When I ran the ComboFix, it displayed a message within its box that said "FINDSTR: String too long." But, it finished running and gave me a .txt logfile. Here is the ComboFix log:
"Joe LeBlanc" - 2007-05-25 19:33:52 Service Pack 2
ComboFix 07-05.26.3.V - Running from: "C:\Documents and Settings\Joe LeBlanc\Desktop\"
((((((((((((((((((((((((((((((( Files Created from 2007-04-05 to 2007-05-25 ))))))))))))))))))))))))))))))))))
2007-05-25 19:31 49,152 --a------ C:\WINDOWS\nircmd.exe
2007-05-22 12:42 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\JollyBear
2007-05-09 03:05 <DIR> d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-04-26 12:38 <DIR> d-------- C:\DOCUME~1\JOELEB~1\APPLIC~1\Magic Academy
(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))
2007-05-25 23:34:49 -------- d-----w C:\Program Files\Common Files\Symantec Shared
2007-05-25 11:39:54 -------- d-----w C:\Program Files\Norton SystemWorks
2007-05-24 22:36:11 -------- d-----w C:\Program Files\Diablo II
2007-05-24 22:35:36 43,520 ----a-w C:\WINDOWS\system32\CmdLineExt03.dll
2007-05-20 23:13:28 -------- d-----w C:\DOCUME~1\JOELEB~1\APPLIC~1\U3
2007-05-20 18:45:20 -------- d-----w C:\Program Files\Avery Wizard 3.0
2007-05-15 01:43:36 14 ----a-w C:\WINDOWS\popcinfo.dat
2007-05-13 12:09:47 -------- d-----w C:\Program Files\Common Files\Sonic Shared
2007-04-18 16:12:23 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
2007-04-18 11:02:13 -------- d-----w C:\Program Files\Google
2007-04-18 06:10:59 -------- d-----w C:\Program Files\Symantec
2007-04-09 13:14:05 -------- d--h--w C:\DOCUME~1\JOELEB~1\APPLIC~1\Gtek
2007-04-09 13:00:12 -------- d-----w C:\Program Files\DellSupport
2007-04-08 15:59:26 -------- d-----w C:\Program Files\Support.com
2007-03-28 22:41:32 517,848 ----a-w C:\WINDOWS\system32\SymNeti.dll
2007-03-28 22:41:28 132,824 ----a-w C:\WINDOWS\system32\SymRedir.dll
2007-03-28 22:41:26 266,552 ----a-w C:\WINDOWS\system32\drivers\symtdi.sys
2007-03-28 22:41:24 18,904 ----a-w C:\WINDOWS\system32\drivers\symredrv.sys
2007-03-28 22:41:20 37,016 ----a-w C:\WINDOWS\system32\drivers\symids.sys
2007-03-28 22:41:18 47,192 ----a-w C:\WINDOWS\system32\drivers\symndis.sys
2007-03-28 22:41:14 171,928 ----a-w C:\WINDOWS\system32\drivers\symfw.sys
2007-03-28 22:41:12 11,480 ----a-w C:\WINDOWS\system32\drivers\symdns.sys
2007-03-28 18:55:11 -------- d-----w C:\Program Files\3DGroove
2007-03-28 15:43:06 -------- d-----w C:\Program Files\DivX
2007-03-17 16:44:54 -------- d-----w C:\DOCUME~1\JOELEB~1\APPLIC~1\Viewpoint
2007-03-17 13:43:01 292,864 ----a-w C:\WINDOWS\system32\winsrv.dll
2007-03-11 15:34:55 -------- d-----w C:\Program Files\Microsoft ActiveSync
2007-03-11 15:26:27 -------- d-----w C:\DOCUME~1\JOELEB~1\APPLIC~1\ultra
2007-03-09 00:03:33 -------- d-----w C:\DOCUME~1\JOELEB~1\APPLIC~1\DivX
2007-03-08 15:36:28 577,536 ----a-w C:\WINDOWS\system32\user32.dll
2007-03-08 15:36:28 40,960 ----a-w C:\WINDOWS\system32\mf3216.dll
2007-03-08 15:36:28 281,600 ----a-w C:\WINDOWS\system32\gdi32.dll
2007-03-08 13:47:48 1,843,584 ----a-w C:\WINDOWS\system32\win32k.sys
2007-02-23 04:29:52 129,784 ------w C:\WINDOWS\system32\pxafs.dll
2007-02-23 04:29:52 118,520 ------w C:\WINDOWS\system32\pxinsi64.exe
2007-02-23 04:29:52 116,472 ------w C:\WINDOWS\system32\pxcpyi64.exe
2007-02-05 20:17:02 185,344 ----a-w C:\WINDOWS\system32\upnphost.dll
2006-11-22 14:13:29 88 --sh--r C:\WINDOWS\system32\4AA6060C6D.sys
2006-11-22 14:13:29 3,350 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{53707962-6F74-2D53-2644-206D7942484F}=C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2005-05-31 02:04]
{5CA3D70E-1895-11CF-8E15-001234567890}=C:\WINDOWS\system32\dla\tfswshx.dll [2005-05-31 06:33]
{BDF3E430-B101-42AD-A544-FADC6B084872}=C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll [2005-10-19 13:54]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2005-06-17 09:56]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-05 23:05]
"IntelMeM"="C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe" [2003-09-03 22:12]
"CTSysVol"="C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe" [2003-09-17 12:43]
"DVDLauncher"="C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" [2005-02-23 18:19]
"ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2005-06-10 12:44]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2005-06-10 12:44]
"tgcmd"="C:\Program Files\Support.com\BellSouth\hcenter.exe" [2005-08-31 15:14]
"Corel Photo Downloader"="C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe" [2006-02-09 18:34]
"ControlCenter2.0"="C:\Program Files\Brother\ControlCenter2\brctrcen.exe" [2004-07-20 10:34]
"MegaPanel"="C:\Program Files\ACNielsen\Homescan Internet Transporter\HSTrans.exe" [2006-02-24 15:06]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-01-09 18:32]
"@"="" []
"Symantec NetDriver Monitor"="C:\PROGRA~1\SYMNET~1\SNDMon.exe" [2007-04-18 02:10]
"Ulead AutoDetector"="C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe" [2003-11-18 18:20]
"Ulead Photo Express Calendar Checker"="C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe" [2004-01-12 21:40]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 19:20]
"P17Helper"="P17.dll" [2004-06-10 18:51 C:\WINDOWS\system32\P17.dll]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2005-11-01 00:01]
"MimBoot"="C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe" [2005-09-08 21:20]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2007-02-08 15:21]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 12:24]
"H/PC Connection Agent"="C:\PROGRA~1\MICROS~4\wcescomm.exe" [2006-06-26 17:13]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 07:00]
"Norton SystemWorks"="C:\Program Files\Norton SystemWorks\cfgwiz.exe" [2004-09-09 22:12]
"DellSupport"="C:\Program Files\Dell Support\DSAgnt.exe" []
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-10-18 21:05]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll" [2006-09-28 10:13]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"UserFaultCheck"=%systemroot%\system32\dumprep 0 -u
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
"KernelFaultCheck"=%systemroot%\system32\dumprep 0 -k
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}]
AutoRun\command- E:\setup.exe
~ ~ ~ ~ ~ ~ ~ ~ Hijackthis Backups ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
backup-20070428-221918-241
O23 - Service: ActivCard Auto-Update Service (acautoupdate) - Unknown owner - C:\Program Files\Common Files\ActivCard\acautoup.exe (file missing)
backup-20070428-221917-711
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
"Logon"="WLEventLogon"
"Logoff"="WLEventLogoff"
"Startup"="WLEventStartup"
"Shutdown"="WLEventShutdown"
"StartScreenSaver"="WLEventStartScreenSaver"
"StopScreenSaver"="WLEventStopScreenSaver"
"Lock"="WLEventLock"
"Unlock"="WLEventUnlock"
"StartShell"="WLEventStartShell"
"PostShell"="WLEventPostShell"
"Disconnect"="WLEventDisconnect"
"Reconnect"="WLEventReconnect"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000000
"SafeMode"=dword:00000001
"MaxWait"=dword:ffffffff
"DllName"=hex(2):57,00,67,00,61,00,4c,00,6f,00,67,00,6f,00,6e,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Event"=dword:00000002
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon\Settings]
"Data"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,\
00,00,b6,1e,a0,18,07,bc,8d,47,96,58,de,86,f7,09,d1,66,04,00,00,00,04,00,00,\
00,53,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00,16,91,68,15,5b,f3,ae,68,\
e1,9d,f2,5b,a1,aa,fe,9f,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,5c,\
2e,ef,00,e8,9c,85,52,0c,9a,ee,6b,3a,53,60,73,08,06,00,00,a6,57,18,c0,d8,1c,\
39,63,ef,21,d0,73,89,2b,92,f6,42,d9,2b,98,66,f0,0a,ce,e0,6c,17,3e,da,3c,3f,\
59,9b,c4,50,66,ba,67,cb,c2,f1,96,58,c5,a8,f3,8d,77,bd,60,bd,53,de,97,10,ac,\
90,cf,b0,98,aa,3e,8f,5a,dd,d0,ae,cf,fa,64,d5,c3,61,ad,46,25,1a,81,f8,53,1a,\
53,24,34,f3,89,0c,64,61,75,a1,fe,b1,85,75,ed,72,7a,23,b2,7f,f2,15,4a,ff,ca,\
a6,8f,1b,80,66,a5,c0,d0,2e,9d,30,85,c6,76,fb,60,bb,f0,90,9a,31,8b,c5,f4,d3,\
34,9a,17,a4,2a,65,c4,7f,7c,cd,d1,d3,1f,25,ac,88,84,bf,6a,c7,83,aa,d4,49,b9,\
9c,58,af,f1,b0,89,51,60,ce,fb,87,f5,2b,f6,65,50,0e,88,ce,68,90,8e,a3,0c,66,\
3e,4b,d1,74,5d,ff,6c,2f,a7,09,2a,de,2d,7a,84,5f,de,2f,0d,41,84,5a,ed,28,f3,\
e5,b2,c7,8c,98,bd,4d,18,4e,f6,64,d4,8e,d7,90,96,b4,af,78,aa,f3,4e,07,5a,89,\
1e,c8,33,38,76,1f,2a,e9,02,67,40,a4,c6,1b,f5,8f,3a,3f,04,be,01,42,a6,a3,58,\
c2,b6,0a,55,7c,22,ee,ef,9f,96,33,e6,e7,ca,15,0f,5a,03,16,7c,83,0e,bb,a5,f2,\
9a,a3,2e,16,b9,1d,17,58,15,8e,57,08,3b,46,e2,76,72,1a,ac,13,1b,1e,af,53,16,\
fc,ac,78,d5,13,e4,a8,fc,74,db,54,e3,2e,8d,83,c3,3b,2a,a4,e6,83,44,e3,a2,85,\
bb,a7,37,ca,42,f7,55,df,53,77,c5,60,1b,0a,b9,df,eb,cd,e9,59,b4,64,85,da,d8,\
53,dd,ee,c1,23,f0,38,fe,c3,c8,01,f5,59,7c,a5,d2,42,6b,0b,a8,a2,53,b0,91,46,\
c9,6d,38,d5,6b,eb,d3,8d,c5,ba,1e,04,84,54,aa,3e,a6,48,21,a9,b6,8d,e8,3e,3e,\
8c,40,df,79,12,8f,31,81,64,99,23,17,16,80,26,3c,c3,26,10,b9,e6,f6,89,55,11,\
c5,ba,eb,32,59,14,12,08,15,aa,0d,73,29,dc,0a,74,6c,da,41,e5,7d,d8,82,4d,18,\
a8,ad,d9,b4,34,ef,04,06,48,17,c7,26,4c,14,af,33,f7,65,6d,85,c9,d0,a8,be,85,\
47,f7,ae,a1,c4,cb,a4,58,5b,f6,9b,ae,25,89,fb,5c,b2,63,51,fa,09,9b,58,9a,24,\
cc,13,a0,78,10,7d,73,68,15,97,18,3f,5c,cf,12,e3,8c,15,a2,4b,a8,82,d5,ad,e2,\
24,94,43,9c,3d,6d,81,6e,d8,27,9c,67,60,a9,94,ab,a2,92,51,b2,0f,e1,6e,33,30,\
12,10,29,91,30,57,67,73,00,c1,0c,11,9d,d3,8c,6e,89,40,b9,28,5e,3c,9c,cc,aa,\
cc,78,bf,18,b0,c1,2e,6b,ae,54,ab,85,4e,99,49,a6,bf,df,a4,65,2e,43,f2,85,aa,\
c9,60,76,0a,9d,e7,7b,54,67,e3,13,35,4d,21,b9,e0,a9,cf,0a,ca,41,f1,fd,db,1d,\
0d,a2,d4,dd,f8,a9,85,fe,9f,01,f4,1c,97,5d,24,51,4b,4f,d6,03,9b,b4,fa,1d,9c,\
4f,c8,13,85,2a,e2,d8,06,e0,7f,df,61,33,f6,58,e2,08,70,87,6c,c9,a1,42,a9,f7,\
25,25,bf,54,90,29,ea,62,40,4b,5d,66,52,7a,f0,c8,06,89,4d,7c,e1,eb,49,25,c9,\
6b,41,04,02,ca,86,c8,94,50,53,8b,a3,17,de,e6,9c,4f,89,29,a0,64,ca,87,6d,ca,\
c9,6b,0a,f8,76,d0,3b,1a,e0,b5,2f,94,b4,0f,b1,78,76,ad,ad,98,c3,f0,9f,fe,17,\
da,5e,62,78,54,51,59,31,f7,4e,e4,9d,b3,cd,de,99,58,bb,87,d2,9b,16,17,bb,4a,\
54,f4,35,a6,e5,ff,b8,fe,60,03,d0,48,8a,88,0c,99,26,1e,cb,07,2f,8d,e7,b8,96,\
e5,c6,55,d5,e7,bc,a5,45,3e,95,53,d1,b7,b5,e7,2a,a6,44,ca,7e,69,27,5a,a3,72,\
7f,c1,cc,29,a5,1c,6b,32,de,d2,9d,3c,ec,8e,ef,0c,48,e3,9f,f5,e0,89,68,34,0a,\
6c,71,eb,27,65,60,89,40,9e,3c,20,a3,f2,b0,06,4b,0f,a9,04,47,6c,fa,5f,0b,ef,\
94,db,65,d7,75,be,b6,e9,0d,84,36,1c,21,78,62,ac,52,76,37,6f,5c,7e,70,0f,27,\
bb,08,93,3f,6f,8a,41,e6,6f,c1,c7,4f,8f,58,6f,63,8a,0b,5e,79,51,23,c9,7e,4e,\
39,58,84,34,7b,fc,e0,2f,9f,b8,91,52,bc,1f,eb,da,a8,92,f9,ac,84,98,40,e2,e7,\
c5,ae,35,d4,78,af,db,86,fa,c7,10,20,59,b5,7f,17,02,ac,fd,60,ff,ab,36,f9,c5,\
60,30,d5,db,a0,b0,15,cc,bf,bc,9b,58,12,e6,d2,67,d5,ee,c5,66,77,a6,72,ca,21,\
0f,e0,e7,4a,de,f8,6f,42,f2,6a,72,ec,ab,48,61,ef,33,b3,ed,b8,af,9c,c1,c1,0f,\
ab,0e,0a,65,3a,e0,73,52,9f,82,7d,15,b2,c8,c0,f4,cc,77,c4,0d,dc,cc,71,b5,a8,\
39,29,c2,55,03,fe,d0,1d,28,53,c0,5f,18,43,a9,77,15,99,c6,c7,99,82,06,5b,b1,\
54,40,5d,91,be,dd,71,7e,11,f3,1b,9e,cf,da,24,d2,4b,dd,65,7f,6b,a7,97,fc,f6,\
92,a0,9f,75,4a,63,0c,21,01,69,7f,b0,5b,a0,ee,d3,0b,67,50,3b,71,20,a7,b3,69,\
19,fd,e7,dc,fe,b3,dc,dc,b0,97,4a,92,bd,44,78,e9,1f,0e,f4,27,cd,15,b6,cc,75,\
ad,88,7f,ad,6d,53,dc,83,d7,20,48,d0,89,0f,83,7c,36,81,d5,ee,1c,c9,31,cb,5a,\
a3,77,66,7b,6b,bb,54,29,ce,5f,37,b7,d4,61,3f,d5,54,a5,64,3f,d9,79,2a,fe,c0,\
90,0b,d4,9c,6e,33,8e,89,03,05,78,f3,cf,81,c7,a2,e5,78,84,01,3d,0b,50,72,50,\
46,18,4a,3e,c5,3a,cb,45,63,7b,b5,64,2a,f2,41,f2,e3,80,e3,7e,c6,4d,d0,14,3c,\
b6,a9,f7,ad,23,58,17,21,cf,9d,75,17,66,46,e5,37,66,d2,35,b1,67,ac,2e,87,2f,\
73,25,60,9c,81,6d,b0,9e,c5,a3,83,a8,a1,2f,33,1e,67,61,ed,ed,c3,54,4a,14,0e,\
71,4f,d8,e9,eb,21,c0,2e,8d,4a,da,e7,c8,e0,3f,c7,7c,1d,06,47,e5,25,2f,50,1b,\
b8,58,1d,35,46,1f,78,3c,e0,cc,c0,f3,b1,62,66,2d,08,e9,f1,fa,a3,2d,06,55,05,\
ed,7a,77,bf,a7,da,be,71,2d,74,09,1e,5f,12,90,85,4a,47,b0,b2,41,9e,dc,da,ae,\
14,0f,80,a0,cc,48,8a,a8,a6,3d,44,c4,df,68,cc,a8,da,54,1e,d7,e0,ed,d8,7d,3e,\
d1,fa,8e,51,c4,b0,96,37,88,80,ff,c2,0c,c3,72,36,7e,2d,8c,a6,44,3b,30,36,6d,\
b8,23,39,c3,d1,56,03,1e,42,67,4e,c2,e0,3a,a6,31,22,f8,96,b2,7c,0e,58,aa,77,\
ec,2f,5d,0b,7c,09,ba,7e,2e,a9,ed,43,b4,9e,57,cf,94,f9,2c,b1,a7,ac,1f,00,9c,\
24,9b,52,1a,35,98,79,8d,9c,e2,0d,28,99,19,dc,00,02,a9,56,d9,28,df,31,e2,ab,\
77,3a,1b,62,a2,13,10,d6,ed,06,c5,48,f9,83,80,f0,88,6f,30,3a,bb,f6,2b,78,e0,\
97,fe,05,bb,1b,b7,e6,7b,d6,07,99,2d,f3,14,00,00,00,bf,06,fc,2b,58,38,5f,d8,\
87,32,62,ac,56,a0,3d,dc,80,89,e0,97
backup-20070428-221918-426
O23 - Service: ActivCard Authentication Service (ACachSrv) - Unknown owner - C:\Program Files\Common Files\ActivCard\acachsrv.exe (file missing)
backup-20070428-221917-931
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
backup-20070417-035756-663
O23 - Service: ActivCard Auto-Update Service (acautoupdate) - Unknown owner - C:\Program Files\Common Files\ActivCard\acautoup.exe (file missing)
backup-20070417-035756-746
O23 - Service: ActivCard Authentication Service (ACachSrv) - Unknown owner - C:\Program Files\Common Files\ActivCard\acachsrv.exe (file missing)
backup-20070417-035713-139
O23 - Service: ActivCard Authentication Service (ACachSrv) - Unknown owner - C:\Program Files\Common Files\ActivCard\acachsrv.exe (file missing)
backup-20070417-035713-835
O23 - Service: ActivCard Auto-Update Service (acautoupdate) - Unknown owner - C:\Program Files\Common Files\ActivCard\acautoup.exe (file missing)
backup-20070417-035545-854
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Unknown owner - C:\WINDOWS\system32\Brmfrmps.exe" -service (file missing)
backup-20070417-035545-459
O23 - Service: ActivCard Auto-Update Service (acautoupdate) - Unknown owner - C:\Program Files\Common Files\ActivCard\acautoup.exe (file missing)
backup-20070417-035545-601
O23 - Service: ActivCard Authentication Service (ACachSrv) - Unknown owner - C:\Program Files\Common Files\ActivCard\acachsrv.exe (file missing)
backup-20070417-035545-684
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
backup-20070401-221613-935
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
backup-20070226-062913-619
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Unknown owner - C:\WINDOWS\system32\Brmfrmps.exe" -service (file missing)
backup-20070226-062913-224
O23 - Service: ActivCard Auto-Update Service (acautoupdate) - Unknown owner - C:\Program Files\Common Files\ActivCard\acautoup.exe (file missing)
backup-20070226-062913-772
O23 - Service: ActivCard Authentication Service (ACachSrv) - Unknown owner - C:\Program Files\Common Files\ActivCard\acachsrv.exe (file missing)
backup-20070226-062913-368
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
???????????????????????????????????????????4???????????????????????????????
backup-20070128-143954-614
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
backup-20070128-143954-394
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
backup-20070128-143954-697
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
backup-20070124-122004-520
O11 - Options group: [INTERNATIONAL] International*
backup-20070124-122004-453
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
???????????????????????????????????????????4?????????????????????????????????????????????????????????????????????????????????????????????????????4???=???????????????????????????????????????????????????????????
backup-20070124-122004-438
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
???????????????????????????????????????????4??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
backup-20070124-122004-969
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
???????????????????????????????????????????4??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
backup-20070121-074104-676
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
backup-20070121-074104-593
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
backup-20070121-074104-373
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
backup-20070113-225443-612
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Unknown owner - C:\WINDOWS\system32\Brmfrmps.exe" -service (file missing)
backup-20070113-225415-478
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Unknown owner - C:\WINDOWS\system32\Brmfrmps.exe" -service (file missing)
backup-20070113-225323-293
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
???????????????????????????????????????????4??????????????????????????????????????????????????????????????????????????????????????????????????=??
backup-20070113-225323-608
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
???????????????????????????????????????????4??????????????????????????????????????????????????????????????????????????????????????????????????=??
backup-20070113-225323-160
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
Contents of the 'Scheduled Tasks' folder
2007-05-25 23:32:12 C:\WINDOWS\tasks\MP Scheduled Scan.job
2007-05-24 10:47:50 C:\WINDOWS\tasks\Norton AntiVirus - Scan my computer - Joe LeBlanc.job
2007-05-25 11:39:54 C:\WINDOWS\tasks\Norton SystemWorks One Button Checkup.job
2007-05-25 04:00:00 C:\WINDOWS\tasks\Symantec Drmc.job
2007-05-25 23:31:01 C:\WINDOWS\tasks\Symantec NetDetect.job
********************************************************************
catchme 0.3.681 W2K/XP/Vista - userland rootkit detector by Gmer,
http://www.gmer.net
Rootkit scan 2007-05-25 19:35:44
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
********************************************************************
Completion time: 2007-05-25 19:36:24
C:\ComboFix-quarantined-files.txt ... 2007-05-25 19:36
--- E O F ---
Here is my latest HijackThis log file:
Logfile of HijackThis v1.99.1
Scan saved at 7:38:33 PM, on 5/25/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\Brmfrmps.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\GEARSec.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
C:\Program Files\Brother\ControlCenter2\brctrcen.exe
C:\Program Files\ACNielsen\Homescan Internet Transporter\HSTrans.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\PROGRA~1\MICROS~4\wcescomm.exe
C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\WordWeb\wweb32.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Documents and Settings\Joe LeBlanc\Desktop\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://home.bellsouth.net/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\BellSouth\hcenter.exe" /starthidden /tgcmdwrapper
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [MegaPanel] C:\Program Files\ACNielsen\Homescan Internet Transporter\HSTrans.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
O4 - HKLM\..\Run: [Ulead Photo Express Calendar Checker] C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MICROS~4\wcescomm.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Norton SystemWorks] "C:\Program Files\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: WordWeb.lnk = C:\Program Files\WordWeb\wweb32.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O8 - Extra context menu item: &WordWeb... - res://C:\WINDOWS\wweb32.dll/lookup.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) -
http://help.bellsout...oad/tgctlcm.cab
O16 - DPF: {01118A01-3E00-11D2-8470-0060089874ED} (SupportSoft Script Runner Class) -
https://password.bel...oad/tgctlsr.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) -
http://www.symantec....rl/LSSupCtl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.micros...b?1136063735812
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://update.micros...b?1159934037697
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) -
http://support.f-sec...m/ols/fscax.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} -
http://www.symantec....rl/SymAData.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: ActivCard Authentication Service (ACachSrv) - Unknown owner - C:\Program Files\Common Files\ActivCard\acachsrv.exe (file missing)
O23 - Service: ActivCard Auto-Update Service (acautoupdate) - Unknown owner - C:\Program Files\Common Files\ActivCard\acautoup.exe (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Unknown owner - C:\WINDOWS\system32\Brmfrmps.exe" -service (file missing)
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
Also, should I leave TeaTimer off for now, or should I restart it?
Thanks,
Joe