv.reg.dat
2009-05-26 23:48:51 . 2008-12-23 07:04:40 66,144 -c--a-w- C:\Qoobox\Quarantine\C\FIRMTOOL.EXE.vir
2009-05-24 20:46:17 . 2009-05-24 20:46:17 562 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\SafeBoot-procexp90.sys.reg.dat
2009-05-24 20:46:15 . 2009-05-24 20:46:15 554 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\Notify-__c00e183c.reg.dat
2009-05-24 20:46:10 . 2009-05-24 20:46:10 174 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-17073754.reg.dat
2009-05-24 20:46:10 . 2009-05-24 20:46:10 174 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-97083746.reg.dat
2009-05-24 20:46:10 . 2009-05-24 20:46:10 146 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-Khowupeyegu.reg.dat
2009-05-24 20:46:09 . 2009-05-24 20:46:09 97 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\HKCU-Run-MirageChat.reg.dat
2009-05-24 20:46:08 . 2009-05-24 20:46:08 885 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\BHO-{31c2a4cc-289d-442a-950c-b33b1b06522b}.reg.dat
2009-05-24 20:34:31 . 2009-05-24 20:34:31 2,558 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\Service_win32x.reg.dat
2009-05-24 20:34:31 . 2009-05-24 20:34:31 1,024 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\Legacy_win32x.reg.dat
2009-05-24 20:24:15 . 2009-05-24 20:24:15 185,173 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\_twex_.exe.zip
2009-05-24 20:13:41 . 2009-05-24 20:13:51 56 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\All Users\Application Data\17073754\pc17073754cnf.vir
2009-05-24 20:13:41 . 2009-05-24 20:24:39 0 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\All Users\Application Data\17073754\pc17073754ins.vir
2009-05-24 20:06:42 . 2009-05-24 20:13:39 38,350 -c--a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\twain32\local.ds.vir
2009-05-24 20:06:42 . 2009-05-24 20:14:05 0 -c--a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\twain32\user.ds.vir
2009-05-24 20:06:33 . 2009-05-24 20:06:40 16 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\wiaserva.log.vir
2009-05-24 20:05:58 . 2009-05-24 20:05:58 0 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\All Users\Application Data\97083746.ini.vir
2009-02-16 22:23:01 . 2009-02-16 22:23:01 469 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\SharedTaskScheduler-{C5BF49A2-94F3-42BD-F434-3604812C8955}.reg.dat
2009-02-16 22:22:57 . 2009-02-16 22:22:58 201 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Explorer_Run-Lsass Service.reg.dat
2009-02-16 22:22:57 . 2009-02-16 22:22:57 149 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-d00fcf18.reg.dat
2009-02-16 22:22:57 . 2009-02-16 22:22:57 169 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-IUpd721.reg.dat
2009-02-16 22:22:57 . 2009-02-16 22:22:57 129 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-prunnet.reg.dat
2009-02-16 22:22:57 . 2009-02-16 22:22:57 160 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-NBKeyScan.reg.dat
2009-02-16 22:22:56 . 2009-02-16 22:22:56 127 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\HKCU-Run-rs32net.reg.dat
2009-02-16 22:22:56 . 2009-02-16 22:22:56 128 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\HKCU-Run-prunnet.reg.dat
2009-02-16 22:22:56 . 2009-02-16 22:22:56 198 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\HKCU-Run-BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}.reg.dat
2009-02-16 22:22:56 . 2009-02-16 22:22:56 164 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\HKCU-Run-msnmsgr.reg.dat
2009-02-16 22:22:55 . 2009-02-16 22:22:55 458 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\BHO-{c5bf49a2-94f3-42bd-f434-3604812c8955}.reg.dat
2009-02-16 22:11:42 . 2009-02-16 22:11:42 2,210 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\Service_restore.reg.dat
2009-02-16 22:11:42 . 2009-02-16 22:11:42 2,050 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\Service_NPF.reg.dat
2009-02-16 22:11:42 . 2009-02-16 22:11:42 2,078 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\Service_ati5fmxx.reg.dat
2009-02-16 22:11:42 . 2009-02-16 22:11:42 1,100 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\Legacy_ati5fmxx.reg.dat
2009-02-16 22:11:25 . 2009-08-15 00:08:06 10,954 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\tcpip.reg
2009-02-16 22:09:40 . 2009-02-16 22:09:40 24,046 -c--a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\_ati5fmxx_.sys.zip
2009-02-16 21:59:39 . 2009-02-16 21:59:39 62,802 -c--a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\_UACycotqgtp_.sys.zip
2009-02-16 21:59:37 . 2009-02-16 21:59:39 1,175 -c--a-w- C:\Qoobox\Quarantine\Registry_backups\Service_UACd.sys.reg.dat
2009-02-16 21:54:48 . 2009-08-15 00:00:02 1,473 -c--a-w- C:\Qoobox\Quarantine\catchme.log
2009-02-16 21:28:46 . 2009-02-16 21:51:50 52,086 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd1516022009.dat.vir
2009-02-16 21:10:42 . 2009-02-16 21:50:09 32,768 -c--a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\ati5fmxx.sys.vir
2009-02-16 21:05:03 . 2009-02-16 21:44:25 9,596 -c--a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\UACegvwavdp.log.vir
2009-02-16 21:05:03 . 2009-02-16 21:05:03 5,189 -c--a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\uacinit.dll.vir
2009-02-16 21:04:53 . 2009-02-16 21:04:53 1 -c--a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\uniq.tll.vir
2009-02-16 21:04:50 . 2009-02-16 21:04:50 127 -c--a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\UACyyveghxq.dat.vir
2009-02-16 20:59:36 . 2009-02-16 20:59:36 51,990 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd1416022009.dat.vir
2009-02-16 19:59:36 . 2009-02-16 19:59:36 51,952 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd1316022009.dat.vir
2009-02-16 18:59:36 . 2009-02-16 18:59:36 51,913 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd1216022009.dat.vir
2009-02-16 17:59:35 . 2009-02-16 17:59:36 51,857 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd1116022009.dat.vir
2009-02-16 16:59:35 . 2009-02-16 16:59:35 51,805 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd1016022009.dat.vir
2009-02-16 15:59:35 . 2009-02-16 15:59:35 51,758 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0916022009.dat.vir
2009-02-16 14:59:34 . 2009-02-16 14:59:34 51,714 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0816022009.dat.vir
2009-02-16 13:59:34 . 2009-02-16 13:59:34 51,676 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0716022009.dat.vir
2009-02-16 12:59:34 . 2009-02-16 12:59:34 51,629 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0616022009.dat.vir
2009-02-16 11:59:33 . 2009-02-16 11:59:33 51,584 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0516022009.dat.vir
2009-02-16 10:59:33 . 2009-02-16 10:59:33 51,547 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0416022009.dat.vir
2009-02-16 09:59:33 . 2009-02-16 09:59:33 51,497 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0316022009.dat.vir
2009-02-16 08:59:32 . 2009-02-16 08:59:32 51,454 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0216022009.dat.vir
2009-02-16 07:59:32 . 2009-02-16 07:59:32 51,416 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0116022009.dat.vir
2009-02-16 06:59:32 . 2009-02-16 06:59:32 51,351 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0016022009.dat.vir
2009-02-16 05:59:31 . 2009-02-16 05:59:31 51,294 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd2315022009.dat.vir
2009-02-16 04:59:31 . 2009-02-16 04:59:31 51,244 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd2215022009.dat.vir
2009-02-16 03:59:31 . 2009-02-16 03:59:31 51,207 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd2115022009.dat.vir
2009-02-16 02:59:31 . 2009-02-16 02:59:31 51,153 -c--a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd20ComboFix 09-02-15.01 - Dennis 2009-02-16 16:06:25.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1919.1479 [GMT -6:00]
Running from: c:\documents and settings\Dennis\Desktop\Shsd.exe.exe
AV: avast! antivirus 4.8.1229 [VPS 081226-0] *On-access scanning disabled* (Outdated)
FW: Norton Internet Worm Protection *disabled*
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Dennis\Application Data\IUpd721
c:\documents and settings\Dennis\Application Data\IUpd721\Logs\scns.log
c:\documents and settings\Dennis\Application Data\NI.GSCNS
c:\documents and settings\Dennis\Application Data\NI.GSCNS\dl.ini
c:\documents and settings\Dennis\Application Data\NI.GSCNS\IUpd721.exe
c:\documents and settings\Dennis\Application Data\NI.GSCNS\settings.ini
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0001022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0002022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0003022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0004022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0005022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0006022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0007022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0008022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0009022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0010022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0011022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0012022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0013022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0014022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0015022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0016022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0020012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0021012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0022012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0023012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0024012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0025012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0026012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0027012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0028012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0029012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0030012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0031012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0101022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0102022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0103022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0104022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0105022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0106022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0107022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0108022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0109022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0110022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0111022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0112022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0113022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0114022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0115022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0116022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0120012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0121012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0122012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0123012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0124012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0125012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0126012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0127012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0128012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0129012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0130012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0131012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0201022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0202022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0203022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0204022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0205022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0206022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0207022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0208022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0209022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0210022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0211022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0212022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0213022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0214022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0215022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0216022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0220012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0221012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0222012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0223012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0224012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0225012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0226012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0227012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0228012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0229012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0230012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0231012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0301022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0302022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0303022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0304022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0305022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0306022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0307022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0308022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0309022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0310022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0311022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0312022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0313022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0314022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0315022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0316022009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0320012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0321012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0322012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0323012009.dat
c:\documents and settings\Dennis\Application Data\NI.GSCNS\UpdateData\upd0324012009.dat
c:\documents and seLogfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:40:53 PM, on 8/14/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\arservice.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\IObit\IObit Security 360\IS360srv.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Digital Media Reader\readericon45G.exe
C:\Program Files\Lexmark 2300 Series\lxcgmon.exe
C:\Program Files\Lexmark 2300 Series\ezprint.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ARPWRMSG.EXE
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\QuickTime\QTTask.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\IObit\IObit Security 360\IS360tray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\BandwidthMonitor\BWMonitor.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Dropbox\dropbox.exe
C:\Program Files\Verizon Wireless\V CAST Music\V CAST Music Monitor.exe
C:\WINDOWS\system32\lxcgcoms.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=15179&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gateway.com/g/startpage.html?Ch=Retail&Br=GTW&Loc=ENG_US&Sys=DTP&M=GT5252
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:7171
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>
O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [readericon] C:\Program Files\Digital Media Reader\readericon45G.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [lxcgmon.exe] "C:\Program Files\Lexmark 2300 Series\lxcgmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2300 Series\ezprint.exe"
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [Reminder] %WINDIR%\Creator\Remind_XP.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [IObit Security 360] C:\Program Files\IObit\IObit Security 360\IS360tray.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [BandwidthMonitor] C:\Program Files\BandwidthMonitor\BWMonitor.exe
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Power2GoExpress] NA
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - Startup: Dropbox.lnk = C:\Program Files\Dropbox\dropbox.exe
O4 - Startup: V CAST Music Monitor.lnk = C:\Program Files\Verizon Wireless\V CAST Music\V CAST Music Monitor.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Download Link Using Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5662/mcfscan.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A2F4D7A4-226B-4C2C-A01F-439D23863FD7}: NameServer = 68.87.66.196,68.87.64.196
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswupdsv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Automatic LiveUpdate Scheduler - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: avast! Antivirus (avast! antivirus) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner (avast! mail scanner) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner (avast! web scanner) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: IS360service - IObit - C:\Program Files\IObit\IObit Security 360\IS360srv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: lxcg_device - - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediMalwarebytes' Anti-Malware 1.40
Database version: 2551
Windows 5.1.2600 Service Pack 3
8/14/2009 9:48:15 PM
mbam-log-2009-08-14 (21-47-38).txt
Scan type: Full Scan (C:\|D:\|L:\|)
Objects scanned: 272504
Time elapsed: 1 hour(s), 12 minute(s), 47 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 3
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP894\A0222801.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\MSINET.oca (Rogue.Trace) -> No action taken.
D:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP894\A0222803.exe (Trojan.Downloader) -> No action taken.ABBYY FineReader 6.0 Sprint
abgx360 v1.0.1
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 7.0
Adobe Shockwave Player
Apple Software Update
Ares 2.0.9
ASIO4ALL
Audacity 1.2.6
avast! Antivirus
AVI DivX to DVD SVCD VCD Converter 2.2.2
Azureus
Azureus Vuze
Bandwidth Monitor 3.2 build 699
CCleaner (remove only)
CoreFLAC Audio Decoder+Source Filter (remove only)
Counter-Strike: Source
CPUID CPU-Z 1.51
Creative Jukebox Driver
Creative MediaSource
Creative MediaSource 5
Creative Removable Disk Manager
Creative System Information
Creative Zen Vision M
CrossLoop 2.44
dBpoweramp [Calculate Audio CRC] Codec
dBpoweramp [Multi Encoder] Codec
dBpoweramp [ReplayGain] Codec
dBpoweramp AAC Encoder
dBpoweramp CLI Encoder
dBpoweramp Dalet Codec
dBpoweramp DSP Effects
dBpoweramp FLAC Codec
dBpoweramp m4a Codec
dBpoweramp m4a Utilities
dBpoweramp m4b Audio book Encoder
dBpoweramp Midi Decoder
dBpoweramp Monkeys Audio Codec
dBpoweramp Mp2 and BwfMp2 codec
dBpoweramp mp3 (Fraunhofer IIS) Codec
dBpoweramp Musepack Codec
dBpoweramp Music Converter
dBpoweramp Ogg Vorbis Codec
dBpoweramp Ogg Vorbis Lancer Encoder
dBpoweramp OptimFROG Codec
dBpoweramp Real Audio (Helix) Encoder
dBpoweramp Shorten Codec
dBpoweramp Speex Codec
dBPoweramp tooLame MP2 codec
dBpoweramp TTA Codec
dBpoweramp Wave64 Codec
dBpoweramp WavPack Codec
dBpoweramp Windows Media Audio 10 Codec
dBpowerAMP Windows Media Audio 9 Codec
DC-Bass Source 1.1.1
Digital Media Reader
DiscAPI (Studio 10)
DivX Web Player
Dropbox
DVD Shrink 3.2
EZ WMV TO AVI Converter 3.00
FLAC 1.2.1b (remove only)
FlashGet(Jetcar)
Gateway Game Console
Ground Control II
GTK+ 2.10.6-1 runtime environment
gtw_logo
HashTab 1.14 for x32
High Definition Audio Driver Package - KB888111
HijackThis 2.0.2
Hotfix 2050 for SQL Server 2000 ENU (KB948110)
Hotfix 2055 for SQL Server 2000 ENU (KB960082)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
HP Photo and Imaging 2.0 - All-in-One
HP Photo and Imaging 2.0 - All-in-One Drivers
HP USB Disk Storage Format Tool
IL Download Manager
ImgBurn
IObit Security 360 Beta 3.1
IrfanView (remove only)
IsoBuster 2.2
J2SE Runtime Environment 5.0 Update 2
Lexmark 2300 Series
LightScribe System Software 1.10.27.1
LiveUpdate BVRP Software
LiveUpdate Notice (Symantec Corporation)
Mega Manager
Memorex exPressit Label Design Studio
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft Away Mode
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Digital Image Starter Edition 2006
Microsoft Encarta Encyclopedia Standard 2003
Microsoft Money 2003
Microsoft Office Standard Edition 2003
Microsoft Picture It! Photo 7.0
Microsoft SQL Server Desktop Engine (PINNACLESYS)
Microsoft Streets and Trips 2002
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Word 2002
Microsoft Works 2003 Setup Launcher
Microsoft Works 7.0
Microsoft Works Suite Add-in for Microsoft Word
MirageBot 8.2
mIRC
mobile PhoneTools
Motorola Driver Installation
Motorola USB Drivers
Mozilla Firefox (3.0.13)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
Napster Burn Engine
Nero 7 Essentials
neroxml
Netflix Movie Viewer
NewsLeecher v3.9 Final
NVIDIA Drivers
Opera 9.64
Penguins!
PFPortChecker 1.0.30
Pinnacle device drivers
Pinnacle Instant DVD Recorder
Pinnacle MediaServer
Polar Bowler
Polar Golfer
Portal
Power2Go 4.0
PowerDVD
PowerISO
proDAD Heroglyph 2.5
QuickTime
RAPID (Studio 10)
Real Alternative 1.9.0
Realtek High Definition Audio Driver
Roxio Easy DVD Copy
SCRABBLE
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB913433)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950759)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953838)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956390)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958215)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB960714)
Security Update for Windows XP (KB960715)
Shockwave
SHOUTcast DNAS (remove only)
SHOUTcast Source DSP 1.9.0 (remove only)
Skype 3.8
SmartSound Quicktracks Plugin
Soft Data Fax Modem with SmartCP
Sonic Encoders
SoulSeek Client 156c
Sound Blaster Audigy Web 2K/XP
Spheres Of Chaos (remove only)
Starcraft
StealthBot v2.6 Revision 3 (remove only)
Steam(TM)
Studio 10
Studio 10 Bonus DVD
Symantec KB-DocID:2003093015493306
TightVNC 1.3.9
Tradewinds
Trillian
Universal Extractor 1.5
Update for Windows Media Player 10 (KB910393)
Update for Windows Media Player 10 (KB913800)
Update for Windows Media Player 10 (KB926251)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB953356)
Update for Windows XP (KB955839)
Update Rollup 2 for Windows XP Media Center Edition 2005
URGE
V CAST Music
V CAST Music Essentials Manager
VCRedistSetup
VDownloader 0.83
Ventrilo Client
VIA Platform Device Manager
VideoLAN VLC media player 0.8.6c
Viewpoint Media Player
Virtual DJ - Atomix Productions
Voodoo Chat Client
WD Diagnostics
WildTangent Web Driver
Winamp
Windows Driver Package - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
Windows Live installer
Windows Live Messenger
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Windows Media Player Firefox Plugin
Windows XP Media Center Edition 2005 KB925766
Windows XP Service Pack 3
WinRAR archiverI solved it. I am a freaking retard. I had a static ip set up. It's all taken care of now. Sorry for wasting anyones time.
You didn't post the complete combofix log, but from seeing what was there, I would be reformatting that pc.
Ah crap. I don't have a Windows XP disc otherwise I'd do it right now. I've been wanting to reformat this thing for the longest time.
PC is still infected.
The restore points are infected too!
Wow, alright I guess I'll get a boot disc, thanks for helping
We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.