sluggish, underperforming machine

Hello -

I have a workstation that just does not perform like it should be. I've been under the assumption that this was because of an antivirus/web filter software package that was installed. I now believe there is much more to it. I think there has to be some kind of malware/adware/spyware buried deep within. It would be greatly appreciated if someone could take a look at my HJT log and see if they notice anything. Thanks - here's the log:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:30:09 PM, on 3/15/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fortinet\FortiClient\scheduler.exe
C:\Program Files\Fortinet\FortiClient\FCDBLog.exe
C:\Program Files\Fortinet\FortiClient\fmon.exe
C:\Program Files\Fortinet\FortiClient\fortiwf.exe
C:\Program Files\Fortinet\FortiClient\FCMgr.exe
C:\Program Files\Fortinet\FortiClient\FortiProxy.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\USERS\Services\DSAdmin.exe
C:\Program Files\Esker\Common\eslcbcst.exe
C:\Program Files\NetScaler\Netscaler Secure Remote Access\nsverctl.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Fortinet\FortiClient\FortiTray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\System32\igfxpers.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\NetScaler\Netscaler Secure Remote Access\nsload.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
F:\HiJackThis\Program\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.firstalliancecu.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ERMX
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\System32\igfxpers.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [TSClientAXDisabler] cmd.exe /C "%systemroot%\Installer\TSClientMsiTrans\tscdsbl.bat" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'Default user')
O4 - Global Startup: NetScaler Secure Remote Access.lnk = C:\Program Files\NetScaler\Netscaler Secure Remote Access\nsload.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ERMX
O16 - DPF: {10F6654B-3CF5-4E63-B06F-73C8F9B1C07E} (CompositeView Control) - http://10.52.80.90/wx/Client/IrcViewer.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {6E9412FE-27D3-4148-93EC-C553D70A329D} (Interactive Client Result Set Control) - http://10.52.80.90/WX/Client/IrcResultSet.cab
O16 - DPF: {EA5276F1-F0E5-11D2-8CB7-00105AA1B80E} (PASSPORT Document) - http://198.204.98.43/pec/Passweb.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{4C1284B3-D6AC-4BA5-8F15-5B66E90FC9F9}: NameServer = 10.52.80.80,10.52.112.80
O17 - HKLM\System\CS1\Services\Tcpip\..\{4C1284B3-D6AC-4BA5-8F15-5B66E90FC9F9}: NameServer = 10.52.80.80,10.52.112.80
O17 - HKLM\System\CS2\Services\Tcpip\..\{4C1284B3-D6AC-4BA5-8F15-5B66E90FC9F9}: NameServer = 10.52.80.80,10.52.112.80
O23 - Service: DSAdmin - Users, Inc. - C:\Program Files\USERS\Services\DSAdmin.exe
O23 - Service: DSInstallerHelper - Unknown owner - C:\Program Files\Users\DSInstallerHelper.exe
O23 - Service: DSInstallerX - Users Inc. - C:\Program Files\USERS\DSInstallerXIE\DSInstallerX.exe
O23 - Service: Esker License Control (EskerLicenseControl) - Esker S.A. - C:\Program Files\Esker\Common\eslcbcst.exe
O23 - Service: Fortinet Service Scheduler (FA_Scheduler) - Fortinet Inc. - C:\Program Files\Fortinet\FortiClient\scheduler.exe
O23 - Service: NetScaler SSL VPN Version Control (nsverctl) - NetScaler, Inc - C:\Program Files\NetScaler\Netscaler Secure Remote Access\nsverctl.exe
O23 - Service: UJobScheduleService - Unknown owner - C:\Program Files\Users\UsersScheduler\UJobScheduleService.exe

–
End of file - 5578 bytes