Hellow there. I'm a student of graphic arts and I need some tech assistance. I searched alot and ran into this thread.

http://forums.whatthetech.com/PC_issue_wit…eed_t94351.html

The guy had very similar problems as I did, so up until a point that it became specific to his situation, I followed a couple of the procedures. In doing so, I got similar results. However, I need to finish, but I don't wanna screw anything up by doing "everything he did".

My PC is a Gateway. I don't know what else to provide, but if instructed I will provide whatever I need to.

So anyway, I can't get on this site at home, there's something preventing that from happening. So, I'm at school and I have some of the same materials that the other guys came in with:



Last, and only SDFix Txt I have right now.



SDFix: Version 1.216
Run by [removed] on Thu 08/14/2008 at 03:31 PM

Microsoft Windows XP [Version 5.1.2600]
Running From: C:\Documents and Settings\[removed]\Desktop\SDFix

Checking Services :


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


Checking Files :

Trojan Files Found:

C:\WINDOWS\system32\lphcprdj0epcl.exe - Deleted
C:\WINDOWS\system32\mLETjJCu.dll - Deleted
C:\WINDOWS\system32\mrgahqxpemhkyaeyi.dll - Deleted
C:\Temp\1cb\syscheck.log - Deleted
C:\Program Files\VnrBlock\VnrBlock20.exe - Deleted
C:\Program Files\VnrBlock\xtarga.gz - Deleted
C:\Program Files\VnrPack\dicts.gz - Deleted
C:\Program Files\VnrPack\ilaupd.exe - Deleted
C:\Program Files\VnrPack\trgts.gz - Deleted
C:\Program Files\VnrPack\VnrPack16.exe - Deleted
C:\Program Files\VnrPack\VnrPack20.exe - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt128.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt2F.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt3.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt39.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt3B.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt3D.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt3F.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt4.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt460.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt469.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt5.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt511.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt590.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt5E0.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt5F.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt6.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt6E8.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt7.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt711.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt71C.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt7A.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt7DD.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt7E2.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt7E4.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt7E6.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt7E8.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt7EC.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt7EE.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt7F0.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt7F8.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt8.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt8D.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.tt9.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.ttB.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.ttD2.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.ttD8.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.ttE2.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\.ttFF.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp3.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp4.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp5.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp6.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp7.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp8.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp9.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpF.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp10.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp11.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp12.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp13.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp14.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp15.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp16.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp17.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp18.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp19.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp1A.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp1B.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp1C.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp1D.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp1E.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp1F.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp20.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp21.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp22.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp23.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp24.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp25.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp26.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp27.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp28.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp29.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp2A.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp2B.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp2C.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp2D.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp2E.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp2F.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp3.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp30.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp31.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp32.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp33.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp34.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp35.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp36.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp37.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp38.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp39.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp3A.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp3B.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp3C.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp3D.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp3E.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp3F.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp4.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp40.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp41.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp42.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp43.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp44.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp45.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp46.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp47.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp48.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp49.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp4A.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp4B.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp4C.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp4D.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp4E.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp4F.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp5.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp50.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp51.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp52.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp53.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp54.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp55.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp56.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp57.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp58.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp59.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp5A.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp5B.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp5C.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp6.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp61.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp62.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp63.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp64.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp65.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp66.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp6E.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp6F.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp7.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp70.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp71.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp72.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp73.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp74.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp75.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp76.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp77.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp78.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp79.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp7A.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp7B.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp7D.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp7E.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp8.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp82.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp83.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp87.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp88.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp9.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp9B.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp9C.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp9D.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp9E.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp9F.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpA0.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpB5.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpB6.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpB7.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpB8.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpB9.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpBA.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpBB.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpBC.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpBD.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpBE.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpBF.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpC0.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpC1.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpC2.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpC3.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpC4.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpC5.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpC6.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpC7.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpC8.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpC9.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpCA.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpCB.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpCC.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpCD.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpCE.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpCF.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpD0.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpD1.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpD2.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpD3.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpD4.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpD5.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpD6.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpD7.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpD8.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpEA.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpEB.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpED.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpEE.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpF.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpF1.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpF2.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpFB.tmp - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\tmpFC.tmp - Deleted
C:\WINDOWS\system32\drivers\core.cache(2).dsk - Deleted
C:\WINDOWS\system32\drivers\core.cache(3).dsk - Deleted
C:\WINDOWS\system32\drivers\core.cache(4).dsk - Deleted
C:\WINDOWS\system32\pac.txt - Deleted



Folder C:\Program Files\VnrBlock - Removed
Folder C:\Program Files\VnrPack - Removed
Folder C:\Temp\1cb - Removed
Folder C:\Temp\tn3 - Removed


Removing Temp Files

ADS Check :



Final Check :

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-14 16:06:24
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden services & system hive …

scanning hidden registry entries …

scanning hidden files …

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services :




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"="C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe:*:Enabled:AOL Application Loader"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe:*:Enabled:AOL"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe:*:Enabled:AOL"
"C:\\Program Files\\America Online 9.0\\waol.exe"="C:\\Program Files\\America Online 9.0\\waol.exe:*:Enabled:AOL"
"C:\\Program Files\\Common Files\\AOL\\TopSpeed\\2.0\\aoltsmon.exe"="C:\\Program Files\\Common Files\\AOL\\TopSpeed\\2.0\\aoltsmon.exe:*:Enabled:AOLTsMon"
"C:\\Program Files\\Common Files\\AOL\\TopSpeed\\2.0\\aoltpspd.exe"="C:\\Program Files\\Common Files\\AOL\\TopSpeed\\2.0\\aoltpspd.exe:*:Enabled:AOLTopSpeed"
"C:\\Program Files\\Common Files\\AOL\\1139877899\\EE\\AOLServiceHost.exe"="C:\\Program Files\\Common Files\\AOL\\1139877899\\EE\\AOLServiceHost.exe:*:Enabled:AOL"
"C:\\Program Files\\Common Files\\AOL\\System Information\\sinf.exe"="C:\\Program Files\\Common Files\\AOL\\System Information\\sinf.exe:*:Enabled:AOL"
"C:\\Program Files\\Common Files\\AOL\\AOL Spyware Protection\\AOLSP Scheduler.exe"="C:\\Program Files\\Common Files\\AOL\\AOL Spyware Protection\\AOLSP Scheduler.exe:*:Enabled:AOL"
"C:\\Program Files\\Common Files\\AOL\\AOL Spyware Protection\\asp.exe"="C:\\Program Files\\Common Files\\AOL\\AOL Spyware Protection\\asp.exe:*:Enabled:AOL"
"C:\\Program Files\\Common Files\\AolCoach\\en_en\\player\\AOLNySEV.exe"="C:\\Program Files\\Common Files\\AolCoach\\en_en\\player\\AOLNySEV.exe:*:Enabled:AOL"
"C:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"="C:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe:*:Enabled:EasyShare"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\World of Warcraft\\WoW-1.11.0-enUS-downloader.exe"="C:\\Program Files\\World of Warcraft\\WoW-1.11.0-enUS-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Program Files\\World of Warcraft\\WoW-1.11.1.5462-to-1.11.2.5464-enUS-downloader.exe"="C:\\Program Files\\World of Warcraft\\WoW-1.11.1.5462-to-1.11.2.5464-enUS-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Program Files\\Common Files\\AOL\\1155794293\\ee\\aolsoftware.exe"="C:\\Program Files\\Common Files\\AOL\\1155794293\\ee\\aolsoftware.exe:*:Enabled:AOL Services"
"C:\\Program Files\\Common Files\\AOL\\1155794293\\ee\\aim6.exe"="C:\\Program Files\\Common Files\\AOL\\1155794293\\ee\\aim6.exe:*:Enabled:AIM"
"C:\\Program Files\\World of Warcraft\\WoW-1.11.2.5464-to-1.12.0.5595-enUS-downloader.exe"="C:\\Program Files\\World of Warcraft\\WoW-1.11.2.5464-to-1.12.0.5595-enUS-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\Program Files\\World of Warcraft\\WoW-1.12.0.5595-to-1.12.1.5875-enUS-downloader.exe"="C:\\Program Files\\World of Warcraft\\WoW-1.12.0.5595-to-1.12.1.5875-enUS-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox"
"C:\\Program Files\\Yahoo! Games\\Bejeweled 2 Deluxe\\WinBej2.exe"="C:\\Program Files\\Yahoo! Games\\Bejeweled 2 Deluxe\\WinBej2.exe:*:Disabled:Bejeweled2"
"C:\\Program Files\\MySpace\\IM\\MySpaceIM.exe"="C:\\Program Files\\MySpace\\IM\\MySpaceIM.exe:*:Enabled:MySpace Instant Messenger"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Documents and Settings\\Owner\\Desktop\\LimeWire\\LimeWire.exe"="C:\\Documents and Settings\\Owner\\Desktop\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

Remaining Files :


File Backups: - C:\DOCUME~1\Owner\Desktop\SDFix\backups\backups.zip

Files with Hidden Attributes :

Wed 13 Oct 2004 1,694,208 ..SH. — "C:\Program Files\Messenger\msmsgs.exe"
Tue 10 Aug 2004 60,416 A.SH. — "C:\Program Files\Outlook Express\msimn.exe"
Wed 18 Oct 2006 64,000 A.SH. — "C:\Program Files\Windows Media Player\wmplayer.exe"
Tue 14 Feb 2006 4,348 A.SH. — "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Wed 11 Apr 2007 0 A.SH. — "C:\Documents and Settings\All Users\DRM\Cache\Indiv05.tmp"
Tue 3 Jul 2007 833 A..H. — "C:\Program Files\Common Files\AOL\IPHSend\IPH.BAK"
Wed 8 Aug 2007 400 A..H. — "C:\Program Files\Common Files\Symantec Shared\COH\COH32LU.reg"
Wed 8 Aug 2007 403 A..H. — "C:\Program Files\Common Files\Symantec Shared\COH\COHDLU.reg"
Fri 19 Mar 2004 67,944 …H. — "C:\Program Files\Simple Star\PhotoShow Deluxe 3\data\PhotoShow Express.exe"
Wed 7 May 2008 0 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\fd0264849c01086f3c6b505dc02dbd44\BIT3.tmp"
Wed 5 Apr 2006 11,116 A.SH. — "C:\Documents and Settings\Owner\My Documents\My Music\License Backup\drmv2key.bak"

Finished!



===


This is the HJT Txt, that I did directly following that^^


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:17:30 PM, on 8/14/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\svchost.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\Rundll32.exe
C:\PROGRA~1\SIMPLE~1\PHOTOS~1\data\Xtras\mssysmgr.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gatewaybiz.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.gateway.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer Provided by Cox High Speed Internet
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 3.1\aoltb.dll
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\2.bin\MWSSRCAS.DLL
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 3.1\aoltb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Easy Gif Animator Toolbar - {35065594-9169-4A34-B167-FC4865038E53} - C:\Program Files\Easy Gif Animator Extension\v3.2.0.0\EasyGifAnimator_Toolbar.dll
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
O4 - HKLM\..\Run: [a8cc9b02] rundll32.exe "C:\WINDOWS\system32\eueutmhy.dll",b
O4 - HKLM\..\Run: [BMabffa89e] Rundll32.exe "C:\WINDOWS\system32\pnyeydam.dll",s
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\SIMPLE~1\PHOTOS~1\data\Xtras\mssysmgr.exe
O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: &AOL; Toolbar Search - c:\program files\aol\aol toolbar 3.1\resources\en-US\local\search.html
O8 - Extra context menu item: &Search; - http://edits.mywebsearch.com/toolbaredits/…html?p=ZNfox000
O8 - Extra context menu item: &Windows; Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/229?cca30940deec4218abf3898b4a34f591
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/230?cca30940deec4218abf3898b4a34f591
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 3.1\aoltb.dll
O9 - Extra button: HP Clipbook - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: HP Smart Select - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {15B782AF-55D8-11D1-B477-006097098764} (Macromedia Authorware Web Player Control) - http://www.phgenit.com/plugin/awarewebplay…cab/awswaxf.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1005.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/m…01/mcinsctl.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1144900545099
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe

–
End of file - 9687 bytes


=============

Last thing here, and again, I can't acess this site at home. So maybe shoot me an e-mail? AIM? MSN?
Whatever the case, let me know. Thank you for any help.