[Resolved] Missing outlook and others after antispyware2009

I'm new to the forum but have been reading for awhile…I was hit by antivirusxp2009 and followed the steps you reccomended, I downloaded Combofix and am posting the log. I'm not sure where to go from here,..I can't open outlook, word or my dvr security cameras so far. I'm not sure if other things are also affected yet


ComboFix 08-10-29.06 - Owner 2008-10-29 9:28:30.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.689 [GMT -6:00]
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Owner\Cookies\anolisybo._sy
C:\Documents and Settings\Owner\Cookies\ogad.db
C:\Documents and Settings\Owner\Cookies\pydow.reg
C:\WINDOWS\Downloaded Program Files\setup.inf
C:\WINDOWS\system32\av.dat

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

——-\Legacy_SERV-U
——-\Legacy_TDSSSERV.SYS)
——-\Service_Serv-U
——-\Service_TDSSserv.sys)


((((((((((((((((((((((((( Files Created from 2008-09-28 to 2008-10-29 )))))))))))))))))))))))))))))))
.

2008-10-29 09:16 . 2008-10-29 09:16 d——– C:\WINDOWS\Sun
2008-10-29 09:16 . 2008-10-29 09:16 d——– C:\Program Files\CCleaner
2008-10-28 07:57 . 2008-10-29 09:15 d——– C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2008-10-28 07:56 . 2008-10-29 09:15 d——– C:\Program Files\Yahoo!
2008-10-25 13:18 . 2008-10-29 09:15 d——– C:\Documents and Settings\Owner\.housecall6.6
2008-10-25 13:18 . 2005-04-13 03:48 49,265 –a—— C:\WINDOWS\SYSTEM32\jpicpl32.cpl
2008-10-25 13:17 . 2008-10-29 09:16 d——– C:\Program Files\Java
2008-10-25 13:16 . 2008-10-25 13:16 d——– C:\Program Files\Common Files\Java
2008-10-25 13:04 . 2008-10-29 09:16 d——– C:\Program Files\RegCure
2008-10-24 18:18 . 2008-10-24 18:18 61,440 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\degafm.sys
2008-10-24 17:08 . 2008-10-24 17:08 d——– C:\Program Files\Malwarebytes' Anti-Malware
2008-10-24 17:08 . 2008-10-24 17:08 d——– C:\Documents and Settings\Owner\Application Data\Malwarebytes
2008-10-24 17:08 . 2008-10-24 17:08 d——– C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-10-24 17:08 . 2008-10-22 16:10 38,496 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\mbamswissarmy.sys
2008-10-24 17:08 . 2008-10-22 16:10 15,504 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\mbam.sys
2008-10-24 14:14 . 2008-10-24 14:14 719 –a—— C:\WINDOWS\Sysvxd.exe
2008-10-24 12:37 . 2008-10-24 12:37 19,836 –a—— C:\Documents and Settings\Owner\Application Data\awejofihe.dat
2008-10-24 12:37 . 2008-10-24 12:37 18,927 –a—— C:\Documents and Settings\Owner\Application Data\nabuwilyha.bat
2008-10-24 12:37 . 2008-10-24 12:37 17,176 –a—— C:\WINDOWS\ivehicotez.inf
2008-10-24 12:37 . 2008-10-24 12:37 16,571 –a—— C:\WINDOWS\kojuf.exe
2008-10-24 12:37 . 2008-10-24 12:37 16,089 –a—— C:\WINDOWS\getigyvahi.lib
2008-10-24 12:37 . 2008-10-24 12:37 15,374 –a—— C:\Documents and Settings\All Users\Application Data\rebavam.reg
2008-10-24 12:37 . 2008-10-24 12:37 13,191 –a—— C:\WINDOWS\uzyzyfa.scr
2008-10-24 12:37 . 2008-10-24 12:37 12,750 –a—— C:\WINDOWS\qanux.dat
2008-10-24 12:37 . 2008-10-24 12:37 12,262 –a—— C:\WINDOWS\furuji.vbs
2008-10-24 12:37 . 2008-10-24 12:37 12,246 –a—— C:\WINDOWS\SYSTEM32\wuxy.com
2008-10-24 12:37 . 2008-10-24 12:37 10,733 –a—— C:\WINDOWS\SYSTEM32\odacil.dll
2008-10-24 12:37 . 2008-10-24 12:37 10,523 –a—— C:\Documents and Settings\Owner\Application Data\xadesuwad.bat
2008-10-24 12:37 . 2008-10-24 12:37 10,253 –a—— C:\Documents and Settings\Owner\Application Data\ezekatequ.dat
2008-10-24 12:37 . 2008-10-24 12:37 10,117 –a—— C:\Documents and Settings\Owner\Application Data\fixulu.dll
2008-10-24 12:37 . 2008-10-24 12:37 10,001 –a—— C:\Documents and Settings\Owner\Application Data\simacyco.scr
2008-10-24 11:10 . 2001-08-18 06:00 235,520 –a—— C:\WINDOWS\SYSTEM32\DLLCACHE\mssoap1.dll
2008-10-24 11:10 . 2001-08-18 06:00 25,088 –a—— C:\WINDOWS\SYSTEM32\DLLCACHE\wisc10.dll
2008-10-24 11:10 . 2001-08-18 06:00 23,552 –a—— C:\WINDOWS\SYSTEM32\DLLCACHE\mssoapr.dll
2008-10-24 11:03 . 2008-10-24 11:03 19,124 –a—— C:\WINDOWS\SYSTEM32\riryvugog.lib
2008-10-24 11:03 . 2008-10-24 11:03 19,072 –a—— C:\WINDOWS\SYSTEM32\imocebe.exe
2008-10-24 11:03 . 2008-10-24 11:03 18,631 –a—— C:\WINDOWS\ebicowodoh._sy
2008-10-24 11:03 . 2008-10-24 11:03 17,789 –a—— C:\WINDOWS\fimipely.ban
2008-10-24 11:03 . 2008-10-24 11:03 16,851 –a—— C:\WINDOWS\baxecy._dl
2008-10-24 11:03 . 2008-10-24 11:03 14,871 –a—— C:\WINDOWS\fimak.ban
2008-10-24 11:03 . 2008-10-24 11:03 12,323 –a—— C:\WINDOWS\umeqevyb.scr
2008-10-24 11:03 . 2008-10-24 11:03 11,509 –a—— C:\WINDOWS\otymixogy.inf
2008-10-24 11:03 . 2008-10-24 11:03 10,259 –a—— C:\WINDOWS\uvyf.com
2008-10-24 10:41 . 2008-10-24 10:41 164 –a—— C:\WINDOWS\SYSTEM32\TDSSosvd.dat
2008-10-24 02:19 . 2008-10-15 10:34 337,408 ——— C:\WINDOWS\SYSTEM32\DLLCACHE\netapi32.dll
2008-10-16 03:05 . 2008-08-14 04:11 2,189,184 ——— C:\WINDOWS\SYSTEM32\DLLCACHE\ntoskrnl.exe
2008-10-16 03:05 . 2008-08-14 04:09 2,145,280 ——— C:\WINDOWS\SYSTEM32\DLLCACHE\ntkrnlmp.exe
2008-10-16 03:05 . 2008-08-14 03:33 2,066,048 ——— C:\WINDOWS\SYSTEM32\DLLCACHE\ntkrnlpa.exe
2008-10-16 03:05 . 2008-08-14 03:33 2,023,936 ——— C:\WINDOWS\SYSTEM32\DLLCACHE\ntkrpamp.exe
2008-10-16 03:05 . 2008-09-15 06:12 1,846,400 ——— C:\WINDOWS\SYSTEM32\DLLCACHE\win32k.sys
2008-10-16 03:04 . 2008-09-08 04:41 333,824 ——— C:\WINDOWS\SYSTEM32\DLLCACHE\srv.sys
2008-10-09 10:07 . 2008-10-09 10:07 d——– C:\WINDOWS\SYSTEM32\scripting
2008-10-09 10:07 . 2008-10-09 10:07 d——– C:\WINDOWS\SYSTEM32\en
2008-10-09 10:07 . 2008-10-09 10:07 d——– C:\WINDOWS\l2schemas
2008-10-09 08:48 . 2008-10-09 08:51 d——– C:\801f0f5ce00d025081

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-29 15:15 ——— d—–w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-10-27 15:20 ——— d—–w C:\Program Files\Spybot - Search & Destroy
2008-10-24 18:38 ——— d—–w C:\Program Files\Kodak
2008-10-24 17:13 ——— d—–w C:\Program Files\Windows Defender
2008-10-24 17:13 ——— d—–w C:\Program Files\Nevo
2008-10-24 17:13 ——— d—–w C:\Program Files\Microsoft Works
2008-10-24 17:13 ——— d—–w C:\Program Files\Microsoft ActiveSync
2008-10-24 17:13 ——— d—–w C:\Program Files\Lavasoft
2008-10-24 17:12 ——— d—–w C:\Program Files\HP
2008-10-24 17:10 ——— d—–w C:\Program Files\Dell Computer
2008-10-24 17:10 ——— d—–w C:\Program Files\Common Files\Symantec Shared
2008-10-24 17:09 ——— d—–w C:\Program Files\Common Files\Adobe
2008-10-24 14:00 ——— d—–w C:\Documents and Settings\LocalService\Application Data\AVG7
2008-10-09 15:08 ——— d—–w C:\Documents and Settings\Owner\Application Data\AVG7
2008-09-08 10:41 333,824 —-a-w C:\WINDOWS\system32\drivers\srv.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" [2004-02-03 401491]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-13 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2005-10-19 155648]
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2005-10-19 126976]
"Microsoft Works Update Detection"="C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe" [2002-07-16 28672]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2005-01-12 241664]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-02-16 49152]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe" [2005-04-13 36975]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"MSACM.CEGSM"= mobilev.acm
path=
backup=

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Digital Line Detect.lnk]
backup=C:\WINDOWS\pss\Digital Line Detect.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^EPSON Status Monitor 3 Environment Check.lnk]
backup=C:\WINDOWS\pss\EPSON Status Monitor 3 Environment Check.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^NevoMedia Server.lnk]
backup=C:\WINDOWS\pss\NevoMedia Server.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeUpdater]
-ra—— 2007-03-01 10:37 2321600 C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
–a—— 2008-04-13 18:12 15360 C:\WINDOWS\SYSTEM32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\Microsoft ActiveSync\\WCESCOMM.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\WINDOWS\\system32\\sessmgr.exe"=
"%windir%\\system32\\sessmgr.exe"=

R2 ARGUS;ARGUS;C:\WINDOWS\system32\drivers\ARGUS.sys [2003-08-19 65280]
R3 tj2knd5;Terayon Cable Modem (NDIS);C:\WINDOWS\system32\DRIVERS\tj2knd5.sys [2002-10-13 17616]
R3 tj2kunic;Terayon Cable Modem (WDM);C:\WINDOWS\system32\DRIVERS\tj2kunic.sys [2002-10-13 69680]
S3 ZD1211U(Linksys);Linksys Wireless-G USB Network Adapter Driver(Linksys);C:\WINDOWS\system32\DRIVERS\zd1211u.sys [ ]
S4 hpt3xx;hpt3xx;C:\WINDOWS\system32\DRIVERS\hpt3xx.sys [2001-08-17 38144]
.
Contents of the 'Scheduled Tasks' folder

2008-10-28 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe []

2008-10-29 C:\WINDOWS\Tasks\MP Scheduled Scan.job
- C:\Program Files\Windows Defender\MpCmdRun.exe []

2008-10-29 C:\WINDOWS\Tasks\RegCure Program Check.job
- C:\Program Files\RegCure\RegCure.exe [2008-04-21 15:21]

2008-10-25 C:\WINDOWS\Tasks\RegCure.job
- C:\Program Files\RegCure\RegCure.exe [2008-04-21 15:21]
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-!AVG Anti-Spyware - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
HKLM-Run-AdaptecDirectCD - C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
HKU-Default-Run-AVG7_Run - C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe
HKU-Default-Run-DWQueuedReporting - c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe
MSConfigStartUp-Adobe Reader Speed Launcher - C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
MSConfigStartUp-AVG7_CC - C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
MSConfigStartUp-iTunesHelper - C:\Program Files\iTunes\iTunesHelper.exe
MSConfigStartUp-QuickTime Task - C:\Program Files\QuickTime\qttask.exe
MSConfigStartUp-Simple Star PhotoShow Media Manager - C:\PROGRA~1\SIMPLE~1\PHOTOS~1\data\Xtras\mssysmgr.exe


.
——- Supplementary Scan ——-
.
R0 -: HKCU-Main,Start Page = hxxp://www.google.com
R0 -: HKLM-Main,Start Page = hxxp://www.google.com
R1 -: HKCU-Internet Settings,ProxyOverride = localhost
O18 -: WinCE Filter: image/bmp - {86F59FAE-FB3A-11D1-AA72-00C04FAE2D4B} -
O18 -: WinCE Filter: image/gif - {86F59FAE-FB3A-11D1-AA72-00C04FAE2D4B} -
O18 -: WinCE Filter: image/jpeg - {86F59FAE-FB3A-11D1-AA72-00C04FAE2D4B} -
O18 -: WinCE Filter: image/xbm - {86F59FAE-FB3A-11D1-AA72-00C04FAE2D4B} -
O18 -: WinCE Filter: text/asp - {6C5C3074-FFAB-11d1-8EC4-00C04F98D57A} -
O18 -: WinCE Filter: text/html - {6C5C3074-FFAB-11d1-8EC4-00C04F98D57A} -

O16 -: Microsoft XML Parser for Java - file://C:\WINDOWS\Java\classes\xmldso.cab
C:\WINDOWS\Downloaded Program Files\Microsoft XML Parser for Java.osd

O16 -: ppctlcab - hxxp://www.pestscan.com/scanner/ppctlcab.cab
C:\WINDOWS\Downloaded Program Files\OSD406.OSD
C:\WINDOWS\Downloaded Program Files\ppctl.dll

O16 -: {0884DBCD-21DC-433B-B538-31C7F2843462} - hxxp://68.70.102.3/WebCamX.cab
C:\WINDOWS\Downloaded Program Files\Webclient.inf
C:\WINDOWS\System32\MPG4C32.dll
C:\WINDOWS\System32\mpg4ds32.ax
C:\WINDOWS\System32\AvsCodec.dll
C:\WINDOWS\System32\Ijl15.dll
C:\WINDOWS\Downloaded Program Files\Webclient.ocx

O16 -: {192F9A01-8030-48CE-9BC6-B03DE3E613C6} - hxxps://www.peoplepc.com/ppcos/ISP60/Download/ppcwebi.cab
C:\WINDOWS\Downloaded Program Files\ppcwebi.inf
C:\WINDOWS\Downloaded Program Files\ppcwebi.6.5.3.9.dll

O16 -: {CA034DCC-A580-4333-B52F-15F98C42E04C} - hxxps://www.stopzilla.com/_download/Auto_Installer/dwnldr.cab
C:\WINDOWS\Downloaded Program Files\dwnldr.inf
C:\WINDOWS\Downloaded Program Files\dwnldr.dll

O16 -: {DE625294-70E6-45ED-B895-CFFA13AEB044} - hxxp://66.168.50.248/activex/AMC.cab
C:\WINDOWS\Downloaded Program Files\setup.inf
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-29 09:33:26
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
———————— Other Running Processes ————————
.
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\SYSTEM32\RioMSC.exe
C:\WINDOWS\SYSTEM32\ScsiAccess.EXE
C:\WINDOWS\SYSTEM32\fxssvc.exe
C:\Program Files\Java\jre1.5.0_03\bin\jucheck.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkCalRem.exe
C:\WINDOWS\SYSTEM32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2008-10-29 9:38:29 - machine was rebooted
ComboFix-quarantined-files.txt 2008-10-29 15:38:24

Pre-Run: 59,175,718,912 bytes free
Post-Run: 59,307,360,256 bytes free

WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /fastdetect /NoExecute=OptIn

232 — E O F — 2008-10-24 09:01:25

OK,
Done now here is the new log


Logfile of HijackThis v1.99.1
Scan saved at 1:02:37 PM, on 10/31/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\RioMSC.exe
C:\WINDOWS\System32\ScsiAccess.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [Uninstall getPlus® for Adobe] "C:\Program Files\NOS\bin\getPlus_HelperSvc.exe" /UninstallGet1noarp
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\backWeb-7288971.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://palms.pacificpremedia.com
O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab
O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} - http://supportsoft.adelphia.net/sdccommon/…ad/tgctlins.cab
O16 - DPF: {0884DBCD-21DC-433B-B538-31C7F2843462} (WebClient Control) - http://68.70.102.3/WebCamX.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {192F9A01-8030-48CE-9BC6-B03DE3E613C6} (PeoplePC Web Installer) - https://www.peoplepc.com/ppcos/ISP60/Download/ppcwebi.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/200312…meInstaller.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu…b?1206170608578
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {86A88967-7A20-11D2-8EDA-00600818EDB1} (ParallelGraphics Cortona Control) - http://www.parallelgraphics.com/bin/cortvrml.cab
O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - https://www.stopzilla.com/_download/Auto_In…ller/dwnldr.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/p…obat/nos/gp.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - http://66.168.50.248/activex/AMC.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: getPlus® Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)
O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: Intel® NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Rio MSC Manager (RioMSC) - Digital Networks North America, Inc. - C:\WINDOWS\system32\RioMSC.exe
O23 - Service: ScsiAccess - Unknown owner - C:\WINDOWS\System32\ScsiAccess.EXE
O23 - Service: Windows Defender (WinDefend) - Unknown owner - C:\Program Files\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe (file missing)

Here is the Mbm log from yesterday…I'm running another scan right now

Malwarebytes' Anti-Malware 1.30
Database version: 1306
Windows 5.1.2600 Service Pack 3

10/31/2008 12:58:43 PM
mbam-log-2008-10-31 (12-58-43).txt

Scan type: Quick Scan
Objects scanned: 60825
Time elapsed: 12 minute(s), 5 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

here is the Hijackthis log from yesterday…I will run another one as soon as the new mbm log is done

Logfile of HijackThis v1.99.1
Scan saved at 1:02:37 PM, on 10/31/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\RioMSC.exe
C:\WINDOWS\System32\ScsiAccess.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [Uninstall getPlus® for Adobe] "C:\Program Files\NOS\bin\getPlus_HelperSvc.exe" /UninstallGet1noarp
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\backWeb-7288971.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://palms.pacificpremedia.com
O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab
O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} - http://supportsoft.adelphia.net/sdccommon/…ad/tgctlins.cab
O16 - DPF: {0884DBCD-21DC-433B-B538-31C7F2843462} (WebClient Control) - http://68.70.102.3/WebCamX.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {192F9A01-8030-48CE-9BC6-B03DE3E613C6} (PeoplePC Web Installer) - https://www.peoplepc.com/ppcos/ISP60/Download/ppcwebi.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/200312…meInstaller.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu…b?1206170608578
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {86A88967-7A20-11D2-8EDA-00600818EDB1} (ParallelGraphics Cortona Control) - http://www.parallelgraphics.com/bin/cortvrml.cab
O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - https://www.stopzilla.com/_download/Auto_In…ller/dwnldr.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/p…obat/nos/gp.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - http://66.168.50.248/activex/AMC.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: getPlus® Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)
O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: Intel® NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Rio MSC Manager (RioMSC) - Digital Networks North America, Inc. - C:\WINDOWS\system32\RioMSC.exe
O23 - Service: ScsiAccess - Unknown owner - C:\WINDOWS\System32\ScsiAccess.EXE
O23 - Service: Windows Defender (WinDefend) - Unknown owner - C:\Program Files\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe (file missing)

ComboFix 08-11-01.06 - Owner 2008-11-02 8:21:37.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.541 [GMT -7:00]
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\TDSSosvd.dat

.
((((((((((((((((((((((((( Files Created from 2008-10-02 to 2008-11-02 )))))))))))))))))))))))))))))))
.

2008-10-31 08:41 . 2008-10-31 08:41 d——– C:\Documents and Settings\Owner\Application Data\Windows Search
2008-10-31 08:02 . 2008-10-31 08:02 d——– C:\Program Files\Common Files\Adobe AIR
2008-10-31 07:54 . 2008-11-01 15:36 d——– C:\Program Files\NOS
2008-10-31 07:54 . 2008-10-31 07:54 d——– C:\Program Files\Google
2008-10-31 07:54 . 2008-11-01 15:36 d——– C:\Documents and Settings\All Users\Application Data\NOS
2008-10-31 07:36 . 2008-10-31 07:36 d–h—– C:\Program Files\InstallShield Installation Information
2008-10-31 07:36 . 2008-10-31 07:36 d——– C:\Program Files\DSS
2008-10-31 07:35 . 2008-10-31 07:35 d——– C:\Program Files\Common Files\InstallShield
2008-10-30 15:38 . 2008-10-30 15:40 d——– C:\WINDOWS\ShellNew
2008-10-30 15:38 . 2008-10-30 15:38 d——– C:\Program Files\Common Files\L&H
2008-10-30 15:35 . 2008-10-31 08:58 d–h—– C:\$AVG8.VAULT$
2008-10-30 14:28 . 2008-10-30 14:28 d——– C:\Documents and Settings\Owner\Application Data\Windows Desktop Search
2008-10-30 14:27 . 2008-10-30 14:27 d——– C:\WINDOWS\SYSTEM32\GroupPolicy
2008-10-30 14:27 . 2008-10-30 14:27 d——– C:\Program Files\Windows Desktop Search
2008-10-30 14:26 . 2008-10-30 14:27 1,393 –a—— C:\WINDOWS\imsins.BAK
2008-10-30 14:25 . 2008-03-07 10:02 192,000 ——— C:\WINDOWS\SYSTEM32\DLLCACHE\offfilt.dll
2008-10-30 14:25 . 2008-03-07 10:02 98,304 ——— C:\WINDOWS\SYSTEM32\DLLCACHE\nlhtml.dll
2008-10-30 14:25 . 2008-03-07 10:02 29,696 ——— C:\WINDOWS\SYSTEM32\DLLCACHE\mimefilt.dll
2008-10-30 14:10 . 2008-10-30 14:10 d——– C:\Documents and Settings\Owner\Application Data\Microsoft Web Folders
2008-10-30 14:08 . 2008-06-10 01:32 73,728 –a—— C:\WINDOWS\SYSTEM32\javacpl.cpl
2008-10-30 13:57 . 2008-11-02 08:08 d——– C:\WINDOWS\SYSTEM32\DRIVERS\Avg
2008-10-30 13:57 . 2008-10-30 13:57 d——– C:\Program Files\AVG
2008-10-30 13:57 . 2008-10-30 13:57 d——– C:\Documents and Settings\All Users\Application Data\avg8
2008-10-30 13:57 . 2008-10-30 14:05 97,928 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\avgldx86.sys
2008-10-30 13:57 . 2008-10-30 13:57 10,520 –a—— C:\WINDOWS\SYSTEM32\avgrsstx.dll
2008-10-29 09:35 . 2008-10-29 09:35 d——– C:\WINDOWS\Sun
2008-10-29 09:35 . 2008-10-29 09:35 d——– C:\Program Files\CCleaner
2008-10-28 06:57 . 2008-10-29 09:35 d——– C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2008-10-28 06:56 . 2008-10-29 09:35 d——– C:\Program Files\Yahoo!
2008-10-25 12:18 . 2008-10-29 09:35 d——– C:\Documents and Settings\Owner\.housecall6.6
2008-10-25 12:17 . 2008-10-30 14:08 d——– C:\Program Files\Java
2008-10-25 12:16 . 2008-10-25 12:16 d——– C:\Program Files\Common Files\Java
2008-10-24 17:18 . 2008-10-24 17:18 61,440 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\degafm.sys
2008-10-24 16:08 . 2008-10-24 16:08 d——– C:\Program Files\Malwarebytes' Anti-Malware
2008-10-24 16:08 . 2008-10-24 16:08 d——– C:\Documents and Settings\Owner\Application Data\Malwarebytes
2008-10-24 16:08 . 2008-10-24 16:08 d——– C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-10-24 16:08 . 2008-10-22 15:10 38,496 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\mbamswissarmy.sys
2008-10-24 16:08 . 2008-10-22 15:10 15,504 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\mbam.sys
2008-10-24 13:14 . 2008-10-24 13:14 719 –a—— C:\WINDOWS\Sysvxd.exe
2008-10-24 11:37 . 2008-10-24 11:37 19,836 –a—— C:\Documents and Settings\Owner\Application Data\awejofihe.dat
2008-10-24 11:37 . 2008-10-24 11:37 18,927 –a—— C:\Documents and Settings\Owner\Application Data\nabuwilyha.bat
2008-10-24 11:37 . 2008-10-24 11:37 17,176 –a—— C:\WINDOWS\ivehicotez.inf
2008-10-24 11:37 . 2008-10-24 11:37 16,571 –a—— C:\WINDOWS\kojuf.exe
2008-10-24 11:37 . 2008-10-24 11:37 16,089 –a—— C:\WINDOWS\getigyvahi.lib
2008-10-24 11:37 . 2008-10-24 11:37 15,374 –a—— C:\Documents and Settings\All Users\Application Data\rebavam.reg
2008-10-24 11:37 . 2008-10-24 11:37 13,191 –a—— C:\WINDOWS\uzyzyfa.scr
2008-10-24 11:37 . 2008-10-24 11:37 12,750 –a—— C:\WINDOWS\qanux.dat
2008-10-24 11:37 . 2008-10-24 11:37 12,262 –a—— C:\WINDOWS\furuji.vbs
2008-10-24 11:37 . 2008-10-24 11:37 12,246 –a—— C:\WINDOWS\SYSTEM32\wuxy.com
2008-10-24 11:37 . 2008-10-24 11:37 10,733 –a—— C:\WINDOWS\SYSTEM32\odacil.dll
2008-10-24 11:37 . 2008-10-24 11:37 10,523 –a—— C:\Documents and Settings\Owner\Application Data\xadesuwad.bat
2008-10-24 11:37 . 2008-10-24 11:37 10,253 –a—— C:\Documents and Settings\Owner\Application Data\ezekatequ.dat
2008-10-24 11:37 . 2008-10-24 11:37 10,117 –a—— C:\Documents and Settings\Owner\Application Data\fixulu.dll
2008-10-24 11:37 . 2008-10-24 11:37 10,001 –a—— C:\Documents and Settings\Owner\Application Data\simacyco.scr
2008-10-24 10:10 . 2001-08-18 05:00 235,520 –a—— C:\WINDOWS\SYSTEM32\DLLCACHE\mssoap1.dll
2008-10-24 10:10 . 2001-08-18 05:00 25,088 –a—— C:\WINDOWS\SYSTEM32\DLLCACHE\wisc10.dll
2008-10-24 10:10 . 2001-08-18 05:00 23,552 –a—— C:\WINDOWS\SYSTEM32\DLLCACHE\mssoapr.dll
2008-10-24 10:03 . 2008-10-24 10:03 19,124 –a—— C:\WINDOWS\SYSTEM32\riryvugog.lib
2008-10-24 10:03 . 2008-10-24 10:03 19,072 –a—— C:\WINDOWS\SYSTEM32\imocebe.exe
2008-10-24 10:03 . 2008-10-24 10:03 18,631 –a—— C:\WINDOWS\ebicowodoh._sy
2008-10-24 10:03 . 2008-10-24 10:03 17,789 –a—— C:\WINDOWS\fimipely.ban
2008-10-24 10:03 . 2008-10-24 10:03 16,851 –a—— C:\WINDOWS\baxecy._dl
2008-10-24 10:03 . 2008-10-24 10:03 14,871 –a—— C:\WINDOWS\fimak.ban
2008-10-24 10:03 . 2008-10-24 10:03 12,323 –a—— C:\WINDOWS\umeqevyb.scr
2008-10-24 10:03 . 2008-10-24 10:03 11,509 –a—— C:\WINDOWS\otymixogy.inf
2008-10-24 10:03 . 2008-10-24 10:03 10,259 –a—— C:\WINDOWS\uvyf.com
2008-10-24 01:19 . 2008-10-15 09:34 337,408 ——— C:\WINDOWS\SYSTEM32\DLLCACHE\netapi32.dll
2008-10-16 02:05 . 2008-08-14 03:11 2,189,184 ——— C:\WINDOWS\SYSTEM32\DLLCACHE\ntoskrnl.exe
2008-10-16 02:05 . 2008-08-14 03:09 2,145,280 ——— C:\WINDOWS\SYSTEM32\DLLCACHE\ntkrnlmp.exe
2008-10-16 02:05 . 2008-08-14 02:33 2,066,048 ——— C:\WINDOWS\SYSTEM32\DLLCACHE\ntkrnlpa.exe
2008-10-16 02:05 . 2008-08-14 02:33 2,023,936 ——— C:\WINDOWS\SYSTEM32\DLLCACHE\ntkrpamp.exe
2008-10-16 02:05 . 2008-09-15 05:12 1,846,400 ——— C:\WINDOWS\SYSTEM32\DLLCACHE\win32k.sys
2008-10-16 02:04 . 2008-09-08 03:41 333,824 ——— C:\WINDOWS\SYSTEM32\DLLCACHE\srv.sys
2008-10-09 09:07 . 2008-10-09 09:07 d——– C:\WINDOWS\SYSTEM32\scripting
2008-10-09 09:07 . 2008-10-09 09:07 d——– C:\WINDOWS\SYSTEM32\en
2008-10-09 09:07 . 2008-10-09 09:07 d——– C:\WINDOWS\l2schemas
2008-10-09 07:48 . 2008-10-09 07:51 d——– C:\801f0f5ce00d025081

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-01 09:05 ——— d—–w C:\Program Files\Microsoft ActiveSync
2008-10-31 15:00 ——— d—–w C:\Program Files\Common Files\Adobe
2008-10-30 20:59 ——— d—–w C:\Program Files\Lavasoft
2008-10-30 20:59 ——— d—–w C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-10-30 20:58 ——— d—–w C:\Documents and Settings\All Users\Application Data\Grisoft
2008-10-30 20:57 ——— d—–w C:\Program Files\Spybot - Search & Destroy
2008-10-30 20:54 ——— d—–w C:\Documents and Settings\Owner\Application Data\Lavasoft
2008-10-30 20:51 ——— d—–w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-10-24 18:38 ——— d—–w C:\Program Files\Kodak
2008-10-24 17:13 ——— d—–w C:\Program Files\Windows Defender
2008-10-24 17:13 ——— d—–w C:\Program Files\Nevo
2008-10-24 17:13 ——— d—–w C:\Program Files\Microsoft Works
2008-10-24 17:12 ——— d—–w C:\Program Files\HP
2008-10-24 17:10 ——— d—–w C:\Program Files\Dell Computer
2008-10-24 17:10 ——— d—–w C:\Program Files\Common Files\Symantec Shared
2008-10-03 17:41 6,066,176 ——w C:\WINDOWS\SYSTEM32\DLLCACHE\ieframe.dll
2008-09-15 12:12 1,846,400 —-a-w C:\WINDOWS\SYSTEM32\win32k.sys
2008-09-08 10:41 333,824 —-a-w C:\WINDOWS\system32\drivers\srv.sys
2008-08-27 08:24 3,593,216 —-a-w C:\WINDOWS\SYSTEM32\DLLCACHE\mshtml.dll
2008-08-25 08:38 13,824 ——w C:\WINDOWS\SYSTEM32\DLLCACHE\ieudinit.exe
2008-08-25 08:37 70,656 ——w C:\WINDOWS\SYSTEM32\DLLCACHE\ie4uinit.exe
2008-08-23 05:56 635,848 ——w C:\WINDOWS\SYSTEM32\DLLCACHE\iexplore.exe
2008-08-23 05:54 161,792 ——w C:\WINDOWS\SYSTEM32\DLLCACHE\ieakui.dll
2008-08-14 10:11 2,189,184 —-a-w C:\WINDOWS\SYSTEM32\ntoskrnl.exe
2008-08-14 10:04 138,496 ——w C:\WINDOWS\SYSTEM32\DLLCACHE\afd.sys
2008-08-14 09:33 2,066,048 —-a-w C:\WINDOWS\SYSTEM32\ntkrnlpa.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" [2004-02-03 401491]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-13 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2005-10-19 155648]
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2005-10-19 126976]
"Microsoft Works Update Detection"="C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe" [2002-07-16 28672]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2005-01-12 241664]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-02-16 49152]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-10-30 1234712]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2008-05-26 304128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=avgrsstx.dll
path=
backup=

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Digital Line Detect.lnk]
backup=C:\WINDOWS\pss\Digital Line Detect.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^EPSON Status Monitor 3 Environment Check.lnk]
backup=C:\WINDOWS\pss\EPSON Status Monitor 3 Environment Check.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^NevoMedia Server.lnk]
backup=C:\WINDOWS\pss\NevoMedia Server.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
–a—— 2008-04-13 17:12 15360 C:\WINDOWS\SYSTEM32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\Microsoft ActiveSync\\WCESCOMM.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\WINDOWS\\system32\\sessmgr.exe"=
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=

R1 AvgLdx86;AVG Free AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-10-30 97928]
R2 avg8wd;AVG Free8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-10-30 231704]
R3 tj2knd5;Terayon Cable Modem (NDIS);C:\WINDOWS\system32\DRIVERS\tj2knd5.sys [2002-10-13 17616]
R3 tj2kunic;Terayon Cable Modem (WDM);C:\WINDOWS\system32\DRIVERS\tj2kunic.sys [2002-10-13 69680]
S2 ARGUS;ARGUS;C:\WINDOWS\system32\drivers\ARGUS.sys [ ]
S3 ZD1211U(Linksys);Linksys Wireless-G USB Network Adapter Driver(Linksys);C:\WINDOWS\system32\DRIVERS\zd1211u.sys [ ]
S4 hpt3xx;hpt3xx;C:\WINDOWS\system32\DRIVERS\hpt3xx.sys [2001-08-17 38144]

*Newly Created Service* - CATCHME
.
Contents of the 'Scheduled Tasks' folder

2008-10-28 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe []

2008-11-02 C:\WINDOWS\Tasks\MP Scheduled Scan.job
- C:\Program Files\Windows Defender\MpCmdRun.exe []
.
- - - - ORPHANS REMOVED - - - -

MSConfigStartUp-AdobeUpdater - C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe


.
——- Supplementary Scan ——-
.
R0 -: HKCU-Main,Start Page = hxxp://www.google.com
R0 -: HKLM-Main,Start Page = hxxp://www.google.com
R1 -: HKCU-Internet Settings,ProxyOverride = localhost
O8 -: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000

O16 -: Microsoft XML Parser for Java - file://C:\WINDOWS\Java\classes\xmldso.cab
C:\WINDOWS\Downloaded Program Files\Microsoft XML Parser for Java.osd

O16 -: ppctlcab - hxxp://www.pestscan.com/scanner/ppctlcab.cab
C:\WINDOWS\Downloaded Program Files\OSD406.OSD
C:\WINDOWS\Downloaded Program Files\ppctl.dll

O16 -: {0884DBCD-21DC-433B-B538-31C7F2843462} - hxxp://68.70.102.3/WebCamX.cab
C:\WINDOWS\Downloaded Program Files\Webclient.inf
C:\WINDOWS\System32\MPG4C32.dll
C:\WINDOWS\System32\mpg4ds32.ax
C:\WINDOWS\System32\AvsCodec.dll
C:\WINDOWS\System32\Ijl15.dll
C:\WINDOWS\Downloaded Program Files\Webclient.ocx

O16 -: {192F9A01-8030-48CE-9BC6-B03DE3E613C6} - hxxps://www.peoplepc.com/ppcos/ISP60/Download/ppcwebi.cab
C:\WINDOWS\Downloaded Program Files\ppcwebi.inf
C:\WINDOWS\Downloaded Program Files\ppcwebi.6.5.3.9.dll

O16 -: {CA034DCC-A580-4333-B52F-15F98C42E04C} - hxxps://www.stopzilla.com/_download/Auto_Installer/dwnldr.cab
C:\WINDOWS\Downloaded Program Files\dwnldr.inf
C:\WINDOWS\Downloaded Program Files\dwnldr.dll

O16 -: {DE625294-70E6-45ED-B895-CFFA13AEB044} - hxxp://66.168.50.248/activex/AMC.cab
C:\WINDOWS\Downloaded Program Files\setup.inf
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-02 08:24:45
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-11-02 8:27:20
ComboFix-quarantined-files.txt 2008-11-02 15:27:15
ComboFix2.txt 2008-10-29 15:38:30

Pre-Run: 58,623,029,248 bytes free
Post-Run: 59,007,275,008 bytes free

222 — E O F — 2008-11-02 07:09:20



I reinstalled outlook and it works but many of the other programs still don't….My Kodak easy share and my DVR Digital camera system still don't come up. They give a message saying "You are attempting to open a file of type application extension (DLL)" and then asks me if I want to look for a program to open it.

My Kodak doesn't even respond anymore