Scans with Spybot S&D, Ad-Aware, and Xoftspy all show that my laptop is infected with Virtumonde, Coolwebsearch, and other trojans/spyware. Even though they claim to have fixed the infections, they show up again, sometimes immediately after the scan. Please help me to fix my machine. I have run ComboFix, and then HiJackThis. The logs are as follows:

ComboFix 07-09-20.1 - "howardp" 09/21/2007 9:01:06.1 - NTFSx86
Microsoft Windows 2000 Professional 5.0.2195.4.1252.1.1033.18.189 [GMT -4:00]
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
C:\DOCUME~1\howardp\APPLIC~1\tmp111.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp112.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp24.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp25.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp26.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp27.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp28.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp29.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp2D6.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp2E.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp2E8.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp2F.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp35.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp36.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp3B8.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp3B9.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp42.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp43.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp4B.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp4C.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp5C.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp5D.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp5E.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp5F.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp60.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp61.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp65.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp66.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp7A.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp7B.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp91.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmp92.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmpB.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmpC.tmp.exe
C:\DOCUME~1\howardp\APPLIC~1\tmpE.tmp.exe
C:\Program Files\svhost
C:\Program Files\svhost\wr-1-0000077.exe
C:\setup.exe
C:\Temp\1cb
C:\Temp\1cb\syscheck.log
C:\Temp\fse
C:\WINNT\byywvu.dll
C:\WINNT\cbxxwt.dll
C:\WINNT\cookies.ini
C:\WINNT\ddbaxx.dll
C:\WINNT\efdbbx.dll
C:\WINNT\efdbcy.dll
C:\WINNT\iikknn.ini
C:\WINNT\jillmp.ini
C:\WINNT\jjlmnn.ini
C:\WINNT\nnkkii.dll
C:\WINNT\nnmljj.dll
C:\WINNT\pmllij.dll
C:\WINNT\ruxyxx.ini
C:\WINNT\system32\drivers\fad.sys
C:\WINNT\system32\f10WtR
C:\WINNT\system32\f10WtR\f10WtR1099.exe
C:\WINNT\system32\FAXMON.dll
C:\WINNT\system32\jkhhf.exe
C:\WINNT\system32\ljjihge.dll
C:\WINNT\system32\tmp7A.tmp.dll
C:\WINNT\twxxbc.ini
C:\WINNT\uvwyyb.ini
C:\WINNT\xbbdfe.ini
C:\WINNT\xxabdd.ini
C:\WINNT\xxyxur.dll
C:\WINNT\ycbdfe.ini

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))


——-\LEGACY_CMDSERVICE
——-\LEGACY_IPRIP
——-\LEGACY_NETWORK_MONITOR


((((((((((((((((((((((((( Files Created from 2007-08-21 to 2007-09-21 )))))))))))))))))))))))))))))))
.

2007-09-21 09:07 16,384 –a—-t- C:\WINNT\SYSTEM32\Perflib_Perfdata_508.dat
2007-09-21 08:59 51,200 –a—— C:\WINNT\NirCmd.exe
2007-09-11 00:56 d–h—– C:\DOCUME~1\phoward\WLANProfiles
2007-09-11 00:56 d——– C:\DOCUME~1\phoward\APPLIC~1\Share-to-Web Upload Folder
2007-09-11 00:56 d——– C:\DOCUME~1\phoward\APPLIC~1\Real
2007-09-11 00:56 d——– C:\DOCUME~1\phoward\APPLIC~1\Google
2007-09-07 12:27 d——– C:\VundoFix Backups
2007-09-07 12:20 d——– C:\Program Files\Trend Micro
2007-09-07 11:53 113,664 –a—— C:\VundoFix.exe
2007-08-22 02:50 1,177,151 –a—— C:\WINNT\SYSTEM32\dn8887897c.dat
2007-08-22 02:17 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
2007-08-21 22:48 d——– C:\Program Files\XoftSpySE
2007-08-21 22:36 d——– C:\Program Files\McAfee.com
2007-08-21 22:35 d——– C:\Program Files\McAfee
2007-08-21 22:35 d——– C:\Program Files\Common Files\McAfee
2007-08-21 22:18 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee
2007-08-21 13:41 82 –ah—– C:\aaw7boot.cmd
2007-08-21 13:19 d——– C:\Program Files\Lavasoft
2007-08-21 13:19 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
2007-08-21 13:09 d——– C:\DOCUME~1\DEFAUL~1\APPLIC~1\Google
2007-08-21 10:31 d–hs—- C:\WINNT\RDgwMExBVElUVURF
2007-08-21 10:31 d——– C:\WINNT\SYSTEM32\tmps7
2007-08-21 10:31 d——– C:\WINNT\SYSTEM32\ICM23
2007-08-21 10:31 d——– C:\WINNT\SYSTEM32\dllsz
2007-08-21 10:31 d——– C:\WINNT\SYSTEM32\cofig1
2007-08-21 10:31 d——– C:\Temp

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
98-12-09 05:53 99840 –a—— C:\Program Files\Common Files\IRAABOUT.DLL
98-12-09 05:53 70144 –a—— C:\Program Files\Common Files\IRAMDMTR.DLL
98-12-09 05:53 48640 –a—— C:\Program Files\Common Files\IRALPTTR.DLL
98-12-09 05:53 31744 –a—— C:\Program Files\Common Files\IRAWEBTR.DLL
98-12-09 05:53 186368 –a—— C:\Program Files\Common Files\IRAREG.DLL
98-12-09 05:53 17920 –a—— C:\Program Files\Common Files\IRASRIAL.DLL
07-09-20 20:46 ——— d——– C:\Program Files\Google
07-09-11 08:29 86016 –a—— C:\DOCUME~1\howardp\IDHWTSS1.dll
07-09-11 08:29 81920 –a—— C:\DOCUME~1\howardp\hobjni.dll
07-09-06 17:01 ——— d-a—— C:\Program Files\Accessories
07-09-06 10:25 ——— d-a—— C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
07-08-21 14:17 9344 –a—— C:\WINNT\system32\drivers\NSDriver.sys
07-08-21 14:17 8064 –a—— C:\WINNT\system32\drivers\AWRTRD.sys
07-08-21 14:17 5376 –a—— C:\WINNT\system32\drivers\AWRTPD.sys
07-08-21 13:14 ——— d——– C:\Program Files\Common Files\Wise Installation Wizard
07-08-17 08:08 ——— d——– C:\DOCUME~1\howardp\APPLIC~1\Viewpoint
07-08-17 08:08 ——— d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
07-08-08 15:32 ——— d——– C:\DOCUME~1\howardp\APPLIC~1\acccore
07-08-08 15:31 ——— d——– C:\Program Files\AIM6
07-08-08 15:31 ——— d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL OCP
07-08-08 15:31 ——— d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
07-08-08 15:30 ——— d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL Downloads
07-08-08 15:28 ——— d-a—— C:\Program Files\Common Files\AOL
06-06-30 12:06 86016 –a—— C:\DOCUME~1\HOWARD~1.CIT\IDHWTSS1.dll
06-06-30 12:06 81920 –a—— C:\DOCUME~1\HOWARD~1.CIT\hobjni.dll
06-04-19 09:43 36868 –a—— C:\DOCUME~1\HOWARD~1.CIT\PrtDLL.dll
05-12-16 12:57 36868 –a—— C:\DOCUME~1\howardp\PrtDLL.dll
03-01-21 22:08 271 –ah—– C:\Program Files\DESKTOP.INI
03-01-21 22:08 21952 –ah—– C:\Program Files\FOLDER.HTT
02-07-23 18:00 32528 –a—— C:\WINNT\INF\WBFIRDMA.SYS
2005-07-29 20:24:26 472 –sha-r C:\WINNT\RDgwMExBVElUVURF\lG0TgHU1pH5opolI.vbs
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Synchronization Manager"="mobsync.exe" [03-06-19 15:05 C:\WINNT\SYSTEM32\mobsync.exe]
"Apoint"="C:\Program Files\Apoint\Apoint.exe" [02-08-22 07:28 ]
"NvCplDaemon"="C:\WINNT\system32\NvCpl.dll" [03-08-12 14:12 ]
"nwiz"="nwiz.exe" [03-08-12 14:12 C:\WINNT\SYSTEM32\nwiz.exe]
"CARPService"="carpserv.exe" [03-01-23 03:06 C:\WINNT\SYSTEM32\carpserv.exe]
"bascstray"="BascsTray.exe" []
"PRPCMonitor"="PRPCUI.exe" [02-10-06 15:00 C:\WINNT\SYSTEM32\prpcui.exe]
"DVDSentry"="C:\WINNT\System32\DSentry.exe" [02-07-16 22:18 ]
"CreateCD50"="C:\Program Files\Common Files\Adaptec Shared\CreateCD\CreateCD50.exe" [02-12-17 01:14 ]
"AdaptecDirectCD"="C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" [02-12-17 00:28 ]
"SDJobCheck"="triggusr.exe" []
"DPC2"="dpc2x.exe" [03-03-18 09:24 C:\WINNT\dpc2x.exe]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [04-03-06 20:36 ]
"Share-to-Web Namespace Daemon"="C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe" [01-07-03 10:11 ]
"McAfeeUpdaterUI"="C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" [04-08-25 02:50 ]
"ShStatEXE"="C:\Program Files\Network Associates\VirusScan\SHSTAT.exe" [04-09-22 20:00 ]
"Network Associates Error Reporting Service"="C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe" [03-10-07 09:48 ]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [07-07-12 04:00 ]
"ZCfgSvc.exe"="C:\WINNT\system32\ZCfgSvc.exe" [05-07-05 01:32 ]
"PRONoMgr.exe"="C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe" [05-06-27 08:31 ]
"CAPing"="C:\Program Files\Common Files\Citianywhere\CAPing.exe" [04-09-13 11:16 ]
"IPInSightMonitor 01"="C:\Program Files\Citianywhere\CA\IPInsight\IPMon32.exe" [02-10-31 12:13 ]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [07-01-28 23:34 ]
"svhost"="C:\WINNT\svhost.exe" []
"XoftSpySE"="C:\Program Files\XoftSpySE\xoftspy.exe" [07-07-18 16:41 ]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Internat.exe"="internat.exe" [02-07-23 18:00 C:\WINNT\SYSTEM32\INTERNAT.EXE]
"Aim6"="" []

[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"^SetupICWDesktop"=C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"internat.exe"=internat.exe

C:\DOCUME~1\ALLUSE~1\STARTM~1\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 23:05:26]
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2003-09-03 11:43:56]
Microsoft Find Fast.lnk - C:\Program Files\Microsoft Office\Office\FINDFAST.EXE [1997-07-11]
Microsoft Office.lnk - C:\Office 2K\Office\OSA9.EXE [2000-01-21 04:15:54]
Office Startup.lnk - C:\Program Files\Microsoft Office\Office\OSA.EXE [1997-07-11]
Run Google Web Accelerator.lnk - C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden.exe [2007-07-09 22:24:38]
Symantec Fax Starter Edition Port.lnk - C:\Office 2K\Office\1033\OLFSNT40.EXE [1998-12-24 00:51:54]

C:\DOCUME~1\howardp\STARTM~1\Programs\Startup\
DING!.lnk - C:\Program Files\Southwest Airlines\Ding\Ding.exe [2006-06-22 14:15:48]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"disablecad"=0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"System"="lsass.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Sebring]
C:\WINNT\system32\LgNotify.dll 05-07-05 01:33 188482 C:\WINNT\SYSTEM32\LgNotify.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Notification Packages"= FPNWCLNT

R0 fasttrak;fasttrak;C:\WINNT\system32\DRIVERS\fasttrak.sys
R0 Fd16_700;Fd16_700;C:\WINNT\system32\DRIVERS\fd16_700.sys
R0 mraid2k;mraid2k;C:\WINNT\system32\DRIVERS\mraid2k.sys
R1 cdudf;cdudf;C:\WINNT\system32\drivers\cdudf.sys
R1 NaiAvTdi1;NaiAvTdi1;C:\WINNT\system32\drivers\mvstdi5x.sys
R1 pwd_2k;pwd_2k;C:\WINNT\system32\drivers\pwd_2k.sys
R1 UdfReadr;UdfReadr;C:\WINNT\system32\drivers\UdfReadr.sys
R2 BASFND;BASFND;\??\C:\WINNT\System32\Drivers\BASFND.sys
R2 PRPC;PRPC;C:\WINNT\system32\drivers\PRPC.sys
R2 SnaDdm;SNA DDM Service;C:\Program Files\Host Integration Server\system\ddmserv.exe
R2 SOE Wrap Send Service;SOE Send Service;C:\WINNT\system32\SndServ.exe
R2 StreamDispatcher;StreamDispatcher;C:\WINNT\system32\DRIVERS\strmdisp.sys
R2 SysExec;SOE Admin Service;C:\WINNT\system32\sysexec.exe
R2 VisualLaunchIPI_Citigroup_Citi;Visual IP InSight Client (Citigroup);C:\Program Files\Citianywhere\CA\IPInsight\launchipi.exe
R3 Eacfilt;Eacfilt Miniport;C:\WINNT\system32\DRIVERS\eacfilt.sys
R3 GTICARD;GTICARD;C:\WINNT\system32\DRIVERS\gticard.sys
R3 IPSECSHM;Nortel IPSECSHM Adapter;C:\WINNT\system32\DRIVERS\ipsecw2k.sys
R3 mmc_2K;mmc_2K;C:\WINNT\system32\drivers\mmc_2K.sys
R3 usbhub20;USB Hub Support;C:\WINNT\system32\DRIVERS\usbhub20.sys
R3 w70n5;Intel® PRO/Wireless 7100 Adapter Driver for Windows 2000;C:\WINNT\system32\DRIVERS\w70n5.sys
S2 IPSECEXT;Nortel Extranet Access Protocol;C:\WINNT\system32\DRIVERS\ipsecw2k.sys
S3 dvd_2K;dvd_2K;C:\WINNT\system32\drivers\dvd_2K.sys
S3 EL90BC;3Com EtherLink XL B/C Adapter Driver;C:\WINNT\system32\DRIVERS\el90xbc5.sys
S3 NAL;Nal Service ;\??\C:\WINNT\system32\Drivers\iqvw32.sys
S3 OnePointDomainAdminService;Active Directory Migration Agent;C:\WINNT\OnePointDomainAgent\DCTAgentService.exe
S3 OracleOraHome92ClientCache;OracleOraHome92ClientCache;C:\oracle\ora92\BIN\ONRSD.EXE
S3 usbprint;Microsoft USB PRINTER Class;C:\WINNT\system32\DRIVERS\usbprint.sys
S3 wvlan48;Lucent-Based IEEE 802.11 PC Card Driver;C:\WINNT\system32\DRIVERS\wvlan48.sys

*Newly Created Service* - IPNAT
*Newly Created Service* - RASAUTO
*Newly Created Service* - SHAREDACCESS
.
Contents of the 'Scheduled Tasks' folder
"2007-09-06 19:23:35 C:\WINNT\Tasks\icat_dpc2x.job"
- C:\WINNT\dpc2x.exe
"2007-08-22 02:37:31 C:\WINNT\Tasks\McQcTask.job"
- c:\program files\mcafee\mqc\QcConsol.exe
"2007-09-21 13:39:29 C:\WINNT\Tasks\XoftSpySE 2.job"
- C:\Program Files\XoftSpySE\XoftSpy.exe
"2007-09-20 11:16:19 C:\WINNT\Tasks\XoftSpySE.job"
- C:\Program Files\XoftSpySE\XoftSpy.exe
.
**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-09-21 09:39:20
Windows 5.0.2195 Service Pack 4 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-09-21 9:40:41 - machine was rebooted
C:\ComboFix-quarantined-files.txt … 07-09-21 09:40
.
— E O F —


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:50:15 AM, on 9/21/2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\System32\SCardSvr.exe
C:\WINNT\system32\S24EvMon.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINNT\System32\basfipm.exe
C:\WINNT\SYSTEM32\DWRCS.EXE
C:\WINNT\System32\svchost.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINNT\system32\nvsvc32.exe
C:\oracle\ora92\bin\omtsreco.exe
C:\WINNT\system32\RegSrvc.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\tcpsvcs.exe
C:\Program Files\Host Integration Server\system\ddmserv.exe
C:\WINNT\system32\SndServ.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\system32\sysexec.exe
C:\Program Files\Citianywhere\CA\IPInsight\launchipi.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\faxsvc.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\ZCfgSvc.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\1XConfig.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINNT\system32\carpserv.exe
C:\WINNT\system32\PRPCUI.exe
C:\WINNT\System32\DSentry.exe
C:\Program Files\Common Files\Adaptec Shared\CreateCD\CreateCD50.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Common Files\Citianywhere\CAPing.exe
C:\Program Files\Citianywhere\CA\IPInsight\IPMon32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden.exe
C:\Office 2K\Office\1033\OLFSNT40.EXE
C:\Program Files\Southwest Airlines\Ding\Ding.exe
C:\Program Files\Google\Web Accelerator\googlewebaccclient.exe
c:\program files\mcafee\msc\mcuimgr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://localhost:9100/proxy.pac
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Web Accelerator Helper - {69A87B7D-DE56-4136-9655-716BA50C19C7} - C:\Program Files\Google\Web Accelerator\GoogleWebAccToolbar.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll (file missing)
O3 - Toolbar: Google Web Accelerator - {DB87BFA2-A2E3-451E-8E5A-C89982D87CBF} - C:\Program Files\Google\Web Accelerator\GoogleWebAccToolbar.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [bascstray] BascsTray.exe
O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe
O4 - HKLM\..\Run: [DVDSentry] C:\WINNT\System32\DSentry.exe
O4 - HKLM\..\Run: [CreateCD50] "C:\Program Files\Common Files\Adaptec Shared\CreateCD\CreateCD50.exe" -r
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [SDJobCheck] triggusr.exe
O4 - HKLM\..\Run: [DPC2] dpc2x.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [ZCfgSvc.exe] C:\WINNT\system32\ZCfgSvc.exe
O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [CAPing] C:\Program Files\Common Files\Citianywhere\CAPing.exe
O4 - HKLM\..\Run: [IPInSightMonitor 01] "C:\Program Files\Citianywhere\CA\IPInsight\IPMon32.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [svhost] "C:\WINNT\svhost.exe"
O4 - HKLM\..\Run: [XoftSpySE] C:\Program Files\XoftSpySE\xoftspy.exe -s
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - HKUS\.DEFAULT\..\Run: [internat.exe] internat.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
O4 - .DEFAULT Startup: DING!.lnk = C:\Program Files\Southwest Airlines\Ding\Ding.exe (User 'Default user')
O4 - Startup: DING!.lnk = C:\Program Files\Southwest Airlines\Ding\Ding.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Office 2K\Office\OSA9.EXE
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: Run Google Web Accelerator.lnk = C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden.exe
O4 - Global Startup: Symantec Fax Starter Edition Port.lnk = C:\Office 2K\Office\1033\OLFSNT40.EXE
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 5.0\resources\en-US\local\search.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINNT\System32\Shdocvw.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = citifi.cfna.dyn.nsroot.net
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = citifi.cfna.dyn.nsroot.net
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = citifi.cfna.dyn.nsroot.net
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Broadcom ASF IP monitoring service v3.0.1 (BAsfIpM) - Broadcom Corp. - C:\WINNT\System32\basfipm.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: DameWare Mini Remote Control (DWMRCS) - DameWare Development LLC - C:\WINNT\SYSTEM32\DWRCS.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: OracleMTSRecoveryService - Oracle Corporation - C:\oracle\ora92\bin\omtsreco.exe
O23 - Service: OracleOraHome92ClientCache - Unknown owner - C:\oracle\ora92\BIN\ONRSD.EXE
O23 - Service: RegSrvc - Intel Corporation - C:\WINNT\system32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINNT\system32\S24EvMon.exe
O23 - Service: SOE Send Service (SOE Wrap Send Service) - Citigroup - C:\WINNT\system32\SndServ.exe
O23 - Service: SOE Admin Service (SysExec) - Salomon Smith Barney - C:\WINNT\system32\sysexec.exe
O23 - Service: Visual IP InSight Client (Citigroup) (VisualLaunchIPI_Citigroup_Citi) - Visual Networks - C:\Program Files\Citianywhere\CA\IPInsight\launchipi.exe

–
End of file - 10237 bytes