Google Redirect, Bluescreens, possible infection

Here's the Combofix log:

ComboFix 11-01-28.03 - Jorge Alejandro 01/31/2011 13:16:48.2.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1014.258 [GMT -6:00]
Running from: c:\users\[removed]\Desktop\koshe.exe
Command switches used :: c:\users\Jorge Alejandro\Desktop\CFScript.txt
AV: Panda Antivirus Pro 2010 *Disabled/Updated* {86971480-9989-6750-B122-681A86518D59}
FW: Panda Personal Firewall 2010 *Disabled* {BEAC95A5-D3E6-6608-9A7D-C12F7882CA22}
SP: Panda Antivirus Pro 2010 *Disabled/Updated* {3DF6F564-BFB3-68DE-8B92-5368FDD6C7E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\drivers\MSIVXvymvxvsosuonpwqnqdarcxcnbrjibpur.sys
c:\windows\system32\MSIVXcount

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

——-\Legacy_MSIVXserv.sys
——-\Service_MSIVXserv.sys


((((((((((((((((((((((((( Files Created from 2010-12-28 to 2011-01-31 )))))))))))))))))))))))))))))))
.

2011-01-31 19:34 . 2011-01-31 19:42 ——– d—–w- c:\users\Jorge Alejandro\AppData\Local\temp
2011-01-31 19:34 . 2011-01-31 19:34 ——– d—–w- c:\users\Guest\AppData\Local\temp
2011-01-31 19:34 . 2011-01-31 19:34 ——– d—–w- c:\users\Default\AppData\Local\temp
2011-01-31 18:38 . 2011-01-31 18:38 472808 —-a-w- c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
2011-01-31 18:38 . 2011-01-31 18:37 472808 —-a-w- c:\windows\system32\deployJava1.dll
2011-01-31 18:30 . 2011-01-31 18:30 0 —-a-w- c:\windows\system32\RENF448.tmp
2011-01-31 18:30 . 2011-01-31 18:30 0 —-a-w- c:\windows\system32\RENF438.tmp
2011-01-31 18:30 . 2011-01-31 18:30 0 —-a-w- c:\windows\system32\RENF417.tmp
2011-01-26 06:56 . 2011-01-26 06:56 388096 —-a-r- c:\users\Jorge Alejandro\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-01-26 01:43 . 2011-01-13 09:41 5890896 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{74E5AC80-2DD7-4563-A567-C2311844EF02}\mpengine.dll
2011-01-12 05:39 . 2010-12-28 14:57 409600 —-a-w- c:\windows\system32\odbc32.dll
2011-01-12 05:39 . 2010-12-28 14:56 708608 —-a-w- c:\program files\Common Files\System\ado\msado15.dll
2011-01-12 05:39 . 2010-12-28 14:56 253952 —-a-w- c:\program files\Common Files\System\ado\msadox.dll
2011-01-12 05:39 . 2010-12-28 14:56 57344 —-a-w- c:\program files\Common Files\System\msadc\msadcs.dll
2011-01-12 05:39 . 2010-12-28 14:56 241664 —-a-w- c:\program files\Common Files\System\ado\msadomd.dll
2011-01-12 05:39 . 2010-12-28 14:56 180224 —-a-w- c:\program files\Common Files\System\msadc\msadco.dll
2011-01-12 05:39 . 2010-12-14 15:49 1169408 —-a-w- c:\windows\system32\sdclt.exe
2011-01-08 05:55 . 2011-01-10 22:01 ——– d—–w- c:\users\Jorge Alejandro\AppData\Roaming\skypePM
2011-01-08 05:46 . 2011-01-08 05:46 ——– d—–w- c:\program files\Common Files\Skype
2011-01-08 05:46 . 2011-01-08 05:46 ——– d—–r- c:\program files\Skype
2011-01-08 05:46 . 2011-01-31 18:18 ——– d—–w- c:\users\Jorge Alejandro\AppData\Roaming\Skype
2011-01-08 05:34 . 2011-01-08 05:46 ——– d—–w- c:\programdata\Skype
2011-01-04 02:40 . 2011-01-04 02:40 ——– d—–w- c:\users\Jorge Alejandro\AppData\Roaming\Flickr
2011-01-04 02:40 . 2011-01-04 02:40 ——– d—–w- c:\users\Jorge Alejandro\AppData\Local\Flickr
2011-01-04 00:30 . 2011-01-23 06:05 ——– d—–w- c:\program files\Flickr Uploadr

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-26 05:11 . 2007-12-25 20:00 1063724848 —-a-w- c:\windows\DUMP494e.tmp
2011-01-23 00:20 . 2007-12-25 20:00 1063721248 —-a-w- c:\windows\DUMP3b89.tmp
2011-01-07 02:31 . 2007-12-25 20:00 1063721248 —-a-w- c:\windows\DUMP52b1.tmp
2010-12-19 00:49 . 2007-12-25 20:00 1063724848 —-a-w- c:\windows\DUMP3d7c.tmp
2010-12-18 05:07 . 2007-12-25 20:00 1063721248 —-a-w- c:\windows\DUMP3b3b.tmp
2010-12-16 16:58 . 2007-12-25 20:00 1063721248 —-a-w- c:\windows\DUMP338d.tmp
2010-12-11 18:15 . 2007-12-25 20:00 1061636384 —-a-w- c:\windows\DUMP37f0.tmp
2010-12-11 17:54 . 2007-12-25 20:00 1063721248 —-a-w- c:\windows\DUMP3523.tmp
2010-11-29 18:22 . 2007-12-25 20:00 1063721248 —-a-w- c:\windows\DUMP4864.tmp
2010-11-29 18:06 . 2007-12-25 20:00 1063721248 —-a-w- c:\windows\DUMP3938.tmp
2010-11-25 06:57 . 2009-03-30 22:30 564632 —-a-w- c:\programdata\Microsoft\IdentityCRL\production\wlidui.dll
2010-11-25 06:57 . 2009-03-30 22:20 17816 —-a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2010-11-13 06:12 . 2007-12-25 20:00 1063724848 —-a-w- c:\windows\DUMP4884.tmp
2010-11-10 18:28 . 2007-12-25 20:00 1063721248 —-a-w- c:\windows\DUMP3a12.tmp
2010-11-06 11:10 . 2010-12-16 04:49 345088 —-a-w- c:\windows\system32\wmicmiplugin.dll
2010-11-06 11:10 . 2010-12-16 04:49 357376 —-a-w- c:\windows\system32\taskschd.dll
2010-11-06 11:10 . 2010-12-16 04:49 270336 —-a-w- c:\windows\system32\taskcomp.dll
2010-11-06 11:09 . 2010-12-16 04:49 603648 —-a-w- c:\windows\system32\schedsvc.dll
2010-11-05 00:53 . 2010-12-16 04:49 171520 —-a-w- c:\windows\system32\taskeng.exe
2010-11-04 21:55 . 2007-12-25 20:00 1061663040 —-a-w- c:\windows\DUMP4c5a.tmp
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"APVXDWIN"="c:\program files\Panda Security\Panda Antivirus Pro 2010\APVXDWIN.EXE" [2009-06-05 574720]
"SCANINICIO"="c:\program files\Panda Security\Panda Antivirus Pro 2010\Inicio.exe" [2009-04-21 56064]
"RtHDVCpl"="RtHDVCpl.exe" [2007-06-25 4489216]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-06-29 137752]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-06-29 154136]
"Apoint"="c:\program files\Apoint\Apoint.exe" [2007-06-08 118784]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2007-07-25 02:26 98304 ——w- c:\windows\System32\VESWinlogon.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PskSvcRetail]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Google Calendar Sync.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Google Calendar Sync.lnk
backup=c:\windows\pss\Google Calendar Sync.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TotalMedia Backup Monitor.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\TotalMedia Backup Monitor.lnk
backup=c:\windows\pss\TotalMedia Backup Monitor.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^Users^Jorge Alejandro^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^LimeWire On Startup.lnk]
path=c:\users\Jorge Alejandro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LimeWire On Startup.lnk
backup=c:\windows\pss\LimeWire On Startup.lnk.Startup
backupExtension=.Startup

[HKLM\~\startupfolder\C:^Users^Jorge Alejandro^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Product Registration.lnk]
path=c:\users\Jorge Alejandro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk
backup=c:\windows\pss\Logitech . Product Registration.lnk.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-21 05:07 932288 —-a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-09-23 10:47 35760 —-a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
2010-03-06 08:44 500208 ——w- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]
2010-03-18 16:19 207360 —-a-w- c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\googletalk]
2007-01-01 21:22 3739648 ——w- c:\program files\Google\Google Talk\googletalk.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InstaLAN]
2010-03-02 21:15 1134488 —-a-w- c:\program files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISBMgr.exe]
2007-06-12 01:27 317560 ——w- c:\program files\Sony\ISB Utility\ISBMgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2010-09-24 07:10 421160 —-a-w- c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nitro PDF Printer Monitor]
2009-05-27 17:56 209216 —-a-w- c:\program files\Nitro PDF\Professional\NitroPDFPrinterMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSUFloatingUI]
2007-06-29 20:38 258048 ——w- c:\program files\Sony\Network Utility\LANUtil.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
2007-06-29 13:45 133656 ——w- c:\windows\System32\igfxpers.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-09-08 16:17 421888 —-a-w- c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2011-01-03 21:44 15028104 —-a-r- c:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
2007-06-25 21:41 1826816 —-a-w- c:\windows\SkyTel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VWLASU]
2007-07-12 18:31 45056 ——w- c:\program files\Sony\VAIO PC Wireless LAN Wizard\AutoLaunchWLASU.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-3147054866-92175380-2420560267-1002]
"EnableNotificationsRef"=dword:00000001

R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate1c9a59268b15470;Google Update Service (gupdate1c9a59268b15470);c:\program files\Google\Update\GoogleUpdate.exe [2009-03-15 133104]
R3 AvFlt;Antivirus Filter Driver;c:\windows\system32\drivers\av5flt.sys [x]
R3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [2009-12-18 11336]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [x]
R3 PavSRK.sys;PavSRK.sys;c:\windows\system32\PavSRK.sys [x]
R3 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys [x]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
R4 Belkin Local Backup Service;Belkin Local Backup Service;c:\program files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe [2010-03-10 152064]
R4 Belkin Network USB Helper;Belkin Network USB Helper;c:\program files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe [2010-03-10 49152]
R4 NSUService;NSUService;c:\program files\Sony\Network Utility\NSUService.exe [2007-06-29 200704]
R4 VAIOMediaPlatform-UCLS-AppServer;VAIO Media Content Collection;c:\program files\Sony\VAIO Media Integrated Server\UCLS.exe [2007-01-10 745472]
R4 VAIOMediaPlatform-UCLS-HTTP;VAIO Media Content Collection (HTTP);c:\program files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe [2007-06-20 397312]
R4 VAIOMediaPlatform-UCLS-UPnP;VAIO Media Content Collection (UPnP);c:\program files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe [2007-06-20 1089536]
R4 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2007-07-13 292152]
R4 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [2007-07-06 79736]
R4 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [x]
S0 pavboot;Panda boot driver;c:\windows\system32\Drivers\pavboot.sys [2008-06-19 28544]
S1 APPFLT;App Filter Plugin;c:\windows\system32\Drivers\APPFLT.SYS [2008-06-25 73728]
S1 DSAFLT;DSA Filter Plugin;c:\windows\system32\Drivers\DSAFLT.SYS [2008-06-18 52992]
S1 FNETMON;NetMon Filter Plugin;c:\windows\system32\Drivers\fnetmon.SYS [2008-03-28 22072]
S1 IDSFLT;Ids Filter Plugin;c:\windows\system32\Drivers\IDSFLT.SYS [2008-06-18 193792]
S1 NETFLTDI;Panda Net Driver [TDI Layer];c:\windows\system32\Drivers\NETFLTDI.SYS [2008-07-11 19:58 158848]
S1 ShldDrv;Panda File Shield Driver;c:\windows\system32\DRIVERS\ShlDrv51.sys [2008-03-04 41144]
S1 WNMFLT;Wifi Monitor Filter Plugin;c:\windows\system32\Drivers\WNMFLT.SYS [2008-06-18 46720]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2008-01-19 21504]
S2 AmFSM;AmFSM;c:\windows\system32\DRIVERS\amm8660.sys [2008-02-14 49208]
S2 Gwmsrv;Panda Goodware Cache Manager;c:\windows\system32\svchost [x]
S2 PavProc;Panda Process Protection Driver;c:\windows\system32\DRIVERS\PavProc.sys [2009-06-02 177416]
S2 PskSvcRetail;Panda PSK service;c:\program files\Panda Security\Panda Antivirus Pro 2010\PskSvc.exe [2008-06-25 28928]
S3 NETIMFLT01060034;PANDA NDIS IM Filter Miniport v1.6.0.34;c:\windows\system32\DRIVERS\neti1634.sys [2008-06-26 197888]
S3 PavTPK.sys;PavTPK.sys;c:\windows\system32\PavTPK.sys [x]
S3 sxuptp;SXUPTP Driver;c:\windows\system32\DRIVERS\sxuptp.sys [2010-03-10 247320]
S3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [2007-06-05 812544]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
panda REG_MULTI_SZ Gwmsrv
Akamai REG_MULTI_SZ Akamai
.
Contents of the 'Scheduled Tasks' folder

2011-01-31 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-15 17:20]

2011-01-31 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-15 17:20]

2010-08-20 c:\windows\Tasks\RCHubTask 0 0 {2E6E3A14-F6F5-404E-AC33-87F20083074D} 0~0.job
- c:\program files\Common Files\Roxio Shared\9.0\Roxio Central33\Main\Roxio_Central33.exe [2006-12-27 09:43]

2011-01-31 c:\windows\Tasks\User_Feed_Synchronization-{73E1DD56-116B-47F5-8A29-793974F5EF7F}.job
- c:\windows\system32\msfeedssync.exe [2010-12-16 04:25]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.google.com/ig?hl=en
mStart Page = hxxp://www.sony.com/vaiopeople
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
FF - ProfilePath - c:\users\Jorge Alejandro\AppData\Roaming\Mozilla\Firefox\Profiles\49ypuvj5.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: Diccionario español Venezuela: [removed] - %profile%\extensions\[removed]
.
- - - - ORPHANS REMOVED - - - -

MSConfigStartUp-SunJavaUpdateSched - c:\program files\Java\jre6\bin\jusched.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-31 13:42
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet114\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet114\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
———————— Other Running Processes ————————
.
c:\program files\Panda Security\Panda Antivirus Pro 2010\TPSrv.exe
c:\program files\PANDA SECURITY\PANDA ANTIVIRUS PRO 2010\WebProxy.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\windows\system32\ASTSRV.EXE
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
c:\program files\Panda Security\Panda Antivirus Pro 2010\PsCtrls.exe
c:\program files\Panda Security\Panda Antivirus Pro 2010\PavFnSvr.exe
c:\program files\Common Files\Panda Security\PavShld\pavprsrv.exe
c:\program files\Panda Security\Panda Antivirus Pro 2010\pavsrvx86.exe
c:\program files\Panda Security\Panda Antivirus Pro 2010\AVENGINE.EXE
c:\program files\Panda Security\Panda Antivirus Pro 2010\Firewall\PSHOST.EXE
c:\program files\Panda Security\Panda Antivirus Pro 2010\PsImSvc.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\windows\system32\DRIVERS\xaudio.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\Sony\VAIO Update 3\VAIOUpdt.exe
c:\windows\RtHDVCpl.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\Windows Media Player\wmpnscfg.exe
c:\windows\ehome\ehmsas.exe
c:\program files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
.
**************************************************************************
.
Completion time: 2011-01-31 13:53:45 - machine was rebooted
ComboFix-quarantined-files.txt 2011-01-31 19:52
ComboFix2.txt 2011-01-30 19:27

Pre-Run: 21,963,726,848 bytes free
Post-Run: 21,662,670,848 bytes free

- - End Of File - - F50312872B3CD733519565C1B6E62CD3



————————————————————————————————————————————————————————————————————————————

DDS / Attach logs:


DDS (Ver_10-12-12.01) - NTFSx86
Run by [removed] at 16:05:54.43 on Mon 01/31/2011
Internet Explorer: 8.0.6001.18999 BrowserJavaVersion: 1.6.0_23
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1014.293 [GMT -6:00]

AV: Symantec AntiVirus *Disabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C}
SP: Symantec AntiVirus *Disabled/Updated* {6C85A515-B91D-4D2B-AF18-40984A4A8493}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
SP: SUPERAntiSpyware *Enabled/Updated* {222A897C-5018-402e-943F-7E7AC8560DA7}
AV: Panda Antivirus Pro 2010 *Disabled/Updated* {86971480-9989-6750-B122-681A86518D59}
SP: Panda Antivirus Pro 2010 *Disabled/Updated* {3DF6F564-BFB3-68DE-8B92-5368FDD6C7E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Panda Personal Firewall 2010 *Disabled* {BEAC95A5-D3E6-6608-9A7D-C12F7882CA22}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Panda Security\Panda Antivirus Pro 2010\PskSvc.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2010\TPSrv.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2010\WebProxy.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k Akamai
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Windows\system32\ASTSRV.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost -k Panda
c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2010\PsCtrls.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2010\PavFnSvr.exe
C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2010\pavsrvx86.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2010\AVENGINE.EXE
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Panda Security\Panda Antivirus Pro 2010\Firewall\PSHOST.EXE
C:\Program Files\Panda Security\Panda Antivirus Pro 2010\PsImSvc.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2010\ApVxdWin.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Apoint\ApMsgFwd.exe
C:\Program Files\Apoint\Apvfb.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2010\avciman.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2010\psimreal.exe
C:\Users\Jorge Alejandro\Desktop\Tech files\dds.pif
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/ig?hl=en
mStart Page = hxxp://www.sony.com/vaiopeople
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
mRun: [APVXDWIN] "c:\program files\panda security\panda antivirus pro 2010\APVXDWIN.EXE" /s
mRun: [SCANINICIO] "c:\program files\panda security\panda antivirus pro 2010\Inicio.exe"
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Apoint] c:\program files\apoint\Apoint.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: {02CF1781-EA91-4FA5-A200-646E8241987C} - hxxp://esupport.sony.com/VaioInfo.CAB
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab
DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} - hxxp://static.ak.facebook.com/fbplugin/win32/axfbootloader.cab
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.1.66.0.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} - hxxp://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUplden-us.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: igfxcui - igfxdev.dll
Notify: VESWinlogon - VESWinlogon.dll

================= FIREFOX ===================

FF - ProfilePath - c:\users\jorgea~1\appdata\roaming\mozilla\firefox\profiles\49ypuvj5.default\
FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll
FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\microsoft\office live\npOLW.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npViewpoint.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Extension: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Extension: Java Console: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
FF - Extension: Java Console: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - Extension: Java Console: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - Extension: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Extension: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - c:\users\jorgea~1\appdata\roaming\mozilla\firefox\profiles\49ypuvj5.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Extension: Diccionario español Venezuela: [removed] - c:\users\jorgea~1\appdata\roaming\mozilla\firefox\profiles\49ypuvj5.default\extensions\[removed]

============= SERVICES / DRIVERS ===============

R0 pavboot;Panda boot driver;c:\windows\system32\drivers\pavboot.sys [2010-6-28 28544]
R1 APPFLT;App Filter Plugin;c:\windows\system32\drivers\APPFLT.SYS [2010-6-28 73728]
R1 DSAFLT;DSA Filter Plugin;c:\windows\system32\drivers\dsaflt.sys [2010-6-28 52992]
R1 FNETMON;NetMon Filter Plugin;c:\windows\system32\drivers\fnetmon.sys [2010-6-28 22072]
R1 IDSFLT;Ids Filter Plugin;c:\windows\system32\drivers\idsflt.sys [2010-6-28 193792]
R1 NETFLTDI;Panda Net Driver [TDI Layer];c:\windows\system32\drivers\NETFLTDI.SYS [2010-6-28 158848]
R1 ShldDrv;Panda File Shield Driver;c:\windows\system32\drivers\ShlDrv51.sys [2010-6-28 41144]
R1 WNMFLT;Wifi Monitor Filter Plugin;c:\windows\system32\drivers\wnmflt.sys [2010-6-28 46720]
R2 Akamai;Akamai NetSession Interface;c:\windows\system32\svchost.exe -k Akamai [2008-6-12 21504]
R2 AmFSM;AmFSM;c:\windows\system32\drivers\amm8660.sys [2010-6-28 49208]
R2 Gwmsrv;Panda Goodware Cache Manager;c:\windows\system32\svchost -k panda –> c:\windows\system32\svchost -k Panda [?]
R2 Panda Software Controller;Panda Software Controller;c:\program files\panda security\panda antivirus pro 2010\PsCtrlS.exe [2010-6-28 173312]
R2 PAVFNSVR;Panda Function Service;c:\program files\panda security\panda antivirus pro 2010\PavFnSvr.exe [2010-6-28 169216]
R2 PavProc;Panda Process Protection Driver;c:\windows\system32\drivers\PavProc.sys [2010-6-28 177416]
R2 PavPrSrv;Panda Process Protection Service;c:\program files\common files\panda security\pavshld\PavPrSrv.exe [2010-6-28 62768]
R2 PAVSRV;Panda On-Access Anti-Malware Service;c:\program files\panda security\panda antivirus pro 2010\pavsrvx86.exe [2010-6-28 291584]
R2 PskSvcRetail;Panda PSK service;c:\program files\panda security\panda antivirus pro 2010\psksvc.exe [2010-6-28 28928]
R3 NETIMFLT01060034;PANDA NDIS IM Filter Miniport v1.6.0.34;c:\windows\system32\drivers\neti1634.sys [2010-6-28 197888]
R3 sxuptp;SXUPTP Driver;c:\windows\system32\drivers\sxuptp.sys [2010-3-10 247320]
R3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [2007-8-26 812544]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate1c9a59268b15470;Google Update Service (gupdate1c9a59268b15470);c:\program files\google\update\GoogleUpdate.exe [2009-3-15 133104]
S3 cpudrv;cpudrv;c:\program files\systemrequirementslab\cpudrv.sys [2009-12-18 11336]
S3 McComponentHostService;McAfee Security Scan Component Host Service;"c:\program files\mcafee security scan\2.0.181\mcchsvc.exe" –> c:\program files\mcafee security scan\2.0.181\McCHSvc.exe [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S4 Belkin Local Backup Service;Belkin Local Backup Service;c:\program files\belkin\belkin usb print and storage center\BkBackupScheduler.exe [2010-9-19 152064]
S4 Belkin Network USB Helper;Belkin Network USB Helper;c:\program files\belkin\belkin usb print and storage center\Bkapcs.exe [2010-9-19 49152]
S4 NSUService;NSUService;c:\program files\sony\network utility\NSUService.exe [2007-8-27 200704]
S4 VAIOMediaPlatform-UCLS-AppServer;VAIO Media Content Collection;c:\program files\sony\vaio media integrated server\UCLS.exe [2007-8-27 745472]
S4 VAIOMediaPlatform-UCLS-HTTP;VAIO Media Content Collection (HTTP);c:\program files\sony\vaio media integrated server\platform\SV_Httpd.exe [2007-8-27 397312]
S4 VAIOMediaPlatform-UCLS-UPnP;VAIO Media Content Collection (UPnP);c:\program files\sony\vaio media integrated server\platform\UPnPFramework.exe [2007-8-27 1089536]
S4 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\sony\vcm intelligent analyzing manager\VcmIAlzMgr.exe [2007-8-26 292152]
S4 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\common files\sony shared\vcmxml\VcmXmlIfHelper.exe [2007-8-26 79736]
S4 Viewpoint Manager Service;Viewpoint Manager Service;"c:\program files\viewpoint\common\viewpointservice.exe" –> c:\program files\viewpoint\common\ViewpointService.exe [?]

=============== Created Last 30 ================

2011-01-31 19:53:50 ——– d—–w- c:\users\jorgea~1\appdata\local\temp
2011-01-31 19:50:34 ——– dcsh–w- C:\$RECYCLE.BIN
2011-01-31 18:38:37 472808 —-a-w- c:\windows\system32\deployJava1.dll
2011-01-31 18:38:37 472808 —-a-w- c:\program files\mozilla firefox\plugins\npdeployJava1.dll
2011-01-31 18:30:17 0 —-a-w- c:\windows\system32\RENF448.tmp
2011-01-31 18:30:17 0 —-a-w- c:\windows\system32\RENF438.tmp
2011-01-31 18:30:17 0 —-a-w- c:\windows\system32\RENF417.tmp
2011-01-30 18:46:22 98816 —-a-w- c:\windows\sed.exe
2011-01-30 18:46:22 89088 —-a-w- c:\windows\MBR.exe
2011-01-30 18:46:22 256512 —-a-w- c:\windows\PEV.exe
2011-01-30 18:46:22 161792 —-a-w- c:\windows\SWREG.exe
2011-01-26 06:56:22 388096 —-a-r- c:\users\jorgea~1\appdata\roaming\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe
2011-01-26 01:43:08 5890896 —-a-w- c:\progra~2\microsoft\windows defender\definition updates\{74e5ac80-2dd7-4563-a567-c2311844ef02}\mpengine.dll
2011-01-12 05:39:26 708608 —-a-w- c:\program files\common files\system\ado\msado15.dll
2011-01-12 05:39:26 409600 —-a-w- c:\windows\system32\odbc32.dll
2011-01-12 05:39:26 253952 —-a-w- c:\program files\common files\system\ado\msadox.dll
2011-01-12 05:39:25 57344 —-a-w- c:\program files\common files\system\msadc\msadcs.dll
2011-01-12 05:39:25 241664 —-a-w- c:\program files\common files\system\ado\msadomd.dll
2011-01-12 05:39:25 180224 —-a-w- c:\program files\common files\system\msadc\msadco.dll
2011-01-12 05:39:22 1169408 —-a-w- c:\windows\system32\sdclt.exe
2011-01-08 05:46:35 ——– d—–r- c:\program files\Skype
2011-01-04 02:40:33 ——– d—–w- c:\users\jorgea~1\appdata\roaming\Flickr
2011-01-04 02:40:33 ——– d—–w- c:\users\jorgea~1\appdata\local\Flickr
2011-01-04 00:30:30 ——– d—–w- c:\program files\Flickr Uploadr

==================== Find3M ====================

2011-01-26 05:11:50 1063724848 —-a-w- c:\windows\DUMP494e.tmp
2011-01-23 00:20:57 1063721248 —-a-w- c:\windows\DUMP3b89.tmp
2011-01-07 02:31:56 1063721248 —-a-w- c:\windows\DUMP52b1.tmp
2010-12-19 00:49:44 1063724848 —-a-w- c:\windows\DUMP3d7c.tmp
2010-12-18 05:07:42 1063721248 —-a-w- c:\windows\DUMP3b3b.tmp
2010-12-16 16:58:47 1063721248 —-a-w- c:\windows\DUMP338d.tmp
2010-12-11 18:15:28 1061636384 —-a-w- c:\windows\DUMP37f0.tmp
2010-12-11 17:54:48 1063721248 —-a-w- c:\windows\DUMP3523.tmp
2010-11-29 18:22:00 1063721248 —-a-w- c:\windows\DUMP4864.tmp
2010-11-29 18:06:46 1063721248 —-a-w- c:\windows\DUMP3938.tmp
2010-11-13 06:12:24 1063724848 —-a-w- c:\windows\DUMP4884.tmp
2010-11-10 18:28:37 1063721248 —-a-w- c:\windows\DUMP3a12.tmp
2010-11-06 11:10:29 345088 —-a-w- c:\windows\system32\wmicmiplugin.dll
2010-11-06 11:10:13 357376 —-a-w- c:\windows\system32\taskschd.dll
2010-11-06 11:10:13 270336 —-a-w- c:\windows\system32\taskcomp.dll
2010-11-06 11:09:57 603648 —-a-w- c:\windows\system32\schedsvc.dll
2010-11-05 00:53:47 171520 —-a-w- c:\windows\system32\taskeng.exe
2010-11-04 21:55:01 1061663040 —-a-w- c:\windows\DUMP4c5a.tmp

============= FINISH: 16:08:06.59 ===============




UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-12-12.01)

Microsoft® Windows Vista™ Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 12/25/2007 2:07:10 PM
System Uptime: 1/31/2011 3:56:36 PM (1 hours ago)

Motherboard: Sony Corporation | | VAIO
Processor: Intel® Pentium® Dual CPU T2310 @ 1.46GHz | N/A | 800/133mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 104 GiB total, 16.103 GiB free.
D: is Removable
E: is Removable
F: is CDROM ()

==== Disabled Device Manager Items =============

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Microsoft ISATAP Adapter
Device ID: ROOT\*ISATAP\0017
Manufacturer: Microsoft
Name: Microsoft ISATAP Adapter #8
PNP Device ID: ROOT\*ISATAP\0017
Service: tunnel

Class GUID:
Description:
Device ID: ROOT\LEGACY_BEEP\XX_MSIVXSERV.SYS_XX
Manufacturer:
Name:
PNP Device ID: ROOT\LEGACY_BEEP\XX_MSIVXSERV.SYS_XX
Service: MSIVXserv.sys

==== System Restore Points ===================


==== Installed Programs ======================


Activation Assistant for the 2007 Microsoft Office suites
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.4.1
Adobe Shockwave Player 11.5
Akamai NetSession Interface
Alps Pointing-device for VAIO
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ArcSoft TotalMedia Backup
AutoUpdate
Belkin Daily DJ
Belkin Music Labeler
Belkin Setup and Router Monitor
Belkin USB Print and Storage Center
Bibbia italiana
Bonjour
CCleaner
Click to DVD 2.0.05 Menu Data
Click to DVD 2.6.00
Compatibility Pack for the 2007 Office system
Debugging Tools for Windows (x86)
DivX Codec
DivX Player
DivX Plus Web Player
DivX Version Checker
Flickr Uploadr 3.2.1
GDR 4053 for SQL Server Database Services 2005 ENU (KB970892)
GDR 4053 for SQL Server Tools and Workstation Components 2005 ENU (KB970892)
Google Talk (remove only)
Google Update Helper
HDAUDIO SoftV92 Data Fax Modem with SmartCP
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Intel® Graphics Media Accelerator Driver
iTunes
Java Auto Updater
Java™ 6 Update 23
Java™ 6 Update 3
Java™ 6 Update 5
Java™ 6 Update 7
Java™ SE Runtime Environment 6
Junk Mail filter update
LocationFree Player
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft .NET Framework 4 Multi-Targeting Pack
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Help Viewer 1.0
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office Live Add-in 1.4
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)
Microsoft SQL Server 2005 Tools Express Edition
Microsoft SQL Server 2008 R2 Management Objects
Microsoft SQL Server Compact 3.5 SP2 ENU
Microsoft SQL Server Native Client
Microsoft SQL Server Setup Support Files (English)
Microsoft SQL Server System CLR Types
Microsoft SQL Server VSS Writer
Microsoft Text-to-Speech Engine 4.0 (English)
Microsoft VC9 runtime libraries
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
Microsoft_VC80_ATL_x86
Microsoft_VC80_CRT_x86
Microsoft_VC80_MFC_x86
Microsoft_VC80_MFCLOC_x86
Microsoft_VC90_ATL_x86
Microsoft_VC90_CRT_x86
Microsoft_VC90_MFC_x86
Mozilla Firefox (3.6.11)
MSVCRT
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB941833)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP2 Parser and SDK
Napster Burn Engine
Nitro PDF Professional
OGA Notifier 2.0.0048.0
OpenMG Limited Patch 4.7-07-15-19-01
OpenMG Secure Module 4.7.00
Panda Antivirus Pro 2010
QuickBooks Product Listing Service
QuickTime
Realtek High Definition Audio Driver
Roxio Easy Media Creator Home
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for 2007 Microsoft Office System (KB2288931)
Security Update for 2007 Microsoft Office System (KB2289158)
Security Update for 2007 Microsoft Office System (KB2344875)
Security Update for 2007 Microsoft Office System (KB2345043)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft Office Access 2007 (KB979440)
Security Update for Microsoft Office Excel 2007 (KB2345035)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office PowerPoint 2007 (KB982158)
Security Update for Microsoft Office PowerPoint Viewer (KB2413381)
Security Update for Microsoft Office Publisher 2007 (KB2284697)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB2344993)
Setting Utility Series
Skype™ 5.1
SonicStage Mastering Studio
SonicStage Mastering Studio Audio Filter
SonicStage Mastering Studio Audio Filter Custom Preset
SonicStage Mastering Studio Plugins
Sony Video Shared Library
SupportSoft Assisted Service
System Requirements Lab for Intel
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office OneNote 2007 (KB980729)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 (KB2412171)
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update for Outlook 2007 Junk Email Filter (KB2483110)
VAIO Azure Float Wallpaper
VAIO Center Access Bar
VAIO Content Folder Setting
VAIO Content Importer VAIO Content Exporter
VAIO Content Importer / VAIO Content Exporter
VAIO Content Metadata Intelligent Analyzing Manager
VAIO Content Metadata Manager Setting
VAIO Content Metadata XML Interface Library
VAIO Control Center
VAIO Entertainment Center
VAIO Entertainment Platform
VAIO Event Service
VAIO Floral Dusk Wallpaper
VAIO Help And Support
VAIO Launcher
VAIO Media
VAIO Media 6.0
VAIO Media AC3 Decoder 1.0
VAIO Media Content Collection 6.0
VAIO Media Integrated Server 6.1
VAIO Media Redistribution 6.0
VAIO Media Registration Tool
VAIO Media Registration Tool 6.0
VAIO Movie Story
VAIO Movie Story Template Data
VAIO MusicBox
VAIO MusicBox Sample Music
VAIO OOBE and Welcome Center
VAIO Original Function Setting
VAIO PC Wireless LAN Wizard
VAIO Power Management
VAIO Productivity Center
VAIO Security Center
VAIO Service Utility
VAIO Smart Network
VAIO Survey
VAIO Teal Whisper Wallpaper
VAIO Update 3
VC80CRTRedist - 8.0.50727.4053
Viewpoint Media Player
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Mail
Windows Live Messenger
Windows Live Movie Maker
Windows Live Photo Gallery
Windows Live Sync
Windows Live Upload Tool
Windows Live Writer
Windows Media Player Firefox Plugin
WinDVD for VAIO

==== End Of File ===========================

The symantic does not appear on my programs to add/remove. It still has its presence on my computer. How can I remove it completely? Here is the ESET result: C:\Qoobox\Quarantine\C\Windows\System32\drivers\MSIVXvymvxvsosuonpwqnqdarcxcnbrjibpur.sys.vir a variant of Win32/Kryptik.AEQ trojan Here is the DDS: DDS (Ver_10-12-12.01) - NTFSx86 Run by [removed] at 20:31:05.70 on Mon 01/31/2011 Internet Explorer: 8.0.6001.18999 BrowserJavaVersion: 1.6.0_23 Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1014.204 [GMT -6:00] AV: Symantec AntiVirus *Disabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C} SP: Symantec AntiVirus *Disabled/Updated* {6C85A515-B91D-4D2B-AF18-40984A4A8493} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} SP: SUPERAntiSpyware *Enabled/Updated* {222A897C-5018-402e-943F-7E7AC8560DA7} AV: Panda Antivirus Pro 2010 *Disabled/Updated* {86971480-9989-6750-B122-681A86518D59} SP: Panda Antivirus Pro 2010 *Disabled/Updated* {3DF6F564-BFB3-68DE-8B92-5368FDD6C7E4} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Panda Personal Firewall 2010 *Disabled* {BEAC95A5-D3E6-6608-9A7D-C12F7882CA22} ============== Running Processes =============== C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k rpcss C:\Windows\system32\svchost.exe -k NetworkService C:\Program Files\Panda Security\Panda Antivirus Pro 2010\PskSvc.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\TPSrv.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2010\WebProxy.exe C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\System32\svchost.exe -k Akamai C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Windows\system32\ASTSRV.EXE C:\Program Files\Bonjour\mDNSResponder.exe C:\Windows\system32\svchost -k Panda c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\PsCtrls.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\PavFnSvr.exe C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\pavsrvx86.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\AVENGINE.EXE C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files\Panda Security\Panda Antivirus Pro 2010\Firewall\PSHOST.EXE C:\Program Files\Panda Security\Panda Antivirus Pro 2010\PsImSvc.exe c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\DRIVERS\xaudio.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Windows\Explorer.EXE C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\ApVxdWin.exe C:\Program Files\Apoint\Apoint.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Windows\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe C:\Windows\system32\wuauclt.exe C:\Program Files\Apoint\ApMsgFwd.exe C:\Program Files\Apoint\Apvfb.exe C:\Program Files\Apoint\Apntex.exe C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Users\Jorge Alejandro\Desktop\Tech files\dds.pif C:\Windows\system32\wbem\wmiprvse.exe ============== Pseudo HJT Report =============== uStart Page = hxxp://www.google.com/ig?hl=en mStart Page = hxxp://www.sony.com/vaiopeople uSearchURL,(Default) = hxxp://www.google.com/keyword/%s BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe mRun: [APVXDWIN] "c:\program files\panda security\panda antivirus pro 2010\APVXDWIN.EXE" /s mRun: [SCANINICIO] "c:\program files\panda security\panda antivirus pro 2010\Inicio.exe" mRun: [RtHDVCpl] RtHDVCpl.exe mRun: [IgfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [Apoint] c:\program files\apoint\Apoint.exe mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe" mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mPolicies-system: EnableLUA = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab DPF: {02CF1781-EA91-4FA5-A200-646E8241987C} - hxxp://esupport.sony.com/VaioInfo.CAB DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} - hxxp://static.ak.facebook.com/fbplugin/win32/axfbootloader.cab DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.1.66.0.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} - hxxp://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUplden-us.cab Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL Notify: igfxcui - igfxdev.dll Notify: VESWinlogon - VESWinlogon.dll ================= FIREFOX =================== FF - ProfilePath - c:\users\jorgea~1\appdata\roaming\mozilla\firefox\profiles\49ypuvj5.default\ FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\microsoft\office live\npOLW.dll FF - plugin: c:\program files\mozilla firefox\plugins\npViewpoint.dll FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} FF - Extension: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Extension: Java Console: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} FF - Extension: Java Console: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} FF - Extension: Java Console: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} FF - Extension: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} FF - Extension: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - c:\users\jorgea~1\appdata\roaming\mozilla\firefox\profiles\49ypuvj5.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF - Extension: Diccionario español Venezuela: [removed] - c:\users\jorgea~1\appdata\roaming\mozilla\firefox\profiles\49ypuvj5.default\extensions\[removed] ============= SERVICES / DRIVERS =============== R0 pavboot;Panda boot driver;c:\windows\system32\drivers\pavboot.sys [2010-6-28 28544] R1 APPFLT;App Filter Plugin;c:\windows\system32\drivers\APPFLT.SYS [2010-6-28 73728] R1 DSAFLT;DSA Filter Plugin;c:\windows\system32\drivers\dsaflt.sys [2010-6-28 52992] R1 FNETMON;NetMon Filter Plugin;c:\windows\system32\drivers\fnetmon.sys [2010-6-28 22072] R1 IDSFLT;Ids Filter Plugin;c:\windows\system32\drivers\idsflt.sys [2010-6-28 193792] R1 NETFLTDI;Panda Net Driver [TDI Layer];c:\windows\system32\drivers\NETFLTDI.SYS [2010-6-28 158848] R1 ShldDrv;Panda File Shield Driver;c:\windows\system32\drivers\ShlDrv51.sys [2010-6-28 41144] R1 WNMFLT;Wifi Monitor Filter Plugin;c:\windows\system32\drivers\wnmflt.sys [2010-6-28 46720] R2 Akamai;Akamai NetSession Interface;c:\windows\system32\svchost.exe -k Akamai [2008-6-12 21504] R2 AmFSM;AmFSM;c:\windows\system32\drivers\amm8660.sys [2010-6-28 49208] R2 Gwmsrv;Panda Goodware Cache Manager;c:\windows\system32\svchost -k panda –> c:\windows\system32\svchost -k Panda [?] R2 Panda Software Controller;Panda Software Controller;c:\program files\panda security\panda antivirus pro 2010\PsCtrlS.exe [2010-6-28 173312] R2 PAVFNSVR;Panda Function Service;c:\program files\panda security\panda antivirus pro 2010\PavFnSvr.exe [2010-6-28 169216] R2 PavProc;Panda Process Protection Driver;c:\windows\system32\drivers\PavProc.sys [2010-6-28 177416] R2 PavPrSrv;Panda Process Protection Service;c:\program files\common files\panda security\pavshld\PavPrSrv.exe [2010-6-28 62768] R2 PAVSRV;Panda On-Access Anti-Malware Service;c:\program files\panda security\panda antivirus pro 2010\pavsrvx86.exe [2010-6-28 291584] R3 NETIMFLT01060034;PANDA NDIS IM Filter Miniport v1.6.0.34;c:\windows\system32\drivers\neti1634.sys [2010-6-28 197888] R3 sxuptp;SXUPTP Driver;c:\windows\system32\drivers\sxuptp.sys [2010-3-10 247320] R3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [2007-8-26 812544] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 gupdate1c9a59268b15470;Google Update Service (gupdate1c9a59268b15470);c:\program files\google\update\GoogleUpdate.exe [2009-3-15 133104] S3 cpudrv;cpudrv;c:\program files\systemrequirementslab\cpudrv.sys [2009-12-18 11336] S3 McComponentHostService;McAfee Security Scan Component Host Service;"c:\program files\mcafee security scan\2.0.181\mcchsvc.exe" –> c:\program files\mcafee security scan\2.0.181\McCHSvc.exe [?] S4 Belkin Local Backup Service;Belkin Local Backup Service;c:\program files\belkin\belkin usb print and storage center\BkBackupScheduler.exe [2010-9-19 152064] S4 Belkin Network USB Helper;Belkin Network USB Helper;c:\program files\belkin\belkin usb print and storage center\Bkapcs.exe [2010-9-19 49152] S4 NSUService;NSUService;c:\program files\sony\network utility\NSUService.exe [2007-8-27 200704] =============== Created Last 30 ================ 2011-01-31 22:20:36 ——– d—–w- c:\program files\ESET 2011-01-31 19:53:50 ——– d—–w- c:\users\jorgea~1\appdata\local\temp 2011-01-31 19:50:34 ——– dcsh–w- C:\$RECYCLE.BIN 2011-01-31 18:38:37 472808 —-a-w- c:\windows\system32\deployJava1.dll 2011-01-31 18:38:37 472808 —-a-w- c:\program files\mozilla firefox\plugins\npdeployJava1.dll 2011-01-31 18:30:17 0 —-a-w- c:\windows\system32\RENF448.tmp 2011-01-31 18:30:17 0 —-a-w- c:\windows\system32\RENF438.tmp 2011-01-31 18:30:17 0 —-a-w- c:\windows\system32\RENF417.tmp 2011-01-30 18:46:22 98816 —-a-w- c:\windows\sed.exe 2011-01-30 18:46:22 89088 —-a-w- c:\windows\MBR.exe 2011-01-30 18:46:22 256512 —-a-w- c:\windows\PEV.exe 2011-01-30 18:46:22 161792 —-a-w- c:\windows\SWREG.exe 2011-01-26 06:56:22 388096 —-a-r- c:\users\jorgea~1\appdata\roaming\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe 2011-01-26 01:43:08 5890896 —-a-w- c:\progra~2\microsoft\windows defender\definition updates\{74e5ac80-2dd7-4563-a567-c2311844ef02}\mpengine.dll 2011-01-12 05:39:26 708608 —-a-w- c:\program files\common files\system\ado\msado15.dll 2011-01-12 05:39:26 409600 —-a-w- c:\windows\system32\odbc32.dll 2011-01-12 05:39:26 253952 —-a-w- c:\program files\common files\system\ado\msadox.dll 2011-01-12 05:39:25 57344 —-a-w- c:\program files\common files\system\msadc\msadcs.dll 2011-01-12 05:39:25 241664 —-a-w- c:\program files\common files\system\ado\msadomd.dll 2011-01-12 05:39:25 180224 —-a-w- c:\program files\common files\system\msadc\msadco.dll 2011-01-12 05:39:22 1169408 —-a-w- c:\windows\system32\sdclt.exe 2011-01-08 05:46:35 ——– d—–r- c:\program files\Skype 2011-01-04 02:40:33 ——– d—–w- c:\users\jorgea~1\appdata\roaming\Flickr 2011-01-04 02:40:33 ——– d—–w- c:\users\jorgea~1\appdata\local\Flickr 2011-01-04 00:30:30 ——– d—–w- c:\program files\Flickr Uploadr ==================== Find3M ==================== 2011-01-26 05:11:50 1063724848 —-a-w- c:\windows\DUMP494e.tmp 2011-01-23 00:20:57 1063721248 —-a-w- c:\windows\DUMP3b89.tmp 2011-01-07 02:31:56 1063721248 —-a-w- c:\windows\DUMP52b1.tmp 2010-12-19 00:49:44 1063724848 —-a-w- c:\windows\DUMP3d7c.tmp 2010-12-18 05:07:42 1063721248 —-a-w- c:\windows\DUMP3b3b.tmp 2010-12-16 16:58:47 1063721248 —-a-w- c:\windows\DUMP338d.tmp 2010-12-11 18:15:28 1061636384 —-a-w- c:\windows\DUMP37f0.tmp 2010-12-11 17:54:48 1063721248 —-a-w- c:\windows\DUMP3523.tmp 2010-11-29 18:22:00 1063721248 —-a-w- c:\windows\DUMP4864.tmp 2010-11-29 18:06:46 1063721248 —-a-w- c:\windows\DUMP3938.tmp 2010-11-13 06:12:24 1063724848 —-a-w- c:\windows\DUMP4884.tmp 2010-11-10 18:28:37 1063721248 —-a-w- c:\windows\DUMP3a12.tmp 2010-11-06 11:10:29 345088 —-a-w- c:\windows\system32\wmicmiplugin.dll 2010-11-06 11:10:13 357376 —-a-w- c:\windows\system32\taskschd.dll 2010-11-06 11:10:13 270336 —-a-w- c:\windows\system32\taskcomp.dll 2010-11-06 11:09:57 603648 —-a-w- c:\windows\system32\schedsvc.dll 2010-11-05 00:53:47 171520 —-a-w- c:\windows\system32\taskeng.exe 2010-11-04 21:55:01 1061663040 —-a-w- c:\windows\DUMP4c5a.tmp ============= FINISH: 20:33:37.52 =============== Attach: UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT DDS (Ver_10-12-12.01) Microsoft® Windows Vista™ Home Premium Boot Device: \Device\HarddiskVolume2 Install Date: 12/25/2007 2:07:10 PM System Uptime: 1/31/2011 3:56:36 PM (5 hours ago) Motherboard: Sony Corporation | | VAIO Processor: Intel® Pentium® Dual CPU T2310 @ 1.46GHz | N/A | 800/133mhz ==== Disk Partitions ========================= C: is FIXED (NTFS) - 104 GiB total, 13.93 GiB free. D: is Removable E: is Removable F: is CDROM () ==== Disabled Device Manager Items ============= Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Microsoft ISATAP Adapter Device ID: ROOT\*ISATAP\0017 Manufacturer: Microsoft Name: Microsoft ISATAP Adapter #8 PNP Device ID: ROOT\*ISATAP\0017 Service: tunnel Class GUID: Description: Device ID: ROOT\LEGACY_BEEP\XX_MSIVXSERV.SYS_XX Manufacturer: Name: PNP Device ID: ROOT\LEGACY_BEEP\XX_MSIVXSERV.SYS_XX Service: MSIVXserv.sys ==== System Restore Points =================== RP1574: 1/30/2011 4:00:21 PM - Scheduled Checkpoint RP1575: 1/31/2011 3:34:34 AM - Removed Java™ 6 Update 3 RP1576: 1/31/2011 3:40:00 AM - Removed Java™ 6 Update 3 RP1577: 1/31/2011 3:42:05 AM - Removed HiJackThis RP1578: 1/31/2011 3:43:10 AM - Removed Java™ 6 Update 7 RP1580: 1/31/2011 12:15:57 PM - Removed Java™ SE Runtime Environment 6 RP1581: 1/31/2011 12:28:28 PM - Removed Java™ 6 Update 17 RP1582: 1/31/2011 12:32:38 PM - Removed Java™ 6 Update 7 RP1583: 1/31/2011 12:37:19 PM - Installed Java™ 6 Update 23 ==== Installed Programs ====================== Activation Assistant for the 2007 Microsoft Office suites Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Reader 9.4.1 Adobe Shockwave Player 11.5 Akamai NetSession Interface Alps Pointing-device for VAIO Apple Application Support Apple Mobile Device Support Apple Software Update ArcSoft TotalMedia Backup AutoUpdate Belkin Daily DJ Belkin Music Labeler Belkin Setup and Router Monitor Belkin USB Print and Storage Center Bibbia italiana Bonjour CCleaner Click to DVD 2.0.05 Menu Data Click to DVD 2.6.00 Compatibility Pack for the 2007 Office system Debugging Tools for Windows (x86) DivX Codec DivX Player DivX Plus Web Player DivX Version Checker Flickr Uploadr 3.2.1 GDR 4053 for SQL Server Database Services 2005 ENU (KB970892) GDR 4053 for SQL Server Tools and Workstation Components 2005 ENU (KB970892) Google Talk (remove only) Google Update Helper HDAUDIO SoftV92 Data Fax Modem with SmartCP HijackThis 2.0.2 Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) Intel® Graphics Media Accelerator Driver iTunes Java Auto Updater Java™ 6 Update 23 Java™ 6 Update 3 Java™ 6 Update 5 Java™ 6 Update 7 Java™ SE Runtime Environment 6 Junk Mail filter update LocationFree Player Malwarebytes' Anti-Malware Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Security Update (KB2416447) Microsoft .NET Framework 1.1 Security Update (KB979906) Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Extended Microsoft .NET Framework 4 Multi-Targeting Pack Microsoft Application Error Reporting Microsoft Choice Guard Microsoft Help Viewer 1.0 Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office Access MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office Groove MUI (English) 2007 Microsoft Office Groove Setup Metadata MUI (English) 2007 Microsoft Office InfoPath MUI (English) 2007 Microsoft Office Live Add-in 1.4 Microsoft Office OneNote MUI (English) 2007 Microsoft Office Outlook MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office PowerPoint Viewer 2007 (English) Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Publisher MUI (English) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Silverlight Microsoft SQL Server 2005 Microsoft SQL Server 2005 Express Edition (SQLEXPRESS) Microsoft SQL Server 2005 Tools Express Edition Microsoft SQL Server 2008 R2 Management Objects Microsoft SQL Server Compact 3.5 SP2 ENU Microsoft SQL Server Native Client Microsoft SQL Server Setup Support Files (English) Microsoft SQL Server System CLR Types Microsoft SQL Server VSS Writer Microsoft Text-to-Speech Engine 4.0 (English) Microsoft VC9 runtime libraries Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Works Microsoft_VC80_ATL_x86 Microsoft_VC80_CRT_x86 Microsoft_VC80_MFC_x86 Microsoft_VC80_MFCLOC_x86 Microsoft_VC90_ATL_x86 Microsoft_VC90_CRT_x86 Microsoft_VC90_MFC_x86 Mozilla Firefox (3.6.11) MSVCRT MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB941833) MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) MSXML 4.0 SP2 Parser and SDK Napster Burn Engine Nitro PDF Professional OGA Notifier 2.0.0048.0 OpenMG Limited Patch 4.7-07-15-19-01 OpenMG Secure Module 4.7.00 Panda Antivirus Pro 2010 QuickBooks Product Listing Service QuickTime Realtek High Definition Audio Driver Roxio Easy Media Creator Home Security Update for 2007 Microsoft Office System (KB2288621) Security Update for 2007 Microsoft Office System (KB2288931) Security Update for 2007 Microsoft Office System (KB2289158) Security Update for 2007 Microsoft Office System (KB2344875) Security Update for 2007 Microsoft Office System (KB2345043) Security Update for 2007 Microsoft Office System (KB969559) Security Update for 2007 Microsoft Office System (KB976321) Security Update for CAPICOM (KB931906) Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) Security Update for Microsoft .NET Framework 4 Extended (KB2416472) Security Update for Microsoft Office Access 2007 (KB979440) Security Update for Microsoft Office Excel 2007 (KB2345035) Security Update for Microsoft Office InfoPath 2007 (KB979441) Security Update for Microsoft Office PowerPoint 2007 (KB982158) Security Update for Microsoft Office PowerPoint Viewer (KB2413381) Security Update for Microsoft Office Publisher 2007 (KB2284697) Security Update for Microsoft Office system 2007 (972581) Security Update for Microsoft Office system 2007 (KB974234) Security Update for Microsoft Office Visio Viewer 2007 (KB973709) Security Update for Microsoft Office Word 2007 (KB2344993) Setting Utility Series Skype™ 5.1 SonicStage Mastering Studio SonicStage Mastering Studio Audio Filter SonicStage Mastering Studio Audio Filter Custom Preset SonicStage Mastering Studio Plugins Sony Video Shared Library SupportSoft Assisted Service System Requirements Lab for Intel Update for 2007 Microsoft Office System (KB967642) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Microsoft Office 2007 Help for Common Features (KB963673) Update for Microsoft Office Access 2007 Help (KB963663) Update for Microsoft Office Excel 2007 Help (KB963678) Update for Microsoft Office Infopath 2007 Help (KB963662) Update for Microsoft Office OneNote 2007 (KB980729) Update for Microsoft Office OneNote 2007 Help (KB963670) Update for Microsoft Office Outlook 2007 (KB2412171) Update for Microsoft Office Outlook 2007 Help (KB963677) Update for Microsoft Office Powerpoint 2007 Help (KB963669) Update for Microsoft Office Publisher 2007 Help (KB963667) Update for Microsoft Office Script Editor Help (KB963671) Update for Microsoft Office Word 2007 Help (KB963665) Update for Outlook 2007 Junk Email Filter (KB2483110) VAIO Azure Float Wallpaper VAIO Center Access Bar VAIO Content Folder Setting VAIO Content Importer VAIO Content Exporter VAIO Content Importer / VAIO Content Exporter VAIO Content Metadata Intelligent Analyzing Manager VAIO Content Metadata Manager Setting VAIO Content Metadata XML Interface Library VAIO Control Center VAIO Entertainment Center VAIO Entertainment Platform VAIO Event Service VAIO Floral Dusk Wallpaper VAIO Help And Support VAIO Launcher VAIO Media VAIO Media 6.0 VAIO Media AC3 Decoder 1.0 VAIO Media Content Collection 6.0 VAIO Media Integrated Server 6.1 VAIO Media Redistribution 6.0 VAIO Media Registration Tool VAIO Media Registration Tool 6.0 VAIO Movie Story VAIO Movie Story Template Data VAIO MusicBox VAIO MusicBox Sample Music VAIO OOBE and Welcome Center VAIO Original Function Setting VAIO PC Wireless LAN Wizard VAIO Power Management VAIO Productivity Center VAIO Security Center VAIO Service Utility VAIO Smart Network VAIO Survey VAIO Teal Whisper Wallpaper VAIO Update 3 VC80CRTRedist - 8.0.50727.4053 Viewpoint Media Player Windows Live Call Windows Live Communications Platform Windows Live Essentials Windows Live ID Sign-in Assistant Windows Live Mail Windows Live Messenger Windows Live Movie Maker Windows Live Photo Gallery Windows Live Sync Windows Live Upload Tool Windows Live Writer Windows Media Player Firefox Plugin WinDVD for VAIO ==== End Of File ===========================

I ran the Norton Removal tool. I do not know if it took everything out. Here is the DDS log: DDS (Ver_10-12-12.01) - NTFSx86 Run by [removed] at 15:43:46.42 on Tue 02/01/2011 Internet Explorer: 8.0.6001.18999 BrowserJavaVersion: 1.6.0_23 Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1014.132 [GMT -6:00] AV: Symantec AntiVirus *Disabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C} SP: Symantec AntiVirus *Disabled/Updated* {6C85A515-B91D-4D2B-AF18-40984A4A8493} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} SP: SUPERAntiSpyware *Enabled/Updated* {222A897C-5018-402e-943F-7E7AC8560DA7} AV: Panda Antivirus Pro 2010 *Enabled/Updated* {86971480-9989-6750-B122-681A86518D59} SP: Panda Antivirus Pro 2010 *Enabled/Updated* {3DF6F564-BFB3-68DE-8B92-5368FDD6C7E4} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Panda Personal Firewall 2010 *Enabled* {BEAC95A5-D3E6-6608-9A7D-C12F7882CA22} ============== Running Processes =============== C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k rpcss C:\Windows\system32\svchost.exe -k NetworkService C:\Program Files\Panda Security\Panda Antivirus Pro 2010\PskSvc.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\TPSrv.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2010\WebProxy.exe C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\System32\svchost.exe -k Akamai C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Windows\system32\ASTSRV.EXE C:\Program Files\Bonjour\mDNSResponder.exe C:\Windows\system32\svchost -k Panda c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\PsCtrls.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\PavFnSvr.exe C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\pavsrvx86.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files\Panda Security\Panda Antivirus Pro 2010\Firewall\PSHOST.EXE C:\Program Files\Panda Security\Panda Antivirus Pro 2010\PsImSvc.exe c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\DRIVERS\xaudio.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\ApVxdWin.exe C:\Program Files\Apoint\Apoint.exe C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Windows\ehome\ehtray.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Apoint\ApMsgFwd.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files\Apoint\Apvfb.exe C:\Program Files\Apoint\Apntex.exe C:\Users\Jorge Alejandro\Desktop\Tech files\dds.pif C:\Windows\system32\wuauclt.exe C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe C:\Windows\servicing\TrustedInstaller.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\AVENGINE.EXE C:\Windows\system32\wbem\wmiprvse.exe ============== Pseudo HJT Report =============== uStart Page = hxxp://www.google.com/ig?hl=en mStart Page = hxxp://www.sony.com/vaiopeople uSearchURL,(Default) = hxxp://www.google.com/keyword/%s BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe mRun: [APVXDWIN] "c:\program files\panda security\panda antivirus pro 2010\APVXDWIN.EXE" /s mRun: [SCANINICIO] "c:\program files\panda security\panda antivirus pro 2010\Inicio.exe" mRun: [RtHDVCpl] RtHDVCpl.exe mRun: [IgfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [Apoint] c:\program files\apoint\Apoint.exe mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe" mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mPolicies-system: EnableLUA = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab DPF: {02CF1781-EA91-4FA5-A200-646E8241987C} - hxxp://esupport.sony.com/VaioInfo.CAB DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} - hxxp://static.ak.facebook.com/fbplugin/win32/axfbootloader.cab DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.1.66.0.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} - hxxp://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUplden-us.cab Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL Notify: igfxcui - igfxdev.dll Notify: VESWinlogon - VESWinlogon.dll ================= FIREFOX =================== FF - ProfilePath - c:\users\jorgea~1\appdata\roaming\mozilla\firefox\profiles\49ypuvj5.default\ FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\microsoft\office live\npOLW.dll FF - plugin: c:\program files\mozilla firefox\plugins\npViewpoint.dll FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} FF - Extension: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Extension: Java Console: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} FF - Extension: Java Console: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} FF - Extension: Java Console: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} FF - Extension: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} FF - Extension: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - c:\users\jorgea~1\appdata\roaming\mozilla\firefox\profiles\49ypuvj5.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF - Extension: Diccionario español Venezuela: [removed] - c:\users\jorgea~1\appdata\roaming\mozilla\firefox\profiles\49ypuvj5.default\extensions\[removed] ============= SERVICES / DRIVERS =============== =============== File Associations =============== JSEFile=c:\progra~1\pandas~1\pandaa~1\PAVSCRIP.EXE "%1" %* VBEFile=c:\progra~1\pandas~1\pandaa~1\PAVSCRIP.EXE "%1" %* VBSFile=c:\progra~1\pandas~1\pandaa~1\PAVSCRIP.EXE "%1" %* =============== Created Last 30 ================ 2011-01-31 19:53:50 ——– d—–w- c:\users\jorgea~1\appdata\local\temp 2011-01-31 19:50:34 ——– dcsh–w- C:\$RECYCLE.BIN 2011-01-31 18:38:37 472808 —-a-w- c:\windows\system32\deployJava1.dll 2011-01-31 18:38:37 472808 —-a-w- c:\program files\mozilla firefox\plugins\npdeployJava1.dll 2011-01-31 18:30:17 0 —-a-w- c:\windows\system32\RENF448.tmp 2011-01-31 18:30:17 0 —-a-w- c:\windows\system32\RENF438.tmp 2011-01-31 18:30:17 0 —-a-w- c:\windows\system32\RENF417.tmp 2011-01-30 18:46:22 98816 —-a-w- c:\windows\sed.exe 2011-01-30 18:46:22 89088 —-a-w- c:\windows\MBR.exe 2011-01-30 18:46:22 256512 —-a-w- c:\windows\PEV.exe 2011-01-30 18:46:22 161792 —-a-w- c:\windows\SWREG.exe 2011-01-26 06:56:22 388096 —-a-r- c:\users\jorgea~1\appdata\roaming\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe 2011-01-26 01:43:08 5890896 —-a-w- c:\progra~2\microsoft\windows defender\definition updates\{74e5ac80-2dd7-4563-a567-c2311844ef02}\mpengine.dll 2011-01-12 05:39:26 708608 —-a-w- c:\program files\common files\system\ado\msado15.dll 2011-01-12 05:39:26 409600 —-a-w- c:\windows\system32\odbc32.dll 2011-01-12 05:39:26 253952 —-a-w- c:\program files\common files\system\ado\msadox.dll 2011-01-12 05:39:25 57344 —-a-w- c:\program files\common files\system\msadc\msadcs.dll 2011-01-12 05:39:25 241664 —-a-w- c:\program files\common files\system\ado\msadomd.dll 2011-01-12 05:39:25 180224 —-a-w- c:\program files\common files\system\msadc\msadco.dll 2011-01-12 05:39:22 1169408 —-a-w- c:\windows\system32\sdclt.exe 2011-01-08 05:46:35 ——– d—–r- c:\program files\Skype 2011-01-04 02:40:33 ——– d—–w- c:\users\jorgea~1\appdata\roaming\Flickr 2011-01-04 02:40:33 ——– d—–w- c:\users\jorgea~1\appdata\local\Flickr 2011-01-04 00:30:30 ——– d—–w- c:\program files\Flickr Uploadr ==================== Find3M ==================== 2011-01-26 05:11:50 1063724848 —-a-w- c:\windows\DUMP494e.tmp 2011-01-23 00:20:57 1063721248 —-a-w- c:\windows\DUMP3b89.tmp 2011-01-07 02:31:56 1063721248 —-a-w- c:\windows\DUMP52b1.tmp 2010-12-19 00:49:44 1063724848 —-a-w- c:\windows\DUMP3d7c.tmp 2010-12-18 05:07:42 1063721248 —-a-w- c:\windows\DUMP3b3b.tmp 2010-12-16 16:58:47 1063721248 —-a-w- c:\windows\DUMP338d.tmp 2010-12-11 18:15:28 1061636384 —-a-w- c:\windows\DUMP37f0.tmp 2010-12-11 17:54:48 1063721248 —-a-w- c:\windows\DUMP3523.tmp 2010-11-29 18:22:00 1063721248 —-a-w- c:\windows\DUMP4864.tmp 2010-11-29 18:06:46 1063721248 —-a-w- c:\windows\DUMP3938.tmp 2010-11-13 06:12:24 1063724848 —-a-w- c:\windows\DUMP4884.tmp 2010-11-10 18:28:37 1063721248 —-a-w- c:\windows\DUMP3a12.tmp 2010-11-06 11:10:29 345088 —-a-w- c:\windows\system32\wmicmiplugin.dll 2010-11-06 11:10:13 357376 —-a-w- c:\windows\system32\taskschd.dll 2010-11-06 11:10:13 270336 —-a-w- c:\windows\system32\taskcomp.dll 2010-11-06 11:09:57 603648 —-a-w- c:\windows\system32\schedsvc.dll 2010-11-05 00:53:47 171520 —-a-w- c:\windows\system32\taskeng.exe 2010-11-04 21:55:01 1061663040 —-a-w- c:\windows\DUMP4c5a.tmp ============= FINISH: 15:53:47.50 ===============

Hi,

Here's the ComboFix log:

ComboFix 11-01-28.03 - Jorge Alejandro 02/05/2011 15:44:37.3.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1014.262 [GMT -6:00]
Running from: c:\users\[removed]\Desktop\koshe.exe
Command switches used :: c:\users\Jorge Alejandro\Desktop\CFScript.txt
AV: Panda Antivirus Pro 2010 *Disabled/Updated* {86971480-9989-6750-B122-681A86518D59}
FW: Panda Personal Firewall 2010 *Disabled* {BEAC95A5-D3E6-6608-9A7D-C12F7882CA22}
SP: Panda Antivirus Pro 2010 *Disabled/Updated* {3DF6F564-BFB3-68DE-8B92-5368FDD6C7E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
- REDUCED FUNCTIONALITY MODE -
.

((((((((((((((((((((((((( Files Created from 2011-01-05 to 2011-02-05 )))))))))))))))))))))))))))))))
.

2011-02-05 21:48 . 2011-02-05 21:48 ——– d—–w- c:\users\Jorge Alejandro\AppData\Local\temp
2011-02-05 21:48 . 2011-02-05 21:48 ——– d—–w- c:\users\Guest\AppData\Local\temp
2011-02-05 21:48 . 2011-02-05 21:48 ——– d—–w- c:\users\Default\AppData\Local\temp
2011-02-05 03:25 . 2011-02-05 03:25 ——– d—–w- c:\program files\iPod
2011-02-05 03:24 . 2011-02-05 03:28 ——– d—–w- c:\program files\iTunes
2011-02-04 03:45 . 2011-02-04 03:47 ——– dc—-w- C:\koshe
2011-02-02 04:37 . 2006-11-29 19:06 3426072 —-a-w- c:\windows\system32\d3dx9_32.dll
2011-02-02 04:28 . 2011-02-02 04:29 83249512 —-a-w- c:\program files\Common Files\Windows Live\.cache\wlcDB0C.tmp
2011-02-01 23:48 . 2011-02-01 23:48 ——– d—–w- c:\users\Jorge Alejandro\AppData\Local\Opera
2011-02-01 23:48 . 2011-02-02 23:43 ——– d—–w- c:\program files\Opera
2011-01-31 18:38 . 2011-01-31 18:38 472808 —-a-w- c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
2011-01-31 18:38 . 2011-01-31 18:37 472808 —-a-w- c:\windows\system32\deployJava1.dll
2011-01-31 18:30 . 2011-01-31 18:30 0 —-a-w- c:\windows\system32\RENF448.tmp
2011-01-31 18:30 . 2011-01-31 18:30 0 —-a-w- c:\windows\system32\RENF438.tmp
2011-01-31 18:30 . 2011-01-31 18:30 0 —-a-w- c:\windows\system32\RENF417.tmp
2011-01-26 06:56 . 2011-01-26 06:56 388096 —-a-r- c:\users\Jorge Alejandro\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-01-26 01:43 . 2011-01-13 09:41 5890896 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{74E5AC80-2DD7-4563-A567-C2311844EF02}\mpengine.dll
2011-01-12 05:39 . 2010-12-28 14:57 409600 —-a-w- c:\windows\system32\odbc32.dll
2011-01-12 05:39 . 2010-12-28 14:56 708608 —-a-w- c:\program files\Common Files\System\ado\msado15.dll
2011-01-12 05:39 . 2010-12-28 14:56 253952 —-a-w- c:\program files\Common Files\System\ado\msadox.dll
2011-01-12 05:39 . 2010-12-28 14:56 57344 —-a-w- c:\program files\Common Files\System\msadc\msadcs.dll
2011-01-12 05:39 . 2010-12-28 14:56 241664 —-a-w- c:\program files\Common Files\System\ado\msadomd.dll
2011-01-12 05:39 . 2010-12-28 14:56 180224 —-a-w- c:\program files\Common Files\System\msadc\msadco.dll
2011-01-12 05:39 . 2010-12-14 15:49 1169408 —-a-w- c:\windows\system32\sdclt.exe
2011-01-08 05:55 . 2011-01-10 22:01 ——– d—–w- c:\users\Jorge Alejandro\AppData\Roaming\skypePM
2011-01-08 05:46 . 2011-01-08 05:46 ——– d—–w- c:\program files\Common Files\Skype
2011-01-08 05:46 . 2011-01-08 05:46 ——– d—–r- c:\program files\Skype
2011-01-08 05:46 . 2011-02-02 19:35 ——– d—–w- c:\users\Jorge Alejandro\AppData\Roaming\Skype
2011-01-08 05:34 . 2011-01-08 05:46 ——– d—–w- c:\programdata\Skype

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-26 05:11 . 2007-12-25 20:00 1063724848 —-a-w- c:\windows\DUMP494e.tmp
2011-01-23 00:20 . 2007-12-25 20:00 1063721248 —-a-w- c:\windows\DUMP3b89.tmp
2011-01-07 02:31 . 2007-12-25 20:00 1063721248 —-a-w- c:\windows\DUMP52b1.tmp
2010-12-19 00:49 . 2007-12-25 20:00 1063724848 —-a-w- c:\windows\DUMP3d7c.tmp
2010-12-18 05:07 . 2007-12-25 20:00 1063721248 —-a-w- c:\windows\DUMP3b3b.tmp
2010-12-16 16:58 . 2007-12-25 20:00 1063721248 —-a-w- c:\windows\DUMP338d.tmp
2010-12-11 18:15 . 2007-12-25 20:00 1061636384 —-a-w- c:\windows\DUMP37f0.tmp
2010-12-11 17:54 . 2007-12-25 20:00 1063721248 —-a-w- c:\windows\DUMP3523.tmp
2010-11-29 23:38 . 2010-11-29 23:38 94208 —-a-w- c:\windows\system32\QuickTimeVR.qtx
2010-11-29 23:38 . 2010-11-29 23:38 69632 —-a-w- c:\windows\system32\QuickTime.qts
2010-11-29 18:22 . 2007-12-25 20:00 1063721248 —-a-w- c:\windows\DUMP4864.tmp
2010-11-29 18:06 . 2007-12-25 20:00 1063721248 —-a-w- c:\windows\DUMP3938.tmp
2010-11-25 06:57 . 2009-03-30 22:30 564632 —-a-w- c:\programdata\Microsoft\IdentityCRL\production\wlidui.dll
2010-11-25 06:57 . 2009-03-30 22:20 17816 —-a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2010-11-13 06:12 . 2007-12-25 20:00 1063724848 —-a-w- c:\windows\DUMP4884.tmp
2010-11-10 18:28 . 2007-12-25 20:00 1063721248 —-a-w- c:\windows\DUMP3a12.tmp
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"Google Update"="c:\users\Jorge Alejandro\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-10-14 136176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"APVXDWIN"="c:\program files\Panda Security\Panda Antivirus Pro 2010\APVXDWIN.EXE" [2009-06-05 574720]
"SCANINICIO"="c:\program files\Panda Security\Panda Antivirus Pro 2010\Inicio.exe" [2009-04-21 56064]
"RtHDVCpl"="RtHDVCpl.exe" [2007-06-25 4489216]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-06-29 137752]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-06-29 154136]
"Apoint"="c:\program files\Apoint\Apoint.exe" [2007-06-08 118784]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-01-25 421160]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2007-07-25 02:26 98304 ——w- c:\windows\System32\VESWinlogon.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PskSvcRetail]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Google Calendar Sync.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Google Calendar Sync.lnk
backup=c:\windows\pss\Google Calendar Sync.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TotalMedia Backup Monitor.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\TotalMedia Backup Monitor.lnk
backup=c:\windows\pss\TotalMedia Backup Monitor.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^Users^Jorge Alejandro^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^LimeWire On Startup.lnk]
path=c:\users\Jorge Alejandro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LimeWire On Startup.lnk
backup=c:\windows\pss\LimeWire On Startup.lnk.Startup
backupExtension=.Startup

[HKLM\~\startupfolder\C:^Users^Jorge Alejandro^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Product Registration.lnk]
path=c:\users\Jorge Alejandro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk
backup=c:\windows\pss\Logitech . Product Registration.lnk.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-21 05:07 932288 —-a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-09-23 10:47 35760 —-a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
2010-03-06 08:44 500208 ——w- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]
2010-03-18 16:19 207360 —-a-w- c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\googletalk]
2007-01-01 21:22 3739648 ——w- c:\program files\Google\Google Talk\googletalk.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InstaLAN]
2010-03-02 21:15 1134488 —-a-w- c:\program files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISBMgr.exe]
2007-06-12 01:27 317560 ——w- c:\program files\Sony\ISB Utility\ISBMgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-01-25 21:08 421160 —-a-w- c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nitro PDF Printer Monitor]
2009-05-27 17:56 209216 —-a-w- c:\program files\Nitro PDF\Professional\NitroPDFPrinterMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSUFloatingUI]
2007-06-29 20:38 258048 ——w- c:\program files\Sony\Network Utility\LANUtil.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
2007-06-29 13:45 133656 ——w- c:\windows\System32\igfxpers.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 23:38 421888 —-a-w- c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2011-01-03 21:44 15028104 —-a-r- c:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
2007-06-25 21:41 1826816 —-a-w- c:\windows\SkyTel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VWLASU]
2007-07-12 18:31 45056 ——w- c:\program files\Sony\VAIO PC Wireless LAN Wizard\AutoLaunchWLASU.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-3147054866-92175380-2420560267-1002]
"EnableNotificationsRef"=dword:00000001

R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate1c9a59268b15470;Google Update Service (gupdate1c9a59268b15470);c:\program files\Google\Update\GoogleUpdate.exe [2009-03-15 133104]
R3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [2009-12-18 11336]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [x]
R3 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys [x]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
R4 Belkin Local Backup Service;Belkin Local Backup Service;c:\program files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe [2010-03-10 152064]
R4 Belkin Network USB Helper;Belkin Network USB Helper;c:\program files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe [2010-03-10 49152]
R4 NSUService;NSUService;c:\program files\Sony\Network Utility\NSUService.exe [2007-06-29 200704]
R4 VAIOMediaPlatform-UCLS-AppServer;VAIO Media Content Collection;c:\program files\Sony\VAIO Media Integrated Server\UCLS.exe [2007-01-10 745472]
R4 VAIOMediaPlatform-UCLS-HTTP;VAIO Media Content Collection (HTTP);c:\program files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe [2007-06-20 397312]
R4 VAIOMediaPlatform-UCLS-UPnP;VAIO Media Content Collection (UPnP);c:\program files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe [2007-06-20 1089536]
R4 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2007-07-13 292152]
R4 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [2007-07-06 79736]
R4 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [x]
S0 pavboot;Panda boot driver;c:\windows\system32\Drivers\pavboot.sys [2008-06-19 28544]
S1 APPFLT;App Filter Plugin;c:\windows\system32\Drivers\APPFLT.SYS [2008-06-25 73728]
S1 DSAFLT;DSA Filter Plugin;c:\windows\system32\Drivers\DSAFLT.SYS [2008-06-18 52992]
S1 FNETMON;NetMon Filter Plugin;c:\windows\system32\Drivers\fnetmon.SYS [2008-03-28 22072]
S1 IDSFLT;Ids Filter Plugin;c:\windows\system32\Drivers\IDSFLT.SYS [2008-06-18 193792]
S1 NETFLTDI;Panda Net Driver [TDI Layer];c:\windows\system32\Drivers\NETFLTDI.SYS [2008-07-11 19:58 158848]
S1 ShldDrv;Panda File Shield Driver;c:\windows\system32\DRIVERS\ShlDrv51.sys [2008-03-04 41144]
S1 WNMFLT;Wifi Monitor Filter Plugin;c:\windows\system32\Drivers\WNMFLT.SYS [2008-06-18 46720]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2008-01-19 21504]
S2 AmFSM;AmFSM;c:\windows\system32\DRIVERS\amm8660.sys [2008-02-14 49208]
S2 Gwmsrv;Panda Goodware Cache Manager;c:\windows\system32\svchost [x]
S2 PavProc;Panda Process Protection Driver;c:\windows\system32\DRIVERS\PavProc.sys [2009-06-02 177416]
S2 PskSvcRetail;Panda PSK service;c:\program files\Panda Security\Panda Antivirus Pro 2010\PskSvc.exe [2008-06-25 28928]
S3 AvFlt;Antivirus Filter Driver;c:\windows\system32\drivers\av5flt.sys [x]
S3 NETIMFLT01060034;PANDA NDIS IM Filter Miniport v1.6.0.34;c:\windows\system32\DRIVERS\neti1634.sys [2008-06-26 197888]
S3 PavSRK.sys;PavSRK.sys;c:\windows\system32\PavSRK.sys [x]
S3 PavTPK.sys;PavTPK.sys;c:\windows\system32\PavTPK.sys [x]
S3 sxuptp;SXUPTP Driver;c:\windows\system32\DRIVERS\sxuptp.sys [2010-03-10 247320]
S3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [2007-06-05 812544]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
panda REG_MULTI_SZ Gwmsrv
Akamai REG_MULTI_SZ Akamai
.
Contents of the 'Scheduled Tasks' folder

2011-02-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-15 17:20]

2011-02-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-15 17:20]

2011-02-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3147054866-92175380-2420560267-1002Core.job
- c:\users\Jorge Alejandro\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-01 13:08]

2011-02-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3147054866-92175380-2420560267-1002UA.job
- c:\users\Jorge Alejandro\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-01 13:08]

2010-08-20 c:\windows\Tasks\RCHubTask 0 0 {2E6E3A14-F6F5-404E-AC33-87F20083074D} 0~0.job
- c:\program files\Common Files\Roxio Shared\9.0\Roxio Central33\Main\Roxio_Central33.exe [2006-12-27 09:43]

2011-02-05 c:\windows\Tasks\User_Feed_Synchronization-{73E1DD56-116B-47F5-8A29-793974F5EF7F}.job
- c:\windows\system32\msfeedssync.exe [2010-12-16 04:25]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.google.com/ig?hl=en
mStart Page = hxxp://www.sony.com/vaiopeople
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
FF - ProfilePath - c:\users\Jorge Alejandro\AppData\Roaming\Mozilla\Firefox\Profiles\49ypuvj5.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: Diccionario español Venezuela: [removed] - %profile%\extensions\[removed]
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-05 15:48
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet114\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet114\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Completion time: 2011-02-05 15:54:33
ComboFix-quarantined-files.txt 2011-02-05 21:54
ComboFix2.txt 2011-01-31 19:53
ComboFix3.txt 2011-01-30 19:27

Pre-Run: 10,959,486,976 bytes free
Post-Run: 10,994,032,640 bytes free

- - End Of File - - F05EE4840BFA3A82968941F062248AB3

DDS (Ver_10-12-12.01) - NTFSx86 Run by [removed] at 15:43:46.42 on Tue 02/01/2011 Internet Explorer: 8.0.6001.18999 BrowserJavaVersion: 1.6.0_23 Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1014.132 [GMT -6:00] AV: Symantec AntiVirus *Disabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C} SP: Symantec AntiVirus *Disabled/Updated* {6C85A515-B91D-4D2B-AF18-40984A4A8493} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} SP: SUPERAntiSpyware *Enabled/Updated* {222A897C-5018-402e-943F-7E7AC8560DA7} AV: Panda Antivirus Pro 2010 *Enabled/Updated* {86971480-9989-6750-B122-681A86518D59} SP: Panda Antivirus Pro 2010 *Enabled/Updated* {3DF6F564-BFB3-68DE-8B92-5368FDD6C7E4} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Panda Personal Firewall 2010 *Enabled* {BEAC95A5-D3E6-6608-9A7D-C12F7882CA22} ============== Running Processes =============== C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k rpcss C:\Windows\system32\svchost.exe -k NetworkService C:\Program Files\Panda Security\Panda Antivirus Pro 2010\PskSvc.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\TPSrv.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2010\WebProxy.exe C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\System32\svchost.exe -k Akamai C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Windows\system32\ASTSRV.EXE C:\Program Files\Bonjour\mDNSResponder.exe C:\Windows\system32\svchost -k Panda c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\PsCtrls.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\PavFnSvr.exe C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\pavsrvx86.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files\Panda Security\Panda Antivirus Pro 2010\Firewall\PSHOST.EXE C:\Program Files\Panda Security\Panda Antivirus Pro 2010\PsImSvc.exe c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\DRIVERS\xaudio.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\ApVxdWin.exe C:\Program Files\Apoint\Apoint.exe C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Windows\ehome\ehtray.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Apoint\ApMsgFwd.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files\Apoint\Apvfb.exe C:\Program Files\Apoint\Apntex.exe C:\Users\Jorge Alejandro\Desktop\Tech files\dds.pif C:\Windows\system32\wuauclt.exe C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe C:\Windows\servicing\TrustedInstaller.exe C:\Program Files\Panda Security\Panda Antivirus Pro 2010\AVENGINE.EXE C:\Windows\system32\wbem\wmiprvse.exe ============== Pseudo HJT Report =============== uStart Page = hxxp://www.google.com/ig?hl=en mStart Page = hxxp://www.sony.com/vaiopeople uSearchURL,(Default) = hxxp://www.google.com/keyword/%s BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe mRun: [APVXDWIN] "c:\program files\panda security\panda antivirus pro 2010\APVXDWIN.EXE" /s mRun: [SCANINICIO] "c:\program files\panda security\panda antivirus pro 2010\Inicio.exe" mRun: [RtHDVCpl] RtHDVCpl.exe mRun: [IgfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [Apoint] c:\program files\apoint\Apoint.exe mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe" mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mPolicies-system: EnableLUA = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab DPF: {02CF1781-EA91-4FA5-A200-646E8241987C} - hxxp://esupport.sony.com/VaioInfo.CAB DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} - hxxp://static.ak.facebook.com/fbplugin/win32/axfbootloader.cab DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.1.66.0.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} - hxxp://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUplden-us.cab Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL Notify: igfxcui - igfxdev.dll Notify: VESWinlogon - VESWinlogon.dll ================= FIREFOX =================== FF - ProfilePath - c:\users\jorgea~1\appdata\roaming\mozilla\firefox\profiles\49ypuvj5.default\ FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\microsoft\office live\npOLW.dll FF - plugin: c:\program files\mozilla firefox\plugins\npViewpoint.dll FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} FF - Extension: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Extension: Java Console: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} FF - Extension: Java Console: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} FF - Extension: Java Console: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} FF - Extension: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} FF - Extension: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - c:\users\jorgea~1\appdata\roaming\mozilla\firefox\profiles\49ypuvj5.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF - Extension: Diccionario español Venezuela: [removed] - c:\users\jorgea~1\appdata\roaming\mozilla\firefox\profiles\49ypuvj5.default\extensions\[removed] ============= SERVICES / DRIVERS =============== =============== File Associations =============== JSEFile=c:\progra~1\pandas~1\pandaa~1\PAVSCRIP.EXE "%1" %* VBEFile=c:\progra~1\pandas~1\pandaa~1\PAVSCRIP.EXE "%1" %* VBSFile=c:\progra~1\pandas~1\pandaa~1\PAVSCRIP.EXE "%1" %* =============== Created Last 30 ================ 2011-01-31 19:53:50 ——– d—–w- c:\users\jorgea~1\appdata\local\temp 2011-01-31 19:50:34 ——– dcsh–w- C:\$RECYCLE.BIN 2011-01-31 18:38:37 472808 —-a-w- c:\windows\system32\deployJava1.dll 2011-01-31 18:38:37 472808 —-a-w- c:\program files\mozilla firefox\plugins\npdeployJava1.dll 2011-01-31 18:30:17 0 —-a-w- c:\windows\system32\RENF448.tmp 2011-01-31 18:30:17 0 —-a-w- c:\windows\system32\RENF438.tmp 2011-01-31 18:30:17 0 —-a-w- c:\windows\system32\RENF417.tmp 2011-01-30 18:46:22 98816 —-a-w- c:\windows\sed.exe 2011-01-30 18:46:22 89088 —-a-w- c:\windows\MBR.exe 2011-01-30 18:46:22 256512 —-a-w- c:\windows\PEV.exe 2011-01-30 18:46:22 161792 —-a-w- c:\windows\SWREG.exe 2011-01-26 06:56:22 388096 —-a-r- c:\users\jorgea~1\appdata\roaming\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe 2011-01-26 01:43:08 5890896 —-a-w- c:\progra~2\microsoft\windows defender\definition updates\{74e5ac80-2dd7-4563-a567-c2311844ef02}\mpengine.dll 2011-01-12 05:39:26 708608 —-a-w- c:\program files\common files\system\ado\msado15.dll 2011-01-12 05:39:26 409600 —-a-w- c:\windows\system32\odbc32.dll 2011-01-12 05:39:26 253952 —-a-w- c:\program files\common files\system\ado\msadox.dll 2011-01-12 05:39:25 57344 —-a-w- c:\program files\common files\system\msadc\msadcs.dll 2011-01-12 05:39:25 241664 —-a-w- c:\program files\common files\system\ado\msadomd.dll 2011-01-12 05:39:25 180224 —-a-w- c:\program files\common files\system\msadc\msadco.dll 2011-01-12 05:39:22 1169408 —-a-w- c:\windows\system32\sdclt.exe 2011-01-08 05:46:35 ——– d—–r- c:\program files\Skype 2011-01-04 02:40:33 ——– d—–w- c:\users\jorgea~1\appdata\roaming\Flickr 2011-01-04 02:40:33 ——– d—–w- c:\users\jorgea~1\appdata\local\Flickr 2011-01-04 00:30:30 ——– d—–w- c:\program files\Flickr Uploadr ==================== Find3M ==================== 2011-01-26 05:11:50 1063724848 —-a-w- c:\windows\DUMP494e.tmp 2011-01-23 00:20:57 1063721248 —-a-w- c:\windows\DUMP3b89.tmp 2011-01-07 02:31:56 1063721248 —-a-w- c:\windows\DUMP52b1.tmp 2010-12-19 00:49:44 1063724848 —-a-w- c:\windows\DUMP3d7c.tmp 2010-12-18 05:07:42 1063721248 —-a-w- c:\windows\DUMP3b3b.tmp 2010-12-16 16:58:47 1063721248 —-a-w- c:\windows\DUMP338d.tmp 2010-12-11 18:15:28 1061636384 —-a-w- c:\windows\DUMP37f0.tmp 2010-12-11 17:54:48 1063721248 —-a-w- c:\windows\DUMP3523.tmp 2010-11-29 18:22:00 1063721248 —-a-w- c:\windows\DUMP4864.tmp 2010-11-29 18:06:46 1063721248 —-a-w- c:\windows\DUMP3938.tmp 2010-11-13 06:12:24 1063724848 —-a-w- c:\windows\DUMP4884.tmp 2010-11-10 18:28:37 1063721248 —-a-w- c:\windows\DUMP3a12.tmp 2010-11-06 11:10:29 345088 —-a-w- c:\windows\system32\wmicmiplugin.dll 2010-11-06 11:10:13 357376 —-a-w- c:\windows\system32\taskschd.dll 2010-11-06 11:10:13 270336 —-a-w- c:\windows\system32\taskcomp.dll 2010-11-06 11:09:57 603648 —-a-w- c:\windows\system32\schedsvc.dll 2010-11-05 00:53:47 171520 —-a-w- c:\windows\system32\taskeng.exe 2010-11-04 21:55:01 1061663040 —-a-w- c:\windows\DUMP4c5a.tmp ============= FINISH: 15:53:47.50 ===============

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT DDS (Ver_10-12-12.01) Microsoft® Windows Vista™ Home Premium Boot Device: \Device\HarddiskVolume2 Install Date: 12/25/2007 2:07:10 PM System Uptime: 2/10/2011 8:06:19 AM (10 hours ago) Motherboard: Sony Corporation | | VAIO Processor: Intel® Pentium® Dual CPU T2310 @ 1.46GHz | N/A | 800/133mhz ==== Disk Partitions ========================= C: is FIXED (NTFS) - 104 GiB total, 10.392 GiB free. D: is Removable E: is Removable F: is CDROM () ==== Disabled Device Manager Items ============= Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Microsoft ISATAP Adapter Device ID: ROOT\*ISATAP\0017 Manufacturer: Microsoft Name: Microsoft ISATAP Adapter #8 PNP Device ID: ROOT\*ISATAP\0017 Service: tunnel Class GUID: Description: Device ID: ROOT\LEGACY_BEEP\XX_MSIVXSERV.SYS_XX Manufacturer: Name: PNP Device ID: ROOT\LEGACY_BEEP\XX_MSIVXSERV.SYS_XX Service: MSIVXserv.sys ==== System Restore Points =================== RP1610: 2/6/2011 6:05:22 PM - Scheduled Checkpoint RP1611: 2/7/2011 6:41:09 PM - Scheduled Checkpoint RP1612: 2/8/2011 7:30:38 PM - Scheduled Checkpoint RP1613: 2/9/2011 12:01:01 AM - Windows Update RP1614: 2/10/2011 4:44:12 AM - Scheduled Checkpoint ==== Installed Programs ====================== Activation Assistant for the 2007 Microsoft Office suites Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Reader 9.4.1 Adobe Shockwave Player 11.5 Akamai NetSession Interface Alps Pointing-device for VAIO Apple Application Support Apple Mobile Device Support Apple Software Update ArcSoft TotalMedia Backup AutoUpdate Belkin Daily DJ Belkin Music Labeler Belkin Setup and Router Monitor Belkin USB Print and Storage Center Bibbia italiana Bonjour CCleaner Click to DVD 2.0.05 Menu Data Click to DVD 2.6.00 Compatibility Pack for the 2007 Office system Debugging Tools for Windows (x86) DivX Codec DivX Player DivX Plus Web Player DivX Version Checker Flickr Uploadr 3.2.1 GDR 4053 for SQL Server Database Services 2005 ENU (KB970892) GDR 4053 for SQL Server Tools and Workstation Components 2005 ENU (KB970892) Google Chrome Google Talk (remove only) Google Update Helper HDAUDIO SoftV92 Data Fax Modem with SmartCP HijackThis 2.0.2 Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) Intel® Graphics Media Accelerator Driver iTunes Java Auto Updater Java™ 6 Update 23 Java™ SE Runtime Environment 6 Junk Mail filter update LocationFree Player Malwarebytes' Anti-Malware Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Security Update (KB2416447) Microsoft .NET Framework 1.1 Security Update (KB979906) Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Extended Microsoft .NET Framework 4 Multi-Targeting Pack Microsoft Application Error Reporting Microsoft Choice Guard Microsoft Help Viewer 1.0 Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office Access MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office Groove MUI (English) 2007 Microsoft Office Groove Setup Metadata MUI (English) 2007 Microsoft Office InfoPath MUI (English) 2007 Microsoft Office Live Add-in 1.4 Microsoft Office OneNote MUI (English) 2007 Microsoft Office Outlook MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office PowerPoint Viewer 2007 (English) Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Publisher MUI (English) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Silverlight Microsoft SQL Server 2005 Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft SQL Server 2005 Express Edition (SQLEXPRESS) Microsoft SQL Server 2005 Tools Express Edition Microsoft SQL Server 2008 R2 Management Objects Microsoft SQL Server Compact 3.5 SP2 ENU Microsoft SQL Server Native Client Microsoft SQL Server Setup Support Files (English) Microsoft SQL Server System CLR Types Microsoft SQL Server VSS Writer Microsoft Text-to-Speech Engine 4.0 (English) Microsoft VC9 runtime libraries Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Works Microsoft_VC80_ATL_x86 Microsoft_VC80_CRT_x86 Microsoft_VC80_MFC_x86 Microsoft_VC80_MFCLOC_x86 Microsoft_VC90_ATL_x86 Microsoft_VC90_CRT_x86 Microsoft_VC90_MFC_x86 Mozilla Firefox (3.6.11) MSVCRT MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB941833) MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) MSXML 4.0 SP2 Parser and SDK Napster Burn Engine Nitro PDF Professional OGA Notifier 2.0.0048.0 OpenMG Limited Patch 4.7-07-15-19-01 OpenMG Secure Module 4.7.00 Panda Antivirus Pro 2010 QuickBooks Product Listing Service QuickTime Realtek High Definition Audio Driver Revo Uninstaller Pro 2.5.1 Roxio Easy Media Creator Home Security Update for 2007 Microsoft Office System (KB2288621) Security Update for 2007 Microsoft Office System (KB2288931) Security Update for 2007 Microsoft Office System (KB2289158) Security Update for 2007 Microsoft Office System (KB2344875) Security Update for 2007 Microsoft Office System (KB2345043) Security Update for 2007 Microsoft Office System (KB969559) Security Update for 2007 Microsoft Office System (KB976321) Security Update for CAPICOM (KB931906) Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) Security Update for Microsoft .NET Framework 4 Extended (KB2416472) Security Update for Microsoft Office Access 2007 (KB979440) Security Update for Microsoft Office Excel 2007 (KB2345035) Security Update for Microsoft Office InfoPath 2007 (KB979441) Security Update for Microsoft Office PowerPoint 2007 (KB982158) Security Update for Microsoft Office PowerPoint Viewer (KB2413381) Security Update for Microsoft Office Publisher 2007 (KB2284697) Security Update for Microsoft Office system 2007 (972581) Security Update for Microsoft Office system 2007 (KB974234) Security Update for Microsoft Office Visio Viewer 2007 (KB973709) Security Update for Microsoft Office Word 2007 (KB2344993) Setting Utility Series Skype™ 5.1 SonicStage Mastering Studio SonicStage Mastering Studio Audio Filter SonicStage Mastering Studio Audio Filter Custom Preset SonicStage Mastering Studio Plugins Sony Video Shared Library SupportSoft Assisted Service System Requirements Lab for Intel Update for 2007 Microsoft Office System (KB967642) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Microsoft Office 2007 Help for Common Features (KB963673) Update for Microsoft Office Access 2007 Help (KB963663) Update for Microsoft Office Excel 2007 Help (KB963678) Update for Microsoft Office Infopath 2007 Help (KB963662) Update for Microsoft Office OneNote 2007 (KB980729) Update for Microsoft Office OneNote 2007 Help (KB963670) Update for Microsoft Office Outlook 2007 (KB2412171) Update for Microsoft Office Outlook 2007 Help (KB963677) Update for Microsoft Office Powerpoint 2007 Help (KB963669) Update for Microsoft Office Publisher 2007 Help (KB963667) Update for Microsoft Office Script Editor Help (KB963671) Update for Microsoft Office Word 2007 Help (KB963665) Update for Outlook 2007 Junk Email Filter (KB2492475) VAIO Azure Float Wallpaper VAIO Center Access Bar VAIO Content Folder Setting VAIO Content Importer VAIO Content Exporter VAIO Content Importer / VAIO Content Exporter VAIO Content Metadata Intelligent Analyzing Manager VAIO Content Metadata Manager Setting VAIO Content Metadata XML Interface Library VAIO Control Center VAIO Entertainment Center VAIO Entertainment Platform VAIO Event Service VAIO Floral Dusk Wallpaper VAIO Help And Support VAIO Launcher VAIO Media VAIO Media 6.0 VAIO Media AC3 Decoder 1.0 VAIO Media Content Collection 6.0 VAIO Media Integrated Server 6.1 VAIO Media Redistribution 6.0 VAIO Media Registration Tool VAIO Media Registration Tool 6.0 VAIO Movie Story VAIO Movie Story Template Data VAIO MusicBox VAIO MusicBox Sample Music VAIO OOBE and Welcome Center VAIO Original Function Setting VAIO PC Wireless LAN Wizard VAIO Power Management VAIO Productivity Center VAIO Security Center VAIO Service Utility VAIO Smart Network VAIO Survey VAIO Teal Whisper Wallpaper VAIO Update 3 VC80CRTRedist - 8.0.50727.4053 Viewpoint Media Player Windows Live Call Windows Live Communications Platform Windows Live Essentials Windows Live ID Sign-in Assistant Windows Live Mail Windows Live Messenger Windows Live Movie Maker Windows Live Photo Gallery Windows Live Sync Windows Live Upload Tool Windows Live Writer Windows Media Player Firefox Plugin WinDVD for VAIO ==== End Of File ===========================