Here's the scanner report:
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------
+ Created at: 1:24:57 PM 4/25/2007
+ Scan result:
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050840.exe -> Adware.Agent : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050774.dll -> Adware.BookedSpace : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050775.dll -> Adware.BookedSpace : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050776.dll -> Adware.BookedSpace : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050779.exe -> Adware.BookedSpace : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050796.exe -> Adware.BookedSpace : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050797.exe -> Adware.BookedSpace : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\EMediaCodec.Chl -> Adware.Generic : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\EMediaCodec.Chl\CLSID -> Adware.Generic : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050809.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050815.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050816.dll -> Adware.NewDotNet : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050817.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).
D:\Documents and Settings\KC\Application Data\Αdobe\wυcrtupd.exe -> Adware.PurityScan : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050704.exe -> Adware.PurityScan : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050705.dll -> Adware.PurityScan : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050773.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050800.exe -> Adware.SurfSide : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050801.dll -> Adware.SurfSide : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050802.dll -> Adware.SurfSide : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP456\A0046689.exe -> Adware.SurfSide : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050777.exe -> Adware.SurfSide : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050781.dll -> Adware.SurfSide : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050803.exe -> Adware.SurfSide : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050804.dll -> Adware.SurfSide : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050805.dll -> Adware.SurfSide : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050811.exe -> Adware.SurfSide : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050768.dll -> Adware.Ucmore : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050771.dll -> Adware.Ucmore : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050782.exe/IUCMORE.DLL -> Adware.Ucmore : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050782.exe/UCMTSAIE.DLL -> Adware.Ucmore : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050782.exe/empty_00000001 -> Adware.Ucmore : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050835.lnk -> Adware.Ucmore : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050837.lnk -> Adware.Ucmore : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050834.dll -> Adware.Virtumonde : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050858.dll -> Adware.Virtumonde : Cleaned with backup (quarantined).
D:\VundoFix Backups\vtuuuuv.dll.bad -> Adware.Virtumonde : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP456\A0047677.exe -> Adware.WebBuying : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050812.exe -> Adware.WebBuying : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050838.exe -> Adware.WebBuying : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050810.exe -> Adware.ZQuest : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050824.exe -> Downloader.PurityScan.dc : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050808.dll -> Downloader.Small.dxm : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050822.exe -> Downloader.VB.tw : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050813.exe -> Dropper.Agent.bfr : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050692.EXE -> Heuristic.Win32.Morphine-Crypted : Cleaned with backup (quarantined).
D:\WINDOWS\system32\torm.dll -> Logger.Banker.cnx : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050799.dll -> Logger.VBStat.e : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050807.dll -> Logger.VBStat.e : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050814.dll -> Logger.VBStat.e : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050821.dll -> Logger.VBStat.e : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP456\A0046688.exe -> Not-A-Virus.Downloader.Win32.WinFixer.o : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050823.exe -> Not-A-Virus.Downloader.Win32.WinFixer.o : Cleaned with backup (quarantined).
D:\RECYCLER\bin32\PSKILL.EXE -> Not-A-Virus.NetTool.Win32.PsKill : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP456\A0047685.dll -> Proxy.Agent.ji : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050689.dll -> Proxy.Agent.ji : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050828.dll -> Proxy.Agent.ji : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP456\A0047686.dll -> Proxy.Agent.jk : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050688.dll -> Proxy.Agent.jk : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050798.dll -> Proxy.Agent.jk : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050787.exe -> Proxy.Agent.lp : Cleaned with backup (quarantined).
D:\WINDOWS\system32\drivers\core.sys -> Rootkit.Agent.eq : Cleaned with backup (quarantined).
D:\WINDOWS\system32\config\systemprofile\Cookies\system@rotator.adjuggler[2].txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.44:D:\Documents and Settings\KC\Application Data\Mozilla\Firefox\Profiles\default.z4q\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.45:D:\Documents and Settings\KC\Application Data\Mozilla\Firefox\Profiles\default.z4q\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.46:D:\Documents and Settings\KC\Application Data\Mozilla\Firefox\Profiles\default.z4q\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.47:D:\Documents and Settings\KC\Application Data\Mozilla\Firefox\Profiles\default.z4q\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.48:D:\Documents and Settings\KC\Application Data\Mozilla\Firefox\Profiles\default.z4q\cookies.txt -> TrackingCookie.Advertising : Cleaned.
D:\Documents and Settings\KC\Cookies\kc@advertising[1].txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.31:D:\Documents and Settings\KC\Application Data\Mozilla\Firefox\Profiles\default.z4q\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
D:\Documents and Settings\KC\Cookies\kc@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
D:\WINDOWS\system32\config\systemprofile\Cookies\system@image.masterstats[1].txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.25:D:\Documents and Settings\KC\Application Data\Mozilla\Firefox\Profiles\default.z4q\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.28:D:\Documents and Settings\KC\Application Data\Mozilla\Firefox\Profiles\default.z4q\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.29:D:\Documents and Settings\KC\Application Data\Mozilla\Firefox\Profiles\default.z4q\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.30:D:\Documents and Settings\KC\Application Data\Mozilla\Firefox\Profiles\default.z4q\cookies.txt -> TrackingCookie.Overture : Cleaned.
D:\Documents and Settings\KC\Cookies\kc@revsci[1].txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.26:D:\Documents and Settings\KC\Application Data\Mozilla\Firefox\Profiles\default.z4q\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.27:D:\Documents and Settings\KC\Application Data\Mozilla\Firefox\Profiles\default.z4q\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050778.exe -> Trojan.BHO.ab : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050767.exe -> Trojan.Rond : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP456\A0047676.exe -> Trojan.VB.tg : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050793.exe -> Trojan.VB.tg : Cleaned with backup (quarantined).
D:\WINDOWS\ase.exe -> Trojan.VB.tg : Cleaned with backup (quarantined).
D:\WINDOWS\sys02398568454.exe -> Trojan.VB.tg : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{4B3EF653-F7AB-4CE2-9014-F4AD7FD93E8E}\RP457\A0050788.exe -> Worm.Zhelatin.cz : Cleaned with backup (quarantined).
::Report end
-----------------------------------------
Here's the new hijackthis log:
Logfile of HijackThis v1.99.1
Scan saved at 1:36:52 PM, on 4/25/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\logonui.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Common Files\Symantec Shared\ccApp.exe
G:\AVG Anti-Spyware 7.5\avgas.exe
G:\AVG Anti-Spyware 7.5\guard.exe
D:\Program Files\Norton AntiVirus\navapsvc.exe
D:\WINDOWS\System32\nvsvc32.exe
D:\WINDOWS\System32\oodag.exe
D:\WINDOWS\System32\svchost.exe
C:\RealVNC\WinVNC\WinVNC.exe
D:\WINDOWS\System32\MsPMSPSv.exe
D:\WINDOWS\System32\wuauclt.exe
G:\FIREFOX\FIREFOX.EXE
C:\HiJackThis\look.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.dailymanga.org/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [NVCLOCK] rundll32 nvclock.dll,fnNvclock
O4 - HKLM\..\Run: [ccApp] "D:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "D:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [WinVNC] "C:\RealVNC\WinVNC\WinVNC.exe" -servicehelper
O4 - HKLM\..\Run: [NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools] "G:\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [CloneCDTray] "G:\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [MSConfig] D:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [AIM] D:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] D:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKCU\..\Run: [Skype] "D:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\WINDOWS\System32\msjava.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\Program Files\AIM\aim.exe
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Program Files\ICQLite\ICQLite.exe
O12 - Plugin for .bcf: D:\Program Files\Internet Explorer\Plugins\NPBelv32.dll
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) -
http://security.syma...bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -
http://security.syma...n/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://acs.pandasoft...free/asinst.cab
O23 - Service: Adobe LM Service - Unknown owner - D:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - G:\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - D:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\System32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - D:\WINDOWS\System32\oodag.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\PerfectDisk\PDEngine.exe
O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\PerfectDisk\PDSched.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - D:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: VNC Server (winvnc) - Unknown owner - C:\RealVNC\WinVNC\WinVNC.exe" -service (file missing)
--------------------------------------------
Thanks again.