[Closed] Please Help! I'm Infected Badly.

I have installed spybot, spywareguard, avast, and adaware and ran them all… the computer still seems to be hosed. Please help!!

Hijack log posted below.

Logfile of HijackThis v1.99.1
Scan saved at 2:20:19 PM, on 9/9/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
D:\Program Files\Alwil Software\Avast4\ashServ.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\System32\CTsvcCDA.EXE
D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\System32\wuauclt.exe
D:\Program Files\Creative\ShareDLL\CtNotify.exe
D:\Program Files\Creative\ShareDLL\MediaDet.Exe
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
D:\Program Files\Messenger\msmsgs.exe
D:\Program Files\Creative\SBAudigy\Taskbar\CTLTray.exe
D:\Program Files\Creative\SBAudigy\Taskbar\CTLTask.exe
D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
D:\Program Files\NETGEAR\WG111T\wlan111t.exe
D:\WINDOWS\System32\wuauclt.exe
D:\Documents and Settings\Kimberly Sutich\Desktop\HijackThis.exe

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Disc Detector] D:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [UpdReg] D:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [CTStartup] D:\Program Files\Creative\SBAudigy\Program\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [Jet Detection] D:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [SDR6_Check] "D:\Program Files\Common Files\DriveCleaner Free\udcsdr.exe"
O4 - HKLM\..\Run: [PAS_Check] "D:\Program Files\Common Files\DriveCleaner Free\udcpas.exe"
O4 - HKLM\..\Run: [Salestart] "D:\Program Files\Common Files\DriveCleaner Freeware\dcsm.exe"
O4 - HKLM\..\Run: [DriveCleaner Free] "D:\Program Files\DriveCleaner Free\UDC.exe" /min
O4 - HKLM\..\Run: [UDC6cw] "D:\Program Files\DriveCleaner Free\UDC6cw.exe" -c
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [TaskTray] D:\Program Files\Creative\SBAudigy\Taskbar\CTLTray.exe
O4 - HKCU\..\Run: [Taskbar] D:\Program Files\Creative\SBAudigy\Taskbar\CTLTask.exe
O4 - HKCU\..\Run: [swg] D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: SpywareGuard.lnk = D:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: NETGEAR WG111T Smart Wizard.lnk = ?
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15030/CTPID.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - D:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - D:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

I am not trying to bump my post, but I went back and read the self help topics and did what they asked. I am now posting a AVG report and an updated hijack this log to be thorough. Thanks!

AVG

———————————————————
AVG Anti-Spyware - Scan Report
———————————————————

+ Created at: 4:28:26 PM 9/9/2007

+ Scan result:



C:\WINNT\system32\B4FM.dll -> Adware.BurnFree : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{79D34597-3992-46A2-B5CE-1C2F544E314C}\RP68\A0014436.dll -> Adware.Comet : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{79D34597-3992-46A2-B5CE-1C2F544E314C}\RP69\A0014478.exe -> Adware.Comet : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{79D34597-3992-46A2-B5CE-1C2F544E314C}\RP69\A0014499.exe -> Adware.Comet : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{79D34597-3992-46A2-B5CE-1C2F544E314C}\RP68\A0014447.exe -> Adware.DriveCleaner : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{79D34597-3992-46A2-B5CE-1C2F544E314C}\RP69\A0014494.exe -> Adware.DriveCleaner : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{79D34597-3992-46A2-B5CE-1C2F544E314C}\RP69\A0014495.exe -> Adware.DriveCleaner : Cleaned with backup (quarantined).
C:\Documents and Settings\Kimberly Sutich\Desktop\hijack this\backups\backup-20050623-185851-312.dll -> Adware.EliteBar : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{79D34597-3992-46A2-B5CE-1C2F544E314C}\RP68\A0014446.dll -> Adware.ErrorSafe : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{79D34597-3992-46A2-B5CE-1C2F544E314C}\RP68\A0014463.dll -> Adware.ErrorSafe : Cleaned with backup (quarantined).
C:\Documents and Settings\Kimberly Sutich\Desktop\hijack this\backups\backup-20050330-140120-727.dll -> Adware.Midadle : Cleaned with backup (quarantined).
C:\Documents and Settings\Kimberly Sutich\Local Settings\Temp\Temporary Internet Files\Content.IE5\2X2VW9ST\mm[1].exe -> Downloader.IstBar.kj : Cleaned with backup (quarantined).
C:\Documents and Settings\Kimberly Sutich\Local Settings\Temp\Temporary Internet Files\Content.IE5\EBAR8HQV\eefd[1].exe -> Downloader.IstBar.kj : Cleaned with backup (quarantined).
C:\Documents and Settings\Kimberly Sutich\Local Settings\Temp\Temporary Internet Files\Content.IE5\EBAR8HQV\gamma[1].exe -> Downloader.IstBar.kj : Cleaned with backup (quarantined).
C:\Documents and Settings\Kimberly Sutich\Local Settings\Temp\Temporary Internet Files\Content.IE5\YNKPCXUN\gamma[1].exe -> Downloader.IstBar.kj : Cleaned with backup (quarantined).
C:\WINNT\system32\eefd.exe -> Downloader.IstBar.kj : Cleaned with backup (quarantined).
C:\WINNT\system32\gamma.exe -> Downloader.IstBar.kj : Cleaned with backup (quarantined).
C:\WINNT\system32\mm.exe -> Downloader.IstBar.kj : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{79D34597-3992-46A2-B5CE-1C2F544E314C}\RP69\A0014486.exe -> Downloader.Small : Cleaned with backup (quarantined).
C:\WINNT\system32\pww.exe -> Not-A-Virus.PSWTool.Win32.PassView.160 : Cleaned with backup (quarantined).
:mozilla.57:C:\Documents and Settings\Kimberly Sutich\Application Data\Mozilla\Firefox\Profiles\cut6l8ag.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.58:C:\Documents and Settings\Kimberly Sutich\Application Data\Mozilla\Firefox\Profiles\cut6l8ag.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Kimberly Sutich\Cookies\kimberly sutich@com[2].txt -> TrackingCookie.Com : Cleaned.
C:\Documents and Settings\Kimberly Sutich\Cookies\kimberly [removed][1].txt -> TrackingCookie.Msn : Cleaned.
C:\Documents and Settings\Kimberly Sutich\Cookies\kimberly [removed][2].txt -> TrackingCookie.Paypal : Cleaned.
C:\Documents and Settings\Kimberly Sutich\Local Settings\Temp\Cookies\kimberly [removed][1].txt -> TrackingCookie.Paypal : Cleaned.
:mozilla.33:C:\Documents and Settings\Kimberly Sutich\Application Data\Mozilla\Firefox\Profiles\cut6l8ag.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
C:\Documents and Settings\Kimberly Sutich\Cookies\kimberly sutich@revsci[2].txt -> TrackingCookie.Revsci : Cleaned.
C:\Documents and Settings\Kimberly Sutich\Cookies\kimberly sutich@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
C:\Documents and Settings\Kimberly Sutich\Cookies\kimberly sutich@login.tracking101[1].txt -> TrackingCookie.Tracking101 : Cleaned.
:mozilla.54:C:\Documents and Settings\Kimberly Sutich\Application Data\Mozilla\Firefox\Profiles\cut6l8ag.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.25:C:\Documents and Settings\Kimberly Sutich\Application Data\Mozilla\Firefox\Profiles\cut6l8ag.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.26:C:\Documents and Settings\Kimberly Sutich\Application Data\Mozilla\Firefox\Profiles\cut6l8ag.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.27:C:\Documents and Settings\Kimberly Sutich\Application Data\Mozilla\Firefox\Profiles\cut6l8ag.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.28:C:\Documents and Settings\Kimberly Sutich\Application Data\Mozilla\Firefox\Profiles\cut6l8ag.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.29:C:\Documents and Settings\Kimberly Sutich\Application Data\Mozilla\Firefox\Profiles\cut6l8ag.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\WINNT\system32\bitE.exe -> Trojan.Agent.a : Cleaned with backup (quarantined).
C:\Documents and Settings\Kimberly Sutich\Local Settings\Temp\Temporary Internet Files\Content.IE5\2X2VW9ST\Server[1].exe -> Trojan.PWSteal.b : Cleaned with backup (quarantined).
C:\WINNT\system32\Server.exe -> Trojan.PWSteal.b : Cleaned with backup (quarantined).
C:\Documents and Settings\Kimberly Sutich\Local Settings\Temp\Temporary Internet Files\Content.IE5\YBAD0FWZ\drr[2].exe -> Worm.Kelvir.cj : Cleaned with backup (quarantined).


::Report end

HIJACK THIS

Logfile of HijackThis v1.99.1
Scan saved at 4:32:22 PM, on 9/9/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
D:\Program Files\Alwil Software\Avast4\ashServ.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
D:\WINDOWS\System32\CTsvcCDA.EXE
D:\Program Files\Alwil Software\Avast4\setup\avast.setup
D:\WINDOWS\Explorer.EXE
D:\Program Files\Creative\ShareDLL\CtNotify.exe
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
D:\Program Files\Creative\ShareDLL\MediaDet.Exe
D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\Program Files\Messenger\msmsgs.exe
D:\Program Files\Creative\SBAudigy\Taskbar\CTLTray.exe
D:\Program Files\Creative\SBAudigy\Taskbar\CTLTask.exe
D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
D:\Program Files\NETGEAR\WG111T\wlan111t.exe
D:\Documents and Settings\Kimberly Sutich\Desktop\HijackThis.exe
D:\Program Files\SpywareGuard\sgmain.exe

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Disc Detector] D:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [UpdReg] D:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [CTStartup] D:\Program Files\Creative\SBAudigy\Program\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [Jet Detection] D:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [SDR6_Check] "D:\Program Files\Common Files\DriveCleaner Free\udcsdr.exe"
O4 - HKLM\..\Run: [PAS_Check] "D:\Program Files\Common Files\DriveCleaner Free\udcpas.exe"
O4 - HKLM\..\Run: [Salestart] "D:\Program Files\Common Files\DriveCleaner Freeware\dcsm.exe"
O4 - HKLM\..\Run: [DriveCleaner Free] "D:\Program Files\DriveCleaner Free\UDC.exe" /min
O4 - HKLM\..\Run: [UDC6cw] "D:\Program Files\DriveCleaner Free\UDC6cw.exe" -c
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [TaskTray] D:\Program Files\Creative\SBAudigy\Taskbar\CTLTray.exe
O4 - HKCU\..\Run: [Taskbar] D:\Program Files\Creative\SBAudigy\Taskbar\CTLTask.exe
O4 - HKCU\..\Run: [swg] D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: SpywareGuard.lnk = D:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: NETGEAR WG111T Smart Wizard.lnk = ?
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15030/CTPID.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - D:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - D:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe