My computer was recently infected with "personal internet security 2011" virus, constant popups I could not access security programs,no restore points. I ran something called rkill and scanned three times with malwarebytes. I also ran a registry repair program, dont remember which one.Computer is running better but still having problems, forward and back buttons dont work properly , search results sometimes jump websites, google preferences says cookies disabled, right click doesnt work properly, other problems.
I recently scanned with spybot in safe mode and got some results i couldnt fix
Fraud.WindowsProtectionSuite
Microsoft.Windows.RedirectedHosts, several entries on both
the message i get when I try to fix these problems is Cannot create file "C:\windows\system32\drivers\etc\hosts" access denied
Can anyone please help me with this? I really dont want to reload my operating system.( Windows Vista Home Edition) Thanks in advance.
My computer knowledge is very limited so please be understanding.

I have downloaded and ran erunt, here is the dds.txt and attach.txt

DDS (Ver_10-12-12.02) - NTFSx86
Run by The Sizers at 19:40:18.82 on Wed 02/02/2011
Internet Explorer: 9.0.7930.16406 BrowserJavaVersion: 1.6.0_20
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.2046.1133 [GMT -6:00]

AV: AVG Anti-Virus Free *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Windows\system32\lsm.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\Dwm.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\System32\wpcumi.exe
C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Windows\system32\schtasks.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\jusched.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\System32\alg.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Internet Explorer\iexplore.exe
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\The Sizers\Downloads\dds.scr
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uSearch Bar = Preserve
uStart Page = hxxp://www.yahoo.com/
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll
BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - No File
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\progra~1\yahoo!\companion\installs\cpn0\YTSingleInstance.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
TB: {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - No File
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
mRun: [WPCUMI] c:\windows\system32\WpcUmi.exe
mRun: [hpqSRMon] c:\program files\hp\digital imaging\bin\hpqSRMon.exe
mRun: [AVG9_TRAY] c:\progra~1\avg\avg9\avgtray.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [SunJavaUpdateReg] "c:\windows\system32\jureg.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
dRun: [MySpaceIM] c:\program files\myspace\im\MySpaceIM.exe
dRunOnce: [SpybotDeletingB950] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\dynamic\1.sdf"
dRunOnce: [SpybotDeletingD3768] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\dynamic\1.sdf"
dRunOnce: [SpybotDeletingB3134] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\dynamic\domains.txt"
dRunOnce: [SpybotDeletingD4922] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\dynamic\domains.txt"
dRunOnce: [SpybotDeletingB1416] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\buttondir.txt"
dRunOnce: [SpybotDeletingD8036] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\buttondir.txt"
dRunOnce: [SpybotDeletingB2740] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\linkpathlegal.txt"
dRunOnce: [SpybotDeletingD8921] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\linkpathlegal.txt"
dRunOnce: [SpybotDeletingB4957] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\cursors.res"
dRunOnce: [SpybotDeletingD7578] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\cursors.res"
dRunOnce: [SpybotDeletingB9864] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\d_icons_buttons_1000.res"
dRunOnce: [SpybotDeletingD550] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\d_icons_buttons_1000.res"
dRunOnce: [SpybotDeletingB2399] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\d_icons_buttons_2000.res"
dRunOnce: [SpybotDeletingD4213] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\d_icons_buttons_2000.res"
dRunOnce: [SpybotDeletingB6923] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\d_icons_buttons_3000.res"
dRunOnce: [SpybotDeletingD2566] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\d_icons_buttons_3000.res"
dRunOnce: [SpybotDeletingB5313] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\d_icons_buttons_bar.res"
dRunOnce: [SpybotDeletingD6224] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\d_icons_buttons_bar.res"
dRunOnce: [SpybotDeletingB9423] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\d_icons_buttons_bbar1.res"
dRunOnce: [SpybotDeletingD2131] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\d_icons_buttons_bbar1.res"
dRunOnce: [SpybotDeletingB7754] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\d_icons_buttons_logos.res"
dRunOnce: [SpybotDeletingD2634] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\d_icons_buttons_logos.res"
dRunOnce: [SpybotDeletingB2228] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\d_icons_buttons_other.res"
dRunOnce: [SpybotDeletingD7815] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\d_icons_buttons_other.res"
dRunOnce: [SpybotDeletingB7346] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\d_icons_weather.res"
dRunOnce: [SpybotDeletingD624] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\d_icons_weather.res"
dRunOnce: [SpybotDeletingB8476] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\email-t1-bg.res"
dRunOnce: [SpybotDeletingD1575] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\email-t1-bg.res"
dRunOnce: [SpybotDeletingB2550] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\icons2.res"
dRunOnce: [SpybotDeletingD2427] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\icons2.res"
dRunOnce: [SpybotDeletingB7455] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\ie_games_icon.res"
dRunOnce: [SpybotDeletingD3418] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\ie_games_icon.res"
dRunOnce: [SpybotDeletingB508] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\ie_video.res"
dRunOnce: [SpybotDeletingD9445] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\ie_video.res"
dRunOnce: [SpybotDeletingB7762] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\progress.res"
dRunOnce: [SpybotDeletingD9148] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\progress.res"
dRunOnce: [SpybotDeletingB7301] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\sales_buttons.res"
dRunOnce: [SpybotDeletingD4683] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\sales_buttons.res"
dRunOnce: [SpybotDeletingB8185] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\seekmo.res"
dRunOnce: [SpybotDeletingD740] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\seekmo.res"
dRunOnce: [SpybotDeletingB2679] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\seekmo_ie_menu.res"
dRunOnce: [SpybotDeletingD1267] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\seekmo_ie_menu.res"
dRunOnce: [SpybotDeletingB6795] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\s_icons_buttons.res"
dRunOnce: [SpybotDeletingD1135] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\s_icons_buttons.res"
dRunOnce: [SpybotDeletingB1601] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\t2_bg.res"
dRunOnce: [SpybotDeletingD9438] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\t2_bg.res"
dRunOnce: [SpybotDeletingB2846] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\tsd_bg.res"
dRunOnce: [SpybotDeletingD6250] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\tsd_bg.res"
dRunOnce: [SpybotDeletingB3307] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_511745-514279.mnu"
dRunOnce: [SpybotDeletingD6803] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_511745-514279.mnu"
dRunOnce: [SpybotDeletingB6987] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_categorize.mnu"
dRunOnce: [SpybotDeletingD7093] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_categorize.mnu"
dRunOnce: [SpybotDeletingB8046] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_comparison.mnu"
dRunOnce: [SpybotDeletingD6774] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_comparison.mnu"
dRunOnce: [SpybotDeletingB8874] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_explorer-Mails.mnu"
dRunOnce: [SpybotDeletingD2622] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_explorer-Mails.mnu"
dRunOnce: [SpybotDeletingB7238] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_explorer-people.mnu"
dRunOnce: [SpybotDeletingD435] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_explorer-people.mnu"
dRunOnce: [SpybotDeletingB7597] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_favorites.mnu"
dRunOnce: [SpybotDeletingD6898] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_favorites.mnu"
dRunOnce: [SpybotDeletingB5163] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_Games.mnu"
dRunOnce: [SpybotDeletingD4377] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_Games.mnu"
dRunOnce: [SpybotDeletingB8135] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_Hide.mnu"
dRunOnce: [SpybotDeletingD9923] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_Hide.mnu"
dRunOnce: [SpybotDeletingB5428] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_hotbarcom.mnu"
dRunOnce: [SpybotDeletingD6663] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_hotbarcom.mnu"
dRunOnce: [SpybotDeletingB109] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_Hotmail.mnu"
dRunOnce: [SpybotDeletingD9894] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_Hotmail.mnu"
dRunOnce: [SpybotDeletingB7311] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_hsskin.mnu"
dRunOnce: [SpybotDeletingD4639] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_hsskin.mnu"
dRunOnce: [SpybotDeletingB2206] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_Mails.mnu"
dRunOnce: [SpybotDeletingD2957] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_Mails.mnu"
dRunOnce: [SpybotDeletingB3477] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_new.mnu"
dRunOnce: [SpybotDeletingD5613] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_new.mnu"
dRunOnce: [SpybotDeletingB1089] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_premium.mnu"
dRunOnce: [SpybotDeletingD822] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_premium.mnu"
dRunOnce: [SpybotDeletingB8494] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_searchfor.mnu"
dRunOnce: [SpybotDeletingD1443] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_searchfor.mnu"
dRunOnce: [SpybotDeletingB5696] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_searchgo.mnu"
dRunOnce: [SpybotDeletingD9456] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_searchgo.mnu"
dRunOnce: [SpybotDeletingB4903] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_weather.mnu"
dRunOnce: [SpybotDeletingD2062] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_weather.mnu"
dRunOnce: [SpybotDeletingB9646] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_yellowpages.mnu"
dRunOnce: [SpybotDeletingD9463] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Default_yellowpages.mnu"
dRunOnce: [SpybotDeletingB4488] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\email-def-511724-548964.mnu"
dRunOnce: [SpybotDeletingD9552] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\email-def-511724-548964.mnu"
dRunOnce: [SpybotDeletingB1631] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\email-def-511724-9595.mnu"
dRunOnce: [SpybotDeletingD1528] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\email-def-511724-9595.mnu"
dRunOnce: [SpybotDeletingB9269] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\theweb.mnu"
dRunOnce: [SpybotDeletingD5851] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\theweb.mnu"
dRunOnce: [SpybotDeletingB6927] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Top7_theweb.mnu"
dRunOnce: [SpybotDeletingD1479] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\Top7_theweb.mnu"
dRunOnce: [SpybotDeletingB5402] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\btntrans.idx"
dRunOnce: [SpybotDeletingD9902] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\btntrans.idx"
dRunOnce: [SpybotDeletingB6018] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\keywords.idx"
dRunOnce: [SpybotDeletingD6622] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\keywords.idx"
dRunOnce: [SpybotDeletingB8182] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\btntrans1.dat"
dRunOnce: [SpybotDeletingD320] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\btntrans1.dat"
dRunOnce: [SpybotDeletingB5667] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\keywords1.dat"
dRunOnce: [SpybotDeletingD6160] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\keywords1.dat"
dRunOnce: [SpybotDeletingB4625] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\components.cdf"
dRunOnce: [SpybotDeletingD8044] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\components.cdf"
dRunOnce: [SpybotDeletingB2145] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\default.cdf"
dRunOnce: [SpybotDeletingD98] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\default.cdf"
dRunOnce: [SpybotDeletingB9419] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\layout.cdf"
dRunOnce: [SpybotDeletingD6531] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\layout.cdf"
dRunOnce: [SpybotDeletingB9401] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\top7.cdf"
dRunOnce: [SpybotDeletingD5219] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\1\top7.cdf"
dRunOnce: [SpybotDeletingB9179] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\BtnTrans.xip"
dRunOnce: [SpybotDeletingD7816] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\BtnTrans.xip"
dRunOnce: [SpybotDeletingB8879] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\BtnTrans1.xip"
dRunOnce: [SpybotDeletingD9631] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\BtnTrans1.xip"
dRunOnce: [SpybotDeletingB869] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\buttondir.xip"
dRunOnce: [SpybotDeletingD4699] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\buttondir.xip"
dRunOnce: [SpybotDeletingB7310] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\cursors.xip"
dRunOnce: [SpybotDeletingD319] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\cursors.xip"
dRunOnce: [SpybotDeletingB8778] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\default.xip"
dRunOnce: [SpybotDeletingD1043] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\default.xip"
dRunOnce: [SpybotDeletingB6479] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\d_icons_buttons_1000.xip"
dRunOnce: [SpybotDeletingD6267] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\d_icons_buttons_1000.xip"
dRunOnce: [SpybotDeletingB6165] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\d_icons_buttons_2000.xip"
dRunOnce: [SpybotDeletingD6889] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\d_icons_buttons_2000.xip"
dRunOnce: [SpybotDeletingB2461] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\d_icons_buttons_3000.xip"
dRunOnce: [SpybotDeletingD8822] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\d_icons_buttons_3000.xip"
dRunOnce: [SpybotDeletingB2988] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\d_icons_buttons_bar.xip"
dRunOnce: [SpybotDeletingD5527] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\d_icons_buttons_bar.xip"
dRunOnce: [SpybotDeletingB4972] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\d_icons_buttons_bbar1.xip"
dRunOnce: [SpybotDeletingD5669] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\d_icons_buttons_bbar1.xip"
dRunOnce: [SpybotDeletingB7425] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\d_icons_buttons_logos.xip"
dRunOnce: [SpybotDeletingD5968] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\d_icons_buttons_logos.xip"
dRunOnce: [SpybotDeletingB1050] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\d_icons_buttons_other.xip"
dRunOnce: [SpybotDeletingD5470] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\d_icons_buttons_other.xip"
dRunOnce: [SpybotDeletingB3234] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\d_icons_weather.xip"
dRunOnce: [SpybotDeletingD3742] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\d_icons_weather.xip"
dRunOnce: [SpybotDeletingB7085] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\email-t1-bg.xip"
dRunOnce: [SpybotDeletingD9716] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\email-t1-bg.xip"
dRunOnce: [SpybotDeletingB4530] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\icons2.xip"
dRunOnce: [SpybotDeletingD3526] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\icons2.xip"
dRunOnce: [SpybotDeletingB2297] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\ie_games_icon.xip"
dRunOnce: [SpybotDeletingD1053] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\ie_games_icon.xip"
dRunOnce: [SpybotDeletingB9164] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\ie_video.xip"
dRunOnce: [SpybotDeletingD309] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\ie_video.xip"
dRunOnce: [SpybotDeletingB2129] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\keywords.xip"
dRunOnce: [SpybotDeletingD2472] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\keywords.xip"
dRunOnce: [SpybotDeletingB9508] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\keywords1.xip"
dRunOnce: [SpybotDeletingD3400] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\keywords1.xip"
dRunOnce: [SpybotDeletingB5502] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\layout.xip"
dRunOnce: [SpybotDeletingD3499] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\layout.xip"
dRunOnce: [SpybotDeletingB5067] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\linkpathlegal.xip"
dRunOnce: [SpybotDeletingD4299] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\linkpathlegal.xip"
dRunOnce: [SpybotDeletingB1751] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\progress.xip"
dRunOnce: [SpybotDeletingD2832] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\progress.xip"
dRunOnce: [SpybotDeletingB5701] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\sales_buttons.xip"
dRunOnce: [SpybotDeletingD8033] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\sales_buttons.xip"
dRunOnce: [SpybotDeletingB3172] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\samplegroups2.xip"
dRunOnce: [SpybotDeletingD7687] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\samplegroups2.xip"
dRunOnce: [SpybotDeletingB4909] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\seekmo.xip"
dRunOnce: [SpybotDeletingD439] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\seekmo.xip"
dRunOnce: [SpybotDeletingB441] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\seekmo_ie_menu.xip"
dRunOnce: [SpybotDeletingD1845] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\seekmo_ie_menu.xip"
dRunOnce: [SpybotDeletingB8142] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\s_icons_buttons.xip"
dRunOnce: [SpybotDeletingD6490] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\s_icons_buttons.xip"
dRunOnce: [SpybotDeletingB4858] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\t2_bg.xip"
dRunOnce: [SpybotDeletingD4829] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\t2_bg.xip"
dRunOnce: [SpybotDeletingB6983] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\top7.xip"
dRunOnce: [SpybotDeletingD9946] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\top7.xip"
dRunOnce: [SpybotDeletingB2190] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\tsd_bg.xip"
dRunOnce: [SpybotDeletingD8730] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\tsd_bg.xip"
dRunOnce: [SpybotDeletingB1502] command /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\samplegroups2.txt"
dRunOnce: [SpybotDeletingD7407] cmd /c del "c:\users\the sizers\appdata\roaming\seekmo\v3.0\seekmo\static\download\samplegroups2.txt"
uPolicies-explorer: DisallowRun = 1 (0x1)
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 2 (0x2)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe
IE: {77BF5300-1474-4EC7-9980-D32B190E9B07} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
LSP: c:\windows\system32\wpclsp.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
AppInit_DLLs: avgrsstx.dll
IFEO: image file execution options - svchost.exe
IFEO: OLT.exe - svchost.exe
Hosts: 74.125.45.100 4-open-davinci.com
Hosts: 74.125.45.100 securitysoftwarepayments.com
Hosts: 74.125.45.100 privatesecuredpayments.com
Hosts: 74.125.45.100 secure.privatesecuredpayments.com
Hosts: 74.125.45.100 getantivirusplusnow.com

Note: multiple HOSTS entries found. Please refer to Attach.txt

================= FIREFOX ===================

FF - ProfilePath - c:\users\thesiz~1\appdata\roaming\mozilla\firefox\profiles\v4g3d9ua.default\
FF - prefs.js: browser.search.selectedEngine - search
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
FF - component: c:\program files\avg\avg9\firefox\components\avgssff.dll
FF - plugin: c:\program files\download manager\npfpdlm.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\google updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\view22\version 3.10.50\NPView22.dll
FF - plugin: c:\users\the sizers\appdata\roaming\mozilla\firefox\profiles\v4g3d9ua.default\extensions\moveplayer@movenetworks.com\platform\winnt_x86-msvc\plugins\npmnqmp07076007.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Move Media Player: moveplayer@movenetworks.com - %profile%\extensions\moveplayer@movenetworks.com
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: AVG Safe Search: {3f963a5b-e555-4543-90e2-c3908898db71} - c:\program files\avg\avg9\Firefox

============= SERVICES / DRIVERS ===============

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2010-5-31 216400]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2010-5-31 29584]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2010-5-31 243024]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2009-1-31 8944]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2009-1-31 55024]
R2 avg9emc;AVG Free E-mail Scanner;c:\program files\avg\avg9\avgemc.exe [2010-7-26 921952]
R2 avg9wd;AVG Free WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2010-7-26 308136]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\spybot - search & destroy\SDWinSec.exe [2009-1-31 1153368]
R3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-6-2 21504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate1c8c2207b568970;Google Update Service (gupdate1c8c2207b568970);c:\program files\google\update\GoogleUpdate.exe [2009-1-31 133104]
S3 NWUSBCDFIL;Novatel Wireless Installation CD;c:\windows\system32\drivers\NwUsbCdFil.sys [2008-7-7 20480]
S3 NWUSBPort2;Novatel Wireless USB Status2 Port Driver;c:\windows\system32\drivers\nwusbser2.sys [2008-5-9 174336]
S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2009-1-31 7408]
S3 SMSIVZAM5;SMSIVZAM5 NDIS Protocol Driver;c:\progra~1\verizo~1\vzacce~1\SMSIVZAM5.SYS [2009-3-20 32408]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]

=============== Created Last 30 ================

2011-01-27 01:13:47 411368 ----a-w- c:\windows\system32\deployJava1.dll
2011-01-27 01:13:47 411368 ----a-w- c:\program files\mozilla firefox\plugins\npdeployJava1.dll
2011-01-27 01:09:12 2381824 ----a-w- c:\windows\system32\mshtml.tlb
2011-01-27 01:09:12 1448448 ----a-w- c:\windows\system32\inetcpl.cpl
2011-01-26 05:56:50 979456 ----a-w- c:\windows\system32\MFH264Dec.dll
2011-01-26 05:56:50 797184 ----a-w- c:\windows\system32\FntCache.dll
2011-01-26 05:56:50 357376 ----a-w- c:\windows\system32\MFHEAACdec.dll
2011-01-26 05:56:50 302592 ----a-w- c:\windows\system32\mfmp4src.dll
2011-01-26 05:56:50 280064 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-01-26 05:56:50 261632 ----a-w- c:\windows\system32\mfreadwrite.dll
2011-01-26 05:56:50 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
2011-01-26 05:56:50 161280 ----a-w- c:\windows\system32\d3d10_1.dll
2011-01-26 05:56:50 135680 ----a-w- c:\windows\system32\XpsRasterService.dll
2011-01-26 05:56:50 1174528 ----a-w- c:\windows\system32\d3d10warp.dll
2011-01-26 05:56:50 1068032 ----a-w- c:\windows\system32\DWrite.dll
2011-01-26 05:56:49 680960 ----a-w- c:\windows\system32\d2d1.dll
2011-01-26 05:53:32 -------- d-----w- c:\program files\Feedback Tool
2011-01-26 00:08:37 5890896 ----a-w- c:\progra~2\microsoft\windows defender\definition updates\{3fb7f439-fced-4e67-b642-518f0ab4a977}\mpengine.dll
2011-01-24 05:34:44 5890896 ------w- c:\progra~2\microsoft\windows defender\definition updates\updates\mpengine.dll
2011-01-24 02:24:20 -------- d-sh--w- c:\progra~2\PIRTS
2011-01-24 02:22:12 -------- d-sh--w- c:\progra~2\f08d2b
2011-01-19 05:12:39 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2011-01-19 05:12:38 49472 ----a-w- c:\windows\system32\netfxperf.dll
2011-01-19 05:12:38 297808 ----a-w- c:\windows\system32\mscoree.dll
2011-01-19 05:12:38 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2011-01-19 05:12:38 1130824 ----a-w- c:\windows\system32\dfshim.dll
2011-01-19 05:05:24 905088 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-01-19 05:05:05 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2011-01-19 05:05:05 168960 ----a-w- c:\program files\windows media player\wmplayer.exe
2011-01-19 05:04:38 2048 ----a-w- c:\windows\system32\tzres.dll
2011-01-19 05:02:55 601600 ----a-w- c:\windows\system32\schedsvc.dll
2011-01-19 05:01:26 739328 ----a-w- c:\windows\system32\inetcomm.dll
2011-01-19 05:01:24 867328 ----a-w- c:\windows\system32\wmpmde.dll
2011-01-19 05:01:22 157184 ----a-w- c:\windows\system32\t2embed.dll
2011-01-19 05:01:21 317952 ----a-w- c:\windows\system32\MP4SDECD.DLL
2011-01-19 05:01:17 1169408 ----a-w- c:\windows\system32\sdclt.exe
2011-01-19 04:59:43 81920 ----a-w- c:\windows\system32\iccvid.dll
2011-01-19 04:58:45 954752 ----a-w- c:\windows\system32\mfc40.dll
2011-01-19 04:58:45 954288 ----a-w- c:\windows\system32\mfc40u.dll
2011-01-19 04:58:27 7680 ----a-w- c:\program files\internet explorer\iecompat.dll
2011-01-19 04:58:26 81920 ----a-w- c:\windows\system32\consent.exe
2011-01-19 04:58:01 231424 ----a-w- c:\windows\system32\msshsq.dll
2011-01-19 04:55:04 531968 ----a-w- c:\windows\system32\comctl32.dll
2011-01-06 15:08:19 -------- d-----w- c:\program files\iPod
2011-01-06 15:08:14 -------- d-----w- c:\program files\iTunes

==================== Find3M ====================

2010-12-28 15:55:03 413696 ----a-w- c:\windows\system32\odbc32.dll
2010-11-29 23:38:30 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-11-29 23:38:30 69632 ----a-w- c:\windows\system32\QuickTime.qts

============= FINISH: 19:41:12.84 ===============



here are the results of the last spybot scan


Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
4-open-davinci.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
securitysoftwarepayments.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
privatesecuredpayments.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
secure.privatesecuredpayments.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
getantivirusplusnow.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
secure-plus-payments.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
www.getantivirusplusnow.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
www.secure-plus-payments.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
www.getavplusnow.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
safebrowsing-cache.google.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
urs.microsoft.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
www.securesoftwarebill.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
secure.paysecuresystem.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
paysoftbillsolution.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
protected.maxisoftwaremart.com=74.125.45.100

Microsoft.Windows.RedirectedHosts: [SBI $B89FBA81] Redirected host (Redirected host, nothing done)
www.securesoftwarebill.com=74.125.45.100

Microsoft.Windows.RedirectedHosts: [SBI $19781685] Redirected host (Redirected host, nothing done)
secure.paysecuresystem.com=74.125.45.100

Microsoft.Windows.RedirectedHosts: [SBI $CEFF52BA] Redirected host (Redirected host, nothing done)
paysoftbillsolution.com=74.125.45.100

Right Media: Tracking cookie (Internet Explorer: The Sizers) (Cookie, nothing done)


DoubleClick: Tracking cookie (Internet Explorer: The Sizers) (Cookie, nothing done)



--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---

2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2009-01-26 SDWinSec.exe (1.0.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-03-05 TeaTimer.exe (1.6.6.32)
2009-08-23 unins000.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-11-04 advcheck.dll (1.6.5.20)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2010-10-05 Includes\Adware.sbi (*)
2011-02-01 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2010-12-14 Includes\Dialer.sbi (*)
2010-12-14 Includes\DialerC.sbi (*)
2010-01-25 Includes\HeavyDuty.sbi (*)
2010-11-30 Includes\Hijackers.sbi (*)
2011-01-25 Includes\HijackersC.sbi (*)
2010-09-15 Includes\iPhone.sbi (*)
2010-12-14 Includes\Keyloggers.sbi (*)
2010-12-14 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2010-12-14 Includes\Malware.sbi (*)
2011-02-01 Includes\MalwareC.sbi (*)
2010-05-18 Includes\PUPS.sbi (*)
2010-12-14 Includes\PUPSC.sbi (*)
2010-01-25 Includes\Revision.sbi (*)
2009-01-13 Includes\Security.sbi (*)
2010-12-14 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2011-01-18 Includes\Spyware.sbi (*)
2011-01-18 Includes\SpywareC.sbi (*)
2010-03-08 Includes\Tracks.uti
2010-12-28 Includes\Trojans.sbi (*)
2011-02-01 Includes\TrojansC-02.sbi (*)
2011-01-13 Includes\TrojansC-03.sbi (*)
2011-01-25 Includes\TrojansC-04.sbi (*)
2011-01-26 Includes\TrojansC-05.sbi (*)
2010-12-28 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll