So I know I have spyware and I know what it pertains to. It's the one in bold below. I've tried using AVG antispyware and antivirus and it can't seem to get rid of it. It just keeps coming back. AVG Antivirus finds a virus in c:\xpsp2_en\system32\wsock32.sys. It's apparently the Backdoor.Ciadoor.3.AF virus. It keeps coming up as deleted in the program but will just reload itself on restart. I've also pasted the antispyware report below. All help is greatly appreciated. Oh yeah I had also run HJT and removed three entries that dealt with the process scvhost.exe. After a quick google search I found that those were nothing more than a virus. Thanks all.

———————————————————
AVG Anti-Spyware - Scan Report
———————————————————

+ Created at: 5:36:29 PM 2/15/2007

+ Scan result:



HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E14DCE67-8FB7-4721-8149-179BAA4D792C} -> Trojan.Ciadoor.m : No action taken.
HKU\S-1-5-21-220523388-299502267-839522115-500\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E14DCE67-8FB7-4721-8149-179BAA4D792C} -> Trojan.Ciadoor.m : No action taken.


::Report end

Logfile of HijackThis v1.99.1
Scan saved at 5:40:09 PM, on 2/15/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\XPSP2_EN\System32\smss.exe
C:\XPSP2_EN\system32\winlogon.exe
C:\XPSP2_EN\system32\services.exe
C:\XPSP2_EN\system32\lsass.exe
C:\XPSP2_EN\system32\svchost.exe
C:\XPSP2_EN\System32\svchost.exe
C:\XPSP2_EN\Explorer.EXE
C:\XPSP2_EN\system32\spoolsv.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\XPSP2_EN\System32\spool\DRIVERS\W32X86\3\E_FATIAJA.EXE
C:\XPSP2_EN\system32\ctfmon.exe
C:\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\internet explorer\iexplore.exe
C:\APC PowerChute Personal Edition\apcsystray.exe
C:\APC PowerChute Personal Edition\mainserv.exe
C:\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Grisoft\AVG7\avgamsvr.exe
C:\Grisoft\AVG7\avgupsvc.exe
C:\Grisoft\AVG7\avgemc.exe
C:\XPSP2_EN\System32\GEARSec.exe
C:\Norton Ghost\Agent\PQV2iSvc.exe
C:\XPSP2_EN\system32\svchost.exe
C:\Documents and Settings\Administrator\My Documents\HijackThis\HijackThis.exe
C:\XPSP2_EN\system32\wuauclt.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {E14DCE67-8FB7-4721-8149-179BAA4D792C} - (no file)
O4 - HKLM\..\Run: [PtiuPbmd] Rundll32.exe ptipbm.dll,SetWriteBack
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [EPSON Stylus Photo R340 Series] C:\XPSP2_EN\System32\spool\DRIVERS\W32X86\3\E_FATIAJA.EXE /P30 "EPSON Stylus Photo R340 Series" /O6 "USB002" /M "Stylus Photo R340"
O4 - HKCU\..\Run: [ctfmon.exe] C:\XPSP2_EN\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: APC UPS Status.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\APC PowerChute Personal Edition\mainserv.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\Grisoft\AVG7\avgemc.exe
O23 - Service: GEARSecurity - GEAR Software - C:\XPSP2_EN\System32\GEARSec.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Norton Ghost\Agent\PQV2iSvc.exe