Ran ComboFix now my computer will begin to start up and then can't.
End of added info. ~ OB
ComboFix 10-07-20.01 - Administrator 07/20/2010 19:42:05.1.4 - x86 NETWORK
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3327.3052 [GMT -5:00]
Running from: c:\documents and settings\Administrator\Desktop\ComboFix.exe
AV: AVG Internet Security *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *enabled* {8decf618-9569-4340-b34a-d78d28969b66}
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\All Users\Application Data\vlc-0.9.4-win32.exe
c:\documents and settings\All Users\Application Data\vlc-1.0.2-win32.exe
c:\windows\system32\AutoRun.inf
c:\windows\xpsp1hfm.log
F:\Autorun.inf
Infected copy of c:\windows\system32\drivers\kbdclass.sys was found and disinfected
Restored copy from - Kitty had a snack

.
((((((((((((((((((((((((( Files Created from 2010-06-21 to 2010-07-21 )))))))))))))))))))))))))))))))
.
2010-10-20 19:14 . 2010-05-06 10:41 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2010-07-18 16:22 . 2010-07-18 16:22 -------- d-----w- c:\documents and settings\Jules\Application Data\Malwarebytes
2010-07-18 15:50 . 2010-07-18 15:50 63488 ----a-w- c:\documents and settings\Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
2010-07-18 15:50 . 2010-07-18 15:50 52224 ----a-w- c:\documents and settings\Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2010-07-18 15:50 . 2010-07-18 15:50 117760 ----a-w- c:\documents and settings\Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2010-07-18 15:50 . 2010-07-18 15:50 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2010-07-18 15:50 . 2010-07-18 15:50 -------- d-----w- c:\documents and settings\Administrator\Application Data\SUPERAntiSpyware.com
2010-07-18 15:50 . 2010-07-18 15:50 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-07-18 15:46 . 2010-07-18 15:46 -------- d-----w- c:\documents and settings\Administrator\Application Data\Malwarebytes
2010-07-18 15:45 . 2010-04-29 20:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-07-18 15:45 . 2010-07-18 15:45 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-07-18 15:45 . 2010-04-29 20:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-07-18 15:45 . 2010-07-18 15:46 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-07-18 15:31 . 2010-07-18 15:31 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Google
2010-07-18 15:31 . 2010-07-18 15:31 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Mozilla
2010-07-18 15:30 . 2010-07-18 15:30 -------- d-sh--w- c:\documents and settings\Administrator\IETldCache
2010-07-18 15:26 . 2010-07-18 15:52 12872 ----a-w- c:\windows\system32\bootdelete.exe
2010-07-18 15:14 . 2010-07-18 16:24 16968 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys
2010-07-18 15:14 . 2010-07-18 15:26 -------- d-----w- c:\documents and settings\All Users\Application Data\Hitman Pro
2010-07-18 15:14 . 2010-07-18 15:14 -------- d-----w- c:\program files\Hitman Pro 3.5
2010-07-17 14:12 . 2010-07-17 14:12 452104 ----a-w- c:\documents and settings\Jules\Application Data\Real\Update\setup3.12\setup.exe
2010-07-17 14:12 . 2010-07-17 14:12 452104 ----a-w- c:\documents and settings\Jules\Application Data\Real\Update\temp\~Upg1\setup.exe
2010-07-16 16:04 . 2010-07-16 16:04 79368 ----a-w- c:\documents and settings\Grandma\Application Data\Real\Update\setup3.12\RUP\vista.exe
2010-07-16 16:04 . 2010-07-16 16:04 73344 ----a-w- c:\documents and settings\Grandma\Application Data\Real\Update\setup3.12\RUP\inst_config\gtapi_v6.dll
2010-07-16 16:04 . 2010-07-16 16:04 64000 ----a-w- c:\documents and settings\Grandma\Application Data\Real\Update\setup3.12\RUP\inst_config\gcapi_dll.dll
2010-07-16 16:04 . 2010-07-16 16:04 52288 ----a-w- c:\documents and settings\Grandma\Application Data\Real\Update\setup3.12\RUP\inst_config\gtapi.dll
2010-07-16 16:04 . 2010-07-16 16:04 122880 ----a-w- c:\documents and settings\Grandma\Application Data\Real\Update\setup3.12\RUP\inst_config\compat.dll
2010-07-13 13:35 . 2010-07-13 13:37 26641904 ----a-w- c:\documents and settings\Grandma\Application Data\Real\Update\setup3.12\rp\RealPlayerSPGold.exe
2010-07-13 13:35 . 2010-07-13 13:35 220272 ----a-w- c:\documents and settings\Grandma\Application Data\Real\Update\setup3.12\gtb\GOOGLE_TOOLBAR\GoogleToolbarInstaller.exe
2010-07-13 13:35 . 2010-07-13 13:35 149000 ----a-w- c:\documents and settings\Grandma\Application Data\Real\Update\setup3.12\chr_helper\LaunchHelper.exe
2010-07-13 13:34 . 2010-07-13 13:34 13407072 ----a-w- c:\documents and settings\Grandma\Application Data\Real\Update\setup3.12\chr\ChromeInstaller.exe
2010-07-13 07:28 . 2010-07-13 07:29 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Adobe
2010-07-11 02:31 . 2010-07-18 15:19 0 ----a-w- c:\documents and settings\Grandma\Local Settings\Application Data\prvlcl.dat
2010-07-11 02:29 . 2010-07-11 02:29 452104 ----a-w- c:\documents and settings\Grandma\Application Data\Real\Update\setup3.12\setup.exe
2010-07-10 03:11 . 2010-07-10 03:11 2956168 ----a-w- c:\documents and settings\Grandma\Application Data\Mozilla\Firefox\Profiles\ytt2dr5e.default\extensions\toolbar@ask.com\chrome\temp\askToolbar.exe
2010-07-06 23:53 . 2010-07-01 18:52 1496064 ----a-w- c:\documents and settings\Morgana\Application Data\Mozilla\Firefox\Profiles\g4cpmvcl.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
2010-07-06 23:53 . 2010-07-01 18:51 43008 ----a-w- c:\documents and settings\Morgana\Application Data\Mozilla\Firefox\Profiles\g4cpmvcl.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2010-07-06 23:53 . 2010-07-01 18:51 338944 ----a-w- c:\documents and settings\Morgana\Application Data\Mozilla\Firefox\Profiles\g4cpmvcl.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2010-07-06 23:53 . 2010-07-01 18:51 346112 ----a-w- c:\documents and settings\Morgana\Application Data\Mozilla\Firefox\Profiles\g4cpmvcl.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2010-06-29 12:21 . 2010-06-29 12:21 439816 ----a-w- c:\documents and settings\Jules\Application Data\Real\Update\temp\~Upg0\setup.exe
2010-06-28 22:02 . 2010-06-28 22:02 1039712 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.exe
2010-06-27 01:15 . 2010-06-27 01:16 -------- d-----w- C:\temp
2010-06-23 20:16 . 2010-07-05 11:50 -------- d-----w- c:\documents and settings\NetworkService\Application Data\Apple Computer
2010-06-23 20:16 . 2010-06-23 20:16 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Apple Computer
2010-06-22 19:20 . 2010-06-22 19:20 242896 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgtdix.sys
2010-06-22 19:20 . 2010-06-22 19:20 29512 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgmfx86.sys
2010-06-22 19:20 . 2010-06-22 19:20 74760 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\UniversalDD.sys
2010-06-22 19:20 . 2010-06-22 19:20 30216 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\AVGIDSFilter.sys
2010-06-22 19:20 . 2010-06-22 19:20 26120 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\AVGIDSShim.sys
2010-06-22 19:20 . 2010-06-22 19:20 25096 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\AVGIDSxx.sys
2010-06-22 19:20 . 2010-06-22 19:20 122376 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\AVGIDSDriver.sys
2010-06-22 19:20 . 2010-06-22 19:20 216200 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgldx86.sys
2010-06-22 19:20 . 2010-06-22 19:20 12536 ----a-w- c:\windows\system32\avgrsstx.dll
2010-06-22 19:18 . 2010-06-22 19:18 624920 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgiproxy.exe
2010-06-22 19:18 . 2010-06-22 19:18 1690464 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.dll
2010-06-22 19:18 . 2010-06-22 19:18 813336 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avginet.dll
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-18 19:20 . 2009-12-02 00:47 256 ----a-w- c:\windows\system32\pool.bin
2010-07-18 19:08 . 2010-04-13 20:58 -------- d-----w- c:\documents and settings\Grandma\Application Data\OpenOffice.org2
2010-07-18 15:19 . 2008-10-07 00:58 0 ----a-w- c:\documents and settings\Morgana\Local Settings\Application Data\prvlcl.dat
2010-07-18 15:19 . 2008-10-12 23:39 0 ----a-w- c:\documents and settings\Jules\Local Settings\Application Data\prvlcl.dat
2010-07-17 19:43 . 2008-12-25 00:55 -------- d-----w- c:\documents and settings\All Users\Application Data\Google Updater
2010-07-17 18:54 . 2008-11-21 19:02 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2010-07-17 14:47 . 2008-09-17 20:20 664 ----a-w- c:\windows\system32\d3d9caps.dat
2010-07-17 14:01 . 2010-04-29 21:11 -------- d-----w- c:\program files\Ask.com
2010-06-29 12:21 . 2010-04-28 00:57 439816 ----a-w- c:\documents and settings\Jules\Application Data\Real\Update\setup3.10\setup.exe
2010-06-28 00:15 . 2010-04-09 21:48 439816 ----a-w- c:\documents and settings\Grandma\Application Data\Real\Update\setup3.10\setup.exe
2010-06-22 19:20 . 2008-10-04 21:54 243024 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-06-22 19:20 . 2008-10-04 21:54 29584 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-06-22 19:20 . 2010-05-08 18:58 25168 ----a-w- c:\windows\system32\drivers\AVGIDSxx.sys
2010-06-22 19:20 . 2008-10-04 21:54 216400 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-06-19 05:16 . 2010-06-19 05:14 -------- d-----w- c:\program files\iTunes
2010-06-19 05:15 . 2010-06-19 05:15 -------- d-----w- c:\program files\iPod
2010-06-19 05:14 . 2008-09-17 04:18 -------- d-----w- c:\program files\Common Files\Apple
2010-06-19 05:08 . 2010-06-19 05:08 -------- d-----w- c:\program files\Bonjour
2010-06-19 05:01 . 2010-06-19 05:01 72504 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.2.0.61\SetupAdmin.exe
2010-06-13 03:18 . 2009-12-02 00:46 -------- d-----w- c:\documents and settings\Jules\Application Data\Research In Motion
2010-06-08 14:45 . 2009-01-10 23:31 -------- d-----w- c:\program files\Microsoft Silverlight
2010-06-03 01:01 . 2010-06-03 01:01 61440 ----a-w- c:\documents and settings\Morgana\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-529c6d93-n\decora-sse.dll
2010-06-03 01:01 . 2010-06-03 01:01 12800 ----a-w- c:\documents and settings\Morgana\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-529c6d93-n\decora-d3d.dll
2010-06-03 01:01 . 2010-06-03 01:01 503808 ----a-w- c:\documents and settings\Morgana\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-26b78b55-n\msvcp71.dll
2010-06-03 01:01 . 2010-06-03 01:01 499712 ----a-w- c:\documents and settings\Morgana\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-26b78b55-n\jmc.dll
2010-06-03 01:01 . 2010-06-03 01:01 348160 ----a-w- c:\documents and settings\Morgana\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-26b78b55-n\msvcr71.dll
2010-06-02 21:05 . 2010-06-02 21:05 -------- d-----w- c:\documents and settings\Morgana\Application Data\AVG9
2010-06-01 16:32 . 2008-09-17 03:52 96384 ----a-w- c:\windows\system32\drivers\sptd5533.sys
2010-06-01 14:31 . 2008-09-17 03:56 223128 ----a-w- c:\windows\system32\drivers\dtscsi.sys
2010-06-01 10:17 . 2010-01-17 02:01 -------- d-----w- c:\documents and settings\Grandma\Application Data\Apple Computer
2010-05-30 03:22 . 2010-05-30 03:22 -------- d-----w- c:\program files\Gradkell Systems, Inc
2010-05-27 00:06 . 2010-05-27 00:06 503808 ----a-w- c:\documents and settings\Jules\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-6908a412-n\msvcp71.dll
2010-05-27 00:06 . 2010-05-27 00:06 499712 ----a-w- c:\documents and settings\Jules\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-6908a412-n\jmc.dll
2010-05-27 00:06 . 2010-05-27 00:06 61440 ----a-w- c:\documents and settings\Jules\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-30041be1-n\decora-sse.dll
2010-05-27 00:06 . 2010-05-27 00:06 348160 ----a-w- c:\documents and settings\Jules\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-6908a412-n\msvcr71.dll
2010-05-27 00:06 . 2010-05-27 00:06 12800 ----a-w- c:\documents and settings\Jules\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-30041be1-n\decora-d3d.dll
2010-05-25 21:33 . 2010-05-25 21:33 503808 ----a-w- c:\documents and settings\Grandma\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-109ed8f5-n\msvcp71.dll
2010-05-25 21:33 . 2010-05-25 21:33 499712 ----a-w- c:\documents and settings\Grandma\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-109ed8f5-n\jmc.dll
2010-05-25 21:33 . 2010-05-25 21:33 348160 ----a-w- c:\documents and settings\Grandma\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-109ed8f5-n\msvcr71.dll
2010-05-25 21:33 . 2010-05-25 21:33 61440 ----a-w- c:\documents and settings\Grandma\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-3c3465cd-n\decora-sse.dll
2010-05-25 21:33 . 2010-05-25 21:33 12800 ----a-w- c:\documents and settings\Grandma\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-3c3465cd-n\decora-d3d.dll
2010-05-23 15:57 . 2010-04-11 13:26 -------- d-----w- c:\documents and settings\Grandma\Application Data\vlc
2010-05-21 19:14 . 2009-10-02 16:14 221568 ------w- c:\windows\system32\MpSigStub.exe
2010-05-20 20:11 . 2008-08-24 18:15 98304 ----a-w- c:\windows\DUMPf3f5.tmp
2010-05-20 20:08 . 2008-08-24 18:15 98304 ----a-w- c:\windows\DUMPe0f9.tmp
2010-05-20 20:06 . 2008-08-24 18:15 98304 ----a-w- c:\windows\DUMPcb7d.tmp
2010-05-20 20:04 . 2008-08-24 18:15 98304 ----a-w- c:\windows\DUMPc6ab.tmp
2010-05-20 20:02 . 2008-08-24 18:15 98304 ----a-w- c:\windows\DUMPc67c.tmp
2010-05-20 20:00 . 2008-08-24 18:15 98304 ----a-w- c:\windows\DUMPc553.tmp
2010-05-18 21:35 . 2010-05-18 21:35 91424 ----a-w- c:\windows\system32\dnssd.dll
2010-05-18 21:35 . 2010-05-18 21:35 107808 ----a-w- c:\windows\system32\dns-sd.exe
2010-05-09 20:18 . 2010-05-09 20:18 212992 ----a-w- c:\windows\system32\stacsv.exe
2010-05-09 20:15 . 2010-05-08 18:58 52872 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2010-05-08 18:57 . 2010-05-08 18:57 50968 ----a-w- c:\windows\system32\avgfwdx.dll
2010-05-08 18:57 . 2010-05-08 18:57 30104 ----a-w- c:\windows\system32\drivers\avgfwdx.sys
2010-05-06 10:41 . 2004-08-04 00:56 916480 ----a-w- c:\windows\system32\wininet.dll
2010-05-02 05:22 . 2004-08-03 23:17 1851264 ------w- c:\windows\system32\win32k.sys
2010-05-01 16:40 . 2009-03-27 02:56 143502 ----a-w- c:\windows\hpoins16.dat
2010-04-25 14:19 . 2010-04-13 21:00 1 ----a-w- c:\documents and settings\Grandma\Application Data\OpenOffice.org2\user\uno_packages\cache\stamp.sys
2008-08-16 22:42 . 2008-08-16 22:42 13112 ----a-w- c:\program files\mozilla firefox\plugins\cgpcfg.dll
2008-08-16 22:42 . 2008-08-16 22:42 70456 ----a-w- c:\program files\mozilla firefox\plugins\CgpCore.dll
2008-08-16 22:42 . 2008-08-16 22:42 91448 ----a-w- c:\program files\mozilla firefox\plugins\confmgr.dll
2008-08-16 22:42 . 2008-08-16 22:42 20800 ----a-w- c:\program files\mozilla firefox\plugins\ctxlogging.dll
2008-08-16 22:43 . 2008-08-16 22:43 206136 ----a-w- c:\program files\mozilla firefox\plugins\ctxmui.dll
2008-08-16 22:42 . 2008-08-16 22:42 31032 ----a-w- c:\program files\mozilla firefox\plugins\icafile.dll
2008-08-16 22:42 . 2008-08-16 22:42 40248 ----a-w- c:\program files\mozilla firefox\plugins\icalogon.dll
2008-05-21 13:41 . 2008-05-21 13:41 479232 ----a-w- c:\program files\mozilla firefox\plugins\msvcm80.dll
2008-05-21 13:41 . 2008-05-21 13:41 548864 ----a-w- c:\program files\mozilla firefox\plugins\msvcp80.dll
2008-05-21 13:41 . 2008-05-21 13:41 626688 ----a-w- c:\program files\mozilla firefox\plugins\msvcr80.dll
2008-06-05 18:58 . 2008-06-05 18:58 648504 ----a-w- c:\program files\mozilla firefox\plugins\sslsdk_b.dll
2008-08-16 22:42 . 2008-08-16 22:42 23864 ----a-w- c:\program files\mozilla firefox\plugins\TcpPServ.dll
2008-10-15 13:43 . 2008-10-04 22:17 17934368 --sha-w- c:\windows\system32\drivers\fidbox.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-03-03 21:42 1362824 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-03-03 1362824]
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-06-29 2403568]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EEventManager"="c:\program files\EPSON\Creativity Suite\Event Manager\EEventManager.exe" [2005-04-08 102400]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-03-12 49152]
"DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2005-12-10 133016]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-11-04 866584]
"dla"="c:\windows\system32\dla\tfswctrl.exe" [2005-03-16 127037]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2008-10-24 206112]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2008-10-24 79136]
"DriverUpdate"="c:\windows\system32\UpdateDriver.exe" [2002-07-30 57344]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"QuickPassword"="c:\program files\ActivCard\ActivCard Gold\agquickp.exe" [2002-08-29 131072]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-08-18 198160]
"BlackBerryAutoUpdate"="c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2009-08-22 623960]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-18 421888]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2010-06-22 2065760]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-06-15 141624]
"VX6000"="c:\windows\vVX6000.exe" [2008-08-04 713744]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"RunNarrator"="Narrator.exe" [2008-04-14 53760]
c:\documents and settings\Grandma\Start Menu\Programs\Startup\
OpenOffice.org 2.4.lnk - c:\program files\OpenOffice.org 2.4\program\quickstart.exe [2008-1-21 393216]
c:\documents and settings\Jules\Start Menu\Programs\Startup\
Desktop Manager.lnk - c:\program files\Research In Motion\BlackBerry\DesktopMgr.exe [2009-8-21 1799512]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Acrobat Speed Launcher.lnk - c:\windows\Installer\{AC76BA86-1033-F400-7760-000000000003}\_SC_Acrobat.exe [2008-10-23 295606]
Adobe Acrobat Synchronizer.lnk - c:\program files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe [2006-10-23 734872]
Desktop Manager.lnk - c:\program files\Research In Motion\BlackBerry\DesktopMgr.exe [2009-8-21 1799512]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-3-11 210520]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-06-22 19:20 12536 ----a-w- c:\windows\system32\avgrsstx.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gamevance
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
2006-10-23 04:24 620152 ----a-w- c:\program files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-06-12 07:38 34672 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray]
2009-07-08 18:31 236016 ----a-w- c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VX6000]
2008-08-04 23:22 713744 ----a-w- c:\windows\vVX6000.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeEnC2.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeTray.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Documents and Settings\\All Users\\Application Data\\NexonUS\\NGM\\NGM.exe"=
"c:\nexon\Combat Arms\CombatArms.exe"= c:\nexon\Combat Arms\CombatArms.exe:*Enabled:CombatArms.exe
"c:\\Nexon\\Combat Arms\\NMService.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
"c:\\Program Files\\SonicWALL\\SonicWALL Global VPN Client\\SWGVpnClient.exe"=
"f:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgam.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgdiagex.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\nexon\Combat Arms\Engine.exe"= c:\nexon\Combat Arms\Engine.exe:*Enabled:Engine.exe
"f:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"56396:TCP"= 56396:TCP:Pando Media Booster
"56396:UDP"= 56396:UDP:Pando Media Booster
R0 AVGIDSErHrxpx;AVG9IDSErHr;c:\windows\system32\drivers\AVGIDSxx.sys [5/8/2010 1:58 PM 25168]
R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [5/8/2010 1:58 PM 52872]
R1 AvgTdiX;AVG Network Redirector;c:\windows\system32\drivers\avgtdix.sys [10/4/2008 4:54 PM 243024]
R1 RCFOX;SonicWALL IPsec Driver;c:\windows\system32\drivers\RCFOX.SYS [12/6/2009 3:33 PM 86552]
R3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [5/8/2010 1:57 PM 30104]
S1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [10/4/2008 4:54 PM 216400]
S1 bcbus;BestCrypt bus driver;c:\windows\system32\DRIVERS\bcbus.sys --> c:\windows\system32\DRIVERS\bcbus.sys [?]
S1 oreans32;oreans32;c:\windows\system32\drivers\oreans32.sys [3/31/2010 11:13 PM 33824]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2/17/2010 1:25 PM 12872]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5/10/2010 1:41 PM 67656]
S2 acautoreg;ActivCard Gold Autoregister;c:\program files\Common Files\ActivCard\acautoreg.exe [9/12/2002 4:16 AM 53248]
S2 Accoca;ActivCard Gold service;c:\program files\Common Files\ActivCard\accoca.exe [8/12/2002 1:54 PM 159744]
S2 AMDRAIDXpert;AMD RAIDXpert;c:\program files\AMD\RAIDXpert\jetty\extra\win32\Wrapper.exe [9/29/2003 9:30 AM 110592]
S2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [6/22/2010 2:20 PM 308136]
S2 avgfws9;AVG Firewall;c:\program files\AVG\AVG9\avgfws9.exe [6/22/2010 2:20 PM 2331032]
S2 AVGIDSAgent;AVG9IDSAgent;c:\program files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe [6/22/2010 2:20 PM 5897808]
S2 gupdate1c9662baf6f08ea;Google Update Service (gupdate1c9662baf6f08ea);c:\program files\Google\Update\GoogleUpdate.exe [12/24/2008 7:56 PM 133104]
S2 PBParallel;PBParallel;c:\windows\system32\drivers\pbparallel.sys [3/17/2002 10:51 AM 27152]
S2 PBSmartcard;PBSmartcard;c:\windows\system32\drivers\pbsmartcard.sys [10/10/2001 7:05 AM 24020]
S2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [11/3/2006 7:19 PM 13592]
S3 actccid;ActivCard USB Reader V2;c:\windows\system32\drivers\actccid.sys [8/2/2002 2:41 PM 47660]
S3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\drivers\l151x86.sys [9/8/2008 9:07 PM 37376]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [5/8/2010 1:57 PM 30104]
S3 AVGIDSDriverxpx;AVG9IDSDriver;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys [5/8/2010 1:58 PM 122448]
S3 AVGIDSFilterxpx;AVG9IDSFilter;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys [5/8/2010 1:58 PM 30288]
S3 AVGIDSShimxpx;AVG9IDSShim;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys [5/8/2010 1:58 PM 26192]
S3 hitmanpro35;Hitman Pro 3.5 Support Driver;c:\windows\system32\drivers\hitmanpro35.sys [7/18/2010 10:14 AM 16968]
S3 rcvpn;SonicWALL VPN Adapter;c:\windows\system32\drivers\rcvpn.sys [12/6/2009 3:32 PM 24876]
S3 SCRx31 USB Reader;SCRx31 USB Reader;c:\windows\system32\drivers\stc2.sys [5/16/2002 2:38 PM 56192]
S3 VX6000;Microsoft LifeCam VX-6000;c:\windows\system32\drivers\VX6000Xp.sys [9/16/2008 9:35 PM 2077840]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [9/16/2008 10:52 PM 643072]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
getPlusHelper REG_MULTI_SZ getPlusHelper
.
Contents of the 'Scheduled Tasks' folder
2010-07-17 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 19:34]
2010-07-18 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-12-25 01:29]
2010-07-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2008-12-25 05:04]
2010-07-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2008-12-25 05:04]
2010-07-18 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-04 00:20]
2010-07-18 c:\windows\Tasks\OGALogon.job
- c:\windows\system32\OGAEXEC.exe [2009-08-03 21:07]
2010-07-18 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\program files\Ask.com\UpdateTask.exe [2010-03-03 21:42]
2010-07-18 c:\windows\Tasks\User_Feed_Synchronization-{E6ADB127-5730-456F-A3B3-D4FF39A6BF15}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 09:31]
.
.
------- Supplementary Scan -------
.
FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\8p3muf04.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - component: c:\documents and settings\All Users\Application Data\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
FF - component: c:\documents and settings\All Users\Application Data\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c}\components\metricsloader.dll
FF - component: c:\program files\AVG\AVG9\Firefox\components\avgssff.dll
FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll
FF - plugin: c:\documents and settings\All Users\Application Data\NexonUS\NGM\npNxGameUS.dll
FF - plugin: c:\program files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\Google\Update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: c:\program files\Gradkell Systems, Inc\DBsign Data Security Suite\Common\Lib\npDbsGscInfo.dll
FF - plugin: c:\program files\Gradkell Systems, Inc\DBsign Data Security Suite\Common\Lib\npDBsignWeb.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npicaN.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npPandoWebInst.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
.
- - - - ORPHANS REMOVED - - - -
MSConfigStartUp-My Web Search Bar Search Scope Monitor - c:\progra~1\MYWEBS~1\bar\2.bin\m3SrchMn.exe
MSConfigStartUp-MyWebSearch Email Plugin - c:\progra~1\MYWEBS~1\bar\2.bin\mwsoemon.exe
AddRemove-DVD Decrypter - c:\documents and settings\Miguel\My Documents\Downloads\DVD Decrypter\uninstall.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-20 19:55
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'winlogon.exe'(1772)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\WININET.dll
c:\windows\system32\Ati2evxx.dll
.
Completion time: 2010-07-20 19:57:08
ComboFix-quarantined-files.txt 2010-07-21 00:57
Pre-Run: 260,117,204,992 bytes free
Post-Run: 263,583,301,632 bytes free
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
- - End Of File - - 013672A8E885BEA156EF25C1CD28DFB1
Edited by Orange Blossom, 21 July 2010 - 02:57 PM.