So much spyware

Logfile of HijackThis v1.99.1
Scan saved at 10:41:42 PM, on 11/13/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\WINDOWS\System32\pctspk.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Cora\Desktop\New Folder\Spyware.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tomcoyote.org/hjt/
R3 - URLSearchHook: (no name) - {A8BD6820-6ED7-423E-9558-2D1486B0FEEA} - C:\Program Files\DeluxeCommunications\DxcBho.dll
F2 - REG:system.ini: Shell=Explorer.exe, C:\WINDOWS\System32\eqmyw.exe
F2 - REG:system.ini: UserInit=C:\WINDOWS\SYSTEM32\Userinit.exe,oltdhjd.exe
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: (no name) - {833E29A5-5208-472A-81E4-CB04C407924E} - C:\WINDOWS\system32\xxyaaax.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\System32\WLTRAY.exe
O4 - HKLM\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O20 - AppInit_DLLs: dxclib303562752.dll
O20 - Winlogon Notify: xxyaaax - C:\WINDOWS\SYSTEM32\xxyaaax.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE


Freakin' spyware bomb!

Logfile of HijackThis v1.99.1
Scan saved at 4:36:26 PM, on 11/14/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\WINDOWS\System32\pctspk.exe
c:\program files\internet explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\Cora\Desktop\New Folder\Spyware.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {46A4E9D9-B30E-452A-8157-DBBEC8573B03} - C:\Program Files\VSAdd-in\VSAdd-in.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: (no name) - {8EA4C257-9FFA-4286-B80C-DF0A60167F9A} - C:\WINDOWS\System32\wvwxy.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {F18F04B0-9CF1-4b93-B004-77A288BEE28B} - C:\WINDOWS\System32\ajwpjkxs.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &VSAdd-in - {74DD705D-6834-439C-A735-A6DBE2677452} - C:\Program Files\VSAdd-in\VSAdd-in.dll
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\System32\WLTRAY.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {E473A65C-8087-49A3-AFFD-C5BC4A10669B} (Quantum Streaming IE Player Class) - http://mvnet.xlontech.net/qm/fox/06101102/qsp2ie06101001.cab
O20 - Winlogon Notify: wvwxy - C:\WINDOWS\System32\wvwxy.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE



Cora - 06-11-14 16:33:54.65 Service Pack 1
ComboFix 06.11.9 - Running from: "C:\Documents and Settings\Cora\desktop"
Command switches used :: /v xxyaaax

(((((((((((((((((((((((((((((((((((((((((((((((( Vundo Log )))))))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\system32\xxyaaax.dll


* * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *



(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))



~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Purity ~ ~ ~ ~ ~ ~ ~ ~~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

Folders Quarantined:

C:\QooBox\Purity\WINDOWS\ASEMBL~1


((((((((((((((((((((((((((((((( Files Created from 2006-10-14 to 2006-11-14 ))))))))))))))))))))))))))))))))))


2006-11-14 07:49 762,377 —hs—- C:\WINDOWS\SYSTEM32\yxwvw.bak1
2006-11-14 07:49 60,436 –a—— C:\WINDOWS\SYSTEM32\ajwpjkxs.dll
2006-11-14 07:49 110,612 –a—— C:\WINDOWS\SYSTEM32\mxwdlkhg.exe
2006-11-14 07:48 692,276 —hs—- C:\WINDOWS\SYSTEM32\wvwxy.dll
2006-11-14 01:13 106,341 –a—— C:\WINDOWS\SYSTEM32\hgghh.dll
2006-11-13 21:22 114,184 –a—— C:\WINDOWS\SYSTEM32\xqujntfg.dll
2006-11-13 21:17 70,144 –a—— C:\WINDOWS\SYSTEM32\hceds.dll
2006-11-13 21:17 68,328 –a—— C:\WINDOWS\SYSTEM32\alnnaaaa.exe
2006-11-13 21:17 3,584 -rahs—- C:\WINDOWS\SYSTEM32\lhhfxgmn203712.exe
2006-11-13 21:17 16,384 –a—— C:\WINDOWS\SYSTEM32\gwisedxc.exe
2006-11-13 21:17 144,384 –a—— C:\WINDOWS\SYSTEM32\mfpaaaaa.exe
2006-11-13 21:17 13,824 –a—— C:\WINDOWS\SYSTEM32\ulucnaaa.exe
2006-11-13 21:17 1,038 –a—— C:\WINDOWS\SYSTEM32\ohydytpb.exe
2006-11-13 20:13 45,056 –a—— C:\WINDOWS\SYSTEM32\regapi.exe
2006-11-13 20:08 69,632 –a—— C:\WINDOWS\SYSTEM32\jbgbmchm.dll
2006-11-13 20:08 1,335 –a—— C:\WINDOWS\SYSTEM32\xflfe639.sys
2006-11-13 20:07 62,976 –a—— C:\WINDOWS\SYSTEM32\xflfe639.dll
2006-11-13 20:07 497,376 -r-hs—- C:\WINDOWS\pwrhqetA.exe
2006-11-13 20:07 2 –a—— C:\WINDOWS\SYSTEM32\wnsinttr.exe
2006-11-13 20:07 178,306 –a—— C:\WINDOWS\ac3_0008.exe
2006-11-13 20:06 55,808 –a—— C:\WINDOWS\pwrhqet.exe
2006-11-13 20:06 217,276 –a—— C:\WINDOWS\srvifrao.exe
2006-11-13 20:06 20,480 –a—— C:\WINDOWS\stub_mm3.exe
2006-11-10 19:27 96,256 –a-s—- C:\WINDOWS\SYSTEM32\druid1.exe
2006-11-10 19:27 96,256 –a—— C:\WINDOWS\SYSTEM32\durvil1.exe
2006-10-30 19:26 757,760 –a—— C:\WINDOWS\SYSTEM32\bcm1xsup.dll
2006-10-30 19:26 69,632 –a—— C:\WINDOWS\SYSTEM32\bcmwlpkt.dll
2006-10-30 19:26 424,320 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\BCMWL5.SYS
2006-10-30 19:26 33,664 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\BCMWLNPF.SYS
2006-10-30 19:26 31,811 –a—— C:\WINDOWS\SYSTEM32\WLTRAY.exe
2006-10-30 19:26 253,952 –a—— C:\WINDOWS\SYSTEM32\bcmwlu00.exe
2006-10-30 19:26 2,129,920 –a—— C:\WINDOWS\SYSTEM32\WLBCGCBPRO731.DLL
2006-10-26 23:44 86,016 –a—— C:\WINDOWS\SYSTEM32\preflib.dll
2006-10-26 23:44 667,648 –a—— C:\WINDOWS\SYSTEM32\BCMLogon.dll
2006-10-26 23:44 44,032 –a—— C:\WINDOWS\SYSTEM32\wltrynt.dll
2006-10-26 23:44 192,512 ——— C:\WINDOWS\SYSTEM32\AegisI5.exe
2006-10-26 23:44 18,944 –a—— C:\WINDOWS\SYSTEM32\WLTRYSVC.EXE
2006-10-26 23:44 1,200,128 –a—— C:\WINDOWS\SYSTEM32\BCMWLTRY.EXE
2006-10-26 23:44 1,040,384 ——— C:\WINDOWS\SYSTEM32\bcmntray.EXE
2006-10-26 23:41 17,992 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\bcm42rly.sys
2006-10-14 22:27 24,576 –a—— C:\WINDOWS\SYSTEM32\STKIT432.DLL


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2006-11-14 16:14 ——– d——– C:\Program Files\Registry Mechanic
2006-11-14 16:14 ——– d——– C:\Program Files\Mozilla Firefox
2006-11-14 16:05 ——– d——– C:\Documents and Settings\Cora\Application Data\SearchToolbarCorp
2006-11-14 07:49 ——– d——– C:\Program Files\VSAdd-in
2006-11-13 23:17 ——– d——– C:\Program Files\Common Files\Microsoft Shared
2006-11-13 23:17 ——– d——– C:\Program Files\Common Files
2006-11-13 20:11 ——– d——– C:\Program Files\Incomplete
2006-11-13 18:37 ——– d——– C:\Documents and Settings\Cora\Application Data\Azureus
2006-11-02 20:24 ——– d-a—— C:\Program Files\iTunes
2006-11-02 20:24 ——– d——– C:\Program Files\QuickTime
2006-11-02 20:24 ——– d——– C:\Program Files\D-Tools
2006-11-02 20:24 ——– d——– C:\Program Files\Common Files\Symantec Shared
2006-11-02 20:24 ——– d——– C:\Program Files\Apoint
2006-11-02 01:11 ——– d——– C:\Documents and Settings\Cora\Application Data\Skype
2006-10-30 19:26 ——– d——– C:\Program Files\Dell
2006-10-18 21:52 ——– d——– C:\Program Files\Playboy - The Mansion
2006-10-18 21:15 ——– d–h—– C:\Program Files\InstallShield Installation Information
2006-10-18 21:15 ——– d——– C:\Program Files\Rockstar Games
2006-10-16 20:10 ——– d——– C:\Documents and Settings\Cora\Application Data\Google
2006-10-16 16:26 ——– d——– C:\Program Files\Google
2006-10-15 09:25 ——– d——– C:\Program Files\OpenOffice.org 2.0
2006-10-15 09:14 ——– d——– C:\Program Files\Common Files\Adobe
2006-10-15 09:14 ——– d——– C:\Program Files\Adobe
2006-10-15 09:08 ——– d——– C:\Documents and Settings\Cora\Application Data\Adobe
2006-10-15 08:18 ——– d——– C:\Program Files\Norton AntiVirus
2006-10-15 08:18 ——– d——– C:\Program Files\EarthLink 5.0
2006-10-15 02:06 ——– d——– C:\Program Files\Ashampoo
2006-10-14 22:52 ——– d——– C:\Documents and Settings\Cora\Application Data\OpenOffice.org2
2006-10-14 21:33 ——– d——– C:\Program Files\Common Files\Services
2006-10-14 18:50 ——– d——– C:\Documents and Settings\Cora\Application Data\Real
2006-10-14 18:48 ——– d——– C:\Program Files\Common Files\Real
2006-10-12 22:31 ——– d——– C:\Program Files\Viewpoint
2006-10-02 15:47 ——– d——– C:\Program Files\AOD
2006-09-26 08:04 ——– d——– C:\Documents and Settings\Cora\Application Data\dvdcss
2006-09-20 18:56 ——– d—s—- C:\Documents and Settings\Cora\Application Data\Microsoft
2006-09-19 10:55 ——– d——– C:\Program Files\EA Games
2006-09-18 14:20 ——– d——– C:\Program Files\WinRAR
2006-09-18 09:18 ——– d——– C:\Program Files\WinZip
2006-09-17 21:48 ——– d——– C:\Program Files\Azureus
2006-09-17 12:30 ——– d——– C:\Documents and Settings\Cora\Application Data\Macromedia
2006-09-15 23:23 ——– d——– C:\Program Files\VideoLAN
2006-09-15 13:21 53248 –a—— C:\WINDOWS\uninst108.exe
2006-09-15 13:16 53248 –a—— C:\WINDOWS\uni_e6h.exe
2006-09-15 12:56 163840 –a—— C:\WINDOWS\sys025354686019.exe


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"Skype"="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized"
"SpybotSD TeaTimer"="C:\\Program Files\\Spybot - Search & Destroy\\TeaTimer.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"AdaptecDirectCD"="\"C:\\Program Files\\Roxio\\Easy CD Creator 5\\DirectCD\\DirectCD.exe\""
"ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"
"ATIModeChange"="Ati2mdxx.exe"
"Apoint"="C:\\Program Files\\Apoint\\Apoint.exe"
"PCTVOICE"="pctspk.exe"
"ccApp"="C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe"
"ccRegVfy"="C:\\Program Files\\Common Files\\Symantec Shared\\ccRegVfy.exe"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_08\\bin\\jusched.exe\""
"DAEMON Tools-1033"="\"C:\\Program Files\\D-Tools\\daemon.exe\" -lang 1033"
"TkBellExe"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"Broadcom Wireless Manager UI"="C:\\WINDOWS\\System32\\WLTRAY.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,18,01,00,00,00,00,00,00,60,04,00,00,fe,03,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\
00,00,01,00,00,00

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
"CDRAutoRun"=dword:00000000

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
"CDRAutoRun"=dword:00000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wvwxy

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"


Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\Norton AntiVirus - Scan my computer.job
C:\WINDOWS\tasks\Symantec NetDetect.job

Completion time: 06-11-14 16:35:42.50
C:\ComboFix.txt … 06-11-14 16:35
C:\ComboFix2.txt … 06-11-14 16:30
C:\ComboFix3.txt … 06-11-14 16:23


THANKS!!!!