
Here is the DDS log:
DDS (Ver_10-03-17.01) - NTFSx86
Run by chen at 22:51:37.87 on Fri 08/20/2010
Internet Explorer: 6.0.2800.1106
Microsoft Windows XP Home Edition 5.1.2600.1.1252.1.1033.18.128.32 [GMT -6:00]
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\vVX6000.exe
C:\Program Files\Java\jre6\bin\java.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\chen\Desktop\dds.scr
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.google.ca/
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File
TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
EB: Media Band: {32683183-48a0-441b-a342-7c2a440a9478} - %SystemRoot%\System32\browseui.dll
mRun: [IMJPMIG8.1] "c:\windows\ime\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
mRun: [MSPY2002] c:\windows\system32\ime\pintlgnt\ImScInst.exe /SYNC
mRun: [PHIME2002ASync] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /SYNC
mRun: [PHIME2002A] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /IMEName
mRun: [VX6000] c:\windows\vVX6000.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
IE: {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe
IE: {c95fe080-8f5d-11d2-a20b-00aa003c157a} - %SystemRoot%\web\related.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: DirectAnimation Java Classes - file://c:\windows\java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {31435657-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab
DPF: {33564D57-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/D/0/D/D0DD87DA-994F-4334-8B55-AF2E4D98ED0C/wmv9dmo.cab
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1261015166890
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {96695E54-ECE5-437B-81BF-D45FA9F878A0} - hxxp://www.s3graphics.com.cn/S3DisplayAct/active/S3DispayAct.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
================= FIREFOX ===================
FF - ProfilePath - c:\docume~1\chen\applic~1\mozilla\firefox\profiles\tl5qe9yb.default\
FF - prefs.js: browser.startup.homepage - google.ca
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\program files\google\update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.buffer.cache.count", 24);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.buffer.cache.size", 4096);
c:\program files\mozilla firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
============= SERVICES / DRIVERS ===============
=============== Created Last 30 ================
2010-08-07 08:53:55 0 d-----w- c:\documents and settings\chen\RSCEmulation
2010-07-25 01:36:16 0 d-s---w- C:\ComboFix
2010-07-25 00:03:54 0 d-sha-r- C:\cmdcons
2010-07-24 23:53:41 77312 ----a-w- c:\windows\MBR.exe
2010-07-24 23:53:41 256512 ----a-w- c:\windows\PEV.exe
2010-07-24 23:53:41 161792 ----a-w- c:\windows\SWREG.exe
2010-07-24 23:53:40 98816 ----a-w- c:\windows\sed.exe
2010-07-23 03:22:34 38 ----a-w- c:\windows\avisplitter.ini
2010-07-23 03:22:31 414 ----a-w- c:\windows\system32\lame_acm.xml
2010-07-23 03:22:30 217088 ----a-w- c:\windows\system32\yv12vfw.dll
2010-07-23 03:22:30 151552 ----a-w- c:\windows\system32\ac3acm.acm
2010-07-23 03:22:29 790528 ----a-w- c:\windows\system32\xvidcore.dll
2010-07-23 03:22:29 134144 ----a-w- c:\windows\system32\xvidvfw.dll
2010-07-23 03:22:28 547 ----a-w- c:\windows\system32\ff_vfw.dll.manifest
2010-07-23 03:22:27 108032 ----a-w- c:\windows\system32\ff_vfw.dll
2010-07-23 03:22:17 0 d-----w- c:\program files\K-Lite Codec Pack
2010-07-22 07:44:38 167704 ----a-w- c:\windows\system32\wuaucpl.cpl
2010-07-22 07:32:05 31232 -c--a-w- c:\windows\system32\dllcache\weitekp9.sys
2010-07-22 07:32:04 41600 -c--a-w- c:\windows\system32\dllcache\weitekp9.dll
2010-07-22 07:30:59 79872 -c--a-w- c:\windows\system32\dllcache\rwia330.dll
2010-07-22 07:29:41 92416 -c--a-w- c:\windows\system32\dllcache\mga.sys
2010-07-22 07:28:29 10096640 -c--a-w- c:\windows\system32\dllcache\hwxcht.dll
2010-07-22 07:27:42 18944 -c--a-w- c:\windows\system32\dllcache\cprofile.exe
2010-07-22 07:27:36 480256 -c--a-w- c:\windows\system32\dllcache\cintsetp.exe
2010-07-22 07:27:36 21504 -c--a-w- c:\windows\system32\dllcache\cintlgnt.ime
2010-07-22 07:27:35 201216 -c--a-w- c:\windows\system32\dllcache\cintime.dll
2010-07-22 07:27:34 56320 -c--a-w- c:\windows\system32\dllcache\chtskdic.dll
2010-07-22 07:27:34 173568 -c--a-w- c:\windows\system32\dllcache\chtskf.dll
2010-07-22 07:27:33 97792 -c--a-w- c:\windows\system32\dllcache\chtmbx.dll
2010-07-22 07:27:28 9728 -c--a-w- c:\windows\system32\dllcache\change.exe
2010-07-22 07:27:28 15872 -c--a-w- c:\windows\system32\dllcache\chgport.exe
2010-07-22 07:27:28 14336 -c--a-w- c:\windows\system32\dllcache\chgusr.exe
2010-07-22 07:27:28 13312 -c--a-w- c:\windows\system32\dllcache\chglogon.exe
2010-07-22 07:27:22 54528 -c--a-w- c:\windows\system32\dllcache\cap7146.sys
2010-07-22 07:27:22 10752 -c--a-w- c:\windows\system32\dllcache\c_iscii.dll
2010-07-22 07:22:23 488 ---ha-r- c:\windows\system32\logonui.exe.manifest
2010-07-22 07:22:08 749 ---ha-r- c:\windows\WindowsShell.Manifest
2010-07-22 07:22:08 749 ---ha-r- c:\windows\system32\wuaucpl.cpl.manifest
2010-07-22 07:22:08 749 ---ha-r- c:\windows\system32\sapi.cpl.manifest
2010-07-22 07:22:08 749 ---ha-r- c:\windows\system32\ncpa.cpl.manifest
2010-07-22 07:20:58 520192 -c--a-w- c:\windows\system32\dllcache\wmplayer.exe
2010-07-22 07:17:35 66048 -c--a-w- c:\windows\system32\dllcache\access.cpl
2010-07-22 07:16:59 55808 -c--a-w- c:\windows\system32\dllcache\wmicookr.dll
2010-07-22 07:14:14 50048 ----a-w- c:\windows\system32\drivers\DMusic.sys
2010-07-22 07:14:07 5888 ----a-w- c:\windows\system32\drivers\splitter.sys
2010-07-22 07:13:21 56576 ----a-w- c:\windows\system32\drivers\redbook.sys
2010-07-22 07:10:55 38024 ----a-w- c:\windows\system32\drivers\termdd.sys
2010-07-22 07:09:04 696320 -c--a-w- c:\windows\system32\dllcache\sapi.dll
2010-07-22 07:09:04 147456 -c--a-w- c:\windows\system32\dllcache\sapi.cpl
==================== Find3M ====================
2010-08-19 00:17:41 2188 ----a-w- c:\windows\system32\d3d9caps.dat
2010-07-22 07:19:42 23388 ----a-w- c:\windows\system32\emptyregdb.dat
2010-07-20 10:56:21 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2010-07-12 08:55:39 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-06-20 01:40:23 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-05-29 00:09:42 16 ----a-w- c:\docume~1\chen\applic~1\vqdlkr.dat
2010-05-28 04:15:06 4 ----a-w- c:\docume~1\chen\applic~1\ovczpx.dat
2009-12-17 23:14:47 245760 --sha-w- c:\windows\system32\config\systemprofile\ietldcache\index.dat
============= FINISH: 22:52:56.06 ===============