ATTACKED but by what? HJT Log has hunderds lines

Download and install AVG Anti-Spyware (ewido). Then scan and post the report here.
Instructions and download link can be found here.

I have downloaded the program you mentioned but when I tried to update a message says: Error. Failed to connect to server update.ewido.net….now what?

Sorry remove ewido here is the right link. http://www.grisoft.com/doc/75/lng/us/tpl/t…mw&simple=1

what do i do from that site? I don't see anywhere that I need to remove or uninstall that above mentioned….sorry I'm not good at this like you are. Thanks, Cz

Click here http://www.grisoft.cz/softw/70/filedir/ins…mwt_433a879.exe

Save the file or Chose to install. Let me know how it goes.

You need to remove AVG's anti-virus you can only have one running at a time.

Then Lets try running combofix.exe
Download it from one of the links below:

http://download.bleepingcomputer.com/sUBs/combofix.exe
http://www.techsupportforum.com/sectools/combofix.exe

Double click combofix.exe & follow the prompts.
When finished, it will produce a log for you. Post that log in your next reply.

Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall

OK I finally got that new scan…here is what it says: Owner - 06-12-24 23:32:36.92 Service Pack 2 ComboFix 06.11.27 - Running from: "C:\Program Files\America Online 9.0a" ((((((((((((((((((((((((((((((( Files Created from 2006-11-24 to 2006-12-24 )))))))))))))))))))))))))))))))))) 2006-12-24 12:51 dr-h—– C:\Documents and Settings\Owner\Recent 2006-12-24 12:34 d——– C:\Documents and Settings\Owner\Application Data\AVG7 2006-12-24 12:33 816,672 –a—— C:\WINNT\system32\drivers\avg7core.sys 2006-12-24 12:33 4,960 –a—— C:\WINNT\system32\drivers\avgtdi.sys 2006-12-24 12:33 4,224 –a—— C:\WINNT\system32\drivers\avg7rsw.sys 2006-12-24 12:33 3,968 –a—— C:\WINNT\system32\drivers\avgclean.sys 2006-12-24 12:33 28,416 –a—— C:\WINNT\system32\drivers\avg7rsxp.sys 2006-12-24 12:33 18,240 –a—— C:\WINNT\system32\drivers\avgmfx86.sys 2006-12-24 12:33 d——– C:\Program Files\Grisoft 2006-12-24 12:33 d——– C:\Documents and Settings\All Users\Application Data\Grisoft 2006-12-24 12:33 d——– C:\Documents and Settings\All Users\Application Data\avg7 2006-12-23 15:29 3,968 –a—— C:\WINNT\system32\drivers\AvgAsCln.sys 2006-12-23 12:40 d——– C:\Program Files\Symantec Technical Support 2006-12-22 23:03 15,872 –a—— C:\WINNT\system32\drivers\sshrmd.sys 2006-12-22 23:03 15,360 –a—— C:\WINNT\system32\drivers\sskbfd.sys 2006-12-22 23:03 14,848 –a—— C:\WINNT\system32\drivers\SSFS0509.sys 2006-12-22 23:03 122,368 –a—— C:\WINNT\system32\drivers\ssidrv.sys 2006-12-22 23:03 d——– C:\Program Files\Webroot 2006-12-22 23:03 d——– C:\Documents and Settings\All Users\Application Data\Webroot 2006-12-22 23:02 d——– C:\Documents and Settings\Owner\Application Data\Webroot 2006-12-22 16:22 d——– C:\Program Files\Hijack This 2004 2006-12-16 13:53 d——– C:\Program Files\Windows Media Connect 2 2006-12-16 13:50 d——– C:\WINNT\system32\drivers\UMDF 2006-12-02 14:58 d——– C:\Program Files\Java 2006-12-02 14:56 d——– C:\Program Files\Common Files\Java 2006-11-27 21:24 d——– C:\Program Files\MSXML 4.0 2006-11-27 21:23 d——– C:\00fa61dcdbcf2445e2 2006-11-27 20:44 684,032 –a—— C:\WINNT\system32\libeay32.dll 2006-11-27 20:44 155,648 –a—— C:\WINNT\system32\ssleay32.dll 2006-11-25 10:27 d——– C:\Program Files\Atlantis Adventure 2006-11-25 10:27 d——– C:\Config.Msi (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2006-12-24 23:37 ——– d——– C:\Program Files\Common Files\Symantec Shared 2006-12-24 23:32 ——– d——– C:\Program Files\America Online 9.0a 2006-12-24 15:56 ——– d——– C:\Program Files\Hijack This 2005 2006-12-24 12:32 ——– d—s—- C:\Documents and Settings\Owner\Application Data\Microsoft 2006-12-24 12:16 ——– d-a—— C:\Program Files\Common Files 2006-12-23 15:41 ——– d——– C:\Program Files\Windows Media Player 2006-12-23 15:34 ——– d——– C:\Program Files\Norton Internet Security 2006-12-23 15:13 ——– d——– C:\Program Files\Messenger 2006-12-23 14:36 ——– d——– C:\Program Files\Common Files\Scanner 2006-12-23 14:29 ——– d——– C:\Program Files\Common Files\aolshare 2006-12-23 14:23 ——– d——– C:\Program Files\AOL Deskbar 2006-12-23 14:23 ——– d——– C:\Program Files\America Online 9.0 2006-12-23 12:36 ——– d——– C:\Program Files\Internet Explorer 2006-12-18 17:24 ——– d——– C:\Program Files\AOL Games 2006-12-13 20:02 ——– d——– C:\Program Files\Outlook Express 2006-12-13 20:02 ——– d——– C:\Program Files\Common Files\System 2006-12-12 19:39 ——– d——– C:\Program Files\Common Files\AOL 2006-12-04 22:37 ——– d——– C:\Program Files\Symantec 2006-11-27 21:38 28256 –a—— C:\WINNT\system32\drivers\MxlW2k.sys 2006-11-21 20:56 ——– d–h—– C:\Program Files\InstallShield Installation Information 2006-11-21 20:56 ——– d——– C:\Documents and Settings\Owner\Application Data\Musicmatch 2006-11-18 14:47 ——– d——– C:\Program Files\MSN Games 2006-11-16 11:44 33592 –a—— C:\WINNT\system32\drivers\atwpkt264.sys 2006-11-16 11:44 25136 –a—— C:\WINNT\system32\drivers\atwpkt2.sys 2006-11-16 11:44 103984 –a—— C:\WINNT\system32\AOLDial.dll 2006-11-08 00:06 679424 –a—— C:\WINNT\system32\inetcomm.dll 2006-11-04 17:20 ——– d——– C:\Program Files\NetMeeting 2006-11-04 14:14 1245696 –a—— C:\WINNT\system32\msxml4.dll 2006-10-31 22:02 ——– d——– C:\Program Files\Comcast Video Mail 2006-10-23 12:52 112312 –a—— C:\WINNT\system32\vmlauncher0107.dll 2006-10-19 08:56 713216 –a—— C:\WINNT\system32\sxs.dll 2006-10-18 21:58 8704 –a—— C:\WINNT\system32\wdfmgr.exe 2006-10-18 21:58 8704 –a—— C:\WINNT\system32\uwdf.exe 2006-10-18 21:47 99840 –a—— C:\WINNT\system32\wmpshell.dll 2006-10-18 21:47 991744 –a—— C:\WINNT\system32\drmv2clt.dll 2006-10-18 21:47 937984 –a—— C:\WINNT\system32\WMNetMgr.dll 2006-10-18 21:47 8231936 –a—— C:\WINNT\system32\wmploc.dll 2006-10-18 21:47 767488 ——— C:\WINNT\system32\WMVSENCD.dll 2006-10-18 21:47 757248 –a—— C:\WINNT\system32\WMADMOD.dll 2006-10-18 21:47 7168 –a—— C:\WINNT\system32\asferror.dll 2006-10-18 21:47 656896 ——— C:\WINNT\system32\WMVXENCD.dll 2006-10-18 21:47 63488 –a—— C:\WINNT\system32\wpdmtpus.dll 2006-10-18 21:47 629760 –a—— C:\WINNT\system32\wpd_ci.dll 2006-10-18 21:47 613376 ——— C:\WINNT\system32\wmpmde.dll 2006-10-18 21:47 603648 –a—— C:\WINNT\system32\WMSPDMOD.dll 2006-10-18 21:47 542720 –a—— C:\WINNT\system32\blackbox.dll 2006-10-18 21:47 535040 ——— C:\WINNT\system32\wmdrmsdk.dll 2006-10-18 21:47 429056 –a—— C:\WINNT\system32\wmdrmdev.dll 2006-10-18 21:47 414208 –a—— C:\WINNT\system32\msscp.dll 2006-10-18 21:47 4096 –a—— C:\WINNT\system32\wmvdmoe2.dll 2006-10-18 21:47 4096 –a—— C:\WINNT\system32\wmvdmod.dll 2006-10-18 21:47 4096 –a—— C:\WINNT\system32\WMVADVE.DLL 2006-10-18 21:47 4096 –a—— C:\WINNT\system32\WMVADVD.dll 2006-10-18 21:47 4096 –a—— C:\WINNT\system32\wmsdmoe2.dll 2006-10-18 21:47 4096 –a—— C:\WINNT\system32\wmsdmod.dll 2006-10-18 21:47 4096 –a—— C:\WINNT\system32\wdfapi.dll 2006-10-18 21:47 4096 –a—— C:\WINNT\system32\MPG4DMOD.dll 2006-10-18 21:47 4096 ——— C:\WINNT\system32\MP4SDMOD.dll 2006-10-18 21:47 4096 ——— C:\WINNT\system32\MP43DMOD.dll 2006-10-18 21:47 38400 ——— C:\WINNT\system32\wpdshextres.dll 2006-10-18 21:47 37376 –a—— C:\WINNT\system32\wmdmps.dll 2006-10-18 21:47 35840 –a—— C:\WINNT\system32\wpdconns.dll 2006-10-18 21:47 356352 –a—— C:\WINNT\system32\wpdsp.dll 2006-10-18 21:47 348672 –a—— C:\WINNT\system32\wmdrmnet.dll 2006-10-18 21:47 33792 –a—— C:\WINNT\system32\wmdmlog.dll 2006-10-18 21:47 321536 –a—— C:\WINNT\system32\mswmdm.dll 2006-10-18 21:47 317440 ——— C:\WINNT\system32\MP4SDECD.dll 2006-10-18 21:47 314880 –a—— C:\WINNT\system32\wmpdxm.dll 2006-10-18 21:47 295936 ——— C:\WINNT\system32\wmpeffects.dll 2006-10-18 21:47 284160 ——— C:\WINNT\system32\PortableDeviceApi.dll 2006-10-18 21:47 276992 –a—— C:\WINNT\system32\audiodev.dll 2006-10-18 21:47 27136 –a—— C:\WINNT\system32\mspmsnsv.dll 2006-10-18 21:47 2603008 ——— C:\WINNT\system32\WpdShext.dll 2006-10-18 21:47 259072 ——— C:\WINNT\system32\MPG4DECD.dll 2006-10-18 21:47 259072 ——— C:\WINNT\system32\MP43DECD.dll 2006-10-18 21:47 2450944 –a—— C:\WINNT\system32\wmvcore.dll 2006-10-18 21:47 242688 –a—— C:\WINNT\system32\wmpasf.dll 2006-10-18 21:47 229376 –a—— C:\WINNT\system32\cewmdm.dll 2006-10-18 21:47 227328 –a—— C:\WINNT\system32\wmerror.dll 2006-10-18 21:47 222208 –a—— C:\WINNT\system32\WMASF.dll 2006-10-18 21:47 212992 ——— C:\WINNT\system32\MFPLAT.dll 2006-10-18 21:47 211456 –a—— C:\WINNT\system32\qasf.dll 2006-10-18 21:47 204288 –a—— C:\WINNT\system32\wmpsrcwp.dll 2006-10-18 21:47 199168 ——— C:\WINNT\system32\PortableDeviceWMDRM.dll 2006-10-18 21:47 179712 –a—— C:\WINNT\system32\msnetobj.dll 2006-10-18 21:47 175616 –a—— C:\WINNT\system32\mspmsp.dll 2006-10-18 21:47 166912 ——— C:\WINNT\system32\PortableDeviceTypes.dll 2006-10-18 21:47 1661440 –a—— C:\WINNT\system32\wmpencen.dll 2006-10-18 21:47 1574912 ——— C:\WINNT\system32\WMVENCOD.dll 2006-10-18 21:47 157184 –a—— C:\WINNT\system32\wmidx.dll 2006-10-18 21:47 154624 –a—— C:\WINNT\system32\wpdmtp.dll 2006-10-18 21:47 1543680 ——— C:\WINNT\system32\WMVDECOD.dll 2006-10-18 21:47 1382912 ——— C:\WINNT\system32\WMVSDECD.dll 2006-10-18 21:47 133632 ——— C:\WINNT\system32\WPDShServiceObj.dll 2006-10-18 21:47 1329152 –a—— C:\WINNT\system32\WMSPDMOE.dll 2006-10-18 21:47 132096 ——— C:\WINNT\system32\PortableDeviceWiaCompat.dll 2006-10-18 21:47 130048 ——— C:\WINNT\system32\wmpps.dll 2006-10-18 21:47 11264 –a—— C:\WINNT\system32\LAPRXY.dll 2006-10-18 21:47 1117696 –a—— C:\WINNT\system32\WMADMOE.dll 2006-10-18 21:47 101888 ——— C:\WINNT\system32\PortableDeviceClassExtension.dll 2006-10-18 20:03 100864 –a—— C:\WINNT\system32\logagent.exe 2006-10-18 20:00 249856 ——— C:\WINNT\system32\drmupgds.exe 2006-10-18 20:00 17408 ——— C:\WINNT\system32\wpdshextautoplay.exe 2006-10-13 07:35 142336 –a—— C:\WINNT\system32\nwprovau.dll 2006-10-02 15:28 312128 ——— C:\WINNT\system32\msdelta.dll 2006-09-28 20:13 95344 ——— C:\WINNT\system32\WUDFCoinstaller.dll 2006-09-28 18:56 55808 ——— C:\WINNT\system32\WudfSvc.dll 2006-09-28 18:56 316416 ——— C:\WINNT\system32\WUDFx.dll 2006-09-28 18:56 165376 ——— C:\WINNT\system32\WudfPlatform.dll 2006-09-28 18:56 146432 ——— C:\WINNT\system32\WudfHost.exe 2006-09-25 17:58 23856 –a—— C:\WINNT\system32\spupdsvc.exe (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries are not shown [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "LDM"="\\Program\\" "LogitechSoftwareUpdate"="\"C:\\Program Files\\Logitech\\Video\\ManifestEngine.exe\" boot" "AOL Fast Start"="\"C:\\Program Files\\America Online 9.0a\\AOL.EXE\" -b" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "WorksFUD"="\"C:\\Program Files\\Microsoft Works\\wkfud.exe\"" "MoneyStartUp10.0"="\"C:\\Program Files\\Microsoft Money\\System\\Activation.exe\"" "mmtask"="\"C:\\Program Files\\MusicMatch\\MusicMatch Jukebox\\mmtask.exe\"" "Microsoft Works Update Detection"="\"C:\\Program Files\\Common Files\\Microsoft Shared\\Works Shared\\WkUFind.exe\"" "Keyboard Preload Check"="C:\\OEMDRVRS\\KEYB\\Preload.exe /DEVID: /CLASS:Keyboard /RunValue:\"Keyboard Preload Check\"" "IgfxTray"="C:\\WINNT\\System32\\igfxtray.exe" "HotKeysCmds"="C:\\WINNT\\System32\\hkcmd.exe" "Hot Key Kbd 9910 Daemon"="SK9910DM.EXE" "GWMDMpi"="C:\\WINNT\\GWMDMpi.exe" "GWMDMMSG"="GWMDMMSG.exe" "AdaptecDirectCD"="\"C:\\Program Files\\Adaptec\\Easy CD Creator 5\\DirectCD\\DirectCD.exe\"" "ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\"" "URLLSTCK.exe"="\"C:\\Program Files\\Norton Internet Security\\UrlLstCk.exe\"" "Symantec NetDriver Monitor"="\"C:\\PROGRA~1\\SYMNET~1\\SNDMon.exe\" /Consumer" "HostManager"="\"C:\\Program Files\\Common Files\\AOL\\1116304251\\ee\\AOLSoftware.exe\"" "AOLDialer"="\"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe\"" "Pure Networks Port Magic"="\"C:\\PROGRA~1\\PURENE~1\\PORTMA~1\\PortAOL.exe\" -Run" "LVCOMSX"="C:\\WINNT\\system32\\LVCOMSX.EXE" "LogitechVideoRepair"="\"C:\\Program Files\\Logitech\\Video\\ISStart.exe\" " "LogitechVideoTray"="\"C:\\Program Files\\Logitech\\Video\\LogiTray.exe\"" "HP Software Update"="\"C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe\"" "HP Metrics"="\"C:\\Program Files\\HP\\Personal Printing Solutions Product Research\\HP Product Research.exe\" a" "HP Component Manager"="\"C:\\Program Files\\HP\\hpcoretech\\hpcmpmgr.exe\"" "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_10\\bin\\jusched.exe\"" "SpySweeper"="\"C:\\Program Files\\Webroot\\Spy Sweeper\\SpySweeperUI.exe\" /startintray" "AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVG7\\avgcc.exe /STARTUP" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] "Installed"="1" "NoChange"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonceex] @="" [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components] "DeskHtmlVersion"=dword:00000110 "DeskHtmlMinorVersion"=dword:00000005 "Settings"=dword:00000001 "GeneralFlags"=dword:00000001 [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="My Current Home Page" "Flags"=dword:00000002 "Position"=hex:2c,00,00,00,30,01,00,00,00,00,00,00,50,03,00,00,43,03,00,00,00,\ 00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00 "CurrentState"=hex:04,00,00,40 "OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\ ff,ff,04,00,00,00 "RestoredStateInfo"=hex:18,00,00,00,f2,01,00,00,b9,00,00,00,7c,00,00,00,72,00,\ 00,00,01,00,00,00 [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVG7\\avgw.exe /RUNONCE" [HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce] "SRUUninstall"="\"C:\\WINNT\\System32\\msiexec.exe\" /L*v C:\\WINNT\\TEMP\\SND532unin.txt /x {6AF90EF6-F7F9-466C-99F4-1774826FBB40} /qn REBOOT=ReallySuppress" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVG7\\avgw.exe /RUNONCE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\runonce] "SRUUninstall"="\"C:\\WINNT\\System32\\msiexec.exe\" /L*v C:\\WINNT\\TEMP\\SND532unin.txt /x {6AF90EF6-F7F9-466C-99F4-1774826FBB40} /qn REBOOT=ReallySuppress" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"="" "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "dontdisplaylastusername"=dword:00000000 "legalnoticecaption"="" "legalnoticetext"="" "shutdownwithoutlogon"=dword:00000001 "undockwithoutlogon"=dword:00000001 [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 "CDRAutoRun"=dword:00000000 [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 "CDRAutoRun"=dword:00000000 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload] "PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}" "CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}" "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}" "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}" "WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^America Online 9.0 Tray Icon.lnk] "path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\America Online 9.0 Tray Icon.lnk" "backup"="C:\\WINNT\\pss\\America Online 9.0 Tray Icon.lnkCommon Startup" "location"="Common Startup" "command"="C:\\PROGRA~1\\AMERIC~1.0\\aoltray.exe -check" "item"="America Online 9.0 Tray Icon" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^AOL Companion.lnk] "path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\AOL Companion.lnk" "backup"="C:\\WINNT\\pss\\AOL Companion.lnkCommon Startup" "location"="Common Startup" "command"="C:\\PROGRA~1\\AOLCOM~1\\COMPAN~1.EXE /s" "item"="AOL Companion" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CapFax] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="CapFax" "hkey"="HKLM" "command"="C:\\Program Files\\PhoneTools\\CapFax.EXE" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Portfolio] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="WksSb" "hkey"="HKLM" "command"="C:\\Program Files\\Microsoft Works\\WksSb.exe /AllUsers" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MoneyAgent] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Money Express" "hkey"="HKCU" "command"="\"\"C:\\Program Files\\Microsoft Money\\System\\Money Express.exe\"\"" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="qttask" "hkey"="HKLM" "command"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime" "inimapping"="0" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\WebrootSpySweeperService Contents of the 'Scheduled Tasks' folder C:\WINNT\tasks\Norton AntiVirus - Scan my computer.job C:\WINNT\tasks\Symantec NetDetect.job Completion time: 06-12-24 23:41:07.23 C:\ComboFix.txt … 06-12-24 23:41

Can you run this scan and post the results here. http://www.pandasoftware.com/products/ActiveScan.htm

this scan took a long time but here it is. Incident Status Location Adware:adware/keenvalue Not disinfected c:\winnt\system32\drivers\etc\hosts.bho Adware:adware/gator Not disinfected c:\GatorPatch.log Adware:adware/sidesearch Not disinfected C:\Documents and Settings\Owner\Application Data\Lycos Spyware:spyware/clipgenie Not disinfected Windows Registry Adware:adware/dyfuca Not disinfected Windows Registry Adware:adware/ist.istbar Not disinfected Windows Registry

I would like to see another logfile from hijackthis.

Close all programs leaving only HijackThis running. Place a check against each of the following,
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
O16 - DPF: {3C648A72-C49A-48EF-9F90-68EF13293F97} (Cacher Class) - http://www.midhudsonmls.com/XMLSearch/XMLCache.CAB
O16 - DPF: {72C9EA8F-8965-40C2-ABAD-D460A5815F86} (hostCntrlIE Class) - http://host.oddcast.com/hostClientIE.cab
Click on Fix Checked when finished and exit HijackThis.

It looks like you installed avg anti-virus you will need to remove it as long as your using norton.