I suppose I'm having similar problems with Personal Guard 2009 like the rest..

As others have posted, I cannot run MBAM due to missing the mbam.exe file, presumably blocked/deleted by those motherfathers at Personal Guard 2009. I followed the manual removal steps, but alas, all files and reg keys that I delete seem to materialize out of thin air once agian.

Diso help here, please. Thanks for taking the time to reply in advance.

-Jeff

Please download ComboFix from BleepingComputer.com

Rename ComboFix.exe to commy.exe before you save it to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools A guide to do this can be found here
  
• Click Start>Run then copy paste the following command into the Run box & click OK "%userprofile%\desktop\commy.exe" /stepdel
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console

Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

• Click on Yes, to continue scanning for malware.
  
• When finished, it shall produce a log for you. Please include the contents of C:\ComboFix.txt in your next reply.
  

I would also like to see a list of installed programs, so please do this:
Click Start > Run then copy/paste the following single-line command into the Run box and click OK:

C:\Qoobox\Add-Remove Programs.txt

In your next reply, please include the ComboFix log and the Add-Remove Programs log.

Thanks for your reply. Here are the logs:

ComboFix Logs

ComboFix 09-11-05.05 - Melissa A 11/06/2009 11:22.1.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1015.250 [GMT -5:00]
Running from: c:\documents and settings\Melissa A\desktop\commy.exe
Command switches used :: /stepdel
AV: McAfee VirusScan *On-access scanning enabled* (Outdated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
AV: Symantec AntiVirus Corporate Edition *On-access scanning disabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}
FW: McAfee Personal Firewall Plus *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
* Resident AV is active

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\All Users\Microsoft AData
c:\documents and settings\Melissa A\Start Menu\Programs\Personal Guard 2009
c:\program files\Personal Guard 2009
c:\documents and settings\All Users\Microsoft AData\sysnet.dll
c:\documents and settings\All Users\Microsoft AData\t.sid
c:\documents and settings\Melissa A\Desktop\Personal Guard 2009.lnk
c:\documents and settings\Melissa A\Start Menu\Programs\Personal Guard 2009\Personal Guard 2009.lnk
c:\documents and settings\Melissa A\Start Menu\Programs\Personal Guard 2009\Uninstall.lnk
c:\program files\Personal Guard 2009\config.scf
c:\program files\Personal Guard 2009\personalguard.exe
c:\program files\Personal Guard 2009\q.sdb
c:\program files\Personal Guard 2009\uninstalls.exe
c:\program files\Personal Guard 2009\vvbase.sdb
c:\windows\certsystem.exe
c:\windows\kb913800.exe
c:\windows\microsoftdef.dll
c:\windows\regred.exe
c:\windows\securits.com
c:\windows\spoov.exe
c:\windows\system32\jopopaya.dll.tmp
c:\windows\system32\mewisale.dll
c:\windows\system32\pipiwuhi.dll
c:\windows\system32\winsc.exe
c:\windows\Tasks\pkqkxgun.job
c:\windows\usexplorer.exe

c:\windows\system32\proquota.exe was missing
Restored copy from - c:\i386\proquota.exe

.
((((((((((((((((((((((((( Files Created from 2009-10-06 to 2009-11-06 )))))))))))))))))))))))))))))))
.

2009-11-06 16:38 . 2004-08-10 11:00 50176 ----a-w- c:\windows\system32\proquota.exe
2009-11-06 16:38 . 2004-08-10 11:00 50176 ----a-w- c:\windows\system32\dllcache\proquota.exe
2009-11-06 02:34 . 2009-09-10 19:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-11-06 02:34 . 2009-09-10 19:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-11-06 02:34 . 2009-11-06 13:16 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-10-15 23:55 . 2009-10-15 23:55 -------- d-----w- c:\documents and settings\Melissa A\Local Settings\Application Data\AIM

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-11-06 16:40 . 2006-04-16 00:39 -------- d-----w- c:\program files\Symantec AntiVirus
2009-11-06 00:36 . 2006-04-16 21:39 -------- d-----w- c:\program files\Dl_cats
2009-11-05 06:36 . 2009-06-20 18:43 -------- d-----w- c:\program files\PokerStars
2009-10-15 10:04 . 2008-12-15 18:58 -------- d-----w- c:\program files\Diablo II
2009-09-11 14:03 . 2005-08-16 10:18 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-05 08:20 . 2009-09-05 08:21 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-09-05 08:20 . 2009-09-05 08:20 152576 ----a-w- c:\documents and settings\Melissa A\Application Data\Sun\Java\jre1.6.0_11\lzma.dll
2009-09-04 20:45 . 2005-08-16 10:18 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-08-29 07:36 . 2005-08-16 10:18 832512 ----a-w- c:\windows\system32\wininet.dll
2009-08-29 07:36 . 2005-08-16 10:18 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-08-29 07:36 . 2005-08-16 10:18 17408 ------w- c:\windows\system32\corpol.dll
2009-08-26 08:16 . 2005-08-16 10:19 247326 ----a-w- c:\windows\system32\strmdll.dll
2006-02-21 06:10 . 2006-02-21 06:10 56 -csh--r- c:\windows\system32\8FD6A9CC9C.sys
2006-02-21 06:10 . 2006-02-21 06:09 3766 -csha-w- c:\windows\system32\KGyGaAvL.sys
2009-08-06 02:11 . 2009-08-06 02:11 39424 --sha-w- c:\windows\system32\lonayemu.dll
2009-08-06 14:12 . 2009-08-06 14:12 39424 --sha-w- c:\windows\system32\yuterahi.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ModemOnHold"="c:\program files\NetWaiting\netWaiting.exe" [2003-09-10 20480]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2004-10-13 1694208]
"DellSupport"="c:\program files\DellSupport\DSAgnt.exe" [2007-03-15 460784]
"DellTransferAgent"="c:\documents and settings\All Users\Application Data\Dell\TransferAgent\TransferAgent.exe" [2007-11-13 135168]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-10 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Dell Wireless Manager UI"="c:\windows\system32\WLTRAY" [X]
"KernelFaultCheck"="c:\windows\system32\dumprep 0 -k" [X]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-09-29 67584]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-06-24 729178]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-10-15 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-10-15 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-10-15 114688]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-09-05 136600]
"Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2005-09-01 684032]
"DVDLauncher"="c:\program files\CyberLink\PowerDVD\DVDLauncher.exe" [2005-02-23 53248]
"RealTray"="c:\program files\Real\RealPlayer\RealPlay.exe" [2006-02-07 26112]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-02-07 98304]
"ISUSPM Startup"="c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe" [2005-06-10 249856]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2005-06-10 81920]
"dla"="c:\windows\system32\dla\tfswctrl.exe" [2004-12-06 127035]
"MimBoot"="c:\progra~1\MUSICM~1\MUSICM~3\mimboot.exe" [2006-01-18 8192]
"VSOCheckTask"="c:\progra~1\McAfee.com\VSO\mcmnhdlr.exe" [2005-07-08 151552]
"OASClnt"="c:\program files\McAfee.com\VSO\oasclnt.exe" [2005-08-12 53248]
"MCAgentExe"="c:\progra~1\mcafee.com\agent\mcagent.exe" [2005-09-22 303104]
"MCUpdateExe"="c:\progra~1\mcafee.com\agent\McUpdate.exe" [2006-01-11 212992]
"MSKDetectorExe"="c:\progra~1\McAfee\SPAMKI~1\MSKDetct.exe" [2006-11-07 1121280]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2006-02-07 168448]
"MSKAGENTEXE"="c:\progra~1\McAfee\SPAMKI~1\MskAgent.exe" [2005-09-26 110592]
"Corel Photo Downloader"="c:\program files\Corel\Corel Photo Album 6\MediaDetect.exe" [2005-08-31 106496]
"VirusScan Online"="c:\program files\McAfee.com\VSO\mcvsshld.exe" [2005-08-10 163840]
"MPFExe"="c:\progra~1\McAfee.com\PERSON~1\MpfTray.exe" [2005-11-11 1005096]
"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Elements 4.0\apdproxy.exe" [2005-09-09 57344]
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2005-10-04 48752]
"vptray"="c:\progra~1\SYMANT~1\VPTray.exe" [2005-11-15 85744]
"DLCCCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll" [2005-06-07 69632]
"dlccmon.exe"="c:\program files\Dell Photo AIO Printer 924\dlccmon.exe" [2005-07-22 425984]
"AOLDialer"="c:\program files\Common Files\AOL\ACS\AOLDial.exe" [2004-04-07 496752]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\hi.exe" [2009-09-10 1312080]
"combofix"="c:\commy\CF3234.exe" [2009-11-06 388608]
"SigmatelSysTrayApp"="stsystra.exe" - c:\windows\stsystra.exe [2005-09-10 393216]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
America Online 9.0 Tray Icon.lnk - c:\program files\America Online 9.0\aoltray.exe [2006-2-7 156784]
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2006-2-7 24576]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"EnableProfileQuota"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"=
"c:\\Program Files\\America Online 9.0\\waol.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\Common Files\\AOL\\1140151299\\ee\\aolsoftware.exe"=
"c:\\Program Files\\Common Files\\AOL\\1140151299\\ee\\aim6.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Adobe\\Photoshop Elements 4.0\\AdobePhotoshopElementsMediaServer.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Diablo II\\Game.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\WINDOWS\\explorer.exe"=
"c:\\WINDOWS\\system32\\wscntfy.exe"=
"c:\\WINDOWS\\system32\\logonui.exe"=
"c:\\WINDOWS\\system32\\lsass.exe"=
"c:\\WINDOWS\\system32\\winlogon.exe"=

R2 DLCCCustomerConnect;DLCCCustomerConnect;c:\windows\system32\spool\drivers\w32x86\3\dlccserv.exe [4/16/2006 4:37 PM 57344]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [1/12/2008 11:47 AM 24652]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\eengine\EraserUtilRebootDrv.sys [8/28/2009 7:02 PM 102448]
S3 SavRoam;SAVRoam;c:\program files\Symantec AntiVirus\SavRoam.exe [11/15/2005 12:27 PM 169200]

--- Other Services/Drivers In Memory ---

*NewlyCreated* - MBR
*Deregistered* - mbr
.
Contents of the 'Scheduled Tasks' folder

2009-11-06 c:\windows\Tasks\McAfee.com Scan for Viruses - My Computer (MELISSA-Melissa A).job
- c:\program files\mcafee.com\vso\mcmnhdlr.exe [2006-02-07 23:18]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uDefault_Page_URL = hxxp://www.google.com/ig/dell?hl=en
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = iexplore
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.google.com/ie
IE: &AOL Toolbar Search - c:\program files\aol\aim toolbar 5.0\resources\en-US\local\search.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
IE: {{FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - c:\program files\PokerStars.NET\PokerStarsUpdate.exe
Trusted Zone: musicmatch.com\online
FF - ProfilePath - c:\documents and settings\Melissa A\Application Data\Mozilla\Firefox\Profiles\dwcp0lxw.default\
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
.
- - - - ORPHANS REMOVED - - - -

HKCU-Run-Aim6 - (no file)
HKLM-Run-personalguard - c:\program files\Personal Guard 2009\personalguard.exe
SSODL-SysNet-{2AC55C29-EC27-4D43-A6FB-70BE377CC407} - c:\documents and settings\All Users\Microsoft AData\sysnet.dll
AddRemove-Personal Guard 2009 - c:\program files\Personal Guard 2009\uninstalls.exe
AddRemove-Poker 770 - c:\poker\Poker 770\_SetupCasino_24d4.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-11-06 11:47
Windows 5.1.2600 Service Pack 2 NTFS

scanning hȋdden processes ...

scanning hȋdden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
DLCCCATS = rundll32 c:\windows\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

scanning hȋdden files ...

scan completed successfully
hȋdden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(808)
c:\windows\System32\BCMLogon.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Common Files\Symantec Shared\ccSetMgr.exe
c:\program files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\windows\System32\bcmwltry.exe
c:\windows\system32\igfxsrvc.exe
c:\windows\system32\WLTRAY.exe
c:\progra~1\COMMON~1\AOL\ACS\AOLacsd.exe
c:\program files\Symantec AntiVirus\DefWatch.exe
c:\windows\eHome\ehRecvr.exe
c:\windows\eHome\ehSched.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\program files\MUSICMATCH\Musicmatch Jukebox\mim.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
c:\program files\MUSICMATCH\Musicmatch Jukebox\MMDiag.exe
c:\program files\Symantec AntiVirus\Rtvscan.exe
c:\windows\system32\wdfmgr.exe
c:\windows\ehome\mcrdsvc.exe
c:\program files\Viewpoint\Viewpoint Manager\ViewMgr.exe
c:\progra~1\mcafee.com\agent\mctskshd.exe
c:\windows\eHome\ehmsas.exe
c:\progra~1\McAfee.com\PERSON~1\MpfService.exe
c:\windows\system32\dlcccoms.exe
c:\windows\system32\dllhost.exe
c:\progra~1\McAfee.com\PERSON~1\MpfAgent.exe
.
**************************************************************************
.
Completion time: 2009-11-06 12:09 - machine was rebooted
ComboFix-quarantined-files.txt 2009-11-06 17:09

Pre-Run: 17,603,387,392 bytes free
Post-Run: 17,868,931,072 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect

- - End Of File - - 6A8ED3C66647B0DFC53A99355DD90147


Program Logs

ABBYY FineReader 6.0 Sprint
Adobe Acrobat - Reader 6.0.2 Update
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Help Center 2.0
Adobe Photoshop Elements 4.0
Adobe Reader 6.0.1
AIM 6
AIM Toolbar 5.0
Anatomy Atlas LR2i
AOL Coach Version 1.0(Build:20040229.1 en)
AOL Connectivity Services
AOL Uninstaller (Choose which Products to Remove)
AOLIcon
Broadcom Management Programs
Conexant HDA D110 MDC V.92 Modem
Corel Paint Shop Pro X
Corel Photo Album 6
Dell Digital Jukebox Driver
Dell Driver Reset Tool
Dell Game Console
Dell Photo AIO Printer 924
Dell System Restore
Dell Wireless WLAN Card
DellSupport
Diablo II
Digital Line Detect
DivX Web Player
EarthLink setup files
ELIcon
ESPNMotion
FATE
GemMaster Mystic
Get High Speed Internet!
Google AFE
Google Desktop
Google Toolbar for Internet Explorer
High Definition Audio Driver Package - KB835221
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows XP (KB888795)
Hotfix for Windows XP (KB891593)
Hotfix for Windows XP (KB895961)
Hotfix for Windows XP (KB896256)
Hotfix for Windows XP (KB899337)
Hotfix for Windows XP (KB899510)
Hotfix for Windows XP (KB902841)
Hotfix for Windows XP (KB906569)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB970653-v3)
Human 3D LR2i
ImageMixer VCD/DVD2 for OLYMPUS
Intel(R) Graphics Media Accelerator Driver for Mobile
Internal Network Card Power Management
J2SE Runtime Environment 5.0 Update 3
Jasc Paint Shop Photo Album 5
Jasc Paint Shop Pro Studio, Dell Editon
Java 2 Runtime Environment, SE v1.4.2_03
Java(TM) 6 Update 11
Learn2 Player (Uninstall Only)
LimeWire 5.2.13
LiveUpdate 2.6 (Symantec Corporation)
Malwarebytes' Anti-Malware
McAfee Uninstaller
MCU
Medical Dictionary M7
Microsoft .NET Framework 1.0 Hotfix (KB887998)
Microsoft .NET Framework 1.0 Hotfix (KB930494)
Microsoft .NET Framework 1.0 Hotfix (KB953295)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB953297)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Professional Edition 2003
Microsoft Plus! Digital Media Edition Installer
Microsoft Plus! Photo Story 2 LE
Microsoft VC9 runtime libraries
Modem Helper
Mozilla Firefox (3.5.5)
MSN
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
Musicmatch for Windows Media Player
Musicmatch Jukebox
NetWaiting
NetZeroInstallers
OLYMPUS Master
Otto
Personal Guard 2009
Poker 770
PokerStars
PokerStars.net
PowerDVD 5.5
QuickSet
QuickTime
RealPlayer Basic
Saunders Q and A Review
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 7 (KB972260)
Security Update for Windows Internet Explorer 7 (KB974455)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899589)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928090)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB929969)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931768)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933566)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB937143)
Security Update for Windows XP (KB937894)
Security Update for Windows XP (KB938127)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB939653)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB941693)
Security Update for Windows XP (KB942615)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB948590)
Security Update for Windows XP (KB948881)
Security Update for Windows XP (KB950749)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958470)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB971032)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Sonic Copy Module
Sonic DLA
Sonic Encoders
Sonic Express Labeler
Sonic MyDVD Plus
Sonic RecordNow Audio
Sonic RecordNow Data
Sonic Update Manager
Symantec AntiVirus
Synaptics Pointing Device Driver
Talk to Me
Update for Windows Internet Explorer 7 (KB976749)
Update for Windows Media Player 10 (KB910393)
Update for Windows Media Player 10 (KB913800)
Update for Windows Media Player 10 (KB926251)
Update for Windows XP (KB894391)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Update for Windows XP (KB932823-v3)
Update for Windows XP (KB933360)
Update for Windows XP (KB936357)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
Update for Windows XP (KB942840)
Update for Windows XP (KB946627)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB973815)
Update Rollup 2 for Windows XP Media Center Edition 2005
VC80CRTRedist - 8.0.50727.762
Viewpoint Manager (Remove Only)
Viewpoint Media Player
WebCyberCoach 3.2 Dell
WebFldrs XP
WildTangent Web Driver
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Media Format Runtime
Windows Media Player 10
Windows Media Player 10 Hotfix - KB895316
Windows Media Player 10 Hotfix [See EmeraldQFE2 for more information]
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB885855
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB888310
Windows XP Hotfix - KB889673
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890927
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB892627
Windows XP Hotfix - KB893056
Windows XP Media Center Edition 2005 KB908246
Windows XP Media Center Edition 2005 KB908250
Windows XP Media Center Edition 2005 KB973768
WordPerfect Office 12
World Series Of Poker

Please use Internet Explorer and run a BitDefender Online scan

• Please check I agree with the Terms and Conditions and click Start Here
  
• You will need to allow an Active X install for the scan to run.
  
• Leave the scanning options at default and click Start Scan
  

Please post the results in your next reply.

I've started the scan. Right now, it says that it will take more than 4 hours.

All signs of PG2009 seem to be gone. Is the scan still neccessary? I will continue it until I hear from you.

Thanks.

-Jeff

/edit: Ok, the time for the scan seems to be dropping rapidly at the moment. I wasn't sure if it was really going to take that long.

I'm not sure how to post a nicely organized log like the other programs, so here's the best I could do:

BitDefender Results:

*BitDefender Online Scanner*









*Scan report generated at: Fri, Nov 06, 2009 - 15:52:24*

* *









*Scan path: *C:\;D:\;









* *









*Statistics*

Time



01:10:09

Files



321913

Folders



10241

Boot Sectors



0

Archives



5298

Packed Files



12714









*Results*

Identified Viruses



7

Infected Files



26

Suspect Files



0

Warnings



0

Disinfected



0

Deleted Files



26









*Engines Info*

Virus Definitions



4482032

Engine build



AVCORE v2.1 Windows/i386 11.0.0.26 (Oct 20 2009)

Scan plugins



17

Archive plugins



44

Unpack plugins



8

E-mail plugins



6

System plugins



4









*Scan Settings*

First Action



Disinfect

Second Action



Delete

Heuristics



Yes

Enable Warnings



Yes

Scanned Extensions



*;

Exclude Extensions





Scan Emails



Yes

Scan Archives



Yes

Scan Packed



Yes

Scan Files



Yes

Scan Boot



Yes











*Scanned File*



* Status*

C:\Qoobox\Quarantine\C\Program Files\Personal Guard
2009\personalguard.exe.vir



Infected with: Gen:Trojan.Heur.TDSS.9uW@h45M6Skc

C:\Qoobox\Quarantine\C\Program Files\Personal Guard
2009\personalguard.exe.vir



Disinfection failed

C:\Qoobox\Quarantine\C\Program Files\Personal Guard
2009\personalguard.exe.vir



Deleted

C:\Qoobox\Quarantine\C\Program Files\Personal Guard 2009\uninstalls.exe.vir



Infected with: Gen:Trojan.Heur.TDSS.euW@humKLri

C:\Qoobox\Quarantine\C\Program Files\Personal Guard 2009\uninstalls.exe.vir



Disinfection failed

C:\Qoobox\Quarantine\C\Program Files\Personal Guard 2009\uninstalls.exe.vir



Deleted

C:\Qoobox\Quarantine\C\WINDOWS\system32\winsc.exe.vir



Infected with: Gen:Trojan.Heur.TDSS.xuW@hS8Oaokc

C:\Qoobox\Quarantine\C\WINDOWS\system32\winsc.exe.vir



Disinfection failed

C:\Qoobox\Quarantine\C\WINDOWS\system32\winsc.exe.vir



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0084018.exe



Infected with: Gen:Trojan.Heur.TDSS.jwW@hmXM5Hpc

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0084018.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0084018.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0084037.exe



Infected with: Gen:Trojan.Heur.TDSS.euW@humKLri

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0084037.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0084037.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0084046.exe



Infected with: Gen:Trojan.Heur.TDSS.9uW@h45M6Skc

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0084046.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0084046.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0084048.exe



Infected with: Gen:Trojan.Heur.TDSS.9uW@h45M6Skc

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0084048.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0084048.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0084050.exe



Infected with: Gen:Trojan.Heur.TDSS.euW@humKLri

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0084050.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0084050.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085068.exe



Infected with: Gen:Trojan.Heur.TDSS.9uW@h45M6Skc

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085068.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085068.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085070.exe



Infected with: Gen:Trojan.Heur.TDSS.euW@humKLri

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085070.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085070.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085075.exe



Infected with: Gen:Trojan.Heur.TDSS.9uW@h45M6Skc

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085075.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085075.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085077.exe



Infected with: Gen:Trojan.Heur.TDSS.euW@humKLri

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085077.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085077.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085089.exe



Infected with: Gen:Trojan.Heur.TDSS.9uW@h45M6Skc

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085089.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085089.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085091.exe



Infected with: Gen:Trojan.Heur.TDSS.euW@humKLri

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085091.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085091.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085100.exe



Infected with: Gen:Trojan.Heur.TDSS.9uW@h45M6Skc

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085100.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085100.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085102.exe



Infected with: Gen:Trojan.Heur.TDSS.euW@humKLri

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085102.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085102.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085104.exe



Infected with: Gen:Trojan.Heur.TDSS.9uW@h45M6Skc

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085104.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085104.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085106.exe



Infected with: Gen:Trojan.Heur.TDSS.9uW@h45M6Skc

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085106.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085106.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085108.exe



Infected with: Gen:Trojan.Heur.TDSS.euW@humKLri

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085108.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085108.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085195.exe



Infected with: Gen:Trojan.Heur.TDSS.euW@humKLri

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085195.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP811\A0085195.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP812\A0085270.exe



Infected with: Gen:Trojan.Heur.TDSS.9uW@h45M6Skc

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP812\A0085270.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP812\A0085270.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP812\A0085272.exe



Infected with: Gen:Trojan.Heur.TDSS.euW@humKLri

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP812\A0085272.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP812\A0085272.exe



Deleted

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP812\A0085279.exe



Infected with: Gen:Trojan.Heur.TDSS.xuW@hS8Oaokc

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP812\A0085279.exe



Disinfection failed

C:\System Volume
Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP812\A0085279.exe



Deleted

C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary
Internet Files\Content.IE5\CDUZS9QR\load-full[1].exe



Infected with: Gen:Trojan.Heur.TDSS.ywX@haImyMe

C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary
Internet Files\Content.IE5\CDUZS9QR\load-full[1].exe



Disinfection failed

C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary
Internet Files\Content.IE5\CDUZS9QR\load-full[1].exe



Deleted

C:\WINDOWS\system32\lonayemu.dll



Infected with: Gen:Trojan.Heur.TDSS.cu4@h0UsTbhi

C:\WINDOWS\system32\lonayemu.dll



Disinfection failed

C:\WINDOWS\system32\lonayemu.dll



Deleted

C:\WINDOWS\system32\yuterahi.dll



Infected with: Gen:Trojan.Heur.TDSS.cu4@heHVL0fi

C:\WINDOWS\system32\yuterahi.dll



Disinfection failed

C:\WINDOWS\system32\yuterahi.dll



Deleted





* *









* *

Now to get you off to a good start we will clean your restore points so that all the bad stuff is gone for good. Then if you need to restore at some stage you will be clean. There are several ways to reset your restore points, but this is my method:

• Select Start > All Programs > Accessories > System tools > System Restore.
  
• On the dialogue box that appears select Create a Restore Point
  
• Click NEXT
  
• Enter a name e.g. Clean
  
• Click CREATE

You now have a clean restore point, to get rid of the bad ones:

• Select Start > All Programs > Accessories > System tools > Disk Cleanup.
  
• In the Drop down box that appears select your main drive e.g. C
  
• Click OK
  
• The System will do some calculation and the display a dialogue box with TABS
  
• Select the More Options Tab.
  
• At the bottom will be a system restore box with a CLEANUP button click this
  
• Accept the Warning and select OK again, the program will close and you are done
  

==

Please download SpiderKill and save it to your Desktop.

• Right-click on SpiderKill.zip and click Extract All. Follow the prompts and read carefully, to save it to your Desktop.
  
• Double-click on the SpiderKill folder, and then double-click on SpiderKill.bat and follow all the prompts in the program.
  
• Within a minute, it will save its log titled SpiderKill.txt. Please post that in your next reply. You may have to use two or three posts to be able to fit the information in.

SpiderKill logs:

SpiderKill by DragonMaster Jay ( Oct 2009 )


Microsoft Windows XP [Version 5.1.2600]

********************Drivers list********************


Volume in drive C has no label.
Volume Serial Number is 8C93-CDD0

Directory of C:\Windows\System32\Drivers

11/06/2009 12:09 PM .
11/06/2009 12:09 PM ..
02/07/2006 10:28 AM 6,142 1028_Dell_XPS_MXC051.mrk
08/04/2004 12:10 AM 53,248 1394bus.sys
08/17/2001 02:52 PM 23,552 ABP480N5.SYS
08/10/2004 06:00 AM 187,776 acpi.sys
08/10/2004 06:00 AM 11,648 acpiec.sys
08/17/2001 03:07 PM 101,888 adpu160m.sys
02/14/2006 07:22 PM 142,464 aec.sys
02/07/2006 10:52 AM 17,801 AegisP.sys
08/14/2008 04:51 AM 138,368 afd.sys
08/04/2004 12:07 AM 42,368 AGP440.SYS
08/04/2004 12:07 AM 44,928 AGPCPQ.SYS
08/17/2001 02:52 PM 12,800 aha154x.sys
08/17/2001 03:07 PM 55,168 aic78u2.sys
08/17/2001 03:07 PM 56,960 aic78xx.sys
08/17/2001 02:51 PM 5,248 aliide.sys
08/04/2004 12:07 AM 42,752 ALIM1541.SYS
08/04/2004 12:07 AM 43,008 AMDAGP.SYS
08/10/2004 06:00 AM 36,992 amdk6.sys
08/10/2004 06:00 AM 37,376 amdk7.sys
08/17/2001 02:52 PM 12,032 amsint.sys
08/03/2005 11:44 AM 16,128 APPDRV.SYS
08/10/2004 06:00 AM 60,800 arp1394.sys
08/17/2001 02:52 PM 26,496 asc.sys
08/17/2001 02:52 PM 22,400 asc3350p.sys
08/17/2001 02:51 PM 14,848 asc3550.sys
02/07/2006 10:56 AM 8,552 asctrm.sys
08/10/2004 06:00 AM 14,336 asyncmac.sys
08/03/2004 11:59 PM 95,360 atapi.sys
08/10/2004 06:00 AM 59,904 atmarpc.sys
08/10/2004 06:00 AM 31,360 atmepvc.sys
08/10/2004 06:00 AM 55,936 atmlane.sys
08/10/2004 06:00 AM 352,256 atmuni.sys
08/17/2001 02:59 PM 3,072 audstub.sys
08/17/2001 02:57 PM 14,080 battc.sys
08/05/2005 04:32 AM 45,312 bcm4sbxp.sys
12/06/2004 10:09 PM 369,024 BCMWL5.SYS
08/10/2004 06:00 AM 4,224 beep.sys
08/10/2004 06:00 AM 71,552 bridge.sys
04/10/2001 05:16 PM 13,184 bsaspi32.sys
06/13/2008 08:10 AM 272,128 bthport.sys
08/17/2001 02:52 PM 13,952 cbidf2k.sys
08/17/2001 02:52 PM 7,680 cd20xrnt.sys
08/10/2004 06:00 AM 18,688 cdaudio.sys
08/10/2004 06:00 AM 63,744 cdfs.sys
03/08/2004 01:55 PM 13,567 CDRBSDRV.SYS
07/05/2000 03:16 AM 9,688 cdrbsvsd.sys
08/10/2004 06:00 AM 49,536 cdrom.sys
08/10/2004 06:00 AM 262,528 cinemst2.sys
08/10/2004 06:00 AM 49,664 classpnp.sys
08/04/2004 12:07 AM 14,080 CmBatt.sys
08/17/2001 02:51 PM 6,656 cmdide.sys
08/17/2001 02:58 PM 9,344 compbatt.sys
08/17/2001 02:52 PM 14,976 cpqarray.sys
08/10/2004 06:00 AM 11,776 cpqdap01.sys
08/10/2004 06:00 AM 36,480 crusoe.sys
08/17/2001 02:52 PM 179,584 dac2w2k.sys
08/17/2001 02:52 PM 14,720 dac960nt.sys
08/09/2005 05:10 AM 133,972 del1028.cty
08/16/2005 05:22 AM disdn
08/10/2004 06:00 AM 36,352 disk.sys
08/10/2004 06:00 AM 14,208 diskdump.sys
08/10/2004 06:00 AM 799,744 dmboot.sys
08/10/2004 06:00 AM 153,344 dmio.sys
08/10/2004 06:00 AM 5,888 dmload.sys
08/04/2004 12:07 AM 52,864 DMusic.sys
08/17/2001 03:07 PM 20,192 dpti2o.sys
08/04/2004 12:08 AM 60,288 drmk.sys
08/04/2004 12:07 AM 2,944 drmkaud.sys
12/01/2004 04:22 AM 87,488 drvmcdb.sys
11/23/2004 03:56 AM 40,480 drvnddm.sys
08/10/2004 06:00 AM 10,496 dxapi.sys
08/10/2004 06:00 AM 71,040 dxg.sys
08/10/2004 06:00 AM 3,328 dxgthk.sys
08/17/2001 01:12 PM 117,760 e100b325.sys
08/17/2001 02:46 PM 6,400 enum1394.sys
11/06/2009 11:41 AM etc
08/10/2004 06:00 AM 143,360 fastfat.sys
08/10/2004 06:00 AM 27,392 fdc.sys
08/10/2004 06:00 AM 34,944 fips.sys
08/10/2004 06:00 AM 20,480 flpydisk.sys
08/21/2006 04:14 AM 128,896 fltmgr.sys
08/10/2004 06:00 AM 12,160 fsvga.sys
08/10/2004 06:00 AM 7,936 fs_rec.sys
08/17/2001 02:52 PM 125,056 ftdisk.sys
08/10/2004 06:00 AM 3,440,660 gm.dls
08/10/2004 06:00 AM 646 gmreadme.txt
08/12/2004 06:45 PM 137,728 Hdaudbus.sys
08/12/2004 06:45 PM 113,664 Hdaudio.sys
08/10/2004 06:00 AM 36,224 hidclass.sys
06/28/2005 12:43 PM 19,200 hidir.sys
08/10/2004 06:00 AM 24,960 hidparse.sys
08/17/2001 03:02 PM 9,600 hidusb.sys
08/17/2001 03:07 PM 25,952 hpn.sys
07/22/2005 04:01 AM 201,600 HSFHWAZL.sys
07/22/2005 04:01 AM 717,952 HSF_CNXT.sys
07/22/2005 04:02 AM 1,035,008 HSF_DPV.sys
03/16/2006 07:33 PM 262,784 http.sys
08/04/2004 12:00 AM 8,192 i2omgmt.sys
08/04/2004 12:00 AM 18,560 i2omp.sys
08/04/2004 12:14 AM 52,736 i8042prt.sys
10/14/2005 10:15 PM 1,302,812 ialmnt5.sys
08/10/2004 06:00 AM 41,856 imapi.sys
08/17/2001 02:52 PM 16,000 ini910u.sys
08/03/2004 11:59 PM 5,504 intelide.sys
08/10/2004 06:00 AM 36,096 intelppm.sys
08/10/2004 06:00 AM 29,056 ip6fw.sys
08/10/2004 06:00 AM 32,896 ipfltdrv.sys
08/10/2004 06:00 AM 20,992 ipinip.sys
09/29/2004 05:28 PM 134,912 ipnat.sys
08/10/2004 06:00 AM 74,752 ipsec.sys
06/28/2005 12:43 PM 46,592 irbus.sys
08/10/2004 06:00 AM 11,264 irenum.sys
08/17/2001 02:58 PM 35,840 isapnp.sys
08/03/2004 11:58 PM 24,576 kbdclass.sys
06/14/2006 03:47 AM 172,416 kmixer.sys
08/10/2004 06:00 AM 140,928 ks.sys
06/22/2009 06:35 AM 92,544 ksecdd.sys
09/10/2009 02:53 PM 19,160 mbam.sys
09/10/2009 02:54 PM 38,224 mbamswissarmy.sys
08/10/2004 06:00 AM 7,680 mcd.sys
03/17/2004 04:04 AM 13,059 mdmxsdk.sys
08/10/2004 06:00 AM 63,744 mf.sys
08/10/2004 04:45 AM 11,008 mhndrv.sys
08/10/2004 06:00 AM 4,224 mnmdd.sys
08/10/2004 06:00 AM 30,080 modem.sys
08/03/2004 11:58 PM 23,040 mouclass.sys
08/17/2001 02:48 PM 12,160 mouhid.sys
08/10/2004 06:00 AM 42,240 mountmgr.sys
11/11/2005 04:43 PM 80,640 MpFirewall.sys
06/22/2009 06:48 AM 91,776 mqac.sys
08/17/2001 02:52 PM 17,280 mraid35x.sys
12/18/2007 04:51 AM 179,584 mrxdav.sys
10/24/2008 06:10 AM 453,632 mrxsmb.sys
08/10/2004 06:00 AM 19,072 msfs.sys
08/10/2004 06:00 AM 35,072 msgpc.sys
08/03/2004 11:58 PM 7,552 MSKSSRV.sys
08/03/2004 11:58 PM 5,376 MSPCLOCK.sys
08/03/2004 11:58 PM 4,992 MSPQM.sys
08/04/2004 12:07 AM 15,488 mssmbios.sys
08/10/2004 06:00 AM 107,904 mup.sys
08/10/2005 12:22 PM 114,464 naiavf5x.sys
08/10/2004 06:00 AM 182,912 ndis.sys
08/10/2004 06:00 AM 9,600 ndistapi.sys
06/20/2005 02:52 PM 14,592 ndisuio.sys
08/10/2004 06:00 AM 91,776 ndiswan.sys
08/10/2004 06:00 AM 38,016 ndproxy.sys
08/10/2004 06:00 AM 34,560 netbios.sys
08/10/2004 06:00 AM 162,816 netbt.sys
08/10/2004 06:00 AM 61,824 nic1394.sys
08/10/2004 06:00 AM 12,032 nikedrv.sys
08/10/2004 06:00 AM 40,320 nmnt.sys
08/10/2004 06:00 AM 30,848 npfs.sys
02/09/2007 06:10 AM 574,464 ntfs.sys
08/10/2004 06:00 AM 2,944 null.sys
08/03/2004 11:29 PM 1,897,408 nv4_mini.sys
08/10/2004 06:00 AM 12,416 nwlnkflt.sys
08/10/2004 06:00 AM 32,512 nwlnkfwd.sys
08/10/2004 06:00 AM 88,448 nwlnkipx.sys
08/10/2004 06:00 AM 63,232 nwlnknb.sys
08/10/2004 06:00 AM 55,936 nwlnkspx.sys
10/13/2006 05:23 AM 163,584 nwrdr.sys
08/04/2004 12:10 AM 61,056 ohci1394.sys
08/10/2004 06:00 AM 3,456 oprghdlr.sys
08/10/2004 06:00 AM 42,496 p3.sys
08/10/2004 06:00 AM 80,128 parport.sys
08/10/2004 06:00 AM 18,688 partmgr.sys
08/10/2004 06:00 AM 6,784 parvdm.sys
08/04/2004 12:07 AM 68,224 pci.sys
08/17/2001 02:51 PM 3,328 pciide.sys
08/03/2004 11:59 PM 25,088 pciidex.sys
08/10/2004 06:00 AM 119,936 pcmcia.sys
08/17/2001 03:07 PM 27,296 perc2.sys
08/17/2001 03:07 PM 5,504 perc2hib.sys
03/16/2004 12:58 PM 136,960 portcls.sys
08/10/2004 06:00 AM 35,328 processr.sys
08/10/2004 06:00 AM 69,120 psched.sys
08/10/2004 06:00 AM 17,792 ptilink.sys
04/25/2005 03:03 AM 20,640 pxhelp20.sys
08/17/2001 02:52 PM 40,320 ql1080.sys
08/17/2001 02:52 PM 33,152 ql10wnt.sys
08/17/2001 02:52 PM 45,312 ql12160.sys
08/17/2001 02:52 PM 40,448 ql1240.sys
08/17/2001 02:52 PM 49,024 ql1280.sys
08/10/2004 06:00 AM 8,832 rasacd.sys
08/10/2004 06:00 AM 51,328 rasl2tp.sys
08/10/2004 06:00 AM 41,472 raspppoe.sys
08/10/2004 06:00 AM 48,384 raspptp.sys
08/10/2004 06:00 AM 16,512 raspti.sys
08/10/2004 06:00 AM 34,432 rawwan.sys
05/05/2006 04:47 AM 174,592 rdbss.sys
08/10/2004 06:00 AM 4,224 rdpcdd.sys
08/04/2004 12:01 AM 196,864 rdpdr.sys
06/09/2005 11:09 PM 139,528 rdpwd.sys
08/03/2004 11:59 PM 57,472 redbook.sys
07/14/2005 11:58 AM 28,544 rimmptsk.sys
07/12/2005 12:00 PM 51,328 rimsptsk.sys
08/10/2004 06:00 AM 12,032 rio8drv.sys
08/10/2004 06:00 AM 12,032 riodrv.sys
07/14/2005 10:28 AM 307,968 rixdptsk.sys
05/08/2008 07:28 AM 202,752 rmcast.sys
11/30/2004 07:28 PM 30,464 rndismp.sys
08/10/2004 06:00 AM 5,888 rootmdm.sys
08/10/2004 06:00 AM 96,256 scsiport.sys
08/10/2004 06:00 AM 67,584 sdbus.sys
11/13/2007 05:25 AM 20,480 secdrv.sys
08/10/2004 06:00 AM 15,488 serenum.sys
08/10/2004 06:00 AM 64,896 serial.sys
08/10/2004 06:00 AM 11,136 sffdisk.sys
08/10/2004 06:00 AM 10,240 sffp_sd.sys
08/10/2004 06:00 AM 11,392 sfloppy.sys
08/04/2004 12:07 AM 41,088 SISAGP.SYS
08/10/2004 06:00 AM 14,592 smclib.sys
08/10/2004 06:00 AM 25,472 sonydcam.sys
08/17/2001 03:07 PM 19,072 sparrow.sys
06/14/2006 03:47 AM 6,400 splitter.sys
08/10/2004 06:00 AM 73,472 sr.sys
12/11/2008 06:57 AM 333,184 srv.sys
07/14/2004 12:29 PM 5,627 sscdbhk5.sys
07/14/2004 12:28 PM 23,545 ssrtln.sys
09/10/2005 12:15 AM 1,032,472 sthda.sys
08/10/2004 06:00 AM 48,640 stream.sys
08/03/2004 11:58 PM 4,352 swenum.sys
08/17/2001 03:00 PM 54,272 swmidi.sys
08/17/2001 03:07 PM 16,256 symc810.sys
08/17/2001 03:07 PM 32,640 symc8xx.sys
10/19/2005 04:38 PM 12,944 symdns.sys
09/16/2005 11:20 PM 108,168 SYMEVENT.SYS
10/19/2005 04:38 PM 109,200 symfw.sys
10/19/2005 04:38 PM 31,888 symids.sys
10/19/2005 04:38 PM 28,304 symndis.sys
10/19/2005 04:06 PM 20 SymRedir.cat
10/19/2005 04:06 PM 1,133 SymRedir.inf
10/19/2005 04:38 PM 24,720 symredrv.sys
10/19/2005 04:39 PM 195,728 symtdi.sys
08/17/2001 03:07 PM 28,384 sym_hi.sys
08/17/2001 03:07 PM 30,688 sym_u3.sys
06/24/2005 07:19 AM 190,560 SynTP.sys
08/04/2004 12:15 AM 60,800 sysaudio.sys
08/10/2004 06:00 AM 14,976 tape.sys
06/20/2008 05:45 AM 360,320 tcpip.sys
06/20/2008 04:52 AM 225,920 tcpip6.sys
08/10/2004 06:00 AM 18,560 tdi.sys
08/10/2004 06:00 AM 12,040 tdpipe.sys
08/10/2004 06:00 AM 21,896 tdtcp.sys
08/04/2004 02:01 AM 40,840 termdd.sys
08/10/2004 06:00 AM 51,712 tosdvd.sys
08/17/2001 02:51 PM 4,992 toside.sys
08/10/2004 06:00 AM 21,376 tsbvcap.sys
08/10/2004 06:00 AM 12,416 tunmp.sys
08/10/2004 06:00 AM 66,176 udfs.sys
08/17/2001 02:52 PM 36,736 ultra.sys
04/23/2007 05:32 AM 364,160 update.sys
12/08/2004 10:34 AM 12,800 usb8023.sys
08/10/2004 06:00 AM 23,808 usbcamd.sys
08/10/2004 06:00 AM 23,936 usbcamd2.sys
08/03/2004 10:08 PM 31,616 usbccgp.sys
08/10/2004 06:00 AM 4,736 usbd.sys
08/10/2004 06:00 AM 26,624 usbehci.sys
08/04/2004 12:08 AM 57,600 usbhub.sys
08/10/2004 06:00 AM 16,000 usbintel.sys
08/04/2004 12:08 AM 142,976 usbport.sys
08/03/2004 10:01 PM 25,856 usbprint.sys
08/03/2004 09:58 PM 15,104 usbscan.sys
08/03/2004 11:08 PM 26,496 USBSTOR.SYS
08/04/2004 12:08 AM 20,480 usbuhci.sys
08/10/2004 06:00 AM 58,112 vdmindvd.sys
08/10/2004 06:00 AM 20,992 vga.sys
08/04/2004 12:07 AM 42,240 VIAAGP.SYS
08/03/2004 11:59 PM 5,376 viaide.sys
08/10/2004 06:00 AM 79,744 videoprt.sys
08/10/2004 06:00 AM 52,352 volsnap.sys
08/10/2004 06:00 AM 34,560 wanarp.sys
01/10/2003 05:13 PM 33,588 wanatw4.sys
06/14/2006 04:00 AM 82,944 wdmaud.sys
08/10/2004 06:00 AM 4,352 wmilib.sys
03/03/2006 07:33 AM 18,944 wpdusb.sys
08/10/2004 06:00 AM 12,032 ws2ifsl.sys
275 File(s) 26,160,548 bytes

Directory of C:\Windows\System32\Drivers\disdn

08/16/2005 05:22 AM .
08/16/2005 05:22 AM ..
0 File(s) 0 bytes

Directory of C:\Windows\System32\Drivers\etc

11/06/2009 11:41 AM .
11/06/2009 11:41 AM ..
11/06/2009 11:41 AM 27 hosts
01/09/2008 05:02 AM 434 hosts.ics
08/10/2004 06:00 AM 3,683 lmhosts.sam
08/10/2004 06:00 AM 407 networks
08/10/2004 06:00 AM 799 protocol
08/10/2004 06:00 AM 7,116 services
6 File(s) 12,466 bytes

Total Files Listed:
281 File(s) 26,173,014 bytes
8 Dir(s) 21,306,396,672 bytes free


***********************Hidden Drivers********************
Volume in drive C has no label.
Volume Serial Number is 8C93-CDD0

Directory of C:\Windows\System32\Drivers



*********************Processes*******************


PROCESS PID PRIO PATH
smss.exe 708 Normal C:\WINDOWS\System32\smss.exe
csrss.exe 780 Normal C:\WINDOWS\system32\csrss.exe
winlogon.exe 804 High C:\WINDOWS\system32\winlogon.exe
services.exe 848 Normal C:\WINDOWS\system32\services.exe
lsass.exe 860 Normal C:\WINDOWS\system32\lsass.exe
svchost.exe 1032 Normal C:\WINDOWS\system32\svchost.exe
svchost.exe 1076 Normal C:\WINDOWS\system32\svchost.exe
svchost.exe 1132 Normal C:\WINDOWS\System32\svchost.exe
svchost.exe 1232 Normal C:\WINDOWS\system32\svchost.exe
svchost.exe 1420 Normal C:\WINDOWS\system32\svchost.exe
Explorer.EXE 1632 Normal C:\WINDOWS\Explorer.EXE
ccSetMgr.exe 1748 Normal C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
ccEvtMgr.exe 1776 Normal C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
wltrysvc.exe 1864 Normal C:\WINDOWS\System32\wltrysvc.exe
bcmwltry.exe 1876 Normal C:\WINDOWS\System32\bcmwltry.exe
spoolsv.exe 1928 Normal C:\WINDOWS\system32\spoolsv.exe
svchost.exe 2016 Normal C:\WINDOWS\system32\svchost.exe
PhotoshopElementsFileAgent.exe 968 Normal C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
AOLacsd.exe 208 Normal C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
DefWatch.exe 164 Normal C:\Program Files\Symantec AntiVirus\DefWatch.exe
DLCCserv.exe 236 Normal C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCCserv.exe
ehRecvr.exe 228 Above Normal C:\WINDOWS\eHome\ehRecvr.exe
ehSched.exe 296 Normal C:\WINDOWS\eHome\ehSched.exe
jqs.exe 144 Idle C:\Program Files\Java\jre6\bin\jqs.exe
mcdetect.exe 388 Normal c:\program files\mcafee.com\agent\mcdetect.exe
mcshield.exe 496 High c:\PROGRA~1\mcafee.com\vso\mcshield.exe
mctskshd.exe 768 Normal c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
OasClnt.exe 1256 Normal c:\PROGRA~1\mcafee.com\vso\OasClnt.exe
MpfService.exe 1396 Normal C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
mcvsshld.exe 1372 Normal c:\program files\mcafee.com\vso\mcvsshld.exe
mcvsescn.exe 1464 Normal c:\progra~1\mcafee.com\vso\mcvsescn.exe
NICCONFIGSVC.exe 2168 Normal C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
svchost.exe 2212 Normal C:\WINDOWS\system32\svchost.exe
svchost.exe 2312 Normal C:\WINDOWS\system32\svchost.exe
Rtvscan.exe 2448 Normal C:\Program Files\Symantec AntiVirus\Rtvscan.exe
wdfmgr.exe 2516 Normal C:\WINDOWS\system32\wdfmgr.exe
ViewpointService.exe 2544 Normal C:\Program Files\Viewpoint\Common\ViewpointService.exe
mcrdsvc.exe 2644 Normal C:\WINDOWS\ehome\mcrdsvc.exe
dllhost.exe 3100 Normal C:\WINDOWS\system32\dllhost.exe
ehtray.exe 3584 Normal C:\WINDOWS\ehome\ehtray.exe
SynTPEnh.exe 3624 Normal C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
hkcmd.exe 3716 Normal C:\WINDOWS\system32\hkcmd.exe
alg.exe 3776 Normal C:\WINDOWS\System32\alg.exe
igfxpers.exe 3784 Normal C:\WINDOWS\system32\igfxpers.exe
ehmsas.exe 3812 Normal C:\WINDOWS\eHome\ehmsas.exe
igfxsrvc.exe 3844 Normal C:\WINDOWS\system32\igfxsrvc.exe
jusched.exe 3824 Normal C:\Program Files\Java\jre6\bin\jusched.exe
wmiprvse.exe 3840 Normal C:\WINDOWS\system32\wbem\wmiprvse.exe
stsystra.exe 464 Normal C:\WINDOWS\stsystra.exe
WLTRAY.exe 2060 Normal C:\WINDOWS\system32\WLTRAY.exe
quickset.exe 2344 Normal C:\Program Files\Dell\QuickSet\quickset.exe
DVDLauncher.exe 2420 Normal C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
RealPlay.exe 2444 Normal C:\Program Files\Real\RealPlayer\RealPlay.exe
svchost.exe 2844 Normal C:\WINDOWS\System32\svchost.exe
tfswctrl.exe 4064 Normal C:\WINDOWS\system32\dla\tfswctrl.exe
ViewMgr.exe 2956 Normal C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
mcagent.exe 3232 Normal C:\PROGRA~1\mcafee.com\agent\mcagent.exe
GoogleDesktop.exe 3940 Normal C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
MskAgent.exe 3984 Normal C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe
MediaDetect.exe 4056 Normal C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
MpfTray.exe 3656 Normal C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
wuauclt.exe 2156 Normal C:\WINDOWS\system32\wuauclt.exe
apdproxy.exe 2140 Normal C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe
ccApp.exe 2268 Normal C:\Program Files\Common Files\Symantec Shared\ccApp.exe
GoogleDesktopIndex.exe 2204 Normal C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
mim.exe 2380 Normal C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
VPTray.exe 576 Normal C:\PROGRA~1\SYMANT~1\VPTray.exe
MMDiag.exe 3264 Normal C:\Program Files\MUSICMATCH\Musicmatch Jukebox\MMDiag.exe
dlccmon.exe 3020 Normal C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe
AOLDial.exe 3680 Normal C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
netWaiting.exe 3908 Normal C:\Program Files\NetWaiting\netWaiting.exe
MpfAgent.exe 1380 Normal C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
DSAgnt.exe 3804 Below Normal C:\Program Files\DellSupport\DSAgnt.exe
TransferAgent.exe 3316 Normal C:\Documents and Settings\All Users\Application Data\Dell\TransferAgent\TransferAgent.exe
dlcccoms.exe 1560 High C:\WINDOWS\system32\dlcccoms.exe
DLG.exe 3268 Normal C:\Program Files\Digital Line Detect\DLG.exe
firefox.exe 5568 Normal C:\Program Files\Mozilla Firefox\firefox.exe
OSE.EXE 4720 Normal C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
cmd.exe 3420 Normal C:\WINDOWS\system32\cmd.exe
processes.exe 4712 Normal C:\Documents and Settings\Melissa A\Desktop\SpiderKill\SpiderKill\processes.exe


Module information for 'Explorer.EXE'(1632)
MODULE BASE SIZE PATH
Explorer.EXE 1000000 1044480 C:\WINDOWS\Explorer.EXE 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234) Windows Explorer
ntdll.dll 7c900000 729088 C:\WINDOWS\system32\ntdll.dll 5.1.2600.3520 (xpsp_sp2_qfe.090206-1239) NT Layer DLL
kernel32.dll 7c800000 1003520 C:\WINDOWS\system32\kernel32.dll 5.1.2600.3541 (xpsp_sp2_gdr.090321-1320) Windows NT BASE API Client DLL
ADVAPI32.dll 77dd0000 634880 C:\WINDOWS\system32\ADVAPI32.dll 5.1.2600.3520 (xpsp_sp2_qfe.090206-1239) Advanced Windows 32 Base API
RPCRT4.dll 77e70000 598016 C:\WINDOWS\system32\RPCRT4.dll 5.1.2600.3555 (xpsp_sp2_gdr.090415-1235) Remote Procedure Call Runtime
Secur32.dll 77fe0000 69632 C:\WINDOWS\system32\Secur32.dll 5.1.2600.3592 (xpsp_sp2_qfe.090622-1503) Security Support Provider Interface
BROWSEUI.dll 75f80000 1036288 C:\WINDOWS\system32\BROWSEUI.dll 6.00.2900.3231 (xpsp_sp2_qfe.071010-1316) Shell Browser UI Library
GDI32.dll 77f10000 294912 C:\WINDOWS\system32\GDI32.dll 5.1.2600.3466 (xpsp_sp2_gdr.081022-1254) GDI Client DLL
USER32.dll 7e410000 589824 C:\WINDOWS\system32\USER32.dll 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222) Windows XP USER API Client DLL
msvcrt.dll 77c10000 360448 C:\WINDOWS\system32\msvcrt.dll 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158) Windows NT CRT DLL
ole32.dll 774e0000 1298432 C:\WINDOWS\system32\ole32.dll 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528) Microsoft OLE for Windows
SHLWAPI.dll 77f60000 483328 C:\WINDOWS\system32\SHLWAPI.dll 6.00.2900.3231 (xpsp_sp2_qfe.071010-1316) Shell Light-weight Utility Library
OLEAUT32.dll 77120000 569344 C:\WINDOWS\system32\OLEAUT32.dll 5.1.2600.3266 5.1.2600.3266
SHDOCVW.dll 7e290000 1511424 C:\WINDOWS\system32\SHDOCVW.dll 6.00.2900.3231 (xpsp_sp2_qfe.071010-1316) Shell Doc Object and Control Library
CRYPT32.dll 77a80000 606208 C:\WINDOWS\system32\CRYPT32.dll 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158) Crypto API32
MSASN1.dll 77b20000 73728 C:\WINDOWS\system32\MSASN1.dll 5.1.2600.3624 (xpsp_sp2_gdr.090904-1413) ASN.1 Runtime APIs
CRYPTUI.dll 754d0000 524288 C:\WINDOWS\system32\CRYPTUI.dll 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158) Microsoft Trust UI Provider
WINTRUST.dll 76c30000 188416 C:\WINDOWS\system32\WINTRUST.dll 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158) Microsoft Trust Verification APIs
IMAGEHLP.dll 76c90000 163840 C:\WINDOWS\system32\IMAGEHLP.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Windows NT Image Helper
NETAPI32.dll 5b860000 344064 C:\WINDOWS\system32\NETAPI32.dll 5.1.2600.3462 (xpsp_sp2_gdr.081015-1244) Net Win32 API DLL
WININET.dll 3d930000 856064 C:\WINDOWS\system32\WININET.dll 7.00.6000.16915 (vista_gdr.090826-0339) Internet Extensions for Win32
Normaliz.dll 400000 36864 C:\WINDOWS\system32\Normaliz.dll 6.0.5441.0 (winmain(wmbla).060628-1735) Unicode Normalization DLL
iertutil.dll 3dfd0000 282624 C:\WINDOWS\system32\iertutil.dll 7.00.6000.16915 (vista_gdr.090826-0339) Run time utility for Internet Explorer
WLDAP32.dll 76f60000 180224 C:\WINDOWS\system32\WLDAP32.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Win32 LDAP API DLL
VERSION.dll 77c00000 32768 C:\WINDOWS\system32\VERSION.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Version Checking and File Installation Libraries
SHELL32.dll 7c9c0000 8482816 C:\WINDOWS\system32\SHELL32.dll 6.00.2900.3402 (xpsp_sp2_qfe.080702-1240) Windows Shell Common Dll
UxTheme.dll 5ad70000 229376 C:\WINDOWS\system32\UxTheme.dll 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) Microsoft UxTheme Library
ShimEng.dll 5cb70000 155648 C:\WINDOWS\system32\ShimEng.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Shim Engine DLL
AcGenral.DLL 6f880000 1875968 C:\WINDOWS\AppPatch\AcGenral.DLL 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Windows Compatibility DLL
WINMM.dll 76b40000 184320 C:\WINDOWS\system32\WINMM.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) MCI API DLL
MSACM32.dll 77be0000 86016 C:\WINDOWS\system32\MSACM32.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Microsoft ACM Audio Filter
USERENV.dll 769c0000 733184 C:\WINDOWS\system32\USERENV.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Userenv
IMM32.DLL 76390000 118784 C:\WINDOWS\system32\IMM32.DLL 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Windows XP IMM32 API Client DLL
comctl32.dll 773d0000 1060864 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 6.0 (xpsp.060825-0040) User Experience Controls Library
comctl32.dll 5d090000 630784 C:\WINDOWS\system32\comctl32.dll 5.82 (xpsp.060825-0040) Common Controls Library
msctfime.ime 755c0000 188416 C:\WINDOWS\system32\msctfime.ime 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Microsoft Text Frame Work Service IME
appHelp.dll 77b40000 139264 C:\WINDOWS\system32\appHelp.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Application Compatibility Client Library
CLBCATQ.DLL 76fd0000 520192 C:\WINDOWS\system32\CLBCATQ.DLL 2001.12.4414.308 2001.12.4414.308
COMRes.dll 77050000 806912 C:\WINDOWS\system32\COMRes.dll 2001.12.4414.258 2001.12.4414.258
cscui.dll 77a20000 344064 C:\WINDOWS\System32\cscui.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Client Side Caching UI
CSCDLL.dll 76600000 118784 C:\WINDOWS\System32\CSCDLL.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Offline Network Agent
themeui.dll 5ba60000 462848 C:\WINDOWS\system32\themeui.dll 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) Windows Theme API
MSIMG32.dll 76380000 20480 C:\WINDOWS\system32\MSIMG32.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) GDIEXT Client DLL
xpsp2res.dll 20000000 2904064 C:\WINDOWS\system32\xpsp2res.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Service Pack 2 Messages
McVSSkt.dll 10000000 102400 c:\progra~1\mcafee.com\vso\McVSSkt.dll 10, 0, 0, 26 McAfee VirusScan Winsock Helper DLL
WS2_32.dll 71ab0000 94208 C:\WINDOWS\system32\WS2_32.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Windows Socket 2.0 32-Bit DLL
WS2HELP.dll 71aa0000 32768 C:\WINDOWS\system32\WS2HELP.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Windows Socket 2.0 Helper for Windows NT
LINKINFO.dll 76980000 32768 C:\WINDOWS\system32\LINKINFO.dll 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520) Windows Volume Tracking
ntshrui.dll 76990000 151552 C:\WINDOWS\system32\ntshrui.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Shell extensions for sharing
ATL.DLL 76b20000 69632 C:\WINDOWS\system32\ATL.DLL 3.05.2284 ATL Module for Windows XP (Unicode)
MPR.dll 71b20000 73728 C:\WINDOWS\system32\MPR.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Multiple Provider Router DLL
drprov.dll 75f60000 28672 C:\WINDOWS\System32\drprov.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Microsoft Terminal Server Network Provider
ntlanman.dll 71c10000 57344 C:\WINDOWS\System32\ntlanman.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Microsoft Lan Manager
NETUI0.dll 71cd0000 94208 C:\WINDOWS\System32\NETUI0.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) NT LM UI Common Code - GUI Classes
NETUI1.dll 71c90000 262144 C:\WINDOWS\System32\NETUI1.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) NT LM UI Common Code - Networking classes
NETRAP.dll 71c80000 28672 C:\WINDOWS\System32\NETRAP.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Net Remote Admin Protocol DLL
SAMLIB.dll 71bf0000 77824 C:\WINDOWS\System32\SAMLIB.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) SAM Library DLL
davclnt.dll 75f70000 36864 C:\WINDOWS\System32\davclnt.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Web DAV Client DLL
WINSTA.dll 76360000 65536 C:\WINDOWS\system32\WINSTA.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Winstation Library
webcheck.dll 42e40000 245760 C:\WINDOWS\system32\webcheck.dll 7.00.6000.16915 (vista_gdr.090826-0339) Web Site Monitor
IEFRAME.dll 3e1c0000 6082560 C:\WINDOWS\system32\IEFRAME.dll 7.00.6000.16915 (vista_gdr.090826-0339) Internet Explorer
PSAPI.DLL 76bf0000 45056 C:\WINDOWS\system32\PSAPI.DLL 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Process Status Helper
stobject.dll 76280000 135168 C:\WINDOWS\system32\stobject.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Systray shell service object
BatMeter.dll 74af0000 40960 C:\WINDOWS\system32\BatMeter.dll 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) Battery Meter Helper DLL
POWRPROF.dll 74ad0000 32768 C:\WINDOWS\system32\POWRPROF.dll 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) Power Profile Helper DLL
SETUPAPI.dll 77920000 995328 C:\WINDOWS\system32\SETUPAPI.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Windows Setup API
WTSAPI32.dll 76f50000 32768 C:\WINDOWS\system32\WTSAPI32.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Windows Terminal Server SDK APIs
urlmon.dll 78130000 1212416 C:\WINDOWS\system32\urlmon.dll 7.00.6000.16915 (vista_gdr.090826-0339) OLE32 Extensions for Win32
wdmaud.drv 72d20000 36864 C:\WINDOWS\system32\wdmaud.drv 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) WDM Audio driver mapper
msacm32.drv 72d10000 32768 C:\WINDOWS\system32\msacm32.drv 5.1.2600.0 (xpclient.010817-1148) Microsoft Sound Mapper
midimap.dll 77bd0000 28672 C:\WINDOWS\system32\midimap.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Microsoft MIDI Mapper
NETSHELL.dll 76400000 1724416 C:\WINDOWS\system32\NETSHELL.dll 5.1.2600.2703 (xpsp.050620-1711) Network Connections Shell
credui.dll 76c00000 188416 C:\WINDOWS\system32\credui.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Credential Manager User Interface
iphlpapi.dll 76d60000 102400 C:\WINDOWS\system32\iphlpapi.dll 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003) IP Helper API
rtutils.dll 76e80000 57344 C:\WINDOWS\system32\rtutils.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Routing Utilities
msi.dll 7d1e0000 2875392 C:\WINDOWS\system32\msi.dll 3.1.4000.4039 Windows Installer
fxsst.dll 68df0000 577536 C:\WINDOWS\system32\fxsst.dll 5.2.2600.2180 (xpsp_sp2_rtm.040803-2158) Fax Service
WINSPOOL.DRV 73000000 155648 C:\WINDOWS\system32\WINSPOOL.DRV 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Windows Spooler Driver
FXSAPI.dll 5a980000 466944 C:\WINDOWS\system32\FXSAPI.dll 5.2.2600.2180 (xpsp_sp2_rtm.040803-2158) Microsoft Fax API Support DLL
NTMARTA.DLL 77690000 135168 C:\WINDOWS\system32\NTMARTA.DLL 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Windows NT MARTA provider
WZCSAPI.DLL 73030000 65536 C:\WINDOWS\system32\WZCSAPI.DLL 5.1.2600.2703 (xpsp.050620-1711) Wireless Zero Configuration service API
mskoeplg.dll c60000 155648 C:\PROGRA~1\McAfee\SPAMKI~1\mskoeplg.dll 7.0.1.7 McAfee SpamKiller Outlook Express Plugin
rsaenh.dll ffd0000 163840 C:\WINDOWS\system32\rsaenh.dll 5.1.2600.2161 (xpsp.040706-1629) Microsoft Enhanced Cryptographic Provider
MLANG.dll 75cf0000 593920 C:\WINDOWS\system32\MLANG.dll 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) Multi Language Support DLL
dadkeyb.dll a70000 73728 C:\Program Files\Dell\QuickSet\dadkeyb.dll
browselc.dll c30000 73728 C:\WINDOWS\system32\browselc.dll 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) Shell Browser UI Library
AcroIEHelper.dll c10000 49152 C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll 6.0.1.2003110300 Adobe Acrobat IE Helper Version 6.0 for ActivieX
SXS.DLL 75e90000 720896 C:\WINDOWS\system32\SXS.DLL 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414) Fusion 2.5
zipfldr.dll 73380000 356352 C:\WINDOWS\system32\zipfldr.dll 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) Compressed (zipped) Folders
actxprxy.dll 71d40000 114688 C:\WINDOWS\system32\actxprxy.dll 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) ActiveX Interface Marshaling Library
mbamext.dll 1310000 73728 C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll 1, 2, 0, 0 Malwarebytes' Anti-Malware
mcvsshl.dll 13c0000 114688 c:\progra~1\mcafee.com\vso\mcvsshl.dll 10, 0, 0, 19 McAfee VirusScan Shell Extension Module
ShlRes.dll 1650000 12288 c:\progra~1\mcafee.com\vso\ShlRes.dll 10, 0, 0, 19 McAfee VirusScan Shell Extension Resource
vpshell2.dll 1660000 49152 C:\Program Files\Common Files\Symantec Shared\SSC\vpshell2.dll 10.0.2.2000 Symantec AntiVirus
MSVCR71.dll 7c360000 352256 C:\WINDOWS\system32\MSVCR71.dll 7.10.6014.4 Microsoft C Runtime Library
CmdLineExt03.dll 19e0000 106496 C:\WINDOWS\system32\CmdLineExt03.dll
xpsp1res.dll 27c0000 192512 C:\WINDOWS\system32\xpsp1res.dll 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Service Pack 1 Messages
mydocs.dll 72410000 106496 C:\WINDOWS\system32\mydocs.dll 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) My Documents Folder UI
tfswshx.dll e10000 126976 C:\WINDOWS\system32\dla\tfswshx.dll 1.04.08a Drive Letter Access Component
tfswapi.dll d60000 61440 C:\WINDOWS\system32\tfswapi.dll 1.04.08a Drive Letter Access Component
tfswcres.dll ed0000 241664 C:\WINDOWS\system32\dla\tfswcres.dll 1.04.08a Drive Letter Access Component
ed0000 241664 ?:\WINDOWS\system32\dla\tfswcres.dll
ed0000 241664 ?:\WINDOWS\system32\dla\tfswcres.dll
ed0000 241664 ?:\WINDOWS\system32\dla\tfswcres.dll
ed0000 241664 ?:\WINDOWS\system32\dla\tfswcres.dll
ed0000 241664 ?:\WINDOWS\system32\dla\tfswcres.dll



******************************************
EOF

............................................................................................
It is the mark of a educated mind to be able to entertain a thought without accepting it.

Please download Malwarebytes Anti-Malware from here.

Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
  
• Once the program has loaded, select "Perform Full Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
  
• Please save the log to a location you will remember.
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  
• Copy and paste the entire report in your next reply.
  

Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.

MBAM logs:

Malwarebytes' Anti-Malware 1.41
Database version: 2775
Windows 5.1.2600 Service Pack 2

11/7/2009 5:20:11 PM
mbam-log-2009-11-07 (17-20-11).txt

Scan type: Full Scan (C:\|)
Objects scanned: 198672
Time elapsed: 1 hour(s), 1 minute(s), 19 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

I think this will be one last check:

Please download: HijackThis to your Desktop.

• Double Click the HijackThis icon, located on your Desktop.
  
• By Default, it will install to: C:\Program Files\Trend Micro\HijackThis
  It will also create a shortcut on your Desktop.
  
• Accept the license agreement.
  
• Click Do a System Scan and Save a Logfile.
  
• Please post the log in your next reply.

==

Download Security Check by screen317 from SpywareInfoforum.org or Changelog.fr.

• Save it to your Desktop.
• Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
• A Notepad document should open automatically called checkup.txt; please post the contents of that document.

Again, thank you so much for this help. When you're done helping me with everything, I would just like to know if I should keep all these programs or if I can delete everything except for MBAM.

HijackThis logs:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:46:07 PM, on 11/7/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16915)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCCserv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
c:\program files\mcafee.com\vso\mcvsshld.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\MMDiag.exe
C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Documents and Settings\All Users\Application Data\Dell\TransferAgent\TransferAgent.exe
C:\WINDOWS\system32\dlcccoms.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Mozilla Firefox\firefox.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\vso\OasClnt.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: McAfee AntiPhishing Filter - {41D68ED8-4CFF-4115-88A6-6EBB8AF19000} - c:\program files\mcafee\spamkiller\mcapfbho.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: GoogleAFE - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\Program Files\GoogleAFE\GoogleAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: AIM Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\PROGRA~1\McAfee\SPAMKI~1\MSKDetct.exe /startup
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [DLCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [dlccmon.exe] "C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe"
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\hi.exe" /runcleanupscript
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [DellTransferAgent] "C:\Documents and Settings\All Users\Application Data\Dell\TransferAgent\TransferAgent.exe"
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aim toolbar 5.0\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: AIM Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O9 - Extra button: (no name) - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll
O9 - Extra 'Tools' menuitem: McAfee AntiPhishing Filter - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files\PokerStars.NET\PokerStarsUpdate.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O12 - Plugin for .TIF: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin6.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: DLCCCustomerConnect - Unknown owner - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\DLCCserv.exe
O23 - Service: dlcc_device - Unknown owner - C:\WINDOWS\system32\dlcccoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\WildTangent\Apps\Dell Game Console\GameConsoleService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
O23 - Service: McAfee SpamKiller Server (MskService) - McAfee Inc. - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

--
End of file - 14215 bytes


Security Check logs:

Results of screen317's Security Check version 0.99.0
Windows XP Service Pack 2
Out of date service pack!!
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Enabled!
Symantec AntiVirus
McAfee Uninstaller
Antivirus out of date!
``````````````````````````````
Anti-malware/Other Utilities Check:
HijackThis 2.0.2
Java(TM) 6 Update 11
Java 2 Runtime Environment, SE v1.4.2_03
Out of date Java installed!
Adobe Flash Player 10
Adobe Reader 6.0.1
Out of date Adobe Reader installed!
``````````````````````````````
Process Check:
objlist.exe by Laurent
Symantec AntiVirus DefWatch.exe
Symantec AntiVirus Rtvscan.exe
``````````````````````````````
DNS Vulnerability Check:
GREAT! (Not vulnerable to DNS cache poisoning)

`````````End of Log```````````

Bump.

Also, I would like to note that my computer is booting, browsing and running faster than the day I bought it. You guys are awesome.

Please upgrade to Windows XP SP3, because it includes all previously released updates. It also includes a small number of new functionalities. Some of the updates that Service Pack 3 provides, you may not have. It is now available via Windows Update.

==

Please download the newest version of Adobe Acrobat Reader from Adobe.com

Before installing: it is important to remove older versions of Acrobat Reader since it does not do so automatically and old versions still leave you vulnerable.
Go to the Control Panel and enter Add or Remove Programs.
Search in the list for all previous installed versions of Adobe Acrobat Reader. Uninstall/Remove each of them.

Once old versions are gone, please install the newest version.

==

Please download the newest version of Java from Java.com.

Before installing: it is important to remove older versions of Java since it does not do so automatically and old versions still leave you vulnerable.
Go to the Control Panel and enter Add or Remove Programs.
Search in the list for all previous installed versions of Java. (J2SE Runtime Environment). Please uninstall/remove each of them.

Once old versions are gone, please install the newest version.

==

Please use Internet Explorer and run a BitDefender Online scan

• Please check I agree with the Terms and Conditions and click Start Here
  
• You will need to allow an Active X install for the scan to run.
  
• Leave the scanning options at default and click Start Scan
  

Please post the results in your next reply.