After reading through other post I need help in removing this trojan. I'm attaching the log from Rootalyzer since I believe this is a rootkit infection. Any assistance would be greatly appreciated. If you need any other information I'll be more than happy to provide it.
/ info: Rootkit removal help file
// copyright: (c) 2008-2009 Safer-Networking Ltd. All rights reserved.
:: RootAlyzer Results
File:"Unknown ADS","C:\Yahoo! Games\Scrabble\GHScrabble.exe:{06E59DF7-F01E-C020-AC88-CD3A6F9A4B59}:$DATA"
File:"Unknown ADS","C:\WINDOWS\Web\Wallpaper\emachines.bmp:Q30lsldxJoudresxAaaqpcawXc:$DATA"
File:"No admin in ACL","C:\WINDOWS\system32\2731990745.sys"
File:"No admin in ACL","C:\WINDOWS\system32\KGyGaAvL.sys"
File:"Unknown ADS","C:\WINDOWS\system32\OEMLOGO.BMP:Q30lsldxJoudresxAaaqpcawXc:$DATA"
File:"No admin in ACL","C:\WINDOWS\system32\url.dll"
File:"Invisible to Win32","C:\WINDOWS\system32\drivers\bxwwarsohzl.sys"
File:"Invisible to Win32","C:\WINDOWS\system32\drivers\str.sys"
File:"No admin in ACL","C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Desktop Notes\More Crawler products.lnk"
File:"No admin in ACL","C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Desktop Notes\New Note.lnk"
File:"No admin in ACL","C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Desktop Notes\Notes Help.lnk"
File:"No admin in ACL","C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Desktop Notes\Notes Settings.lnk"
File:"No admin in ACL","C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Desktop Notes\Notes.lnk"
File:"No admin in ACL","C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Desktop Notes\Uninstall Notes.lnk"
File:"No admin in ACL","C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Crawler Radio & MP3 Player\More Crawler products.lnk"
File:"No admin in ACL","C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Crawler Radio & MP3 Player\Radio & MP3 Player Help.lnk"
File:"No admin in ACL","C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Crawler Radio & MP3 Player\Radio & MP3 Player Settings.lnk"
File:"No admin in ACL","C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Crawler Radio & MP3 Player\Radio & MP3 Player.lnk"
File:"No admin in ACL","C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Crawler Radio & MP3 Player\Uninstall.lnk"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10949.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10950.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10951.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10952.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10953.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10957.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10971.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10972.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10973.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10974.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10975.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10993.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10994.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10995.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10996.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10997.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10998.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc10999.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc11000.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc11001.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc11002.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc11003.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc11004.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc11005.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc11006.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc11007.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc11008.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc11009.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc11010.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc11011.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc11012.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc11013.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc11014.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc11931.jpg:Roxio EMC Stream:$DATA"
File:"Unknown ADS","C:\RECYCLER\S-1-5-21-3895688110-67553743-1933706387-1003\Dc11932.jpg:Roxio EMC Stream:$DATA"
Directory:"No admin in ACL","C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Crawler Radio & MP3 Player"
Directory:"No admin in ACL","C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Desktop Notes"
Directory:"No admin in ACL","C:\Program Files\Crawler"
Directory:"No admin in ACL","C:\Program Files\NOS"
RegyKey:"No admin in ACL","HKEY_LOCAL_MACHINE","\SOFTWARE\","NOS"
I have also have downloaded the Hijackthis tool but have not run it yet
Again thanks for aany assitance
Regards Roland
--------------------------------
"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance)