In my taskbar isnotify alert (yellow triangle with explanationmark) and bleu cirkle with white questionmark , they both warn me for spyware and virusses and want me to download software, if i try adware my pc shuts down, spybot shuts down, system restore doesn't work

StartupList report, 25/09/2006, 15:30:07
StartupList version: 1.52.2
Started from : D:\HJT\HijackThis.EXE
Detected: Windows XP SP2 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180)
* Using default options
==================================================

Running processes:

D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Windows Defender\MsMpEng.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
D:\WINDOWS\system32\LEXBCES.EXE
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\system32\LEXPPS.EXE
D:\WINDOWS\system32\ishost.exe
D:\WINDOWS\system32\issearch.exe
D:\WINDOWS\system32\ismini.exe
D:\WINDOWS\htpatch.exe
D:\Program Files\Norton SystemWorks\Norton Antivirus\navapsvc.exe
D:\PROGRA~1\NORTON~2\NORTON~2\NPROTECT.EXE
D:\WINDOWS\system32\nvsvc32.exe
D:\Program Files\Norton SystemWorks\Norton Antivirus\SAVScan.exe
D:\PROGRA~1\NORTON~2\NORTON~2\SPEEDD~1\NOPDB.EXE
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
D:\Program Files\iTunes\iTunesHelper.exe
D:\Program Files\iPod\bin\iPodService.exe
D:\WINDOWS\system32\rundll32.exe
D:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
D:\Program Files\Common Files\Symantec Shared\ccApp.exe
D:\WINDOWS\VM_STI.EXE
D:\Program Files\Norton SystemWorks\Password Manager\AcctMgr.exe
D:\Program Files\Macrogaming\SweetIM\SweetIM.exe
D:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
D:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
D:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\PRINTV~1\pvmodule.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
D:\Program Files\Common Files\Teleca Shared\Generic.exe
D:\Program Files\Sony Ericsson\Mobile\Mobile Phone Monitor\epmworker.exe
D:\WINDOWS\system32\isnotify.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\HJT\HijackThis.exe
D:\Program Files\Messenger\msmsgs.exe

————————————————–

Listing of startup folders:

Shell folders Common Startup:
[D:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten]
Adobe Reader Snelle start.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

————————————————–

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = D:\WINDOWS\SYSTEM32\Userinit.exe,

————————————————–

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

CTFMON.EXE = D:\WINDOWS\system32\ctfmon.exe
STYLEXP = D:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
SSS6_Suite = "D:\Program Files\Steganos Security Suite 6\sss.exe" /booting
SSS6_SAFE = "D:\Program Files\Steganos Security Suite 6\safe.exe" /booting
SSS6_SPM = "D:\Program Files\Steganos Security Suite 6\spm.exe" /booting
BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} = "D:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
Steam = D:\Program Files\Steam\Steam.exe -silent

————————————————–

Load/Run keys from D:\WINDOWS\WIN.INI:

load=*INI section not found*
run=*INI section not found*

Load/Run keys from Registry:

HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\Windows: load=
HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs=NVDESK32.DLL

————————————————–

Shell & screensaver key from D:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=D:\WINDOWS\System32\DEJOER~1.SCR
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*

————————————————–


Enumerating Browser Helper Objects:

(no name) - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - D:\PROGRA~1\SPYBOT~1\SDHelper.dll - {53707962-6F74-2D53-2644-206D7942484F}
(no name) - D:\Program Files\Java\jre1.5.0_08\bin\ssv.dll - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
(no name) - D:\WINDOWS\system32\ixt0.dll - {a43385f0-7113-496d-96d7-b9b550e3fcca}
(no name) - C:\PROGRA~1\PRINTV~1\PRINTH~1.DLL - {D4E0C464-30CE-4075-9A10-71FD106C2847}

————————————————–

Enumerating Task Scheduler jobs:

MP Scheduled Scan.job
Norton AntiVirus - Mijn computer scannen.job
One Button Checkup van Norton SystemWorks.job
Symantec Drmc.job
Symantec NetDetect.job

————————————————–

Enumerating Download Program Files:

[Checkers Class]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\msgrchkr.dll
CODEBASE = http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab

[Microsoft Office Template and Media Control]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\IEAWSDC.DLL
CODEBASE = http://office.microsoft.com/templates/ieawsdc.cab

[DjVuCtl Class]
InProcServer32 = D:\Program Files\LizardTech\DjVuControl\DjVuCntl.dll
CODEBASE = http://www.lizardtech.com/download/files/w…ntrol_en_US.cab

[Delta Lloyd-Deltaweb Statements]
InProcServer32 = D:\WINDOWS\System32\MSJAVA.DLL
CODEBASE = http://www.nagelmackers.be/pnagelweb/cab/i…pkmodstatms.cab

[Musicnotes Viewer]
InProcServer32 = D:\Program Files\Musicnotes\mnviewer1_15.dll
CODEBASE = http://www.musicnotes.com/download/mnviewer.cab

[MessengerStatsClient Class]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\MessengerStatsPAClient.dll
CODEBASE = http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab

[Shockwave ActiveX Control]
InProcServer32 = D:\WINDOWS\system32\macromed\Director\SwDir.dll
CODEBASE = http://fpdownload.macromedia.com/pub/shock…director/sw.cab

[Windows Genuine Advantage Validation Tool]
InProcServer32 = D:\WINDOWS\system32\legitcheckcontrol.dll
CODEBASE = http://go.microsoft.com/fwlink/?linkid=39204

[Minesweeper Flags Class]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\minesweeper.dll
CODEBASE = http://messenger.zone.msn.com/binary/MineS…er.cab31267.cab

[Delta Lloyd-Deltaweb Common]
InProcServer32 = D:\WINDOWS\System32\MSJAVA.DLL
CODEBASE = http://www.nagelmackers.be/pnagelweb/cab/i…pkmodcommon.cab

[Delta Lloyd-Deltaweb installcompleted]
InProcServer32 = D:\WINDOWS\System32\MSJAVA.DLL
CODEBASE = http://www.nagelmackers.be/pnagelweb/cab/i…llcompleted.cab

[Symantec AntiVirus scanner]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\avsniff.dll
CODEBASE = http://security.symantec.com/sscv6/SharedC…bin/AvSniff.cab

[Delta Lloyd-Deltaweb Security Components]
InProcServer32 = D:\WINDOWS\System32\MSJAVA.DLL
CODEBASE = http://www.nagelmackers.be/pnagelweb/cab/ie4/V2000/pksec.cab

[FilePlanet Download Control Class]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\FilePlanetDownloadCtrl.dll
CODEBASE = http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab

[Malicious Software Removal Tool]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\WebCleaner.dll
CODEBASE = http://download.microsoft.com/download/5/c…/WebCleaner.cab

[EPUImageControl Class]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\EPUWALcontrol.dll
CODEBASE = http://tools.ebayimg.com/eps/wl/activex/eB…l_v1-0-3-30.cab

[MSN Photo Upload Tool]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\CONFLICT.1\MsnPUpld.dll
CODEBASE = http://spaces.msn.com//PhotoUpload/MsnPUpld.cab

[FileSharingCtrl Class]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\fsmsngr-nl.dll
CODEBASE = http://appdirectory.messenger.msn.com/AppD…sharingctrl.cab

[Symantec RuFSI Utility Class]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\rufsi.dll
CODEBASE = http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab

[Delta Lloyd-Deltaweb Accounts]
InProcServer32 = D:\WINDOWS\System32\MSJAVA.DLL
CODEBASE = http://www.nagelmackers.be/pnagelweb/cab/i…pkmodaccnts.cab

[MUWebControl Class]
InProcServer32 = D:\WINDOWS\system32\muweb.dll
CODEBASE = http://update.microsoft.com/microsoftupdat…b?1126357951768

[GSDACtl Class]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\CONFLICT.1\gsda.dll
CODEBASE = http://launch.gamespyarcade.com/software/launch/alaunch.cab

[SecureLogin.SecureControl]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\CONFLICT.1\ActiveSecurity.ocx
CODEBASE = http://secure2.comned.com/signuptemplates/ActiveSecurity.cab

[Delta Lloyd-Deltaweb Extern]
InProcServer32 = D:\WINDOWS\System32\MSJAVA.DLL
CODEBASE = http://www.nagelmackers.be/pnagelweb/cab/ie4/V2000/pkext.cab

[MessengerStatsClient Class]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\messengerstatsclient.dll
CODEBASE = http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab

[Delta Lloyd-Deltaweb Appkrn]
InProcServer32 = D:\WINDOWS\System32\MSJAVA.DLL
CODEBASE = http://www.nagelmackers.be/pnagelweb/cab/i…00/pkappkrn.cab

[PhotoPickConvert Class]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\PhtPkMSN.dll
CODEBASE = http://appdirectory.messenger.msn.com/AppD…ap/PhtPkMSN.cab

[{9F1C11AA-197B-4942-BA54-47A8489BB47F}]
CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/…8153.5073726852

[ScorchPlugin Class]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\NPSibelius.dll
CODEBASE = http://www.sibelius.com/download/software/…tiveXPlugin.cab

[MsnMessengerSetupDownloadControl Class]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\MsnMessengerSetupDownloader.ocx
CODEBASE = http://messenger.msn.com/download/MsnMesse…pDownloader.cab

[ZoneIntro Class]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\ZIntro.ocx
CODEBASE = http://messenger.zone.msn.com/binary/ZIntro.cab31267.cab

[Delta Lloyd-Deltaweb Domestic Payments]
InProcServer32 = D:\WINDOWS\System32\MSJAVA.DLL
CODEBASE = http://www.nagelmackers.be/pnagelweb/cab/i…pkmoddompay.cab

[Zylom Games Player]
InProcServer32 = D:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylomgamesplayer.dll
CODEBASE = http://game11.zylomgames.com/activex/zylomgamesplayer.cab

[MSN Photo Upload Tool]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\MsnPUpld.dll
CODEBASE = http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab

[Virtools WebPlayer Class]
InProcServer32 = D:\Program Files\Virtools Web Player 2.5\WebPlayer.ocx
CODEBASE = http://a532.g.akamai.net/7/532/6712/6c5b0a…5/Installer.exe

[NsvPlayX Control]
InProcServer32 = D:\PROGRA~1\COMMON~1\NSV\NSVPLA~1.DLL
CODEBASE = http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab

[Shockwave Flash Object]
InProcServer32 = D:\WINDOWS\system32\Macromed\Flash\Flash9.ocx
CODEBASE = http://download.macromedia.com/pub/shockwa…ash/swflash.cab

[Delta Lloyd-Deltaweb Kernel]
InProcServer32 = D:\WINDOWS\System32\MSJAVA.DLL
CODEBASE = http://www.nagelmackers.be/pnagelweb/cab/ie4/V2001/pkkrn.cab

[PopCapLoader Object]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\popcaploader.dll
CODEBASE = http://www.popcap.com/games/popcaploader_v6.cab

[MSN Chat Control 4.5]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\MSNChat45.ocx
CODEBASE = http://chat.msn.com/bin/msnchat45.cab

[Solitaire Showdown Class]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\solitaireshowdown.dll
CODEBASE = http://messenger.zone.msn.com/binary/Solit…wn.cab31267.cab

————————————————–

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: D:\WINDOWS\system32\SHELL32.dll
CDBurn: D:\WINDOWS\system32\SHELL32.dll
WebCheck: D:\WINDOWS\System32\webcheck.dll
SysTray: D:\WINDOWS\System32\stobject.dll
incestuously: D:\WINDOWS\system32\urroxtl.dll

————————————————–
Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

{D404248E-0960-1043-0124-030131030020} = "D:\Program Files\Common Files\{D404248E-0960-1043-0124-030131030020}\Update.exe" mc-110-12-0000272

————————————————–

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

ishost.exe = ishost.exe
issearch.exe = issearch.exe
kernel32.dll = D:\WINDOWS\system32\isnotify.exe

————————————————–

End of report, 14.772 bytes
Report generated in 0,094 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only