OK, here it is I think,
ComboFix 10-02-04.03 - Compaq 2010-02-06 22:08:01.1.1 - FAT32x86
Running from: c:\documents and settings\Compaq\Desktop\Combo-Fix.exe
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\docume~1\Compaq\LOCALS~1\Temp\tmp1.tmp
c:\documents and settings\All Users\Start Menu\Programs\Uninstall.lnk
c:\documents and settings\Compaq\My Documents\ZbThumbnail.info
C:\Logo.sys
C:\s
c:\windows\Downloaded Program Files\RdxIE.dll
c:\windows\start.exe
c:\windows\system32\11323.exe
c:\windows\system32\11478.exe
c:\windows\system32\11538.exe
c:\windows\system32\11840.exe
c:\windows\system32\11942.exe
c:\windows\system32\12316.exe
c:\windows\system32\12382.exe
c:\windows\system32\12623.exe
c:\windows\system32\12859.exe
c:\windows\system32\13931.exe
c:\windows\system32\13977.exe
c:\windows\system32\14604.exe
c:\windows\system32\14771.exe
c:\windows\system32\15006.exe
c:\windows\system32\15141.exe
c:\windows\system32\153.exe
c:\windows\system32\15350.exe
c:\windows\system32\15724.exe
c:\windows\system32\15890.exe
c:\windows\system32\16118.exe
c:\windows\system32\16541.exe
c:\windows\system32\16827.exe
c:\windows\system32\16944.exe
c:\windows\system32\17035.exe
c:\windows\system32\17421.exe
c:\windows\system32\17673.exe
c:\windows\system32\1842.exe
c:\windows\system32\18467.exe
c:\windows\system32\1869.exe
c:\windows\system32\18716.exe
c:\windows\system32\18756.exe
c:\windows\system32\19169.exe
c:\windows\system32\19264.exe
c:\windows\system32\19629.exe
c:\windows\system32\19718.exe
c:\windows\system32\19895.exe
c:\windows\system32\19912.exe
c:\windows\system32\19954.exe
c:\windows\system32\20037.exe
c:\windows\system32\2082.exe
c:\windows\system32\21538.exe
c:\windows\system32\21726.exe
c:\windows\system32\22190.exe
c:\windows\system32\22386.exe
c:\windows\system32\22648.exe
c:\windows\system32\22704.exe
c:\windows\system32\22929.exe
c:\windows\system32\2306.exe
c:\windows\system32\23281.exe
c:\windows\system32\23805.exe
c:\windows\system32\23811.exe
c:\windows\system32\24084.exe
c:\windows\system32\24370.exe
c:\windows\system32\24393.exe
c:\windows\system32\24464.exe
c:\windows\system32\24626.exe
c:\windows\system32\25547.exe
c:\windows\system32\25667.exe
c:\windows\system32\26299.exe
c:\windows\system32\26308.exe
c:\windows\system32\26500.exe
c:\windows\system32\26924.exe
c:\windows\system32\26962.exe
c:\windows\system32\27446.exe
c:\windows\system32\27529.exe
c:\windows\system32\27644.exe
c:\windows\system32\28145.exe
c:\windows\system32\28253.exe
c:\windows\system32\28703.exe
c:\windows\system32\28745.exe
c:\windows\system32\288.exe
c:\windows\system32\292.exe
c:\windows\system32\29358.exe
c:\windows\system32\29658.exe
c:\windows\system32\2995.exe
c:\windows\system32\30106.exe
c:\windows\system32\30333.exe
c:\windows\system32\3035.exe
c:\windows\system32\31101.exe
c:\windows\system32\31115.exe
c:\windows\system32\31322.exe
c:\windows\system32\31673.exe
c:\windows\system32\32391.exe
c:\windows\system32\32439.exe
c:\windows\system32\32662.exe
c:\windows\system32\32757.exe
c:\windows\system32\3548.exe
c:\windows\system32\3902.exe
c:\windows\system32\4639.exe
c:\windows\system32\4664.exe
c:\windows\system32\4827.exe
c:\windows\system32\4833.exe
c:\windows\system32\491.exe
c:\windows\system32\4966.exe
c:\windows\system32\5021.exe
c:\windows\system32\5436.exe
c:\windows\system32\5447.exe
c:\windows\system32\5537.exe
c:\windows\system32\5705.exe
c:\windows\system32\6334.exe
c:\windows\system32\6729.exe
c:\windows\system32\6868.exe
c:\windows\system32\7376.exe
c:\windows\system32\7711.exe
c:\windows\system32\778.exe
c:\windows\system32\8723.exe
c:\windows\system32\8942.exe
c:\windows\system32\9040.exe
c:\windows\system32\9741.exe
c:\windows\system32\9894.exe
c:\windows\system32\9930.exe
c:\windows\system32\9961.exe
c:\windows\Web\default.htt
.
((((((((((((((((((((((((( Files Created from 2010-01-07 to 2010-02-07 )))))))))))))))))))))))))))))))
.
2010-01-24 16:21 . 2010-01-24 16:21 -------- d-----w- c:\documents and settings\Compaq\Application Data\Malwarebytes
2010-01-24 16:21 . 2010-01-24 16:21 -------- d-----w- c:\documents and settings\Compaq\Application Data\Malwarebytes
2010-01-24 16:20 . 2010-01-07 21:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-24 16:20 . 2010-01-24 16:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-01-24 16:20 . 2010-01-24 16:20 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-01-24 16:20 . 2010-01-07 21:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-01-24 15:30 . 2010-01-24 15:31 50968 ----a-w- c:\windows\system32\avgfwdx.dll
2010-01-24 15:30 . 2010-01-24 15:31 30104 ----a-w- c:\windows\system32\drivers\avgfwdx.sys
2010-01-23 02:06 . 2010-01-23 02:06 -------- d-----w- c:\documents and settings\Compaq\Application Data\AVG8
2010-01-23 02:06 . 2010-01-23 02:06 -------- d-----w- c:\documents and settings\Compaq\Application Data\AVG8
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-09 16:07 . 2006-10-09 20:54 1744 ----a-w- c:\windows\system32\d3d9caps.dat
2009-12-03 22:25 . 2006-09-30 01:01 1632 ----a-w- c:\windows\system32\d3d8caps.dat
2007-04-06 22:54 . 2007-04-06 22:54 340 ----a-w- c:\program files\imaginfo.pe4
2007-04-06 22:54 . 2007-04-06 22:54 1727 ----a-w- c:\program files\imageiio.pe4
2006-10-02 00:55 . 2006-10-02 00:51 308 ---ha-w- c:\program files\hpothb07.dat
2006-10-02 00:51 . 2006-10-02 00:51 517 ---ha-w- c:\program files\hpothb07.tif
2005-07-27 01:19 . 2005-07-27 00:10 16706160 ----a-w- c:\program files\AdbeRdr60_enu_full.exe
2005-07-27 00:10 . 2005-07-27 00:06 494704 ----a-w- c:\program files\ytb02_efgsip.exe
2000-06-20 21:37 . 2000-06-20 21:37 23357 ---h--w- c:\program files\folder.htt
2000-06-08 22:00 . 2000-10-11 07:47 118784 --sh--r- c:\windows\COMMAND\EBD\winboot.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2004-10-13 1694208]
"updateMgr"="c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 313472]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CPQEASYACC"="c:\program files\Compaq\Easy Access Button Support\cpqeadm.exe" [2000-04-18 409600]
"Lwinst Run Profiler"="c:\program files\Logitech\WingMan Profiler\Lwtest.exe" [1999-05-22 434176]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-04-27 282624]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2007-04-27 257088]
"LXCCCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll" [2005-01-10 69632]
"lxccmon.exe"="c:\program files\Lexmark 3300 Series\lxccmon.exe" [2005-02-21 192512]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2006-02-28 15360]
"MoneyAgent"="c:\program files\Microsoft Money\System\Money Express.exe" [1999-08-04 122944]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\setup\disabledrunkeys]
"Hidserv"=Hidserv.exe run
"CountrySelection"=pctptt.exe
"Service Connection"=c:\cpqs\bwtools\sccenter.exe
"PCTVOICE"=pctvoice.exe
"LoadPowerProfile"=Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
"CPQInet"=c:\compaq\CPQInet\CpqInet.exe
"Digital Dashboard"=c:\program files\Compaq\Digital Dashboard\DevGulp.exe
"DownloadAccelerator"=c:\progra~1\DAP\DAP.EXE /STARTUP
"webHancer Agent"="c:\program files\webHancer\Programs\whAgent.exe"
"LoadQM"=loadqm.exe
"Alogserv"=c:\program files\McAfee\McAfee VirusScan\alogserv.exe
"mcafeevirusscanservice"=c:\program files\McAfee\McAfee VirusScan\AVSYNMGR.EXE
"NvCplDaemon"=RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
"nwiz"=nwiz.exe /install
"wininetd"=c:\windows\SYSTEM32\wininetd.exe
"HPDJ Taskbar Utility"=c:\windows\SYSTEM32\hpztsb09.exe
"HP Component Manager"="c:\program files\HP\HPCORETECH\HPCMPMGR.EXE"
"SetPoint"=c:\program files\Logitech\SetPoint\SetPoint.EXE
"Logitech Hardware Abstraction Layer"=KHALMNPR.EXE
"MMTray"="c:\program files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
"HP Software Update"=c:\program files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Messenger\\MSMSGS.EXE"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files\Firebird\Firebird_2_0\bin\fbguard.exe [2007-03-02 81920]
R3 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwdx.sys [2010-01-24 30104]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files\Firebird\Firebird_2_0\bin\fbserver.exe [2007-03-02 1994752]
S3 Avgfwdx;Avgfwdx;c:\windows\system32\DRIVERS\avgfwdx.sys [2010-01-24 30104]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
2006-02-28 17:00 73216 ----a-w- c:\progra~1\OUTLOO~1\setup50.exe
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
2006-02-28 17:00 73216 ----a-w- c:\progra~1\OUTLOO~1\setup50.exe
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
2006-02-28 17:00 73216 ----a-w- c:\progra~1\OUTLOO~1\setup50.exe
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
2006-02-28 17:00 73216 ----a-w- c:\progra~1\OUTLOO~1\setup50.exe
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}]
2001-03-23 21:17 7168 ------w- c:\windows\SYSTEM32\updcrl.exe
.
Contents of the 'Scheduled Tasks' folder
2010-02-05 c:\windows\Tasks\Check E-mail.job
- c:\program files\Compaq\Digital Dashboard\CPQMLCK.exe [2000-08-16 08:09]
2010-02-05 c:\windows\Tasks\Synchronize Time.job
- c:\program files\Compaq\Digital Dashboard\SyncClk.exe [2000-08-16 02:17]
2010-01-24 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-01-10 20:42]
.
.
------- Supplementary Scan -------
.
uStart Page =
hxxp://www.google.ca/uSearchMigratedDefaultURL =
hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8mSearch Bar =
hxxp://home.netscape.com/home/winsearch200.htmluSearchAssistant =
hxxp://search.presario.net/scripts/redirectors/presario/srchredir.dll?c=3c00&s=searchbar&LC=1009uSearchURL,(Default) =
hxxp://www.google.com/keyword/%sIE: &Download with &DAP - c:\progra~1\DAP\dapextie.htm
IE: Download &all with DAP - d:\progra~1\DAP\dapextie2.htm
IE: {{06FE5D02-8F11-11d2-804F-00105A133818} -
http://search.presario.net/scripts/redirectors/presario/srchredir.dll?s=avlinksearch&c=3c00&LC=1009IE: {{06FE5D03-8F11-11d2-804F-00105A133818} -
http://search.presario.net/scripts/redirectors/presario/srchredir.dll?s=avhostsearch&c=3c00&LC=1009IE: {{06FE5D04-8F11-11d2-804F-00105A133818} -
http://search.presario.net/scripts/redirectors/presario/srchredir.dll?s=altavista&c=3c00&LC=1009IE: {{06FE5D05-8F11-11d2-804F-00105A133818} -
http://search.presario.net/scripts/redirectors/presario/srchredir.dll?s=avbabelfish&c=3c00&LC=1009DPF: DirectAnimation Java Classes -
file://c:\windows\SYSTEM\dajava.cabDPF: Microsoft XML Parser for Java -
file://c:\windows\Java\classes\xmldso.cab.
- - - - ORPHANS REMOVED - - - -
HKCU-Run-Uniblue RegistryBooster 2 - c:\program files\Uniblue\RegistryBooster 2\RegistryBooster.exe
HKLM-Run-Easy Dock - c:\documents and settings\Compaq\My Documents\RCA EasyRip\EZDock.exe
HKLM-RunOnce-0000 - c:\documents and settings\Compaq\Start Menu\Programs\HP DeskJet 640C Series v2.4 - c:\windows\command.com
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2010-02-06 22:20
Windows 5.1.2600 Service Pack 2 FAT NTAPI
scanning hȋdden processes ...
scanning hȋdden autostart entries ...
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
LXCCCATS = rundll32 c:\windows\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
scanning hȋdden files ...
scan completed successfully
hȋdden files: 0
**************************************************************************
.
Completion time: 2010-02-06 22:27:05
ComboFix-quarantined-files.txt 2010-02-07 03:27
Pre-Run: 5,219,016,704 bytes free
Post-Run: 7,065,698,304 bytes free
- - End Of File - - 94529141C2DEB1BE1A0DA090894A9D4C