Please Help.... Virtumonde, Vundo & Many Other Malicious Trojans

[TheOnlyBigDog]

I ran SpyBot and SuperAntiSpyware Pro and it seemed to find many viruses and trojans. Many of the trojans are Vundo Varients and S&D found all the Virtumondes. Below I have posted the HijackThis logfile. Also... When I try to reboot, all that comes up is my wallpaper. No actual windows screen.:sad:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:04:16 PM, on 10/20/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Yahoo!\Common\YMailAdvisor.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Stardock\CursorFX\CursorFX.exe
C:\Program Files\Creative\MediaSource\GO\CTCMSGo.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: (no name) - {34ea1c70-42cc-42c5-aa29-ec58b95a343e} - (no file)
R3 - URLSearchHook: (no name) - {a33fa729-d155-4b23-842b-2c665ecabdb6} - (no file)
R3 - URLSearchHook: (no name) - {06663B56-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: (no name) - {34ea1c70-42cc-42c5-aa29-ec58b95a343e} - (no file)
O3 - Toolbar: (no name) - {a33fa729-d155-4b23-842b-2c665ecabdb6} - (no file)
O3 - Toolbar: Pando Toolbar - {E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [YMailAdvisor] "C:\Program Files\Yahoo!\Common\YMailAdvisor.exe"
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [CursorFX] "C:\Program Files\Stardock\CursorFX\CursorFX.exe"
O4 - HKCU\..\Run: [Creative MediaSource Go] C:\Program Files\Creative\MediaSource\GO\CTCMSGo.exe /SCB
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: MySurvey Messenger.lnk = C:\Program Files\MySurvey Messenger\MySurveyMessenger.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIC273~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl.sun.com/webapps/download/AutoDL?BundleId=23100
O17 - HKLM\System\CCS\Services\Tcpip\..\{9F1D95B2-101E-4E4D-86A6-CF20C03018FF}: NameServer = 65.41.120.51,208.13.143.36
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - AppInit_DLLs: wbsys.dll rqzreg.dll dvytvt.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 10735 bytes

[Shaba]

Hi TheOnlyBigDog

Rename HijackThis.exe to TheOnlyBigDog.exe and post back a fresh HijackThis log, please :)

[TheOnlyBigDog]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:18:36 AM, on 10/22/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Yahoo!\Common\YMailAdvisor.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Stardock\CursorFX\CursorFX.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: (no name) - {34ea1c70-42cc-42c5-aa29-ec58b95a343e} - (no file)
R3 - URLSearchHook: (no name) - {a33fa729-d155-4b23-842b-2c665ecabdb6} - (no file)
R3 - URLSearchHook: (no name) - {06663B56-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {06663B51-0D73-4f9f-BCC5-4AA941470AFD} - (no file)
O2 - BHO: (no name) - {4F958CA7-9035-41E1-B5BF-EF8F336C1A23} - C:\WINDOWS\system32\pmnlIxwW.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: (no name) - {34ea1c70-42cc-42c5-aa29-ec58b95a343e} - (no file)
O3 - Toolbar: (no name) - {a33fa729-d155-4b23-842b-2c665ecabdb6} - (no file)
O3 - Toolbar: Pando Toolbar - {E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [YMailAdvisor] "C:\Program Files\Yahoo!\Common\YMailAdvisor.exe"
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [CursorFX] "C:\Program Files\Stardock\CursorFX\CursorFX.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: MySurvey Messenger.lnk = C:\Program Files\MySurvey Messenger\MySurveyMessenger.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIC273~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl.sun.com/webapps/download/AutoDL?BundleId=23100
O17 - HKLM\System\CCS\Services\Tcpip\..\{9F1D95B2-101E-4E4D-86A6-CF20C03018FF}: NameServer = 65.41.120.51,208.13.143.36
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - AppInit_DLLs: wbsys.dll rqzreg.dll dvytvt.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 10819 bytes

[Shaba]

To access the Uninstall Manager you would do the following:

1. Start HijackThis
2. Click on the Config button
3. Click on the Misc Tools button
4. Click on the Open Uninstall Manager button.

You will now be presented with a screen similar to the one below:

http://img.bleepingcomputer.com/tutorials/hijackthis/uninstall-man.jpg

5. Click on the Save list... button and specify where you would like to save this file. When you press Save button a notepad will open with the contents of that file. Simply copy and paste the contents of that notepad here on your next reply.

[TheOnlyBigDog]

2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
Acrobat.com
Acrobat.com
Adobe Audition 3.0
Adobe Flash Player ActiveX
Adobe Flash Player Plugin
Adobe Reader 7.1.0
Alcatech BPM Studio Professional v4.9.1
Ancient Castle 3D Screensaver 1.1
Apple Software Update
ASPI Drivers
Babylon
Bejeweled 1.23
BookWorm Deluxe 1.0
Canon iP1600
ccCommon
CD+G AutoName
CompuHost
Cool Edit Pro 2.1
CrazyTalk v5.0 PRO
Creative MediaSource
Creative System Information
Cucusoft MPEG/AVI to DVD/VCD/SVCD/MPEG Converter Pro 4.53
Debs Karaoke Renamer
DecoderCdg 1.000
DesktopX
DualCoreCenter
DVD Decoder Pak for Windows XP
DVD Shrink 3.1.7
East-Tec Eraser 2008 Version 8.9
EncoderMcg 1.001
Eraser
eXtreme Movie Manager 6.1.9.0 - Full Install!
EZ-2-Serve 1.15
Form Fill (Windows Live Toolbar)
FotoMorph
Gaa Moa's Plugins for Cool Edit Pro
Galleon 3D Screensaver 1.3
Gateway151 File-2-Folder
Gateway151 Karaoke Zip Player
GoodMEM
Google Earth
Google Toolbar for Internet Explorer
Google Toolbar for Internet Explorer
Google Updater
HijackThis 2.0.2
Hotfix for Windows XP (KB952287)
iClone v2.5 Studio
Internet Worm Protection
Jasc Animation Shop 3
Java(TM) 6 Update 7
Karaoke Builder Studio 3.x
Karaoke Home Producer
Karaoke Sound Tools
Keyrite
KJ Pro
List Magic v1.0
LiveReg (Symantec Corporation)
LiveUpdate 3.0 (Symantec Corporation)
LockBox
Macromedia Dreamweaver 8
Macromedia Dreamweaver MX 2004
Macromedia Extension Manager
Macromedia Fireworks MX 2004
Macromedia Flash MX 2004
Macromedia FreeHand MXa
Macromedia HomeSite+
Magic DVD Copier Version 4.9 build 2
Magic DVD Ripper V5.3 build 7
Magic ISO Maker v5.4 (build 0239)
Map Button (Windows Live Toolbar)
Microsoft .NET Framework 2.0
Microsoft Access 2002 Runtime
Microsoft Expression Web
Microsoft Expression Web
Microsoft Expression Web MUI (English)
Microsoft Expression Web Service Pack 1 (SP1)
Microsoft Expression Web Service Pack 1 (SP1)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Project 2007 Service Pack 1 (SP1)
Microsoft Office Project 2007 Service Pack 1 (SP1)
Microsoft Office Project MUI (English) 2007
Microsoft Office Project Professional 2007
Microsoft Office Project Professional 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Visio 2007 Service Pack 1 (SP1)
Microsoft Office Visio 2007 Service Pack 1 (SP1)
Microsoft Office Visio MUI (English) 2007
Microsoft Office Visio Professional 2007
Microsoft Office Visio Professional 2007
Microsoft Office Word MUI (English) 2007
Microsoft Office XP Professional with FrontPage
Microsoft Publisher 2002
Microsoft Visual C++ 2005 Redistributable
Microstudio
mIRC
Mozilla Firefox (3.0.3)
MP3 WAV Converter 2.68
MSI Live
MSI Live Update 3
Musicmatch® Jukebox
myBabylon Toolbar
MySurvey Messenger
Nero 7 Demo
Norton AntiVirus 2005
Norton AntiVirus 2005 (Symantec Corporation)
Norton AntiVirus Help
Norton AntiVirus Parent MSI
Norton AntiVirus SYMLT MSI
Norton WMI Update
NVIDIA Drivers
NVIDIA ForceWare Network Access Manager
OneCare Advisor (Windows Live Toolbar)
PaltalkScene
Pando
Pando Toolbar
PlayCDG Pro 2.000
Popup Blocker (Windows Live Toolbar)
Power CD+G Burner
Power CD+G Player Pro
Power CD+G to Video Karaoke Converter
Power CDG Control
Power CDG To AVI Converter
Power CDG To MPG Converter
PowerKaraoke Plus
Quest3D Viewers 3.0e
QuickTime
Rocket Mania 1.0
Sax & Dottys Karaoke Zip Player
SecureDoc
Security Update for 2007 Microsoft Office System (KB951596)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 2.0 (KB928365)
Security Update for Microsoft Office Excel 2007 (KB951546)
Security Update for Microsoft Office OneNote 2007 (KB950130)
Security Update for Microsoft Office PowerPoint 2007 (KB951338)
Security Update for Microsoft Office Publisher 2007 (KB950114)
Security Update for Microsoft Office system 2007 (KB951808)
Security Update for Microsoft Office system 2007 (KB951808)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office Visio 2007 (KB947590)
Security Update for Microsoft Office Word 2007 (KB950113)
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953838)
Security Update for Windows XP (KB953839)
Siglos Karaoke Player/Recorder
Smart Menus (Windows Live Toolbar)
Sound Blaster Audigy 2 ZS
SPBBC
Spybot - Search & Destroy
SUPERAntiSpyware Professional
Symantec
Symantec Script Blocking Installer
SymNet
The_Pirate_Bay Toolbar
TopStyle Lite (Version 3.0)
Update for Microsoft Office Outlook 2007 (KB952142)
Update for Office 2007 (KB946691)
Update for Office 2007 (KB946691)
Update for Office 2007 (KB946691)
Update for Office 2007 (KB946691)
Update for Outlook 2007 Junk Email Filter (kb956080)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Video Edit Magic 3.36
Winamp
Winamp Toolbar for Firefox
Winamp Toolbar for Internet Explorer
WindowBlinds
Windows Internet Explorer 7
Windows Live Favorites for Windows Live Toolbar
Windows Live Messenger
Windows Live Outlook Toolbar (Windows Live Toolbar)
Windows Live Sign-in Assistant
Windows Live Toolbar
Windows Live Toolbar
Windows Live Toolbar Extension (Windows Live Toolbar)
Windows Live Toolbar Feed Detector (Windows Live Toolbar)
Windows Media Format Runtime
Windows XP Service Pack 3
WinRAR archiver
WinZip
WMIinfo
Yahoo! Install Manager
Yahoo! Internet Mail
Yahoo! Mail Advisor
Yahoo! Messenger
Yahoo! Toolbar

[Shaba]

IMPORTANT I notice there are signs of one or more P2P (Peer to Peer) File Sharing Programs on your computer.

Pando
Pando Toolbar

I'd like you to read the this thread (http://forums.spybot.info/showthread.php?t=282).

Please go to Control Panel > Add/Remove Programs and uninstall the programs listed above (in red).

Please run a new uninstall list scan when finished and post the log back here.

[TheOnlyBigDog]

2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
Acrobat.com
Acrobat.com
Adobe Audition 3.0
Adobe Flash Player ActiveX
Adobe Flash Player Plugin
Adobe Reader 7.1.0
Alcatech BPM Studio Professional v4.9.1
Ancient Castle 3D Screensaver 1.1
Apple Software Update
ASPI Drivers
Babylon
Bejeweled 1.23
BookWorm Deluxe 1.0
Canon iP1600
ccCommon
CD+G AutoName
CompuHost
Cool Edit Pro 2.1
CrazyTalk v5.0 PRO
Creative MediaSource
Creative System Information
Cucusoft MPEG/AVI to DVD/VCD/SVCD/MPEG Converter Pro 4.53
Debs Karaoke Renamer
DecoderCdg 1.000
DesktopX
DualCoreCenter
DVD Decoder Pak for Windows XP
DVD Shrink 3.1.7
East-Tec Eraser 2008 Version 8.9
EncoderMcg 1.001
Eraser
eXtreme Movie Manager 6.1.9.0 - Full Install!
EZ-2-Serve 1.15
Form Fill (Windows Live Toolbar)
FotoMorph
Gaa Moa's Plugins for Cool Edit Pro
Galleon 3D Screensaver 1.3
Gateway151 File-2-Folder
Gateway151 Karaoke Zip Player
GoodMEM
Google Earth
Google Toolbar for Internet Explorer
Google Toolbar for Internet Explorer
Google Updater
HijackThis 2.0.2
Hotfix for Windows XP (KB952287)
iClone v2.5 Studio
Internet Worm Protection
Jasc Animation Shop 3
Java(TM) 6 Update 7
Karaoke Builder Studio 3.x
Karaoke Home Producer
Karaoke Sound Tools
Keyrite
KJ Pro
List Magic v1.0
LiveReg (Symantec Corporation)
LiveUpdate 3.0 (Symantec Corporation)
LockBox
Macromedia Dreamweaver 8
Macromedia Dreamweaver MX 2004
Macromedia Extension Manager
Macromedia Fireworks MX 2004
Macromedia Flash MX 2004
Macromedia FreeHand MXa
Macromedia HomeSite+
Magic DVD Copier Version 4.9 build 2
Magic DVD Ripper V5.3 build 7
Magic ISO Maker v5.4 (build 0239)
Map Button (Windows Live Toolbar)
Microsoft .NET Framework 2.0
Microsoft Access 2002 Runtime
Microsoft Expression Web
Microsoft Expression Web
Microsoft Expression Web MUI (English)
Microsoft Expression Web Service Pack 1 (SP1)
Microsoft Expression Web Service Pack 1 (SP1)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Project 2007 Service Pack 1 (SP1)
Microsoft Office Project 2007 Service Pack 1 (SP1)
Microsoft Office Project MUI (English) 2007
Microsoft Office Project Professional 2007
Microsoft Office Project Professional 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Visio 2007 Service Pack 1 (SP1)
Microsoft Office Visio 2007 Service Pack 1 (SP1)
Microsoft Office Visio MUI (English) 2007
Microsoft Office Visio Professional 2007
Microsoft Office Visio Professional 2007
Microsoft Office Word MUI (English) 2007
Microsoft Office XP Professional with FrontPage
Microsoft Publisher 2002
Microsoft Visual C++ 2005 Redistributable
Microstudio
mIRC
Mozilla Firefox (3.0.3)
MP3 WAV Converter 2.68
MSI Live
MSI Live Update 3
Musicmatch® Jukebox
myBabylon Toolbar
MySurvey Messenger
Nero 7 Demo
Norton AntiVirus 2005
Norton AntiVirus 2005 (Symantec Corporation)
Norton AntiVirus Help
Norton AntiVirus Parent MSI
Norton AntiVirus SYMLT MSI
Norton WMI Update
NVIDIA Drivers
NVIDIA ForceWare Network Access Manager
OneCare Advisor (Windows Live Toolbar)
PaltalkScene
PlayCDG Pro 2.000
Popup Blocker (Windows Live Toolbar)
Power CD+G Burner
Power CD+G Player Pro
Power CD+G to Video Karaoke Converter
Power CDG Control
Power CDG To AVI Converter
Power CDG To MPG Converter
PowerKaraoke Plus
Quest3D Viewers 3.0e
QuickTime
Rocket Mania 1.0
Sax & Dottys Karaoke Zip Player
SecureDoc
Security Update for 2007 Microsoft Office System (KB951596)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 2.0 (KB928365)
Security Update for Microsoft Office Excel 2007 (KB951546)
Security Update for Microsoft Office OneNote 2007 (KB950130)
Security Update for Microsoft Office PowerPoint 2007 (KB951338)
Security Update for Microsoft Office Publisher 2007 (KB950114)
Security Update for Microsoft Office system 2007 (KB951808)
Security Update for Microsoft Office system 2007 (KB951808)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office Visio 2007 (KB947590)
Security Update for Microsoft Office Word 2007 (KB950113)
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953838)
Security Update for Windows XP (KB953839)
Siglos Karaoke Player/Recorder
Smart Menus (Windows Live Toolbar)
Sound Blaster Audigy 2 ZS
SPBBC
Spybot - Search & Destroy
SUPERAntiSpyware Professional
Symantec
Symantec Script Blocking Installer
SymNet
The_Pirate_Bay Toolbar
TopStyle Lite (Version 3.0)
Update for Microsoft Office Outlook 2007 (KB952142)
Update for Office 2007 (KB946691)
Update for Office 2007 (KB946691)
Update for Office 2007 (KB946691)
Update for Office 2007 (KB946691)
Update for Outlook 2007 Junk Email Filter (kb956080)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Video Edit Magic 3.36
Winamp
Winamp Toolbar for Firefox
Winamp Toolbar for Internet Explorer
WindowBlinds
Windows Internet Explorer 7
Windows Live Favorites for Windows Live Toolbar
Windows Live Messenger
Windows Live Outlook Toolbar (Windows Live Toolbar)
Windows Live Sign-in Assistant
Windows Live Toolbar
Windows Live Toolbar
Windows Live Toolbar Extension (Windows Live Toolbar)
Windows Live Toolbar Feed Detector (Windows Live Toolbar)
Windows Media Format Runtime
Windows XP Service Pack 3
WinRAR archiver
WinZip
WMIinfo
Yahoo! Install Manager
Yahoo! Internet Mail
Yahoo! Mail Advisor
Yahoo! Messenger
Yahoo! Toolbar

[TheOnlyBigDog]

Hey Shaba... it's 3:20am here and I really need to get some shut eye. I will be back on here no later than 10am. TC and have a progressive day.:rolleyes:

[Shaba]

We will continue with ComboFix. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Please ensure you read this guide carefully and install the Recovery Console first.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once installed, you should see a blue screen prompt that says:

The Recovery Console was successfully installed.

Please continue as follows:


Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link (http://www.bleepingcomputer.com/forums/topic114351.html)
Remember to re-enable them afterwards.


Click Yes to allow ComboFix to continue scanning for malware.


When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New HijackThis log.

A word of warning: Please do not run ComboFix on your own. This tool is not a toy and not for everyday use.

[TheOnlyBigDog]

ComboFix 08-10-21.05 - TheOnlyBigDog 2008-10-22 9:46:39.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1576 [GMT -7:00]
Running from: C:\Documents and Settings\TheOnlyBigDog\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\TheOnlyBigDog\Application Data\inst.exe
C:\WINDOWS\21794.exe
C:\WINDOWS\system32\cmqlcfgc.exe
C:\WINDOWS\system32\dpvpbxep.ini
C:\WINDOWS\system32\swsguhab.exe
C:\WINDOWS\system32\TCKmTvut.ini
C:\WINDOWS\system32\TCKmTvut.ini2
C:\WINDOWS\system32\tmmuveub.ini
C:\WINDOWS\system32\vfcrcgmf.ini
C:\WINDOWS\system32\WwxIlnmp.ini
C:\WINDOWS\system32\WwxIlnmp.ini2
M:\autorun.inf

.
((((((((((((((((((((((((( Files Created from 2008-09-22 to 2008-10-22 )))))))))))))))))))))))))))))))
.

2008-10-20 15:04 . 2008-10-20 15:04 <DIR> d-------- C:\Program Files\Trend Micro
2008-10-20 11:18 . 2008-10-20 11:18 153 --a------ C:\WINDOWS\wininit.ini
2008-10-19 12:35 . 2008-10-19 12:36 <DIR> d-------- C:\Program Files\Galleon 3D Screensaver
2008-10-19 12:26 . 2008-10-19 12:26 <DIR> d-------- C:\Program Files\Ancient Castle 3D Screensaver
2008-10-18 22:25 . 2008-10-19 18:22 0 --a------ C:\FileOut.Cns
2008-10-18 22:25 . 2008-10-19 18:22 0 --a------ C:\FileIn.Cns
2008-10-17 22:58 . 2008-10-17 22:58 <DIR> d-------- C:\Program Files\Microsoft ActiveSync
2008-10-17 22:57 . 2008-10-17 22:57 <DIR> d-------- C:\Program Files\Common Files\L&H
2008-10-14 14:56 . 2008-10-14 15:09 <DIR> d-------- C:\Documents and Settings\TheOnlyBigDog\Contacts
2008-10-14 14:46 . 2008-10-14 14:46 <DIR> d-------- C:\Program Files\Windows Live Favorites
2008-10-14 14:46 . 2008-10-14 14:46 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Windows Live Toolbar
2008-10-14 14:45 . 2008-10-14 14:46 <DIR> d-------- C:\Program Files\Windows Live Toolbar
2008-10-14 14:44 . 2008-10-14 14:44 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2008-10-14 14:44 . 2008-10-14 14:44 <DIR> d-------- C:\Program Files\MSN Messenger
2008-10-14 12:12 . 2008-10-14 12:15 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Yahoo!
2008-10-14 12:03 . 2008-10-14 12:03 <DIR> d-------- C:\Documents and Settings\TheOnlyBigDog\Application Data\Yahoo!
2008-10-14 12:03 . 2008-10-14 12:04 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2008-10-14 12:02 . 2008-10-14 12:12 <DIR> d-------- C:\Program Files\Yahoo!
2008-10-13 00:43 . 2008-10-13 00:43 <DIR> d-------- C:\Documents and Settings\TheOnlyBigDog\Application Data\EAST Technologies
2008-10-13 00:42 . 2008-10-13 00:42 <DIR> d-------- C:\Program Files\East-Tec Eraser 2008
2008-10-10 19:00 . 2005-06-15 03:00 102,400 --a------ C:\WINDOWS\system32\tsccvid.dll
2008-10-10 18:59 . 2008-10-10 19:02 <DIR> d-------- C:\Program Files\eXtreme Movie Manager
2008-10-10 18:59 . 2000-05-21 23:00 1,009,336 --a------ C:\WINDOWS\system32\Mschrt20.ocx
2008-10-10 18:56 . 2008-10-10 18:56 <DIR> d-------- C:\Program Files\Cucusoft
2008-10-10 18:52 . 2008-10-10 18:52 <DIR> d-------- C:\Program Files\Deskshare
2008-10-10 18:52 . 2008-10-10 18:52 352,256 --a------ C:\WINDOWS\eSellerateEngine.dll
2008-10-09 17:07 . 2008-06-23 09:57 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll
2008-10-09 17:07 . 2007-04-17 02:32 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat
2008-10-09 17:07 . 2007-03-07 22:10 991,232 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui
2008-10-09 17:07 . 2008-06-23 09:57 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll
2008-10-09 17:07 . 2008-06-23 09:57 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll
2008-10-09 17:07 . 2008-06-23 09:57 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll
2008-10-09 17:07 . 2008-06-23 09:57 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll
2008-10-09 17:07 . 2008-06-23 09:57 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2008-10-09 17:07 . 2008-06-23 02:20 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-10-05 02:32 . 2008-10-17 20:02 <DIR> d-------- C:\Documents and Settings\TheOnlyBigDog\Application Data\settingsbytewindow
2008-10-05 02:32 . 2008-10-05 10:20 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Drv Audio Dog About
2008-10-04 00:15 . 2008-10-04 00:15 <DIR> d-------- C:\Documents and Settings\TheOnlyBigDog\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2008-10-03 12:49 . 2008-10-05 10:22 <DIR> d-------- C:\Program Files\NOS
2008-10-03 12:49 . 2008-10-05 10:22 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\NOS
2008-10-03 12:33 . 2008-10-07 12:09 <DIR> d-------- C:\Program Files\LimeWire
2008-10-03 12:33 . 2008-10-07 12:09 <DIR> d-------- C:\Documents and Settings\TheOnlyBigDog\Application Data\LimeWire
2008-09-29 09:31 . 2008-09-29 09:31 <DIR> d--h----- C:\WINDOWS\PIF
2008-09-28 19:08 . 2008-09-28 19:08 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
2008-09-28 01:23 . 2008-04-13 11:45 32,128 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2008-09-28 01:23 . 2008-04-13 11:45 32,128 --a--c--- C:\WINDOWS\system32\dllcache\usbccgp.sys
2008-09-27 09:00 . 2008-09-27 09:00 3,568,756 --a------ C:\WINDOWS\system32\xa107106953.exe
2008-09-27 09:00 . 2008-09-27 09:00 3,568,756 --a------ C:\WINDOWS\system32\xa107106593.exe
2008-09-27 09:00 . 2008-09-27 09:00 172,032 --a------ C:\WINDOWS\system32\xwr12179.dll
2008-09-27 09:00 . 2008-09-27 09:00 172,032 --a------ C:\WINDOWS\system32\wr12179.dll
2008-09-27 08:48 . 2008-09-27 08:48 <DIR> d-------- C:\Program Files\Act-3D
2008-09-27 08:48 . 2008-09-27 08:48 2,825,407 --a------ C:\WINDOWS\system32\xa106367609.exe
2008-09-27 08:48 . 2008-09-27 08:48 2,825,407 --a------ C:\WINDOWS\system32\xa106367328.exe
2008-09-27 08:48 . 2008-09-27 08:48 172,032 --a------ C:\WINDOWS\system32\xwr84718.dll
2008-09-27 08:48 . 2008-09-27 08:48 172,032 --a------ C:\WINDOWS\system32\wr84718.dll
2008-09-27 08:44 . 2008-09-27 09:01 <DIR> d-------- C:\Program Files\thriXXX
2008-09-27 08:44 . 2008-09-27 08:44 28,962,712 --a------ C:\WINDOWS\system32\xa106137906.exe
2008-09-27 08:44 . 2008-09-27 08:44 28,962,712 --a------ C:\WINDOWS\system32\xa106137328.exe
2008-09-27 08:44 . 2008-09-27 08:44 28,962,712 --a------ C:\WINDOWS\system32\xa106131421.exe
2008-09-27 08:44 . 2008-09-27 08:44 28,962,712 --a------ C:\WINDOWS\system32\xa106124546.exe
2008-09-27 08:44 . 2008-09-27 08:44 172,032 --a------ C:\WINDOWS\system32\xwr47437.dll
2008-09-27 08:44 . 2008-09-27 08:44 172,032 --a------ C:\WINDOWS\system32\wr47437.dll
2008-09-26 19:10 . 2008-09-26 19:10 <DIR> d-------- C:\Documents and Settings\TheOnlyBigDog\Application Data\Jasc
2008-09-26 19:08 . 2008-09-26 19:08 <DIR> d-------- C:\Program Files\Jasc Software Inc
2008-09-26 19:03 . 2008-09-26 19:03 80 -r-hs---- C:\WINDOWS\ICSET20.BIN
2008-09-26 18:21 . 2008-09-26 18:21 <DIR> d-------- C:\Program Files\MagicISO
2008-09-26 17:07 . 2008-09-26 19:02 <DIR> d-------- C:\Program Files\Reallusion
2008-09-26 17:07 . 2008-09-26 17:07 80 -r-hs---- C:\WINDOWS\CT5PRET.BIN
2008-09-26 17:05 . 2008-09-26 17:05 <DIR> d-------- C:\Documents and Settings\TheOnlyBigDog\Application Data\InstallShield
2008-09-26 17:03 . 2008-09-26 17:04 <DIR> d-------- C:\Program Files\Digital Photo Software
2008-09-26 17:03 . 2008-10-17 10:44 <DIR> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2008-09-26 10:36 . 2008-09-21 18:52 7,336,328 --a------ C:\WINDOWS\40175.exe
2008-09-26 04:57 . 2008-09-26 04:57 <DIR> d-------- C:\Documents and Settings\TheOnlyBigDog\Application Data\Reallusion
2008-09-26 03:05 . 2008-09-26 03:05 <DIR> d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-09-26 01:22 . 2008-09-26 01:22 <DIR> d-------- C:\Program Files\ALCATech
2008-09-26 00:27 . 2008-09-26 00:27 <DIR> d-------- C:\Program Files\QuickTime
2008-09-26 00:27 . 2008-09-26 00:27 <DIR> d-------- C:\Program Files\Common Files\Apple
2008-09-26 00:27 . 2008-09-26 00:27 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-09-26 00:26 . 2008-09-26 00:26 <DIR> d-------- C:\Program Files\Apple Software Update
2008-09-26 00:26 . 2008-09-26 00:26 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple
2008-09-25 14:54 . 2008-09-25 14:54 <DIR> d-------- C:\Documents and Settings\TheOnlyBigDog\LocalLow
2008-09-25 14:54 . 2008-09-25 14:54 <DIR> d-------- C:\Documents and Settings\TheOnlyBigDog\Application Data\TVU Networks
2008-09-25 14:54 . 2008-09-25 14:54 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\TVU Networks
2008-09-25 14:43 . 2008-09-25 14:43 0 --a------ C:\WINDOWS\nsreg.dat
2008-09-25 13:34 . 2008-07-18 22:07 270,880 --a------ C:\WINDOWS\system32\mucltui.dll
2008-09-25 13:34 . 2008-07-18 22:07 210,976 --a------ C:\WINDOWS\system32\muweb.dll
2008-09-25 13:34 . 2008-07-18 22:07 29,728 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-09-25 10:36 . 2008-10-09 13:24 47 --a------ C:\WINDOWS\popcinfo.dat
2008-09-25 10:32 . 2008-09-25 10:47 <DIR> d-------- C:\Program Files\PopCap Games
2008-09-25 10:32 . 2000-12-08 21:59 122,880 --a------ C:\WINDOWS\UnGins.exe
2008-09-25 10:23 . 2008-09-25 10:24 <DIR> d-------- C:\Program Files\Microsoft Expression
2008-09-25 10:17 . 2006-10-26 19:56 32,592 --a------ C:\WINDOWS\system32\msonpmon.dll
2008-09-25 10:16 . 2008-09-25 10:16 <DIR> d-------- C:\Program Files\MSBuild
2008-09-25 10:16 . 2008-09-25 10:16 <DIR> d-------- C:\Program Files\Microsoft Works
2008-09-25 10:15 . 2008-09-25 10:15 <DIR> d-------- C:\Program Files\Microsoft.NET
2008-09-25 10:14 . 2008-10-17 23:02 <DIR> d-------- C:\WINDOWS\SHELLNEW
2008-09-25 10:14 . 2008-09-25 10:14 <DIR> d-------- C:\Program Files\Microsoft Visual Studio 8
2008-09-25 10:14 . 2008-10-18 14:38 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-09-25 10:13 . 2008-09-25 10:13 <DIR> dr-h----- C:\MSOCache
2008-09-25 01:33 . 2008-09-25 01:33 <DIR> d-------- C:\Program Files\Musicmatch
2008-09-25 01:33 . 2008-09-25 01:33 <DIR> d-------- C:\Documents and Settings\TheOnlyBigDog\Application Data\Musicmatch
2008-09-25 01:33 . 2006-01-19 12:05 108,544 --a------ C:\WINDOWS\system32\pxcpyi64.exe
2008-09-25 01:33 . 2006-01-19 12:05 104,960 --a------ C:\WINDOWS\system32\pxinsi64.exe
2008-09-24 10:25 . 2008-09-24 10:25 0 --a------ C:\WINDOWS\WB.ini
2008-09-24 09:18 . 2008-09-24 09:23 <DIR> d-------- C:\Documents and Settings\TheOnlyBigDog\Application Data\Stardock
2008-09-24 09:18 . 2008-09-24 09:18 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Stardock
2008-09-24 09:14 . 2008-04-26 16:14 42,672 --a------ C:\WINDOWS\system32\wbsys.dll
2008-09-24 09:13 . 2008-09-24 09:32 <DIR> d-------- C:\Program Files\Stardock
2008-09-24 09:13 . 2008-09-24 17:24 <DIR> d-------- C:\Program Files\Common Files\Stardock
2008-09-23 16:09 . 2008-09-23 16:18 <DIR> d-------- C:\Program Files\CompuHost
2008-09-23 14:59 . 2008-09-23 14:59 <DIR> d-------- C:\Program Files\MagicDVDCopier
2008-09-23 14:59 . 2008-09-23 14:59 <DIR> d-------- C:\Documents and Settings\TheOnlyBigDog\Application Data\Vso
2008-09-23 14:59 . 2008-09-23 14:59 47,360 --a------ C:\WINDOWS\system32\drivers\pcouffin.sys
2008-09-23 14:59 . 2008-09-23 14:59 47,360 --a------ C:\Documents and Settings\TheOnlyBigDog\Application Data\pcouffin.sys
2008-09-23 14:53 . 2008-09-23 14:53 <DIR> d-------- C:\Program Files\MagicDVDRipper

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-21 14:07 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater
2008-10-20 18:11 --------- d-----w C:\Program Files\BitTorrent
2008-10-20 06:54 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-10-20 00:20 --------- d-----w C:\Program Files\Common Files\Macromedia
2008-10-20 00:19 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-10-20 00:19 --------- d-----w C:\Program Files\Macromedia
2008-10-18 22:41 --------- d-----w C:\Program Files\Gateway151 Karaoke Zip Player
2008-10-18 21:17 --------- d-----w C:\Program Files\MP3 WAV Converter
2008-10-18 20:01 --------- d-----w C:\Program Files\Winamp
2008-10-18 07:49 --------- d-----w C:\Documents and Settings\TheOnlyBigDog\Application Data\U3
2008-10-14 06:05 --------- d-----w C:\Documents and Settings\TheOnlyBigDog\Application Data\Ahead
2008-10-10 00:15 --------- d-----w C:\Program Files\Norton AntiVirus
2008-10-05 17:20 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-10-03 19:18 --------- d-----w C:\Documents and Settings\All Users\Application Data\Babylon
2008-10-03 08:20 --------- d-----w C:\Documents and Settings\TheOnlyBigDog\Application Data\Babylon
2008-09-30 06:08 --------- d-----w C:\Program Files\Kjpro
2008-09-25 00:25 --------- d-----w C:\Program Files\Eraser
2008-09-20 01:47 --------- d-----w C:\Program Files\Debs Karaoke Renamer
2008-09-20 01:47 --------- d-----w C:\Documents and Settings\TheOnlyBigDog\Application Data\Debs Karaoke Renamer
2008-09-20 01:40 --------- d-----w C:\Program Files\Gateway151 File-2-Folder
2008-09-20 01:29 --------- d-----w C:\Program Files\Java
2008-09-20 01:28 --------- d-----w C:\Program Files\Common Files\Java
2008-09-18 05:03 --------- d-----w C:\Program Files\Common Files\Adobe Systems Shared
2008-09-18 05:03 --------- d-----w C:\Program Files\Common Files\Adobe
2008-09-17 09:28 --------- d-----w C:\Program Files\Doblon
2008-09-16 22:56 --------- d-----w C:\Program Files\Karaoke Zip Scanner
2008-09-15 18:32 --------- d-----w C:\Program Files\Access 97 Runtime
2008-09-14 19:08 --------- d-----w C:\Program Files\Damar Systems
2008-09-14 00:49 --------- d-----w C:\Documents and Settings\TheOnlyBigDog\Application Data\AdobeUM
2008-09-14 00:11 --------- d--h--w C:\Documents and Settings\All Users\Application Data\CanonBJ
2008-09-13 23:29 --------- d-----w C:\Program Files\Mp3+G Toolz
2008-09-13 18:17 --------- d-----w C:\Program Files\Sax & Dottys Karaoke Zip Player
2008-09-13 09:57 --------- d-----w C:\Documents and Settings\All Users\Application Data\FLEXnet
2008-09-13 03:06 --------- d-----w C:\Documents and Settings\TheOnlyBigDog\Application Data\Paltalk
2008-09-13 03:05 --------- d-----w C:\Program Files\Paltalk Messenger
2008-09-12 21:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\Macrovision
2008-09-12 20:46 --------- d-----w C:\Program Files\Common Files\Macromedia Shared
2008-09-12 20:45 --------- d-----w C:\Program Files\Common Files\Vbox
2008-09-12 20:45 --------- d-----w C:\Program Files\Bradbury
2008-09-12 19:51 --------- d-----w C:\Program Files\MySurvey Messenger
2008-09-11 23:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-09-11 23:16 --------- d-----w C:\Program Files\SUPERAntiSpyware
2008-09-11 23:16 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-09-11 23:16 --------- d-----w C:\Documents and Settings\TheOnlyBigDog\Application Data\SUPERAntiSpyware.com
2008-09-11 23:16 --------- d-----w C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2008-09-11 05:48 --------- d-----w C:\Program Files\KJ Pro
2008-09-11 05:46 --------- d-----w C:\Program Files\Microsoft Access Runtime
2008-09-11 05:46 --------- d-----w C:\Program Files\Common Files\Damar Systems
2008-09-11 05:37 --------- d-----w C:\Program Files\Common Files\Doblon
2008-09-11 04:32 --------- d-----w C:\Program Files\Common Files\Ahead
2008-09-11 04:31 --------- d-----w C:\Program Files\Nero
2008-09-11 04:28 --------- d-----w C:\Program Files\Ahead
2008-09-10 23:06 --------- d-----w C:\Program Files\The_Pirate_Bay
2008-09-10 09:58 --------- d-----w C:\Program Files\myBabylon
2008-09-10 09:58 --------- d-----w C:\Program Files\Conduit
2008-09-10 09:58 --------- d-----w C:\Program Files\Babylon
2008-09-10 09:44 --------- d-----w C:\Program Files\Google
2008-09-10 09:41 --------- d-----w C:\Documents and Settings\TheOnlyBigDog\Application Data\NeroVision
2008-09-10 09:37 --------- d-----w C:\Program Files\DVD Shrink
2008-09-10 09:37 --------- d-----w C:\Documents and Settings\All Users\Application Data\DVD Shrink
2008-09-10 09:33 --------- d-----w C:\Program Files\CDRWIN3
2008-09-10 09:09 --------- d-----w C:\Program Files\RoxBox
2008-09-10 09:06 --------- d-----w C:\Program Files\Common Files\cdrdao
2008-09-10 08:45 --------- d-----w C:\Program Files\CAVS
2008-09-10 08:41 --------- d-----w C:\Program Files\Common Files\Borland Shared
2008-09-10 08:41 --------- d-----w C:\Program Files\CD+G AutoName
2008-09-10 08:40 --------- d-----w C:\Program Files\WinCDG Pro 2
2008-09-10 08:37 720,896 ----a-w C:\WINDOWS\iun6002.exe
2008-09-10 08:33 --------- d-----w C:\Program Files\Micro Technology Unlimited
2008-09-10 08:25 --------- d-----w C:\Program Files\Gaa Moa's Plugins for Cool Edit Pro
2008-09-10 08:25 --------- d-----w C:\Program Files\coolpro2
2008-09-10 08:23 --------- d-----w C:\Documents and Settings\TheOnlyBigDog\Application Data\Syntrillium
2008-09-09 21:36 --------- d-----w C:\Program Files\MP3+G Toolz .NET
2008-09-09 09:37 --------- d-----w C:\Program Files\Winamp Toolbar
2008-09-09 09:37 --------- d-----w C:\Documents and Settings\All Users\Application Data\Winamp Toolbar
2008-09-09 09:27 --------- d-----w C:\Documents and Settings\LocalService\Application Data\Symantec
2008-09-09 08:53 --------- d-----w C:\Program Files\SymNetDrv
2008-09-09 08:53 --------- d-----w C:\Program Files\Symantec
2008-09-09 08:44 4,608 ----a-w C:\WINDOWS\system32\drivers\symlcbrd.sys
2008-09-09 08:40 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2008-09-09 08:31 --------- d-----w C:\Documents and Settings\TheOnlyBigDog\Application Data\Symantec
2008-09-09 08:20 --------- d-----w C:\Program Files\NVIDIA Corporation
2008-09-09 08:20 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-09-09 08:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\nView_Profiles
2008-09-08 23:00 --------- d-----w C:\Program Files\MSI
2008-09-08 22:48 --------- d-----w C:\Documents and Settings\TheOnlyBigDog\Application Data\Creative
2008-09-08 22:40 --------- d-----w C:\Program Files\Creative
2008-09-08 21:46 --------- d-----w C:\Program Files\microsoft frontpage
.

<pre>
----a-w 6,596,329 2002-02-17 21:02:02 C:\Need to Edit\Programs To Check\PROGRAMS 2\Apps-Programs-Utilities\cd+g_autoname_v1_0_full_\CD+G AutoName v1_0 Full .exe
----a-w 6,596,329 2002-02-17 20:02:02 C:\unzipped\cd+g_autoname_v1_0_full_\CD+G AutoName v1_0 Full .exe
----a-w 23,510,720 2007-12-12 00:59:50 C:\unzipped\Microsoft .NET Framework Version 2.0\Microsoft .NET Framework Version 2.0 Redistributable Package (x86)\Microsoft .NET Framework Version 2.0 .exe
----a-w 7,608,700 2003-03-08 08:09:06 C:\unzipped\traktor_studio_mixer_best_dj_software_ever_\TRAKTOR STUDIO MIXER BEST DJ SOFTWARE EVER .exe
</pre>


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-09-03 1576176]
"CursorFX"="C:\Program Files\Stardock\CursorFX\CursorFX.exe" [2008-07-07 416768]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-13 15360]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-09-10 39408]
"Messenger (Yahoo!)"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" [2008-09-19 4347120]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352]
"Eraser RiskMonitor"="" [N/A]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-06-28 8466432]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2008-01-17 58728]
"YMailAdvisor"="C:\Program Files\Yahoo!\Common\YMailAdvisor.exe" [2008-06-05 125208]
"nwiz"="nwiz.exe" [2007-06-28 C:\WINDOWS\system32\nwiz.exe]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "C:\Program Files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-07-23 16:28 352256 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MCPClient]
2005-01-31 15:13 49152 C:\PROGRA~1\COMMON~1\Stardock\MCPStub.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2008-09-17 08:05 210168 C:\Program Files\Stardock\Object Desktop\WindowBlinds\WbSrv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=wbsys.dll rqzreg.dll dvytvt.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.HFYU"= huffyuv.dll
"VIDC.ZLIB"= avizlib.dll
"VIDC.CSCD"= camcodec.dll
"vidc.ffds"= C:\PROGRA~1\ffdshow\ffdshow.ax

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^DualCoreCenter.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\DualCoreCenter.lnk
backup=C:\WINDOWS\pss\DualCoreCenter.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^PalTalk.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\PalTalk.lnk
backup=C:\WINDOWS\pss\PalTalk.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^SecureDoc.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\SecureDoc.lnk
backup=C:\WINDOWS\pss\SecureDoc.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^WinZip Quick Pick.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
backup=C:\WINDOWS\pss\WinZip Quick Pick.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^TheOnlyBigDog^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
path=C:\Documents and Settings\TheOnlyBigDog\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
backup=C:\WINDOWS\pss\OneNote 2007 Screen Clipper and Launcher.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\40175]
--a------ 2008-09-21 18:52 7336328 C:\WINDOWS\40175.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
--a------ 2005-10-28 16:25 94208 C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Creative MediaSource Go]
--a------ 2003-05-29 09:50 131072 C:\Program Files\Creative\MediaSource\Go\CTCMSGo.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eraser]
--a------ 2003-07-25 11:15 536576 C:\Program Files\Eraser\eraser.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
--a------ 2007-08-24 07:00 33648 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LiveMonitor]
--a------ 2006-09-05 16:45 497152 C:\Program Files\MSI\Live Update 3\LMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MimBoot]
--a------ 2006-01-19 11:06 11776 C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
--a------ 2008-04-13 17:12 1695232 C:\Program Files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2001-07-09 10:50 155648 C:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando]
C:\Program Files\Pando Networks\Pando\pando.exe [N/A]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Plus Cake]
C:\DOCUME~1\THEONL~1\APPLIC~1\SETTIN~1\Dvd Media Active.exe [N/A]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-09-06 15:09 413696 C:\Program Files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteCenter]
--a------ 2003-06-12 09:47 135168 C:\Program Files\Creative\MediaSource\RemoteControl\RcMan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
-rahs---- 2008-09-16 12:16 1833296 C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2008-06-10 04:27 144784 C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
--a------ 2008-09-10 01:50 39408 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
C:\Program Files\Winamp\winampa.exe [N/A]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
--a------ 2007-06-28 09:43 1626112 C:\WINDOWS\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableNotifications"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\RealmEX\\mIRC.ExCurSioN.exe"=
"C:\\Need to Edit\\Pando Networks\\Pando\\pando.exe"=
"C:\\EZ-2-Serve\\mirc.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"57890:TCP"= 57890:TCP:Pando P2P TCP Listening Port
"57890:UDP"= 57890:UDP:Pando P2P UDP Listening Port
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

R2 SVKP;SVKP;C:\WINDOWS\system32\SVKP.sys [2008-09-17 2368]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4e3cde5a-9302-11dd-a383-001d604b2cb3}]
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL resycled\boot.com c:
\Shell\Open\command - K:\resycled\boot.com c:
.
Contents of the 'Scheduled Tasks' folder

2008-10-18 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]

2008-10-22 C:\WINDOWS\Tasks\BF450B8182A2B679.job
- c:\docume~1\theonl~1\applic~1\settin~1\Bend Third Locks.exe []

2008-10-22 C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE [2006-09-27 17:39]

2008-10-18 C:\WINDOWS\Tasks\Norton AntiVirus - Scan my computer - TheOnlyBigDog.job
- C:\PROGRA~1\NORTON~1\Navw32.exe [2005-10-19 12:54]
.
- - - - ORPHANS REMOVED - - - -

URLSearchHooks-{34ea1c70-42cc-42c5-aa29-ec58b95a343e} - (no file)
URLSearchHooks-{a33fa729-d155-4b23-842b-2c665ecabdb6} - (no file)
BHO-{4F958CA7-9035-41E1-B5BF-EF8F336C1A23} - C:\WINDOWS\system32\pmnlIxwW.dll
Toolbar-{34ea1c70-42cc-42c5-aa29-ec58b95a343e} - (no file)
Toolbar-{a33fa729-d155-4b23-842b-2c665ecabdb6} - (no file)
WebBrowser-{34EA1C70-42CC-42C5-AA29-EC58B95A343E} - (no file)
WebBrowser-{A33FA729-D155-4B23-842B-2C665ECABDB6} - (no file)


.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\TheOnlyBigDog\Application Data\Mozilla\Firefox\Profiles\4u0oqdty.default\
FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-amo&p=
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://my.yahoo.com/
FF -: plugin - C:\Program Files\Adobe\Acrobat 7.0\Reader\browser\nppdf32.dll
FF -: plugin - C:\Program Files\Google\Google Updater\2.4.1368.5602\npCIDetect13.dll
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npbittorrent.dll
FF -: plugin - C:\Program Files\Yahoo!\Shared\npYState.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-22 09:51:21
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\system32\winlogon.exe
-> C:\WINDOWS\system32\ginamsi.dll
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Common Files\Symantec Shared\CCSETMGR.EXE
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCEVTMGR.EXE
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\system32\CTSVCCDA.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Norton AntiVirus\NAVAPSVC.EXE
C:\Program Files\Norton AntiVirus\IWP\NPFMNTOR.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe
.
**************************************************************************
.
Completion time: 2008-10-22 10:00:12 - machine was rebooted
ComboFix-quarantined-files.txt 2008-10-22 17:00:09

Pre-Run: 265,997,393,920 bytes free
Post-Run: 265,922,007,040 bytes free

425 --- E O F --- 2008-10-10 08:02:49

[TheOnlyBigDog]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:01:44 AM, on 10/22/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Yahoo!\Common\YMailAdvisor.exe
C:\Program Files\Stardock\CursorFX\CursorFX.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [YMailAdvisor] "C:\Program Files\Yahoo!\Common\YMailAdvisor.exe"
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [CursorFX] "C:\Program Files\Stardock\CursorFX\CursorFX.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: MySurvey Messenger.lnk = C:\Program Files\MySurvey Messenger\MySurveyMessenger.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIC273~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl.sun.com/webapps/download/AutoDL?BundleId=23100
O17 - HKLM\System\CCS\Services\Tcpip\..\{9F1D95B2-101E-4E4D-86A6-CF20C03018FF}: NameServer = 65.41.120.51,208.13.143.36
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - AppInit_DLLs: wbsys.dll rqzreg.dll dvytvt.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 9538 bytes

[Shaba]

I see from your combofix log that you have BitTorrent and LimeWire installed.

So I wonder that why they are not listed in uninstall list?

[TheOnlyBigDog]

Those were uninstalled over a year ago. Very strange

[Shaba]

No, it looks like that BitTorrent is used like two days ago and LimeWire earlier this month.

There is also some evidence about log editing.

Is there anything you want to say about that issue?

[TheOnlyBigDog]

This infected computer hasnt been online for over a month.... I bought a new laptop, which is what I am posting on. I do not have a router or a wireless connection. So, I can't see how it says it was using those proggies, when they aren't even installed. What it is picking up is probably a folder that was used for those particular proggies. Because there are some files in each of those folders.

[TheOnlyBigDog]

You are right... I just asked my g/f if she has d/l anything on my desktop. She said that she d/l and reinstalled bit comet, then after she got her d/l, she uninstalled it. I'm taking it as she also has done the same thing with the limewire; even though she doesn't lay a claim to it. But I am glad you noticed that. Now I can make sure a password is needed to even boot up windows and to me that is a good enough reason why.

[Shaba]

OK that makes sense.

How about log editing part?

I don't think that is correct folder:

C:\Need to Edit\Pando Networks\Pando\pando.exe

[TheOnlyBigDog]

What is Log Editing? & the need to edit folder is what was copied from another drive... havn't had time to go thru that folder yet. Everything in it came from my old puter, where windows crashed and was moved around so the drive could be formatted and windows re-installed.

[Shaba]

I see.

Folder name just made no sense to me.

Do you recognize these files/folders?

2008-09-27 09:00 . 2008-09-27 09:00 3,568,756 --a------ C:\WINDOWS\system32\xa107106953.exe
2008-09-27 09:00 . 2008-09-27 09:00 3,568,756 --a------ C:\WINDOWS\system32\xa107106593.exe
2008-09-27 09:00 . 2008-09-27 09:00 172,032 --a------ C:\WINDOWS\system32\xwr12179.dll
2008-09-27 09:00 . 2008-09-27 09:00 172,032 --a------ C:\WINDOWS\system32\wr12179.dll
2008-09-27 08:48 . 2008-09-27 08:48 <DIR> d-------- C:\Program Files\Act-3D
2008-09-27 08:48 . 2008-09-27 08:48 2,825,407 --a------ C:\WINDOWS\system32\xa106367609.exe
2008-09-27 08:48 . 2008-09-27 08:48 2,825,407 --a------ C:\WINDOWS\system32\xa106367328.exe
2008-09-27 08:48 . 2008-09-27 08:48 172,032 --a------ C:\WINDOWS\system32\xwr84718.dll
2008-09-27 08:48 . 2008-09-27 08:48 172,032 --a------ C:\WINDOWS\system32\wr84718.dll
2008-09-27 08:44 . 2008-09-27 09:01 <DIR> d-------- C:\Program Files\thriXXX
2008-09-27 08:44 . 2008-09-27 08:44 28,962,712 --a------ C:\WINDOWS\system32\xa106137906.exe
2008-09-27 08:44 . 2008-09-27 08:44 28,962,712 --a------ C:\WINDOWS\system32\xa106137328.exe
2008-09-27 08:44 . 2008-09-27 08:44 28,962,712 --a------ C:\WINDOWS\system32\xa106131421.exe
2008-09-27 08:44 . 2008-09-27 08:44 28,962,712 --a------ C:\WINDOWS\system32\xa106124546.exe
2008-09-27 08:44 . 2008-09-27 08:44 172,032 --a------ C:\WINDOWS\system32\xwr47437.dll
2008-09-27 08:44 . 2008-09-27 08:44 172,032 --a------ C:\WINDOWS\system32\wr47437.dll

[TheOnlyBigDog]

No! I have no idea what those are.:sad:

[Shaba]

Thanks for info.

We will continue with this:

Disable resident protections (Antivirus...); you'll re-enable them after the scan

DownloadLop S&D here (http://eric.71.mespages.googlepages.com/LopSD.exe)

Double-click Lop S&D.exe
Choose the language, then choose Option 1 (Search)
Wait till the end of the scan
Post the log which is created: (C:\lopR.txt)

[TheOnlyBigDog]

--------------------\\ Lop S&D 4.2.4-6 XP/Vista

Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 6000+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : TheOnlyBigDog ( Administrator )
BOOT : Normal boot
Antivirus : Norton AntiVirus 2005 2005 (Not Activated)
Firewall : Norton Internet Worm Protection 2005 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total : 465 Go Free : 253 Go
D:\ (Local Disk) - NTFS - Total : 465 Go Free : 204 Go
E:\ (Local Disk) - NTFS - Total : 349 Go Free : 88 Go
F:\ (Local Disk) - NTFS - Total : 698 Go Free : 121 Go
G:\ (Local Disk) - NTFS - Total : 349 Go Free : 166 Go
H:\ (CD or DVD)
I:\ (CD or DVD)
J:\ (CD or DVD)
L:\ (CD or DVD) - CDFS - Total : 0 Go Free : 0 Go
M:\ (USB) - FAT32 - Total : 7654 Mo Free : 6 Go

"C:\Lop SD" ( MAJ : 20-10-2008|20:35 )
Option : [1] ( Wed 10/22/2008|13:16 )

--------------------\\ Listing folders in APPLIC~1

[10/04/2008|12:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Adobe
[09/26/2008|12:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Apple
[09/26/2008|12:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Apple Computer
[10/03/2008|12:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Babylon
[09/13/2008|05:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> CanonBJ
[10/05/2008|10:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Drv Audio Dog About
[09/10/2008|02:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> DVD Shrink
[09/13/2008|02:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> FLEXnet
[09/10/2008|01:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Google
[10/21/2008|07:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Google Updater
[10/19/2008|05:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Macromedia
[09/12/2008|02:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Macrovision
[10/17/2008|10:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Microsoft
[10/18/2008|02:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Microsoft Help
[10/05/2008|10:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> NOS
[09/09/2008|01:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> nView_Profiles
[09/28/2008|07:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> PC Drivers HeadQuarters
[09/11/2008|04:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Spybot - Search & Destroy
[09/24/2008|09:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Stardock
[09/11/2008|04:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> SUPERAntiSpyware.com
[09/09/2008|01:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Symantec
[10/22/2008|01:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> TEMP
[09/25/2008|02:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> TVU Networks
[09/09/2008|02:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Winamp Toolbar
[09/09/2008|12:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Windows Genuine Advantage
[10/14/2008|02:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Windows Live Toolbar
[10/14/2008|12:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Yahoo!
[10/14/2008|12:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Yahoo! Companion

[09/08/2008|02:46] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> Microsoft

[09/08/2008|02:49] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Microsoft
[09/09/2008|02:27] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Symantec

[09/08/2008|02:48] C:\DOCUME~1\NETWOR~1\APPLIC~1\<DIR> Microsoft

[10/04/2008|12:15] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Adobe
[09/13/2008|05:49] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> AdobeUM
[10/13/2008|11:05] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Ahead
[10/03/2008|01:20] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Babylon
[10/04/2008|12:15] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[09/08/2008|03:48] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Creative
[09/19/2008|06:47] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Debs Karaoke Renamer
[10/13/2008|12:43] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> EAST Technologies
[09/10/2008|03:46] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Google
[09/08/2008|02:51] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Identities
[09/26/2008|05:05] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> InstallShield
[09/26/2008|07:10] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Jasc
[10/19/2008|05:21] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Macromedia
[10/14/2008|02:56] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Microsoft
[09/25/2008|02:43] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Mozilla
[09/25/2008|01:33] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Musicmatch
[09/10/2008|02:41] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> NeroVision
[09/12/2008|08:06] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Paltalk
[09/26/2008|04:57] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Reallusion
[10/17/2008|08:02] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> settingsbytewindow
[09/24/2008|09:23] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Stardock
[09/19/2008|06:29] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Sun
[09/11/2008|04:16] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> SUPERAntiSpyware.com
[09/09/2008|01:31] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Symantec
[09/10/2008|01:23] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Syntrillium
[09/25/2008|02:54] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> TVU Networks
[10/22/2008|12:18] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> U3
[09/23/2008|02:59] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Vso
[09/10/2008|01:43] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> WinRAR
[10/14/2008|12:03] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Yahoo!

--------------------\\ Scheduled Tasks located in C:\WINDOWS\Tasks

[10/22/2008 12:32 PM][--a------] C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job
[10/22/2008 01:00 PM][--ah-----] C:\WINDOWS\tasks\BF450B8182A2B679.job
[10/18/2008 08:35 AM][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[10/17/2008 09:18 PM][--a------] C:\WINDOWS\tasks\Norton AntiVirus - Scan my computer - TheOnlyBigDog.job
[10/22/2008 09:50 AM][--ah-----] C:\WINDOWS\tasks\SA.DAT
[02/28/2006 05:00 AM][-r-h-----] C:\WINDOWS\tasks\desktop.ini

( BF450B8182A2B679.job )=( c:\docume~1\theonl~1\applic~1\settin~1\BendThirdLocks.exe )

--------------------\\ Listing Folders in C:\Program Files

[09/15/2008|11:32] C:\Program Files\<DIR> Access 97 Runtime
[09/27/2008|08:48] C:\Program Files\<DIR> Act-3D
[10/03/2008|01:03] C:\Program Files\<DIR> Adobe
[09/10/2008|09:28] C:\Program Files\<DIR> Ahead
[09/26/2008|01:22] C:\Program Files\<DIR> ALCATech
[09/26/2008|12:26] C:\Program Files\<DIR> Apple Software Update
[09/10/2008|02:58] C:\Program Files\<DIR> Babylon
[09/12/2008|01:45] C:\Program Files\<DIR> Bradbury
[09/10/2008|01:45] C:\Program Files\<DIR> CAVS
[09/10/2008|01:41] C:\Program Files\<DIR> CD+G AutoName
[09/10/2008|02:33] C:\Program Files\<DIR> CDRWIN3
[10/22/2008|09:47] C:\Program Files\<DIR> Common Files
[09/08/2008|02:44] C:\Program Files\<DIR> ComPlus Applications
[09/23/2008|04:18] C:\Program Files\<DIR> CompuHost
[09/10/2008|02:58] C:\Program Files\<DIR> Conduit
[09/10/2008|01:25] C:\Program Files\<DIR> coolpro2
[09/08/2008|03:40] C:\Program Files\<DIR> Creative
[10/10/2008|06:56] C:\Program Files\<DIR> Cucusoft
[09/14/2008|12:08] C:\Program Files\<DIR> Damar Systems
[09/19/2008|06:47] C:\Program Files\<DIR> Debs Karaoke Renamer
[10/10/2008|06:52] C:\Program Files\<DIR> Deskshare
[09/26/2008|05:04] C:\Program Files\<DIR> Digital Photo Software
[09/17/2008|02:28] C:\Program Files\<DIR> Doblon
[09/10/2008|02:37] C:\Program Files\<DIR> DVD Shrink
[10/13/2008|12:42] C:\Program Files\<DIR> East-Tec Eraser 2008
[09/24/2008|05:25] C:\Program Files\<DIR> Eraser
[10/10/2008|07:02] C:\Program Files\<DIR> eXtreme Movie Manager
[09/10/2008|01:25] C:\Program Files\<DIR> Gaa Moa's Plugins for Cool Edit Pro
[09/19/2008|06:40] C:\Program Files\<DIR> Gateway151 File-2-Folder
[10/18/2008|03:41] C:\Program Files\<DIR> Gateway151 Karaoke Zip Player
[09/10/2008|02:44] C:\Program Files\<DIR> Google
[10/19/2008|05:19] C:\Program Files\<DIR> InstallShield Installation Information
[10/10/2008|03:05] C:\Program Files\<DIR> Internet Explorer
[09/26/2008|07:08] C:\Program Files\<DIR> Jasc Software Inc
[09/19/2008|06:29] C:\Program Files\<DIR> Java
[09/16/2008|03:56] C:\Program Files\<DIR> Karaoke Zip Scanner
[09/10/2008|10:48] C:\Program Files\<DIR> KJ Pro
[09/29/2008|11:08] C:\Program Files\<DIR> Kjpro
[10/19/2008|05:19] C:\Program Files\<DIR> Macromedia
[09/23/2008|02:59] C:\Program Files\<DIR> MagicDVDCopier
[09/23/2008|02:53] C:\Program Files\<DIR> MagicDVDRipper
[09/26/2008|06:21] C:\Program Files\<DIR> MagicISO
[09/09/2008|05:23] C:\Program Files\<DIR> Messenger
[09/10/2008|01:33] C:\Program Files\<DIR> Micro Technology Unlimited
[09/10/2008|10:46] C:\Program Files\<DIR> Microsoft Access Runtime
[10/17/2008|10:58] C:\Program Files\<DIR> Microsoft ActiveSync
[09/26/2008|03:05] C:\Program Files\<DIR> Microsoft CAPICOM 2.1.0.2
[09/25/2008|10:24] C:\Program Files\<DIR> Microsoft Expression
[09/08/2008|02:46] C:\Program Files\<DIR> microsoft frontpage
[10/17/2008|10:57] C:\Program Files\<DIR> Microsoft Office
[09/25/2008|10:16] C:\Program Files\<DIR> Microsoft Visual Studio
[09/25/2008|10:14] C:\Program Files\<DIR> Microsoft Visual Studio 8
[09/25/2008|10:16] C:\Program Files\<DIR> Microsoft Works
[09/25/2008|10:15] C:\Program Files\<DIR> Microsoft.NET
[09/09/2008|01:03] C:\Program Files\<DIR> Movie Maker
[10/20/2008|08:23] C:\Program Files\<DIR> Mozilla Firefox
[10/18/2008|02:17] C:\Program Files\<DIR> MP3 WAV Converter
[09/13/2008|04:29] C:\Program Files\<DIR> Mp3+G Toolz
[09/09/2008|02:36] C:\Program Files\<DIR> MP3+G Toolz .NET
[09/25/2008|10:16] C:\Program Files\<DIR> MSBuild
[09/08/2008|04:00] C:\Program Files\<DIR> MSI
[09/08/2008|02:43] C:\Program Files\<DIR> MSN
[09/08/2008|02:44] C:\Program Files\<DIR> MSN Gaming Zone
[10/14/2008|02:44] C:\Program Files\<DIR> MSN Messenger
[09/25/2008|01:33] C:\Program Files\<DIR> Musicmatch
[09/10/2008|02:58] C:\Program Files\<DIR> myBabylon
[09/12/2008|12:51] C:\Program Files\<DIR> MySurvey Messenger
[09/10/2008|09:31] C:\Program Files\<DIR> Nero
[09/09/2008|12:59] C:\Program Files\<DIR> NetMeeting
[10/09/2008|05:15] C:\Program Files\<DIR> Norton AntiVirus
[09/09/2008|01:20] C:\Program Files\<DIR> NVIDIA Corporation
[09/09/2008|12:59] C:\Program Files\<DIR> Outlook Express
[09/12/2008|08:05] C:\Program Files\<DIR> Paltalk Messenger
[09/25/2008|10:47] C:\Program Files\<DIR> PopCap Games
[09/26/2008|12:27] C:\Program Files\<DIR> QuickTime
[09/26/2008|07:02] C:\Program Files\<DIR> Reallusion
[09/10/2008|02:09] C:\Program Files\<DIR> RoxBox
[09/13/2008|11:17] C:\Program Files\<DIR> Sax & Dottys Karaoke Zip Player
[10/05/2008|10:20] C:\Program Files\<DIR> Spybot - Search & Destroy
[09/24/2008|09:32] C:\Program Files\<DIR> Stardock
[09/11/2008|04:16] C:\Program Files\<DIR> SUPERAntiSpyware
[09/09/2008|01:53] C:\Program Files\<DIR> Symantec
[09/09/2008|01:53] C:\Program Files\<DIR> SymNetDrv
[09/10/2008|04:06] C:\Program Files\<DIR> The_Pirate_Bay
[10/20/2008|03:04] C:\Program Files\<DIR> Trend Micro
[10/18/2008|01:01] C:\Program Files\<DIR> Winamp
[09/09/2008|02:37] C:\Program Files\<DIR> Winamp Toolbar
[09/10/2008|01:40] C:\Program Files\<DIR> WinCDG Pro 2
[10/14/2008|02:46] C:\Program Files\<DIR> Windows Live Favorites
[10/14/2008|02:46] C:\Program Files\<DIR> Windows Live Toolbar
[09/09/2008|01:04] C:\Program Files\<DIR> Windows Media Player
[09/09/2008|12:59] C:\Program Files\<DIR> Windows NT
[09/08/2008|02:45] C:\Program Files\<DIR> WindowsUpdate
[09/10/2008|01:17] C:\Program Files\<DIR> WinRAR
[09/09/2008|02:33] C:\Program Files\<DIR> WinZip
[09/08/2008|02:46] C:\Program Files\<DIR> xerox
[10/14/2008|12:12] C:\Program Files\<DIR> Yahoo!

--------------------\\ Listing Folders in C:\Program Files\Common Files

[09/17/2008|10:03] C:\Program Files\Common Files\<DIR> Adobe
[09/17/2008|10:03] C:\Program Files\Common Files\<DIR> Adobe Systems Shared
[09/10/2008|09:32] C:\Program Files\Common Files\<DIR> Ahead
[09/26/2008|12:27] C:\Program Files\Common Files\<DIR> Apple
[09/10/2008|01:41] C:\Program Files\Common Files\<DIR> Borland Shared
[09/10/2008|02:06] C:\Program Files\Common Files\<DIR> cdrdao
[09/10/2008|10:46] C:\Program Files\Common Files\<DIR> Damar Systems
[09/10/2008|10:47] C:\Program Files\Common Files\<DIR> Designer
[09/10/2008|10:37] C:\Program Files\Common Files\<DIR> Doblon
[09/09/2008|01:20] C:\Program Files\Common Files\<DIR> InstallShield
[09/19/2008|06:28] C:\Program Files\Common Files\<DIR> Java
[10/17/2008|10:57] C:\Program Files\Common Files\<DIR> L&H
[10/19/2008|05:20] C:\Program Files\Common Files\<DIR> Macromedia
[09/12/2008|01:46] C:\Program Files\Common Files\<DIR> Macromedia Shared
[10/17/2008|11:00] C:\Program Files\Common Files\<DIR> Microsoft Shared
[09/08/2008|02:45] C:\Program Files\Common Files\<DIR> MSSoap
[09/08/2008|07:28] C:\Program Files\Common Files\<DIR> ODBC
[09/08/2008|02:45] C:\Program Files\Common Files\<DIR> Services
[09/08/2008|07:28] C:\Program Files\Common Files\<DIR> SpeechEngines
[09/24/2008|05:24] C:\Program Files\Common Files\<DIR> Stardock
[10/19/2008|11:54] C:\Program Files\Common Files\<DIR> Symantec Shared
[10/17/2008|10:57] C:\Program Files\Common Files\<DIR> System
[09/12/2008|01:45] C:\Program Files\Common Files\<DIR> Vbox
[09/11/2008|04:16] C:\Program Files\Common Files\<DIR> Wise Installation Wizard

--------------------\\ Process

( 46 Processes )

... OK !

--------------------\\ Searching with S_Lop

No Lop folder found !

--------------------\\ Searching for Lop Files - Folders

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Drv Audio Dog About
C:\DOCUME~1\THEONL~1\APPLIC~1\settin~1
C:\WINDOWS\Tasks\BF450B8182A2B679.job

--------------------\\ Searching within the Registry

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Checking the Hosts file

Hosts file CLEAN


--------------------\\ Searching for hidden files with Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-22 13:16:50
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Searching for other infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous\Microsoft Keygen.exe
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\3D Haunted Halloween Screensaver v1[1].0 Keygen - s0m.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Autumn Time 3D Screensaver v1[1].0 Keygen - s0m.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Autumn Time 3D Screensaver v1[2].0 Keygen - s0m.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Christmas Eve 3D Screensaver v1[1].0 Keygen - s0m.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Christmas_Eve_3D_Screensaver_v1[1].0_Keygen_s0m.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Dinosaurs 3D Screensaver v1[1].0 Keygen - s0m.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Fish_Aquarium_3D_Screensaver_v1[1].0_Incl_Keygen_by_SoS.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\nightcity3dscreensaverv1.0keygens0m.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Night_City_3D_Screensaver_1_Crack_by_FFF.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Planet_Earth_3D_Screensaver_v1[1].1_Incl_Keygen_by_SoS.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Winter Night 3D Screensaver v1[1].0 Keygen - s0m.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\THEMES\3dmatrixcorridorsscreensaverkeygenknetus.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\THEMES\Army_of_Darkness_3D_Screensaver_v1[1].0_WinALL_Incl_Keygen_by_CSS.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\THEMES\Marine Life 3D Screensaver v1[1].0 Keygen - s0m.zip
C:\DOCUME~1\THEONL~1\My Documents\My Music\BIGDOG'S MP3'S\BIGDOG'S MUSIC\MP3s\MP3'S\Little Bitty Crack In His Heart - Ruby Lovett.mp3
C:\DOCUME~1\THEONL~1\My Documents\My Music\BIGDOG'S MP3'S\BIGDOG'S MUSIC\NEEDS EDITING\Neil Diamond - The Best Of\11 - Neil Diamond - Cracklin' Rose.mp3
C:\DOCUME~1\THEONL~1\My Documents\My Received Files\Billion_Chords_v1[1].0_incl_KeyGen_by_BEAT.zip
C:\DOCUME~1\THEONL~1\My Documents\My Received Files\Crasy_Talk_pro_5.1_with_keygen.4354468.TPB.torrent
C:\DOCUME~1\THEONL~1\My Documents\My Received Files\Magic DVD Ripper 5[1].3 Build 5_KeyGen_Under SEH Team.rar
C:\DOCUME~1\THEONL~1\My Documents\Text Files\Fast Defrag Pro Keygen.txt
C:\DOCUME~1\THEONL~1\My Documents\Text Files\How To Crack Any Type Of Registration Protection.txt
C:\DOCUME~1\THEONL~1\My Documents\Text Files\mmjb crack.txt
C:\DOCUME~1\THEONL~1\My Documents\Text Files\musicmatch crack.txt
C:\DOCUME~1\THEONL~1\Recent\Nero Burning Rom 7 Ultra Edition Incl Keygen & Serial.lnk


[F:3][D:0]-> C:\DOCUME~1\THEONL~1\LOCALS~1\Temp
[F:1][D:0]-> C:\DOCUME~1\THEONL~1\Cookies
[F:1][D:0]-> C:\DOCUME~1\THEONL~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - Wed 10/22/2008|13:17 - Option : [1]

--------------------\\ Scan completed at 13:17:09

[Shaba]

Restart Lop S&D

This time choose Option 2 (Fix + Hosts)
Don't close the window during suppression!
Post the log which is created: (C:\lopR.txt)

[TheOnlyBigDog]

Good morning Shaba. Here is the requested lop.txt log2...

--------------------\\ Lop S&D 4.2.4-6 XP/Vista

Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 6000+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : TheOnlyBigDog ( Administrator )
BOOT : Normal boot
Antivirus : Norton AntiVirus 2005 2005 (Not Activated)
Firewall : Norton Internet Worm Protection 2005 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total : 465 Go Free : 253 Go
D:\ (Local Disk) - NTFS - Total : 465 Go Free : 204 Go
E:\ (Local Disk) - NTFS - Total : 349 Go Free : 88 Go
F:\ (Local Disk) - NTFS - Total : 698 Go Free : 121 Go
G:\ (Local Disk) - NTFS - Total : 349 Go Free : 166 Go
H:\ (CD or DVD)
I:\ (CD or DVD)
J:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 20-10-2008|20:35 )
Option : [2] ( Thu 10/23/2008| 5:01 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ FIX

Deleted! - C:\WINDOWS\Tasks\BF450B8182A2B679.job
Deleted! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Drv Audio Dog About
Deleted! - C:\DOCUME~1\THEONL~1\APPLIC~1\settin~1

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing folders in APPLIC~1

[10/04/2008|12:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Adobe
[09/26/2008|12:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Apple
[09/26/2008|12:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Apple Computer
[10/03/2008|12:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Babylon
[09/13/2008|05:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> CanonBJ
[09/10/2008|02:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> DVD Shrink
[09/13/2008|02:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> FLEXnet
[09/10/2008|01:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Google
[10/21/2008|07:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Google Updater
[10/19/2008|05:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Macromedia
[09/12/2008|02:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Macrovision
[10/17/2008|10:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Microsoft
[10/18/2008|02:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Microsoft Help
[10/05/2008|10:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> NOS
[09/09/2008|01:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> nView_Profiles
[09/28/2008|07:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> PC Drivers HeadQuarters
[09/11/2008|04:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Spybot - Search & Destroy
[09/24/2008|09:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Stardock
[09/11/2008|04:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> SUPERAntiSpyware.com
[09/09/2008|01:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Symantec
[10/22/2008|01:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> TEMP
[09/25/2008|02:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> TVU Networks
[09/09/2008|02:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Winamp Toolbar
[09/09/2008|12:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Windows Genuine Advantage
[10/14/2008|02:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Windows Live Toolbar
[10/14/2008|12:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Yahoo!
[10/14/2008|12:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Yahoo! Companion

[09/08/2008|02:46] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> Microsoft

[09/08/2008|02:49] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Microsoft
[09/09/2008|02:27] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Symantec

[09/08/2008|02:48] C:\DOCUME~1\NETWOR~1\APPLIC~1\<DIR> Microsoft

[10/04/2008|12:15] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Adobe
[09/13/2008|05:49] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> AdobeUM
[10/13/2008|11:05] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Ahead
[10/03/2008|01:20] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Babylon
[10/04/2008|12:15] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[09/08/2008|03:48] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Creative
[09/19/2008|06:47] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Debs Karaoke Renamer
[10/13/2008|12:43] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> EAST Technologies
[09/10/2008|03:46] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Google
[09/08/2008|02:51] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Identities
[09/26/2008|05:05] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> InstallShield
[09/26/2008|07:10] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Jasc
[10/19/2008|05:21] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Macromedia
[10/14/2008|02:56] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Microsoft
[09/25/2008|02:43] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Mozilla
[09/25/2008|01:33] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Musicmatch
[09/10/2008|02:41] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> NeroVision
[09/12/2008|08:06] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Paltalk
[09/26/2008|04:57] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Reallusion
[09/24/2008|09:23] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Stardock
[09/19/2008|06:29] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Sun
[09/11/2008|04:16] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> SUPERAntiSpyware.com
[09/09/2008|01:31] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Symantec
[09/10/2008|01:23] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Syntrillium
[09/25/2008|02:54] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> TVU Networks
[10/22/2008|01:19] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> U3
[09/23/2008|02:59] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Vso
[09/10/2008|01:43] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> WinRAR
[10/14/2008|12:03] C:\DOCUME~1\THEONL~1\APPLIC~1\<DIR> Yahoo!

--------------------\\ Scheduled Tasks located in C:\WINDOWS\Tasks

[10/23/2008 04:32 AM][--a------] C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job
[10/18/2008 08:35 AM][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[10/17/2008 09:18 PM][--a------] C:\WINDOWS\tasks\Norton AntiVirus - Scan my computer - TheOnlyBigDog.job
[10/22/2008 09:50 AM][--ah-----] C:\WINDOWS\tasks\SA.DAT
[02/28/2006 05:00 AM][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing Folders in C:\Program Files

[09/15/2008|11:32] C:\Program Files\<DIR> Access 97 Runtime
[09/27/2008|08:48] C:\Program Files\<DIR> Act-3D
[10/03/2008|01:03] C:\Program Files\<DIR> Adobe
[09/10/2008|09:28] C:\Program Files\<DIR> Ahead
[09/26/2008|01:22] C:\Program Files\<DIR> ALCATech
[09/26/2008|12:26] C:\Program Files\<DIR> Apple Software Update
[09/10/2008|02:58] C:\Program Files\<DIR> Babylon
[09/12/2008|01:45] C:\Program Files\<DIR> Bradbury
[09/10/2008|01:45] C:\Program Files\<DIR> CAVS
[09/10/2008|01:41] C:\Program Files\<DIR> CD+G AutoName
[09/10/2008|02:33] C:\Program Files\<DIR> CDRWIN3
[10/22/2008|09:47] C:\Program Files\<DIR> Common Files
[09/08/2008|02:44] C:\Program Files\<DIR> ComPlus Applications
[09/23/2008|04:18] C:\Program Files\<DIR> CompuHost
[09/10/2008|02:58] C:\Program Files\<DIR> Conduit
[09/10/2008|01:25] C:\Program Files\<DIR> coolpro2
[09/08/2008|03:40] C:\Program Files\<DIR> Creative
[10/10/2008|06:56] C:\Program Files\<DIR> Cucusoft
[09/14/2008|12:08] C:\Program Files\<DIR> Damar Systems
[09/19/2008|06:47] C:\Program Files\<DIR> Debs Karaoke Renamer
[10/10/2008|06:52] C:\Program Files\<DIR> Deskshare
[09/26/2008|05:04] C:\Program Files\<DIR> Digital Photo Software
[09/17/2008|02:28] C:\Program Files\<DIR> Doblon
[09/10/2008|02:37] C:\Program Files\<DIR> DVD Shrink
[10/13/2008|12:42] C:\Program Files\<DIR> East-Tec Eraser 2008
[09/24/2008|05:25] C:\Program Files\<DIR> Eraser
[10/10/2008|07:02] C:\Program Files\<DIR> eXtreme Movie Manager
[09/10/2008|01:25] C:\Program Files\<DIR> Gaa Moa's Plugins for Cool Edit Pro
[09/19/2008|06:40] C:\Program Files\<DIR> Gateway151 File-2-Folder
[10/18/2008|03:41] C:\Program Files\<DIR> Gateway151 Karaoke Zip Player
[09/10/2008|02:44] C:\Program Files\<DIR> Google
[10/19/2008|05:19] C:\Program Files\<DIR> InstallShield Installation Information
[10/10/2008|03:05] C:\Program Files\<DIR> Internet Explorer
[09/26/2008|07:08] C:\Program Files\<DIR> Jasc Software Inc
[09/19/2008|06:29] C:\Program Files\<DIR> Java
[09/16/2008|03:56] C:\Program Files\<DIR> Karaoke Zip Scanner
[09/10/2008|10:48] C:\Program Files\<DIR> KJ Pro
[09/29/2008|11:08] C:\Program Files\<DIR> Kjpro
[10/19/2008|05:19] C:\Program Files\<DIR> Macromedia
[09/23/2008|02:59] C:\Program Files\<DIR> MagicDVDCopier
[09/23/2008|02:53] C:\Program Files\<DIR> MagicDVDRipper
[09/26/2008|06:21] C:\Program Files\<DIR> MagicISO
[09/09/2008|05:23] C:\Program Files\<DIR> Messenger
[09/10/2008|01:33] C:\Program Files\<DIR> Micro Technology Unlimited
[09/10/2008|10:46] C:\Program Files\<DIR> Microsoft Access Runtime
[10/17/2008|10:58] C:\Program Files\<DIR> Microsoft ActiveSync
[09/26/2008|03:05] C:\Program Files\<DIR> Microsoft CAPICOM 2.1.0.2
[09/25/2008|10:24] C:\Program Files\<DIR> Microsoft Expression
[09/08/2008|02:46] C:\Program Files\<DIR> microsoft frontpage
[10/17/2008|10:57] C:\Program Files\<DIR> Microsoft Office
[09/25/2008|10:16] C:\Program Files\<DIR> Microsoft Visual Studio
[09/25/2008|10:14] C:\Program Files\<DIR> Microsoft Visual Studio 8
[09/25/2008|10:16] C:\Program Files\<DIR> Microsoft Works
[09/25/2008|10:15] C:\Program Files\<DIR> Microsoft.NET
[09/09/2008|01:03] C:\Program Files\<DIR> Movie Maker
[10/20/2008|08:23] C:\Program Files\<DIR> Mozilla Firefox
[10/18/2008|02:17] C:\Program Files\<DIR> MP3 WAV Converter
[09/13/2008|04:29] C:\Program Files\<DIR> Mp3+G Toolz
[09/09/2008|02:36] C:\Program Files\<DIR> MP3+G Toolz .NET
[09/25/2008|10:16] C:\Program Files\<DIR> MSBuild
[09/08/2008|04:00] C:\Program Files\<DIR> MSI
[09/08/2008|02:43] C:\Program Files\<DIR> MSN
[09/08/2008|02:44] C:\Program Files\<DIR> MSN Gaming Zone
[10/14/2008|02:44] C:\Program Files\<DIR> MSN Messenger
[09/25/2008|01:33] C:\Program Files\<DIR> Musicmatch
[09/10/2008|02:58] C:\Program Files\<DIR> myBabylon
[09/12/2008|12:51] C:\Program Files\<DIR> MySurvey Messenger
[09/10/2008|09:31] C:\Program Files\<DIR> Nero
[09/09/2008|12:59] C:\Program Files\<DIR> NetMeeting
[10/09/2008|05:15] C:\Program Files\<DIR> Norton AntiVirus
[09/09/2008|01:20] C:\Program Files\<DIR> NVIDIA Corporation
[09/09/2008|12:59] C:\Program Files\<DIR> Outlook Express
[09/12/2008|08:05] C:\Program Files\<DIR> Paltalk Messenger
[09/25/2008|10:47] C:\Program Files\<DIR> PopCap Games
[09/26/2008|12:27] C:\Program Files\<DIR> QuickTime
[09/26/2008|07:02] C:\Program Files\<DIR> Reallusion
[09/10/2008|02:09] C:\Program Files\<DIR> RoxBox
[09/13/2008|11:17] C:\Program Files\<DIR> Sax & Dottys Karaoke Zip Player
[10/05/2008|10:20] C:\Program Files\<DIR> Spybot - Search & Destroy
[09/24/2008|09:32] C:\Program Files\<DIR> Stardock
[09/11/2008|04:16] C:\Program Files\<DIR> SUPERAntiSpyware
[09/09/2008|01:53] C:\Program Files\<DIR> Symantec
[09/09/2008|01:53] C:\Program Files\<DIR> SymNetDrv
[09/10/2008|04:06] C:\Program Files\<DIR> The_Pirate_Bay
[10/20/2008|03:04] C:\Program Files\<DIR> Trend Micro
[10/18/2008|01:01] C:\Program Files\<DIR> Winamp
[09/09/2008|02:37] C:\Program Files\<DIR> Winamp Toolbar
[09/10/2008|01:40] C:\Program Files\<DIR> WinCDG Pro 2
[10/14/2008|02:46] C:\Program Files\<DIR> Windows Live Favorites
[10/14/2008|02:46] C:\Program Files\<DIR> Windows Live Toolbar
[09/09/2008|01:04] C:\Program Files\<DIR> Windows Media Player
[09/09/2008|12:59] C:\Program Files\<DIR> Windows NT
[09/08/2008|02:45] C:\Program Files\<DIR> WindowsUpdate
[09/10/2008|01:17] C:\Program Files\<DIR> WinRAR
[09/09/2008|02:33] C:\Program Files\<DIR> WinZip
[09/08/2008|02:46] C:\Program Files\<DIR> xerox
[10/14/2008|12:12] C:\Program Files\<DIR> Yahoo!

--------------------\\ Listing Folders in C:\Program Files\Common Files

[09/17/2008|10:03] C:\Program Files\Common Files\<DIR> Adobe
[09/17/2008|10:03] C:\Program Files\Common Files\<DIR> Adobe Systems Shared
[09/10/2008|09:32] C:\Program Files\Common Files\<DIR> Ahead
[09/26/2008|12:27] C:\Program Files\Common Files\<DIR> Apple
[09/10/2008|01:41] C:\Program Files\Common Files\<DIR> Borland Shared
[09/10/2008|02:06] C:\Program Files\Common Files\<DIR> cdrdao
[09/10/2008|10:46] C:\Program Files\Common Files\<DIR> Damar Systems
[09/10/2008|10:47] C:\Program Files\Common Files\<DIR> Designer
[09/10/2008|10:37] C:\Program Files\Common Files\<DIR> Doblon
[09/09/2008|01:20] C:\Program Files\Common Files\<DIR> InstallShield
[09/19/2008|06:28] C:\Program Files\Common Files\<DIR> Java
[10/17/2008|10:57] C:\Program Files\Common Files\<DIR> L&H
[10/19/2008|05:20] C:\Program Files\Common Files\<DIR> Macromedia
[09/12/2008|01:46] C:\Program Files\Common Files\<DIR> Macromedia Shared
[10/17/2008|11:00] C:\Program Files\Common Files\<DIR> Microsoft Shared
[09/08/2008|02:45] C:\Program Files\Common Files\<DIR> MSSoap
[09/08/2008|07:28] C:\Program Files\Common Files\<DIR> ODBC
[09/08/2008|02:45] C:\Program Files\Common Files\<DIR> Services
[09/08/2008|07:28] C:\Program Files\Common Files\<DIR> SpeechEngines
[09/24/2008|05:24] C:\Program Files\Common Files\<DIR> Stardock
[10/19/2008|11:54] C:\Program Files\Common Files\<DIR> Symantec Shared
[10/17/2008|10:57] C:\Program Files\Common Files\<DIR> System
[09/12/2008|01:45] C:\Program Files\Common Files\<DIR> Vbox
[09/11/2008|04:16] C:\Program Files\Common Files\<DIR> Wise Installation Wizard

--------------------\\ Process

( 43 Processes )

... OK !

--------------------\\ Searching with S_Lop

No Lop folder found !

--------------------\\ Searching for Lop Files - Folders

No Lop folder found !

--------------------\\ Searching within the Registry

..... OK !

--------------------\\ Checking the Hosts file

Hosts file CLEAN


--------------------\\ Searching for hidden files with Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-23 05:02:26
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Searching for other infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous\Microsoft Keygen.exe
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\3D Haunted Halloween Screensaver v1[1].0 Keygen - s0m.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Autumn Time 3D Screensaver v1[1].0 Keygen - s0m.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Autumn Time 3D Screensaver v1[2].0 Keygen - s0m.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Christmas Eve 3D Screensaver v1[1].0 Keygen - s0m.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Christmas_Eve_3D_Screensaver_v1[1].0_Keygen_s0m.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Dinosaurs 3D Screensaver v1[1].0 Keygen - s0m.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Fish_Aquarium_3D_Screensaver_v1[1].0_Incl_Keygen_by_SoS.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\nightcity3dscreensaverv1.0keygens0m.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Night_City_3D_Screensaver_1_Crack_by_FFF.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Planet_Earth_3D_Screensaver_v1[1].1_Incl_Keygen_by_SoS.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\SCREENSAVERS\Winter Night 3D Screensaver v1[1].0 Keygen - s0m.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\THEMES\3dmatrixcorridorsscreensaverkeygenknetus.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\THEMES\Army_of_Darkness_3D_Screensaver_v1[1].0_WinALL_Incl_Keygen_by_CSS.zip
C:\DOCUME~1\THEONL~1\My Documents\Miscellaneous Downloads\THEMES\Marine Life 3D Screensaver v1[1].0 Keygen - s0m.zip
C:\DOCUME~1\THEONL~1\My Documents\My Music\BIGDOG'S MP3'S\BIGDOG'S MUSIC\MP3s\MP3'S\Little Bitty Crack In His Heart - Ruby Lovett.mp3
C:\DOCUME~1\THEONL~1\My Documents\My Music\BIGDOG'S MP3'S\BIGDOG'S MUSIC\NEEDS EDITING\Neil Diamond - The Best Of\11 - Neil Diamond - Cracklin' Rose.mp3
C:\DOCUME~1\THEONL~1\My Documents\My Received Files\Billion_Chords_v1[1].0_incl_KeyGen_by_BEAT.zip
C:\DOCUME~1\THEONL~1\My Documents\My Received Files\Crasy_Talk_pro_5.1_with_keygen.4354468.TPB.torrent
C:\DOCUME~1\THEONL~1\My Documents\My Received Files\Magic DVD Ripper 5[1].3 Build 5_KeyGen_Under SEH Team.rar
C:\DOCUME~1\THEONL~1\My Documents\Text Files\Fast Defrag Pro Keygen.txt
C:\DOCUME~1\THEONL~1\My Documents\Text Files\How To Crack Any Type Of Registration Protection.txt
C:\DOCUME~1\THEONL~1\My Documents\Text Files\mmjb crack.txt
C:\DOCUME~1\THEONL~1\My Documents\Text Files\musicmatch crack.txt
C:\DOCUME~1\THEONL~1\Recent\Nero Burning Rom 7 Ultra Edition Incl Keygen & Serial.lnk


[F:3][D:0]-> C:\DOCUME~1\THEONL~1\LOCALS~1\Temp
[F:1][D:0]-> C:\DOCUME~1\THEONL~1\Cookies
[F:67][D:4]-> C:\DOCUME~1\THEONL~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - Wed 10/22/2008|12:21 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - Thu 10/23/2008| 5:03 - Option : [2]

--------------------\\ Scan completed at 5:03:04

[Shaba]

It appears that some of your software aren't legit.

So please uninstall these next:

Magic DVD Ripper V5.3 build 7
Nero 7 Demo

After that:

Please download this tool (http://go.microsoft.com/fwlink/?linkid=52012) from Microsoft.
Double click on MGADiag.exe to run it.
Click Continue.
The program will run. It takes a while to finish the diagnosis, please be patient.
Once done, click on Copy.
Open Notepad and paste the contents in. Save this file and post it in your next reply.

Post back a fresh uninstall list and MGADiag results.

[TheOnlyBigDog]

Diagnostic Report (1.7.0095.0):
-----------------------------------------
WGA Data-->
Validation Status: Genuine
Validation Code: 0
Online Validation Code: N/A
Cached Validation Code: N/A
Windows Product Key: *****-*****-9RCQG-9PDHJ-QHGB8
Windows Product Key Hash: FsUXZLTh6gy37gNwjd5Y2g1ILks=
Windows Product ID: 76487-OEM-2240051-79467
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 5.1.2600.2.00010100.3.0.pro
CSVLK Server: N/A
CSVLK PID: N/A
ID: {04679EDD-D408-4D71-A78E-E974E2703A99}(3)
Is Admin: Yes
TestCab: 0x0
WGA Version: Registered, 1.8.31.9
Signed By: Microsoft
Product Name: N/A
Architecture: N/A
Build lab: N/A
TTS Error: N/A
Validation Diagnostic: 025D1FF3-171-1
Resolution Status: N/A

WgaER Data-->
ThreatID(s): N/A
Version: N/A

WGA Notifications Data-->
Cached Result: 0
File Exists: Yes
Version: 1.8.31.9
WgaTray.exe Signed By: Microsoft
WgaLogon.dll Signed By: Microsoft

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
WGATray.exe Signed By: Microsoft
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 114 Blocked VLK 2
Microsoft Publisher 2002 - 100 Genuine
Microsoft Office XP Professional with FrontPage - 114 Blocked VLK 2
Microsoft Office Enterprise 2007 - 100 Genuine
Microsoft Office Project Professional 2007 - 100 Genuine
Microsoft Office Visio Professional 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 7E90FEE8-198-80004005_7E90FEE8-198-80004005_025D1FF3-171-1_E2AD56EA-338-8009_E2AD56EA-339-2ee7_16E0B333-89-80004005_B4D0AA8B-1029-80004005

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{04679EDD-D408-4D71-A78E-E974E2703A99}</UGUID><Version>1.7.0095.0</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-QHGB8</PKey><PID>76487-OEM-2240051-79467</PID><PIDType>3</PIDType><SID>S-1-5-21-1844237615-688789844-725345543</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>ASUS M2N-SLI DELUXE ACPI BIOS Revision 1102</Version><SMBIOSVersion major="2" minor="4"/><Date>20070620000000.000000+000</Date></BIOS><HWID>AB8931F701848076</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><BRT/></MachineData><Software><Office><Result>114</Result><Products><Product GUID="{90190409-6000-11D3-8CFE-0050048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Publisher 2002</Name><Ver>10</Ver><Val>BABFAAD4C4D61B0</Val><Hash>SEishkJimZrBR/u8NT774CIf0yg=</Hash><Pid>54197-640-0698487-16542</Pid><PidType>14</PidType></Product><Product GUID="{90280409-6000-11D3-8CFE-0050048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office XP Professional with FrontPage</Name><Ver>10</Ver><Val>39476F84C4B4004</Val><Hash>4iCnywwNW1w4s9ukTIwGMGxyGic=</Hash><Pid>54185-640-0000025-17690</Pid><PidType>14</PidType></Product><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>64BC76978749586</Val><Hash>GW6PzcEVEDTVKeO5Ym5UUm41dBk=</Hash><Pid>89388-707-0441865-65660</Pid><PidType>14</PidType></Product><Product GUID="{90120000-003B-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Project Professional 2007</Name><Ver>12</Ver><Val>3AB862DE70D8D86</Val><Hash>UfpXsJvSSVcPufbDdjd0NK73+ug=</Hash><Pid>89403-707-4159871-63971</Pid><PidType>14</PidType></Product><Product GUID="{90120000-0051-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Visio Professional 2007</Name><Ver>12</Ver><Val>3AB862DE70D8D86</Val><Hash>UfpXsJvSSVcPufbDdjd0NK73+ug=</Hash><Pid>89405-707-4159871-63585</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="10" Result="114"/><App Id="16" Version="10" Result="114"/><App Id="17" Version="10" Result="114"/><App Id="18" Version="10" Result="114"/><App Id="19" Version="10" Result="100"/><App Id="1A" Version="10" Result="114"/><App Id="1B" Version="10" Result="114"/><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="3A" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="53" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>

[Shaba]

I have some information for you:

Link (http://social.microsoft.com/Forums/en-US/genuinewindowsxp/thread/b82dbf55-db25-4bfe-9361-a60ab4f033bc/)

"(Office status=114 means non-Genuine).VLKs are blocked by Microsoft at the request of the original keyholder for such reasons as the key was lost, stolen, compromised, misused, or expired. Also, MS may have blocked the key if it notices a pattern of misuse, ie, more installations of XP using that key than authorized."

Is there anything you want to comment on that?

[TheOnlyBigDog]

I read the link and have no idea what that all means. I have the original windows xp disc with a legitimate product key.

[Shaba]

Yes, XP seems to legit.

But Office doesn't seem to be as it has been installed using blocked VLK.

[TheOnlyBigDog]

I also have the office disc and frontpage disc and 10 million other discs to boot. But back to the problem at hand...

[Shaba]

Unfortunately it doesn't go that way.

Report shows that your office isn't legit.

LOP S&D report shows that you have a lot of cracks and keygens.

As said here (http://forums.spybot.info/showpost.php?p=25290&postcount=4)

"We do not support the use of illegal Pirated/Warez/Cracked software.

Helping a person who insists on using such software, could be construed in the eyes of the law to be aiding and abetting a crime. Therefore you will be asked to remove any cracked programs and in the case of your operating system, to obtain a valid licensed copy."

This thread is now closed.

You are welcome to come back when your programs are all legit.