take look at me Logs plz

[El loco]

Hello, today when I turned on the comp I found something called Relevant Knowledge right next to where the comp shows the time. So I scanned on safe mod and Malwarebytes seems to have picket it up. Here are the logs.

Malwarebytes' Anti-Malware 1.44
Database version: 3720
Windows 5.1.2600 Service Pack 3 (Safe Mode)
Internet Explorer 8.0.6001.18702

3/6/2010 4:50:09 PM
mbam-log-2010-03-06 (16-50-02).txt

Scan type: Full Scan (C:\|)
Objects scanned: 434247
Time elapsed: 1 hour(s), 48 minute(s), 16 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 2
Files Infected: 4

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\Program Files\RelevantKnowledge\components (Spyware.MarketScore) -> No action taken.
C:\Program Files\RelevantKnowledge (Spyware.MarketScore) -> No action taken.

Files Infected:
C:\System Volume Information\_restore{F8796A5D-162E-472F-9610-50B325A26B99}\RP339\A0067375.exe (Adware.RelevantKnowledge) -> No action taken.
C:\System Volume Information\_restore{F8796A5D-162E-472F-9610-50B325A26B99}\RP339\A0067374.exe (Adware.Agent) -> No action taken.
C:\Program Files\SoftwareClub.ws\SC Video Decompiler\rkverify.exe (Adware.Agent) -> No action taken.
C:\Program Files\SoftwareClub.ws\SC Video Decompiler\rkinstall.exe (Adware.RelevantKnowledge) -> No action taken.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:55:50 PM, on 3/6/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! en Espaol
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! en Espaol
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TrayServer] C:\Program Files\MAGIX\Movie_Edit_Pro_16_Download_Version\TrayServer.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~1\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.7.109.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www2.snapfish.com/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1201108691495
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1201111902218
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Unknown owner - C:\Program Files\a-squared Anti-Malware\a2service.exe (file missing)
O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: AVG Firewall (avgfws9) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgfws9.exe
O23 - Service: AVG9IDSAgent (AVGIDSAgent) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe
O23 - Service: Google Update Service (gupdate1c9f7db41a482ee) (gupdate1c9f7db41a482ee) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: WUSB54GSv2SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
O24 - Desktop Component 0: (no name) - C:\Documents and Settings\Mike\Desktop\frontpage.swf

--
End of file - 7549 bytes

 

[El loco]

ComboFix 10-03-06.01 - Mike 03/06/2010 17:25:25.7.2 - x86 MINIMAL
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.958.653 [GMT -5:00]
Running from: c:\documents and settings\Mike\Desktop\ComboFix.exe
AV: AVG Internet Security *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *enabled* {8decf618-9569-4340-b34a-d78d28969b66}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
c:\program files\Error Repair Professional
c:\windows\system32\Thumbs.db

.
((((((((((((((((((((((((( Files Created from 2010-02-06 to 2010-03-06 )))))))))))))))))))))))))))))))
.

2010-04-25 17:33 . 2010-04-25 17:33 262144 ----a-w- C:\ntuser.dat
2010-03-06 22:23 . 2010-03-06 22:24 -------- d-----w- C:\32788R22FWJFW
2010-03-06 05:00 . 2010-03-06 05:00 -------- d-----w- c:\documents and settings\Mike\Application Data\MAGIX
2010-03-06 04:54 . 2003-11-04 23:20 6144 ----a-w- c:\documents and settings\All Users\Application Data\MAGIX\Movie_Edit_Pro_16_Download_Version\DVD\Wmv_disc\components\videowritetest.exe
2010-03-06 04:54 . 1997-10-16 03:03 18944 ----a-w- c:\documents and settings\All Users\Application Data\MAGIX\Movie_Edit_Pro_16_Download_Version\DVD\Wmv_disc\components\shelexec.exe
2010-03-06 04:54 . 2004-09-13 18:29 200704 ----a-w- c:\documents and settings\All Users\Application Data\MAGIX\Movie_Edit_Pro_16_Download_Version\DVD\Wmv_disc\licgen.exe
2010-03-06 04:54 . 2003-10-09 16:56 513088 ----a-w- c:\documents and settings\All Users\Application Data\MAGIX\Movie_Edit_Pro_16_Download_Version\DVD\Wmv_disc\WMDS.dll
2010-03-06 04:54 . 2005-10-08 21:14 40960 ----a-w- c:\documents and settings\All Users\Application Data\MAGIX\Movie_Edit_Pro_16_Download_Version\Default\fcdummy.exe
2010-03-06 04:54 . 2010-03-06 04:58 -------- d-----w- c:\documents and settings\All Users\Application Data\MAGIX
2010-03-06 04:53 . 2010-03-06 04:58 -------- d-----w- c:\program files\MAGIX
2010-03-06 04:53 . 2007-04-27 14:43 120200 ----a-w- c:\windows\system32\DLLDEV32i.dll
2010-03-06 04:52 . 2010-03-06 04:58 -------- d-----w- c:\program files\Common Files\MAGIX Services
2010-03-06 04:34 . 2010-03-06 04:39 -------- d-----w- c:\documents and settings\Mike\Application Data\jah
2010-03-06 04:33 . 2010-03-06 04:33 -------- d-----w- c:\program files\OpenLibraries
2010-03-06 04:25 . 2001-05-16 22:54 309616 ----a-w- c:\windows\system32\wmv8dmod.dll
2010-03-06 02:55 . 2010-03-06 02:55 -------- d-----w- C:\$AVG
2010-03-05 18:46 . 2010-03-05 18:46 360584 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgtdix.sys
2010-03-05 18:46 . 2010-03-05 18:46 74760 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\UniversalDD.sys
2010-03-05 18:46 . 2010-03-05 18:46 333192 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgldx86.sys
2010-03-05 18:46 . 2010-03-05 18:46 30216 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\AVGIDSFilter.sys
2010-03-05 18:46 . 2010-03-05 18:46 28424 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgmfx86.sys
2010-03-05 18:46 . 2010-03-05 18:46 25736 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\AVGIDSShim.sys
2010-03-05 18:46 . 2010-03-05 18:46 25608 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\AVGIDSxx.sys
2010-03-05 18:46 . 2010-03-05 18:46 161800 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgrkx86.sys
2010-03-05 18:46 . 2010-03-05 18:46 122376 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\AVGIDSDriver.sys
2010-03-05 18:45 . 2010-03-05 18:45 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-03-05 18:44 . 2010-03-05 18:30 613656 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgiproxy.exe
2010-03-05 18:44 . 2010-03-05 18:30 1658136 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.dll
2010-03-05 18:44 . 2010-03-05 18:30 1007896 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.exe
2010-03-05 18:44 . 2010-03-05 18:30 800536 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avginet.dll
2010-03-05 18:31 . 2010-03-05 18:45 29512 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-03-05 18:30 . 2010-03-06 12:14 -------- d-----w- c:\windows\system32\drivers\Avg
2010-03-05 18:30 . 2010-03-05 18:45 25096 ----a-w- c:\windows\system32\drivers\AVGIDSxx.sys
2010-03-05 18:30 . 2010-03-05 18:45 52872 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2010-03-05 18:30 . 2010-03-05 18:45 242696 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-03-05 18:30 . 2010-03-05 18:45 216200 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-03-05 18:30 . 2010-03-05 18:30 50968 ----a-w- c:\windows\system32\avgfwdx.dll
2010-03-05 18:30 . 2010-03-05 18:30 30104 ----a-w- c:\windows\system32\drivers\avgfwdx.sys
2010-03-05 18:30 . 2010-03-05 18:30 -------- d-----w- c:\program files\AVG
2010-03-05 18:30 . 2010-03-05 18:30 -------- d-----w- c:\documents and settings\All Users\Application Data\avg9
2010-02-20 21:43 . 2010-02-20 21:43 -------- d-----w- c:\program files\EA SPORTS
2010-02-18 23:52 . 2010-02-18 23:52 48816 ----a-w- c:\documents and settings\Mike\Application Data\GameRanger\GameRanger\Data\GameRangerLaunch.dll
2010-02-18 23:52 . 2010-02-18 23:52 155312 ----a-w- c:\documents and settings\Mike\Application Data\GameRanger\GameRanger\Data\GameRanger.dll
2010-02-18 00:01 . 2010-02-18 00:01 84480 ----a-w- c:\documents and settings\Mike\Application Data\SystemRequirementsLab\srlproxy_cyri_4.1.64.0A.dll
2010-02-16 14:49 . 2010-02-16 14:49 -------- d-sh--w- c:\documents and settings\Guest\PrivacIE
2010-02-08 16:18 . 2010-02-08 16:18 -------- d-----w- c:\program files\iPod
2010-02-08 16:18 . 2010-02-08 16:19 -------- d-----w- c:\program files\iTunes
2010-02-08 16:10 . 2010-02-08 16:10 72488 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.0.3.15\SetupAdmin.exe
2010-02-05 21:18 . 2010-02-05 21:18 17801 ----a-w- c:\windows\system32\drivers\AegisP.sys
2010-02-05 21:18 . 2005-02-01 23:18 17992 ----a-w- c:\windows\system32\bcm42rly.sys
2010-02-05 21:18 . 2003-10-13 20:30 94208 ----a-w- c:\windows\system32\GTW32N50.dll
2010-02-05 21:18 . 2003-09-26 03:15 15872 ----a-w- c:\windows\system32\GTNDIS5.sys
2010-02-05 21:18 . 2005-01-19 16:01 1396831 ----a-w- c:\windows\system32\AegisE5.dll
2010-02-05 21:18 . 2003-11-21 03:03 651264 ----a-w- c:\windows\system32\libeay32.dll
2010-02-05 21:18 . 2003-11-21 03:03 147456 ----a-w- c:\windows\system32\ssleay32.dll
2010-02-05 21:18 . 2010-02-05 21:18 -------- d-----w- c:\program files\Linksys Wireless-G USB Wireless Network Monitor
2010-02-05 20:43 . 2010-02-05 20:43 -------- d--ha-w- c:\documents and settings\All Users\Application Data\GTek

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-06 05:04 . 2008-01-23 18:42 1324 ----a-w- c:\windows\system32\d3d9caps.dat
2010-03-06 04:56 . 2010-03-06 04:56 -------- d-----w- c:\program files\Common Files\MAGIX Shared
2010-03-06 04:29 . 2010-03-06 04:29 -------- d-----w- c:\program files\SoftwareClub.ws
2010-03-06 04:04 . 2008-04-09 21:31 -------- d-----w- c:\program files\DivX
2010-03-06 04:03 . 2009-07-17 02:46 -------- d-----w- c:\program files\Common Files\DivX Shared
2010-03-06 03:53 . 2008-10-20 17:42 -------- d-----w- c:\program files\MediaCoder
2010-03-05 17:38 . 2009-11-13 17:13 -------- d-----w- c:\program files\Alwil Software
2010-02-21 19:20 . 2009-10-06 23:49 -------- d-----w- c:\documents and settings\Mike\Application Data\gtk-2.0
2010-02-19 10:28 . 2009-11-27 20:51 1216176 ----a-w- c:\documents and settings\Mike\Application Data\GameRanger\GameRanger\GameRanger.exe
2010-02-18 22:33 . 2009-02-14 01:26 -------- d-----w- c:\documents and settings\Mike\Application Data\mIRC
2010-02-18 21:59 . 2009-02-14 01:26 -------- d-----w- c:\program files\mIRC
2010-02-18 00:02 . 2008-01-23 18:42 -------- d-----w- c:\program files\SystemRequirementsLab
2010-02-18 00:01 . 2008-02-03 03:35 -------- d-----w- c:\documents and settings\Mike\Application Data\SystemRequirementsLab
2010-02-12 01:59 . 2008-01-31 22:00 138384 -c--a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-02-12 01:58 . 2008-01-31 21:56 215128 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-02-08 16:18 . 2008-03-15 15:16 -------- d-----w- c:\program files\Common Files\Apple
2010-02-08 16:14 . 2008-12-05 16:42 -------- d-----w- c:\program files\QuickTime
2010-02-04 14:33 . 2008-03-29 12:20 -------- d-----w- c:\program files\Google
2010-02-01 14:38 . 2008-01-23 21:52 -------- d-----w- c:\documents and settings\Mike\Application Data\U3
2010-01-24 21:33 . 2008-02-02 23:35 -------- d-----w- c:\program files\Paradox Interactive
2010-01-21 18:37 . 2008-10-20 23:41 -------- d-----w- c:\program files\Activision
2010-01-21 01:23 . 2009-07-04 02:36 -------- d-----w- c:\program files\NVIDIA Corporation
2010-01-21 01:22 . 2010-01-21 01:22 -------- d-----w- c:\documents and settings\All Users\Application Data\NVIDIA Corporation
2010-01-20 18:26 . 2008-01-23 18:14 -------- d-----w- c:\program files\Microsoft Silverlight
2010-01-20 16:21 . 2010-01-20 16:21 -------- d-----w- c:\documents and settings\All Users\Application Data\Innovative Solutions
2010-01-20 16:15 . 2010-01-20 16:15 23456 ----a-w- c:\windows\system32\drivers\DrvAgent32.sys
2010-01-17 21:34 . 2008-01-23 21:06 135856 ----a-w- c:\documents and settings\Mike\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-01-17 21:33 . 2009-07-18 21:18 -------- d-----w- c:\program files\Yahoo!
2010-01-17 21:33 . 2009-07-18 22:20 -------- d-----w- c:\documents and settings\Mike\Application Data\Yahoo!
2010-01-17 16:41 . 2009-07-18 21:19 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo!
2010-01-15 18:55 . 2008-01-23 16:42 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-01-15 06:31 . 2010-01-15 06:31 -------- d-----w- c:\program files\MSBuild
2010-01-15 06:26 . 2010-01-15 06:26 -------- d-----w- c:\program files\MSXML 6.0
2010-01-14 18:06 . 2008-06-17 18:51 -------- d-----w- c:\program files\Diablo II
2010-01-14 05:15 . 2009-02-14 04:27 -------- d-----w- c:\program files\Diablo II 2
2010-01-14 05:13 . 2008-06-04 02:47 82514 -c--a-w- c:\windows\DIIUnin.dat
2010-01-13 05:48 . 2010-01-13 05:48 -------- d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2
2010-01-12 22:11 . 2010-01-12 22:10 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-01-12 21:24 . 2009-07-18 21:19 -------- d-----w- c:\documents and settings\Josh\Application Data\Yahoo!
2010-01-12 21:23 . 2008-02-25 19:32 -------- d-----w- c:\program files\Windows Live
2010-01-12 03:17 . 2010-01-12 03:17 278120 ----a-w- c:\windows\system32\nvmccs.dll
2010-01-12 03:17 . 2010-01-12 03:17 154216 ----a-w- c:\windows\system32\nvsvc32.exe
2010-01-12 03:17 . 2010-01-12 03:17 145000 ----a-w- c:\windows\system32\nvcolor.exe
2010-01-12 03:17 . 2010-01-12 03:17 13666408 ----a-w- c:\windows\system32\nvcpl.dll
2010-01-12 03:17 . 2010-01-12 03:17 110696 ----a-w- c:\windows\system32\nvmctray.dll
2010-01-12 03:17 . 2010-01-12 03:17 81920 ----a-w- c:\windows\system32\nvwddi.dll
2010-01-11 14:35 . 2008-10-18 23:57 -------- d-----w- c:\documents and settings\Mike\Application Data\Winamp
2010-01-10 04:04 . 2009-12-12 19:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Avery
2010-01-10 03:44 . 2010-01-10 03:39 -------- d-----w- c:\program files\Children of the Nile - Enhanced Edition
2010-01-09 17:18 . 2008-01-23 17:04 135856 ----a-w- c:\documents and settings\Josh\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-01-07 21:07 . 2010-01-12 22:10 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-07 21:07 . 2010-01-12 22:10 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-12-31 16:50 . 2004-08-04 03:14 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-21 19:14 . 2004-08-04 04:56 916480 ------w- c:\windows\system32\wininet.dll
2009-12-16 18:43 . 2008-01-23 16:39 343040 ----a-w- c:\windows\system32\mspaint.exe
2009-12-14 07:08 . 2004-08-04 04:56 33280 ----a-w- c:\windows\system32\csrsrv.dll
2009-12-09 01:44 . 2009-12-09 02:02 19236 ----a-w- C:\mediamp3.dat
2009-12-08 19:26 . 2004-08-04 03:18 2145280 ------w- c:\windows\system32\ntoskrnl.exe
2009-12-08 18:43 . 2004-08-03 22:59 2023936 ------w- c:\windows\system32\ntkrnlpa.exe
.

 

[El loco]

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-01-17 486856]
"Messenger (Yahoo!)"="c:\progra~1\Yahoo!\Messenger\YahooMessenger.exe" [2009-11-10 5244216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-08-13 177440]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"nwiz"="nwiz.exe" [BU]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-01-12 13666408]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-01-12 110696]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-11-11 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-01-23 141608]
"TrayServer"="c:\program files\MAGIX\Movie_Edit_Pro_16_Download_Version\TrayServer.exe" [2008-11-13 90112]

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
Source= c:\documents and settings\Mike\Desktop\frontpage.swf
FriendlyName=

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-03-05 18:45 12464 ----a-w- c:\windows\system32\avgrsstx.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\kav\\kav7\\setup.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\EA GAMES\\Battlefield 2 Demo\\Bf2_w32ded.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\EA GAMES\\Battlefield 2 Demo\\BF2.exe"=
"c:\\Program Files\\Strategy First\\Europa Universalis 2\\EU2.exe"=
"c:\\Program Files\\THQ\\Company of Heroes\\RelicCOH.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\mIRC\\mirc.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Ubisoft\\Related Designs\\ANNO 1404\\Anno4.exe"=
"c:\\Program Files\\Ubisoft\\Related Designs\\ANNO 1404\\tools\\Anno4Web.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\AIM\\aim.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgam.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgdiagex.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCPxpsp2res.dll,-22009

R0 AVGIDSErHrxpx;AVG9IDSErHr;c:\windows\system32\drivers\AVGIDSxx.sys [3/5/2010 1:30 PM 25096]
R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [3/5/2010 1:30 PM 52872]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x);c:\windows\system32\drivers\sfdrv01.sys [8/10/2005 7:44 AM 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x);c:\windows\system32\drivers\sfhlp02.sys [5/16/2005 8:20 AM 6656]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [2/5/2008 2:16 PM 717296]
S1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [3/5/2010 1:30 PM 216200]
S1 AvgTdiX;AVG Network Redirector;c:\windows\system32\drivers\avgtdix.sys [3/5/2010 1:30 PM 242696]
S2 a2AntiMalware;a-squared Anti-Malware Service;"c:\program files\a-squared Anti-Malware\a2service.exe" --> c:\program files\a-squared Anti-Malware\a2service.exe [?]
S2 atksgt;atksgt;c:\windows\system32\drivers\atksgt.sys [7/16/2009 1:04 PM 281760]
S2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [3/5/2010 1:45 PM 308064]
S2 avgfws9;AVG Firewall;c:\program files\AVG\AVG9\avgfws9.exe [3/5/2010 1:45 PM 2325816]
S2 AVGIDSAgent;AVG9IDSAgent;c:\program files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe [3/5/2010 1:45 PM 5888008]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files\Common Files\MAGIX Services\Database\bin\FABS.exe [8/27/2009 5:09 PM 1253376]
S2 gupdate1c9f7db41a482ee;Google Update Service (gupdate1c9f7db41a482ee);c:\program files\Google\Update\GoogleUpdate.exe [6/28/2009 5:29 AM 133104]
S2 JavaQuickStarterService;Java Quick Starter;c:\program files\Java\jre6\bin\jqs.exe [2/13/2009 8:58 PM 152984]
S2 lirsgt;lirsgt;c:\windows\system32\drivers\lirsgt.sys [7/16/2009 1:04 PM 25888]
S2 MCSTRM;MCSTRM; [x]
S2 NVSvc;NVIDIA Display Driver Service;c:\windows\system32\nvsvc32.exe [1/11/2010 10:17 PM 154216]
S2 PnkBstrA;PnkBstrA;c:\windows\system32\PnkBstrA.exe [1/31/2008 4:56 PM 75064]
S2 PnkBstrB;PnkBstrB;c:\windows\system32\PnkBstrB.exe [1/31/2008 4:56 PM 215128]
S2 SbieSvc;Sandboxie Service;c:\program files\Sandboxie\SbieSvc.exe [9/2/2008 7:33 AM 48640]
S2 SVKP;SVKP;c:\windows\system32\SVKP.sys [11/15/2009 4:58 PM 2368]
S2 WUSB54GSv2SVC;WUSB54GSv2SVC;c:\program files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe [2/5/2010 4:18 PM 41025]
S2 YahooAUService;Yahoo! Updater;c:\program files\Yahoo!\SoftwareUpdate\YahooAUService.exe [11/9/2008 3:48 PM 602392]
S3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [3/5/2010 1:30 PM 30104]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [3/5/2010 1:30 PM 30104]
S3 AVGIDSDriverxpx;AVG9IDSDriver;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys [3/5/2010 1:30 PM 122376]
S3 AVGIDSFilterxpx;AVG9IDSFilter;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys [3/5/2010 1:30 PM 30216]
S3 AVGIDSShimxpx;AVG9IDSShim;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys [3/5/2010 1:30 PM 26120]
S3 BCM42RLY;BCM42RLY;c:\windows\system32\bcm42rly.sys [2/5/2010 4:18 PM 17992]
S3 cpuz130;cpuz130;\??\c:\docume~1\Mike\LOCALS~1\Temp\cpuz130\cpuz_x32.sys --> c:\docume~1\Mike\LOCALS~1\Temp\cpuz130\cpuz_x32.sys [?]
S3 CrystalSysInfo;CrystalSysInfo;c:\program files\MediaCoder\SysInfo.sys [9/25/2007 9:59 AM 15152]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [1/20/2010 11:15 AM 23456]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\Common Files\MAGIX Services\Database\bin\fbserver.exe [8/7/2008 11:10 AM 3276800]
S3 getPlusHelper;getPlus(R) Helper;c:\windows\System32\svchost.exe -k getPlusHelper [8/3/2004 11:56 PM 14336]
S3 GTNDIS5;GTNDIS5 NDIS Protocol Driver;c:\windows\system32\GTNDIS5.sys [2/5/2010 4:18 PM 15872]
S3 ICAM5USB;Intel(r) PC Camera CS110;c:\windows\system32\drivers\Icam5USB.sys [3/8/2008 11:03 AM 100992]
S3 lgusbsmodem;LGE Mobile USB Modem;c:\windows\system32\DRIVERS\lgusbsmodem.sys --> c:\windows\system32\DRIVERS\lgusbsmodem.sys [?]
S3 NdisIP;Microsoft TV/Video Connection;c:\windows\system32\drivers\ndisip.sys [3/8/2008 11:03 AM 10880]
S3 PnkBstrK;PnkBstrK;c:\windows\system32\drivers\PnkBstrK.sys [1/31/2008 5:00 PM 138384]
S3 SbieDrv;SbieDrv;c:\program files\Sandboxie\SbieDrv.sys [9/2/2008 7:33 AM 100352]
S3 SDDMI2;SDDMI2;\??\c:\windows\system32\DDMI2.sys --> c:\windows\system32\DDMI2.sys [?]
S3 SLIP;BDA Slip De-Framer;c:\windows\system32\drivers\slip.sys [3/8/2008 11:03 AM 11136]
S3 TVICHW32;TVICHW32;c:\windows\system32\drivers\TVICHW32.SYS [1/23/2008 3:02 PM 23600]
S3 USB_RNDIS;Linksys Wireless-G USB Network Adapter with SpeedBooster Driver v2;c:\windows\system32\drivers\usb8023.sys [8/3/2004 10:04 PM 12800]
S3 USBAAPL;Apple Mobile USB Driver;c:\windows\system32\drivers\usbaapl.sys [10/24/2008 5:44 PM 40448]
S3 WpdUsb;WpdUsb;c:\windows\system32\drivers\wpdusb.sys [10/18/2006 8:00 PM 38528]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
.
Contents of the 'Scheduled Tasks' folder

2009-11-06 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 16:34]

2010-03-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-28 10:28]

2010-03-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-28 10:28]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://espanol.yahoo.com
mStart Page = hxxp://espanol.yahoo.com
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Mike\Application Data\Mozilla\Firefox\Profiles\en8u1vpy.default\
FF - prefs.js: browser.search.defaulturl - hxxp://espanol.search.yahoo.com/search?fr=ffsp1&p=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.msn.com/
FF - prefs.js: keyword.URL - hxxp://espanol.search.yahoo.com/search?fr=ffds1&p=
FF - component: c:\program files\AVG\AVG9\Firefox\components\avgssff.dll
FF - plugin: c:\documents and settings\Mike\Application Data\Mozilla\Firefox\Profiles\en8u1vpy.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\plugins\np_gp.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npagent.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdnupdater2.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
FF - user.js: yahoo.ytff.general.dontshowhpoffer - true.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2010-03-06 17:35
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(868)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
.
Completion time: 2010-03-06 17:39:02
ComboFix-quarantined-files.txt 2010-03-06 22:39
ComboFix2.txt 2010-01-12 22:06
ComboFix3.txt 2009-10-22 14:24
ComboFix4.txt 2009-08-12 22:35
ComboFix5.txt 2010-03-06 21:48

Pre-Run: 22,187,638,784 bytes free
Post-Run: 22,128,406,528 bytes free

Current=8 Default=8 Failed=7 LastKnownGood=10 Sets=1,2,3,4,5,6,7,8,9,10
- - End Of File - - 26C2F69517D6C443372783770578C383

 

[Osiris]

I need you to disable system restore and run the scans one more time in this order, combofix, malwarebytes and then hijackthis.

 

[El loco]

I need you to disable system restore .

nvm, I figured it out.


ComboFix 10-03-06.01 - Mike 03/06/2010 20:20:09.9.2 - x86 MINIMAL
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.958.744 [GMT -5:00]
Running from: c:\documents and settings\Mike\Desktop\ComboFix.exe
AV: AVG Internet Security *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *enabled* {8decf618-9569-4340-b34a-d78d28969b66}
.

((((((((((((((((((((((((( Files Created from 2010-02-07 to 2010-03-07 )))))))))))))))))))))))))))))))
.

2010-04-25 17:33 . 2010-04-25 17:33 262144 ----a-w- C:\ntuser.dat
2010-03-06 05:00 . 2010-03-06 05:00 -------- d-----w- c:\documents and settings\Mike\Application Data\MAGIX
2010-03-06 04:54 . 2003-11-04 23:20 6144 ----a-w- c:\documents and settings\All Users\Application Data\MAGIX\Movie_Edit_Pro_16_Download_Version\DVD\Wmv_disc\components\videowritetest.exe
2010-03-06 04:54 . 1997-10-16 03:03 18944 ----a-w- c:\documents and settings\All Users\Application Data\MAGIX\Movie_Edit_Pro_16_Download_Version\DVD\Wmv_disc\components\shelexec.exe
2010-03-06 04:54 . 2004-09-13 18:29 200704 ----a-w- c:\documents and settings\All Users\Application Data\MAGIX\Movie_Edit_Pro_16_Download_Version\DVD\Wmv_disc\licgen.exe
2010-03-06 04:54 . 2003-10-09 16:56 513088 ----a-w- c:\documents and settings\All Users\Application Data\MAGIX\Movie_Edit_Pro_16_Download_Version\DVD\Wmv_disc\WMDS.dll
2010-03-06 04:54 . 2005-10-08 21:14 40960 ----a-w- c:\documents and settings\All Users\Application Data\MAGIX\Movie_Edit_Pro_16_Download_Version\Default\fcdummy.exe
2010-03-06 04:54 . 2010-03-06 04:58 -------- d-----w- c:\documents and settings\All Users\Application Data\MAGIX
2010-03-06 04:53 . 2010-03-06 04:58 -------- d-----w- c:\program files\MAGIX
2010-03-06 04:53 . 2007-04-27 14:43 120200 ----a-w- c:\windows\system32\DLLDEV32i.dll
2010-03-06 04:52 . 2010-03-06 04:58 -------- d-----w- c:\program files\Common Files\MAGIX Services
2010-03-06 04:34 . 2010-03-06 04:39 -------- d-----w- c:\documents and settings\Mike\Application Data\jah
2010-03-06 04:33 . 2010-03-06 04:33 -------- d-----w- c:\program files\OpenLibraries
2010-03-06 04:25 . 2001-05-16 22:54 309616 ----a-w- c:\windows\system32\wmv8dmod.dll
2010-03-06 02:55 . 2010-03-06 02:55 -------- d-----w- C:\$AVG
2010-03-05 18:46 . 2010-03-05 18:46 360584 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgtdix.sys
2010-03-05 18:46 . 2010-03-05 18:46 74760 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\UniversalDD.sys
2010-03-05 18:46 . 2010-03-05 18:46 333192 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgldx86.sys
2010-03-05 18:46 . 2010-03-05 18:46 30216 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\AVGIDSFilter.sys
2010-03-05 18:46 . 2010-03-05 18:46 28424 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgmfx86.sys
2010-03-05 18:46 . 2010-03-05 18:46 25736 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\AVGIDSShim.sys
2010-03-05 18:46 . 2010-03-05 18:46 25608 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\AVGIDSxx.sys
2010-03-05 18:46 . 2010-03-05 18:46 161800 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgrkx86.sys
2010-03-05 18:46 . 2010-03-05 18:46 122376 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\AVGIDSDriver.sys
2010-03-05 18:45 . 2010-03-05 18:45 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-03-05 18:44 . 2010-03-05 18:30 613656 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgiproxy.exe
2010-03-05 18:44 . 2010-03-05 18:30 1658136 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.dll
2010-03-05 18:44 . 2010-03-05 18:30 1007896 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.exe
2010-03-05 18:44 . 2010-03-05 18:30 800536 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avginet.dll
2010-03-05 18:31 . 2010-03-05 18:45 29512 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-03-05 18:30 . 2010-03-06 23:04 -------- d-----w- c:\windows\system32\drivers\Avg
2010-03-05 18:30 . 2010-03-05 18:45 25096 ----a-w- c:\windows\system32\drivers\AVGIDSxx.sys
2010-03-05 18:30 . 2010-03-05 18:45 52872 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2010-03-05 18:30 . 2010-03-05 18:45 242696 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-03-05 18:30 . 2010-03-05 18:45 216200 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-03-05 18:30 . 2010-03-05 18:30 50968 ----a-w- c:\windows\system32\avgfwdx.dll
2010-03-05 18:30 . 2010-03-05 18:30 30104 ----a-w- c:\windows\system32\drivers\avgfwdx.sys
2010-03-05 18:30 . 2010-03-05 18:30 -------- d-----w- c:\program files\AVG
2010-03-05 18:30 . 2010-03-05 18:30 -------- d-----w- c:\documents and settings\All Users\Application Data\avg9
2010-02-20 21:43 . 2010-02-20 21:43 -------- d-----w- c:\program files\EA SPORTS
2010-02-18 23:52 . 2010-02-18 23:52 48816 ----a-w- c:\documents and settings\Mike\Application Data\GameRanger\GameRanger\Data\GameRangerLaunch.dll
2010-02-18 23:52 . 2010-02-18 23:52 155312 ----a-w- c:\documents and settings\Mike\Application Data\GameRanger\GameRanger\Data\GameRanger.dll
2010-02-18 00:01 . 2010-02-18 00:01 84480 ----a-w- c:\documents and settings\Mike\Application Data\SystemRequirementsLab\srlproxy_cyri_4.1.64.0A.dll
2010-02-16 14:49 . 2010-02-16 14:49 -------- d-sh--w- c:\documents and settings\Guest\PrivacIE
2010-02-08 16:18 . 2010-02-08 16:18 -------- d-----w- c:\program files\iPod
2010-02-08 16:18 . 2010-02-08 16:19 -------- d-----w- c:\program files\iTunes
2010-02-08 16:10 . 2010-02-08 16:10 72488 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.0.3.15\SetupAdmin.exe
2010-02-05 21:18 . 2010-02-05 21:18 17801 ----a-w- c:\windows\system32\drivers\AegisP.sys
2010-02-05 21:18 . 2005-02-01 23:18 17992 ----a-w- c:\windows\system32\bcm42rly.sys
2010-02-05 21:18 . 2003-10-13 20:30 94208 ----a-w- c:\windows\system32\GTW32N50.dll
2010-02-05 21:18 . 2003-09-26 03:15 15872 ----a-w- c:\windows\system32\GTNDIS5.sys
2010-02-05 21:18 . 2005-01-19 16:01 1396831 ----a-w- c:\windows\system32\AegisE5.dll
2010-02-05 21:18 . 2003-11-21 03:03 651264 ----a-w- c:\windows\system32\libeay32.dll
2010-02-05 21:18 . 2003-11-21 03:03 147456 ----a-w- c:\windows\system32\ssleay32.dll
2010-02-05 21:18 . 2010-02-05 21:18 -------- d-----w- c:\program files\Linksys Wireless-G USB Wireless Network Monitor
2010-02-05 20:43 . 2010-02-05 20:43 -------- d--ha-w- c:\documents and settings\All Users\Application Data\GTek

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-06 05:04 . 2008-01-23 18:42 1324 ----a-w- c:\windows\system32\d3d9caps.dat
2010-03-06 04:56 . 2010-03-06 04:56 -------- d-----w- c:\program files\Common Files\MAGIX Shared
2010-03-06 04:29 . 2010-03-06 04:29 -------- d-----w- c:\program files\SoftwareClub.ws
2010-03-06 04:04 . 2008-04-09 21:31 -------- d-----w- c:\program files\DivX
2010-03-06 04:03 . 2009-07-17 02:46 -------- d-----w- c:\program files\Common Files\DivX Shared
2010-03-06 03:53 . 2008-10-20 17:42 -------- d-----w- c:\program files\MediaCoder
2010-03-05 17:38 . 2009-11-13 17:13 -------- d-----w- c:\program files\Alwil Software
2010-02-21 19:20 . 2009-10-06 23:49 -------- d-----w- c:\documents and settings\Mike\Application Data\gtk-2.0
2010-02-19 10:28 . 2009-11-27 20:51 1216176 ----a-w- c:\documents and settings\Mike\Application Data\GameRanger\GameRanger\GameRanger.exe
2010-02-18 22:33 . 2009-02-14 01:26 -------- d-----w- c:\documents and settings\Mike\Application Data\mIRC
2010-02-18 21:59 . 2009-02-14 01:26 -------- d-----w- c:\program files\mIRC
2010-02-18 00:02 . 2008-01-23 18:42 -------- d-----w- c:\program files\SystemRequirementsLab
2010-02-18 00:01 . 2008-02-03 03:35 -------- d-----w- c:\documents and settings\Mike\Application Data\SystemRequirementsLab
2010-02-12 01:59 . 2008-01-31 22:00 138384 -c--a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-02-12 01:58 . 2008-01-31 21:56 215128 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-02-08 16:18 . 2008-03-15 15:16 -------- d-----w- c:\program files\Common Files\Apple
2010-02-08 16:14 . 2008-12-05 16:42 -------- d-----w- c:\program files\QuickTime
2010-02-04 14:33 . 2008-03-29 12:20 -------- d-----w- c:\program files\Google
2010-02-01 14:38 . 2008-01-23 21:52 -------- d-----w- c:\documents and settings\Mike\Application Data\U3
2010-01-24 21:33 . 2008-02-02 23:35 -------- d-----w- c:\program files\Paradox Interactive
2010-01-21 18:37 . 2008-10-20 23:41 -------- d-----w- c:\program files\Activision
2010-01-21 01:23 . 2009-07-04 02:36 -------- d-----w- c:\program files\NVIDIA Corporation
2010-01-21 01:22 . 2010-01-21 01:22 -------- d-----w- c:\documents and settings\All Users\Application Data\NVIDIA Corporation
2010-01-20 18:26 . 2008-01-23 18:14 -------- d-----w- c:\program files\Microsoft Silverlight
2010-01-20 16:21 . 2010-01-20 16:21 -------- d-----w- c:\documents and settings\All Users\Application Data\Innovative Solutions
2010-01-20 16:15 . 2010-01-20 16:15 23456 ----a-w- c:\windows\system32\drivers\DrvAgent32.sys
2010-01-17 21:34 . 2008-01-23 21:06 135856 ----a-w- c:\documents and settings\Mike\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-01-17 21:33 . 2009-07-18 21:18 -------- d-----w- c:\program files\Yahoo!
2010-01-17 21:33 . 2009-07-18 22:20 -------- d-----w- c:\documents and settings\Mike\Application Data\Yahoo!
2010-01-17 16:41 . 2009-07-18 21:19 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo!
2010-01-15 18:55 . 2008-01-23 16:42 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-01-15 06:31 . 2010-01-15 06:31 -------- d-----w- c:\program files\MSBuild
2010-01-15 06:26 . 2010-01-15 06:26 -------- d-----w- c:\program files\MSXML 6.0
2010-01-14 18:06 . 2008-06-17 18:51 -------- d-----w- c:\program files\Diablo II
2010-01-14 05:15 . 2009-02-14 04:27 -------- d-----w- c:\program files\Diablo II 2
2010-01-14 05:13 . 2008-06-04 02:47 82514 -c--a-w- c:\windows\DIIUnin.dat
2010-01-13 05:48 . 2010-01-13 05:48 -------- d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2
2010-01-12 22:11 . 2010-01-12 22:10 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-01-12 21:24 . 2009-07-18 21:19 -------- d-----w- c:\documents and settings\Josh\Application Data\Yahoo!
2010-01-12 21:23 . 2008-02-25 19:32 -------- d-----w- c:\program files\Windows Live
2010-01-12 03:17 . 2010-01-12 03:17 278120 ----a-w- c:\windows\system32\nvmccs.dll
2010-01-12 03:17 . 2010-01-12 03:17 154216 ----a-w- c:\windows\system32\nvsvc32.exe
2010-01-12 03:17 . 2010-01-12 03:17 145000 ----a-w- c:\windows\system32\nvcolor.exe
2010-01-12 03:17 . 2010-01-12 03:17 13666408 ----a-w- c:\windows\system32\nvcpl.dll
2010-01-12 03:17 . 2010-01-12 03:17 110696 ----a-w- c:\windows\system32\nvmctray.dll
2010-01-12 03:17 . 2010-01-12 03:17 81920 ----a-w- c:\windows\system32\nvwddi.dll
2010-01-11 14:35 . 2008-10-18 23:57 -------- d-----w- c:\documents and settings\Mike\Application Data\Winamp
2010-01-10 04:04 . 2009-12-12 19:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Avery
2010-01-10 03:44 . 2010-01-10 03:39 -------- d-----w- c:\program files\Children of the Nile - Enhanced Edition
2010-01-09 17:18 . 2008-01-23 17:04 135856 ----a-w- c:\documents and settings\Josh\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-01-07 21:07 . 2010-01-12 22:10 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-07 21:07 . 2010-01-12 22:10 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-12-31 16:50 . 2004-08-04 03:14 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-21 19:14 . 2004-08-04 04:56 916480 ------w- c:\windows\system32\wininet.dll
2009-12-16 18:43 . 2008-01-23 16:39 343040 ----a-w- c:\windows\system32\mspaint.exe
2009-12-14 07:08 . 2004-08-04 04:56 33280 ----a-w- c:\windows\system32\csrsrv.dll
2009-12-09 01:44 . 2009-12-09 02:02 19236 ----a-w- C:\mediamp3.dat
2009-12-08 19:26 . 2004-08-04 03:18 2145280 ------w- c:\windows\system32\ntoskrnl.exe
2009-12-08 18:43 . 2004-08-03 22:59 2023936 ------w- c:\windows\system32\ntkrnlpa.exe
.

 

[El loco]

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-01-17 486856]
"Messenger (Yahoo!)"="c:\progra~1\Yahoo!\Messenger\YahooMessenger.exe" [2009-11-10 5244216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-08-13 177440]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"nwiz"="nwiz.exe" [BU]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-01-12 13666408]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-01-12 110696]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-11-11 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-01-23 141608]
"TrayServer"="c:\program files\MAGIX\Movie_Edit_Pro_16_Download_Version\TrayServer.exe" [2008-11-13 90112]

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
Source= c:\documents and settings\Mike\Desktop\frontpage.swf
FriendlyName=

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-03-05 18:45 12464 ----a-w- c:\windows\system32\avgrsstx.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\kav\\kav7\\setup.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\EA GAMES\\Battlefield 2 Demo\\Bf2_w32ded.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\EA GAMES\\Battlefield 2 Demo\\BF2.exe"=
"c:\\Program Files\\Strategy First\\Europa Universalis 2\\EU2.exe"=
"c:\\Program Files\\THQ\\Company of Heroes\\RelicCOH.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\mIRC\\mirc.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Ubisoft\\Related Designs\\ANNO 1404\\Anno4.exe"=
"c:\\Program Files\\Ubisoft\\Related Designs\\ANNO 1404\\tools\\Anno4Web.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\AIM\\aim.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgam.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgdiagex.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCPxpsp2res.dll,-22009

R0 AVGIDSErHrxpx;AVG9IDSErHr;c:\windows\system32\drivers\AVGIDSxx.sys [3/5/2010 1:30 PM 25096]
R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [3/5/2010 1:30 PM 52872]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [2/5/2008 2:16 PM 717296]
S1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [3/5/2010 1:30 PM 216200]
S1 AvgTdiX;AVG Network Redirector;c:\windows\system32\drivers\avgtdix.sys [3/5/2010 1:30 PM 242696]
S2 a2AntiMalware;a-squared Anti-Malware Service;"c:\program files\a-squared Anti-Malware\a2service.exe" --> c:\program files\a-squared Anti-Malware\a2service.exe [?]
S2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [3/5/2010 1:45 PM 308064]
S2 avgfws9;AVG Firewall;c:\program files\AVG\AVG9\avgfws9.exe [3/5/2010 1:45 PM 2325816]
S2 AVGIDSAgent;AVG9IDSAgent;c:\program files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe [3/5/2010 1:45 PM 5888008]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files\Common Files\MAGIX Services\Database\bin\FABS.exe [8/27/2009 5:09 PM 1253376]
S2 gupdate1c9f7db41a482ee;Google Update Service (gupdate1c9f7db41a482ee);c:\program files\Google\Update\GoogleUpdate.exe [6/28/2009 5:29 AM 133104]
S2 SVKP;SVKP;c:\windows\system32\SVKP.sys [11/15/2009 4:58 PM 2368]
S2 WUSB54GSv2SVC;WUSB54GSv2SVC;c:\program files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe [2/5/2010 4:18 PM 41025]
S3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [3/5/2010 1:30 PM 30104]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [3/5/2010 1:30 PM 30104]
S3 AVGIDSDriverxpx;AVG9IDSDriver;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys [3/5/2010 1:30 PM 122376]
S3 AVGIDSFilterxpx;AVG9IDSFilter;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys [3/5/2010 1:30 PM 30216]
S3 AVGIDSShimxpx;AVG9IDSShim;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys [3/5/2010 1:30 PM 26120]
S3 cpuz130;cpuz130;\??\c:\docume~1\Mike\LOCALS~1\Temp\cpuz130\cpuz_x32.sys --> c:\docume~1\Mike\LOCALS~1\Temp\cpuz130\cpuz_x32.sys [?]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [1/20/2010 11:15 AM 23456]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\Common Files\MAGIX Services\Database\bin\fbserver.exe [8/7/2008 11:10 AM 3276800]
S3 lgusbsmodem;LGE Mobile USB Modem;c:\windows\system32\DRIVERS\lgusbsmodem.sys --> c:\windows\system32\DRIVERS\lgusbsmodem.sys [?]
S3 SbieDrv;SbieDrv;c:\program files\Sandboxie\SbieDrv.sys [9/2/2008 7:33 AM 100352]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
.
Contents of the 'Scheduled Tasks' folder

2009-11-06 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 16:34]

2010-03-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-28 10:28]

2010-03-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-28 10:28]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://espanol.yahoo.com
mStart Page = hxxp://espanol.yahoo.com
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Mike\Application Data\Mozilla\Firefox\Profiles\en8u1vpy.default\
FF - prefs.js: browser.search.defaulturl - hxxp://espanol.search.yahoo.com/search?fr=ffsp1&p=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.msn.com/
FF - prefs.js: keyword.URL - hxxp://espanol.search.yahoo.com/search?fr=ffds1&p=
FF - component: c:\program files\AVG\AVG9\Firefox\components\avgssff.dll
FF - plugin: c:\documents and settings\Mike\Application Data\Mozilla\Firefox\Profiles\en8u1vpy.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\plugins\np_gp.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npagent.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdnupdater2.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
FF - user.js: yahoo.ytff.general.dontshowhpoffer - true.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2010-03-06 20:30
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(1712)
c:\windows\system32\WININET.dll
.
Completion time: 2010-03-06 20:32:35
ComboFix-quarantined-files.txt 2010-03-07 01:32
ComboFix2.txt 2010-03-06 22:39
ComboFix3.txt 2010-01-12 22:06
ComboFix4.txt 2009-10-22 14:24
ComboFix5.txt 2010-03-07 00:40

Pre-Run: 29,071,523,840 bytes free
Post-Run: 29,055,672,320 bytes free

Current=8 Default=8 Failed=7 LastKnownGood=10 Sets=1,2,3,4,5,6,7,8,9,10
- - End Of File - - 4F1BEA9F4D1FC383C6163939741D7997

 

[El loco]

Malwarebytes' Anti-Malware 1.44
Database version: 3830
Windows 5.1.2600 Service Pack 3 (Safe Mode)
Internet Explorer 8.0.6001.18702

3/6/2010 8:43:26 PM
mbam-log-2010-03-06 (20-43-26).txt

Scan type: Quick Scan
Objects scanned: 152513
Time elapsed: 7 minute(s), 13 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:44:05 PM, on 3/6/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! en Espaol
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! en Espaol
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TrayServer] C:\Program Files\MAGIX\Movie_Edit_Pro_16_Download_Version\TrayServer.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~1\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.7.109.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www2.snapfish.com/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1201108691495
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1201111902218
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Unknown owner - C:\Program Files\a-squared Anti-Malware\a2service.exe (file missing)
O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: AVG Firewall (avgfws9) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgfws9.exe
O23 - Service: AVG9IDSAgent (AVGIDSAgent) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe
O23 - Service: Google Update Service (gupdate1c9f7db41a482ee) (gupdate1c9f7db41a482ee) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: WUSB54GSv2SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
O24 - Desktop Component 0: (no name) - C:\Documents and Settings\Mike\Desktop\frontpage.swf

--
End of file - 7549 bytes

 

[Osiris]

Much better

Remove this

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

 

[El loco]

alright
here is the new log just in case


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:44:10 PM, on 3/7/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\AVG\AVG9\avgfws9.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Google\Update\1.2.183.17\GoogleCrashHandler.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\AVG\AVG9\avgam.exe
C:\Program Files\Sandboxie\SbieSvc.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54GSv2.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Microsoft\Office Live\OfficeLiveSignIn.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! en Espaol
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! en Espaol
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~1\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.7.109.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www2.snapfish.com/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1201108691495
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1201111902218
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Unknown owner - C:\Program Files\a-squared Anti-Malware\a2service.exe (file missing)
O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: AVG Firewall (avgfws9) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgfws9.exe
O23 - Service: AVG9IDSAgent (AVGIDSAgent) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Update Service (gupdate1c9f7db41a482ee) (gupdate1c9f7db41a482ee) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: WUSB54GSv2SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
O24 - Desktop Component 0: (no name) - C:\Documents and Settings\Mike\Desktop\frontpage.swf

--
End of file - 8622 bytes

 

[Osiris]

Looks good.

You have a lot of items in your startup. You can disable all of them except your antivirus.

Go to start, run, type msconfig and press enter.

Go to startup click disable all, then recheck your antivirus entry and reboot.