Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\arservice.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ARPWRMSG.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Digital Media Reader\readericon45G.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\Program Files\DNA\btdna.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\BitTorrent\bittorrent.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Administrator\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Gateway Extended Warranty] "C:\Program Files\Gateway\GWCares\GWCares.exe"
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [readericon] C:\Program Files\Digital Media Reader\readericon45G.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\bigfix.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: Customize Menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Fill Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: RoboForm Toolbar - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1209544639562
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD42/JSCDL/jre/6u6-b90/jinstall-6u6-windows-i586-jc.cab?AuthParam=1211301926_380baa454d20f4cbc15e63dad9b41689&GroupName=JSC&BHost=javadl.sun.com&FilePath=/ESD42/JSCDL/jre/6u6-b90/jinstall-6u6-windows-i586-jc.cab&File=jinstall-6u6-windows-i586-jc.cab
O20 - Winlogon Notify: LBTWlgn - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

 

 

 

ComboFix 08-06-10.5 - Administrator 2008-06-11  9:35:50.3 - NTFSx86
Microsoft Windows XP Professional  5.1.2600.2.1252.1.1033.18.1751 [GMT -7:00]
Running from: C:\Documents and Settings\Administrator\Desktop\ComboFix.exe
 * Created a new restore point
.

(((((((((((((((((((((((((   Files Created from 2008-05-11 to 2008-06-11  )))))))))))))))))))))))))))))))
.

2008-06-11 09:34 . 2008-06-11 09:34 <DIR> d-------- C:\Program Files\SUPERAntiSpyware
2008-06-11 09:34 . 2008-06-11 09:34 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2008-06-11 09:34 . 2008-06-11 09:34 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\SUPERAntiSpyware.com
2008-06-11 09:31 . 2008-06-11 09:31 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2008-06-11 09:15 . 2008-06-11 09:14 102,664 --a------ C:\WINDOWS\system32\drivers\tmcomm.sys
2008-06-11 09:14 . 2008-06-11 09:21 <DIR> d-------- C:\Documents and Settings\Administrator\.housecall6.6
2008-06-10 15:41 . 2008-04-14 04:01 272,128 --------- C:\WINDOWS\system32\drivers\bthport.sys
2008-06-10 15:41 . 2008-04-14 04:01 272,128 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys
2008-05-27 15:16 . 2006-10-04 07:06 1,197,294 -----c--- C:\WINDOWS\system32\dllcache\sysmain.sdb
2008-05-27 15:16 . 2006-10-04 07:06 764,868 -----c--- C:\WINDOWS\system32\dllcache\apph_sp.sdb
2008-05-27 15:16 . 2006-10-04 07:06 217,118 -----c--- C:\WINDOWS\system32\dllcache\apphelp.sdb
2008-05-27 15:15 . 2008-05-27 15:15 <DIR> d-------- C:\Program Files\Windows Media Connect 2
2008-05-27 15:14 . 2008-05-27 15:14 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2008-05-27 15:14 . 2008-05-27 15:14 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2008-05-20 10:02 . 2008-05-20 10:05 <DIR> d-------- C:\Program Files\ConsoleClassix.com
2008-05-20 09:44 . 2008-05-20 09:44 <DIR> d-------- C:\Program Files\Sun
2008-05-20 09:44 . 2008-03-25 02:37 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-11 16:36 --------- d-----w C:\Documents and Settings\Administrator\Application Data\BitTorrent
2008-06-11 16:34 --------- d-----w C:\Documents and Settings\Administrator\Application Data\DNA
2008-06-11 16:33 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-06-11 10:05 116,588 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx
2008-06-11 10:05 10,295,328 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2008-06-08 14:25 --------- d-----w C:\Program Files\World of Warcraft
2008-06-03 17:32 1,671,680 ----a-w C:\WINDOWS\Internet Logs\xDB7.tmp
2008-05-20 16:44 --------- d-----w C:\Program Files\Java
2008-05-18 13:25 427,008 ----a-w C:\WINDOWS\Internet Logs\xDB5.tmp
2008-05-18 13:25 1,607,168 ----a-w C:\WINDOWS\Internet Logs\xDB6.tmp
2008-05-14 09:40 1,900,032 ----a-w C:\WINDOWS\Internet Logs\xDB3.tmp
2008-05-14 09:40 1,599,488 ----a-w C:\WINDOWS\Internet Logs\xDB4.tmp
2008-05-14 03:35 --------- d-----w C:\Program Files\PeerGuardian2
2008-05-10 09:50 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-05-09 01:29 --------- d-----w C:\Documents and Settings\Administrator\Application Data\Helios
2008-05-09 01:28 --------- d-----w C:\Program Files\TextPad 5
2008-05-09 01:09 --------- d-----w C:\Program Files\American Systems
2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
2008-05-07 09:23 --------- d-----w C:\Documents and Settings\Administrator\Application Data\AdobeUM
2008-05-07 05:54 --------- d-----w C:\Program Files\Common Files\Adobe
2008-05-07 04:55 1,288,192 ----a-w C:\WINDOWS\system32\quartz.dll
2008-05-04 20:15 --------- d-----w C:\Documents and Settings\Administrator\Application Data\Ventrilo
2008-05-04 09:28 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-05-03 03:01 --------- d-----w C:\Program Files\SpywareBlaster
2008-05-02 09:43 42,276 ----a-w C:\WINDOWS\Internet Logs\zlclient_2nd_2008_05_02_02_35_44_small.dmp.zip
2008-05-01 22:45 --------- d-----w C:\Program Files\Tortun
2008-05-01 14:48 729,088 ----a-w C:\WINDOWS\Internet Logs\xDB1.tmp
2008-05-01 14:48 1,507,840 ----a-w C:\WINDOWS\Internet Logs\xDB2.tmp
2008-05-01 14:40 --------- d-----w C:\Program Files\Netscape Internet Service
2008-05-01 14:40 --------- d-----w C:\Documents and Settings\All Users\Application Data\Netscape Internet Service
2008-05-01 11:56 178 ----a-w C:\Documents and Settings\Administrator\Application Data\wklnhst.dat
2008-04-30 20:15 --------- d-----w C:\Program Files\Common Files\Blizzard Entertainment
2008-04-30 15:08 --------- d-----w C:\Program Files\Siber Systems
2008-04-30 08:22 --------- d-----w C:\Program Files\Trend Micro
2008-04-30 08:06 --------- d-----w C:\Program Files\MSXML 4.0
2008-04-30 07:08 --------- d-----w C:\Documents and Settings\All Users\Application Data\nView_Profiles
2008-04-30 07:07 --------- d-----w C:\Program Files\Pure Networks
2008-04-30 07:07 --------- d-----w C:\Program Files\Google
2008-04-30 06:39 --------- d-----w C:\Program Files\Yahoo!
2008-04-30 06:39 --------- d-----w C:\Program Files\CCleaner
2008-04-30 06:37 --------- d-----w C:\Program Files\McAfee.com
2008-04-30 06:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\McAfee.com
2008-04-30 06:35 --------- d-----w C:\WINDOWS\system32\config\systemprofile\Application Data\Creative
2008-04-30 06:35 --------- d-----w C:\Program Files\ZoneAlarmSB
2008-04-30 06:35 --------- d-----w C:\Documents and Settings\All Users\Application Data\Creative
2008-04-30 06:35 --------- d-----w C:\Documents and Settings\Administrator\Application Data\Creative
2008-04-30 06:34 --------- d-----w C:\Program Files\Zone Labs
2008-04-30 06:34 --------- d-----w C:\Program Files\TurboTaxOnline
2008-04-30 06:34 --------- d-----w C:\Program Files\Ahead
2008-04-30 06:34 --------- d-----w C:\Documents and Settings\All Users\Application Data\MailFrontier
2008-04-30 06:33 --------- d-----w C:\Program Files\Common Files\Ahead
2008-04-30 06:32 8,552 ----a-w C:\WINDOWS\system32\drivers\asctrm.sys
2008-04-30 06:32 --------- d-----w C:\WINDOWS\system32\config\systemprofile\Application Data\You've Got Pictures Screensaver
2008-04-30 06:32 --------- d-----w C:\Program Files\Real
2008-04-30 06:32 --------- d-----w C:\Program Files\QuickTime
2008-04-30 06:32 --------- d-----w C:\Program Files\Learn2.com
2008-04-30 06:32 --------- d-----w C:\Program Files\Common Files\Real
2008-04-30 06:32 --------- d-----w C:\Program Files\Common Files\Nullsoft
2008-04-30 06:32 --------- d-----w C:\Documents and Settings\All Users\Application Data\QuickTime
2008-04-30 06:32 --------- d-----w C:\Documents and Settings\All Users\Application Data\Pure Networks
2008-04-30 06:32 --------- d-----w C:\Documents and Settings\Administrator\Application Data\You've Got Pictures Screensaver
2008-04-30 06:31 --------- d-----w C:\WINDOWS\system32\config\systemprofile\Application Data\SampleView
2008-04-30 06:31 --------- d-----w C:\Program Files\Intel
2008-04-30 06:31 --------- d-----w C:\Documents and Settings\All Users\Application Data\LogiShrd
2008-04-30 06:31 --------- d-----w C:\Documents and Settings\Administrator\Application Data\SampleView
2008-04-30 06:30 0 ---ha-w C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2008-04-30 06:30 0 ---ha-w C:\WINDOWS\system32\drivers\Msft_Kernel_LMouFilt_01005.Wdf
2008-04-30 06:30 --------- d-----w C:\Program Files\Picture It! Premium 10
2008-04-30 06:30 --------- d-----w C:\Program Files\Digital Media Reader
2008-04-30 06:30 --------- d-----w C:\Program Files\Common Files\Logishrd
2008-04-30 06:30 --------- d-----w C:\Documents and Settings\Administrator\Application Data\Logitech
2008-04-30 06:29 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-04-30 06:29 --------- d-----w C:\Program Files\Logitech
2008-04-30 06:29 --------- d-----w C:\Program Files\CyberLink
2008-04-30 06:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\Logitech
2008-04-30 06:29 --------- d-----w C:\Documents and Settings\Administrator\Application Data\InstallShield
2008-04-30 06:28 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-04-30 06:27 --------- d-----w C:\Program Files\Gateway
2008-04-30 06:27 --------- d-----w C:\Documents and Settings\Administrator\Application Data\GlarySoft
2008-04-30 06:26 --------- d-----w C:\Program Files\Common Files\Java
2008-04-30 06:23 --------- d-----w C:\Program Files\DNA
2008-04-30 06:23 --------- d-----w C:\Program Files\Common Files\New Boundary
2008-04-30 06:23 --------- d-----w C:\Program Files\BitTorrent
2008-04-30 06:23 --------- d-----w C:\Documents and Settings\All Users\Application Data\Prism Deploy
2008-04-30 06:22 --------- d-----w C:\Program Files\Registry Repair
2008-04-30 06:21 --------- d-----w C:\Program Files\Microsoft Streets and Trips
2008-04-30 06:21 --------- d-----w C:\Program Files\Encarta
2008-04-30 06:20 --------- d-----w C:\Program Files\Ventrilo
2008-04-30 06:20 --------- d-----w C:\Program Files\Microsoft Works Suite 2005
2008-04-30 06:20 --------- d-----w C:\Program Files\Microsoft Works
2008-04-30 06:20 --------- d-----w C:\Program Files\Microsoft Money 2005
2008-04-30 06:20 --------- d-----w C:\Program Files\Microsoft ActiveSync
2008-04-30 06:18 --------- d-----w C:\Documents and Settings\All Users\Application Data\RoboForm
2008-04-30 05:57 --------- d-----w C:\Program Files\Windows Defender
2008-04-30 05:51 --------- d-----w C:\Program Files\Alwil Software
2008-04-30 05:47 --------- d-----w C:\Program Files\Napster
2008-04-30 05:46 --------- d-----w C:\Program Files\Common Files\AOL
2008-04-30 05:46 --------- d-----w C:\Documents and Settings\All Users\Application Data\Napster
2008-04-30 05:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\AOL
2008-04-30 05:44 --------- d-----w C:\Program Files\BigFix
.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA}"= "C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL" [2008-04-29 23:35 262144]

[HKEY_CLASSES_ROOT\clsid\{f0d4b239-da4b-4daf-81e4-dfee4931a4aa}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA}"= C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL [2008-04-29 23:35 262144]

[HKEY_CLASSES_ROOT\clsid\{f0d4b239-da4b-4daf-81e4-dfee4931a4aa}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-05-04 12:18 68856]
"BitTorrent DNA"="C:\Program Files\DNA\btdna.exe" [2008-04-29 23:23 289088]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 12:00 15360]
"RoboForm"="C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [2008-04-30 08:08 160592]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 16:45 313472]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-05-28 10:33 1506544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-08-05 21:56 64512]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2008-03-24 19:52 13524992]
"nwiz"="nwiz.exe" [2008-03-24 19:52 1626112 C:\WINDOWS\system32\nwiz.exe]
"Gateway Extended Warranty"="C:\Program Files\Gateway\GWCares\GWCares.exe" [2004-02-08 16:30 73728]
"AlwaysReady Power Message APP"="ARPWRMSG.EXE" [2005-08-02 16:19 77312 C:\WINDOWS\arpwrmsg.exe]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 20:24 32768]
"readericon"="C:\Program Files\Digital Media Reader\readericon45G.exe" [2005-08-27 05:09 139264]
"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2005-10-12 12:30 139264]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"CTHelper"="CTHELPER.EXE" [2005-10-29 20:31 16384 C:\WINDOWS\CTHELPER.EXE]
"CTxfiHlp"="CTXFIHLP.EXE" [2005-10-29 20:31 18944 C:\WINDOWS\system32\CTXFIHLP.EXE]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-05-15 16:19 79224]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2008-03-24 19:52 86016]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-11-29 02:17 55824 C:\WINDOWS\KHALMNPR.Exe]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2008-04-02 20:07 919016]
"MCUpdateExe"="c:\PROGRA~1\mcafee.com\agent\mcupdate.exe" [2005-08-26 14:26 212992]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-04-29 23:32 98304]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe" [2008-03-25 04:28 144784]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-04-23 03:38:16 29696]
BigFix.lnk - C:\Program Files\BigFix\bigfix.exe [2008-04-29 23:28:45 2168360]
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [2008-04-29 23:29:58 789008]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 01:01:04 83360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 10:13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll 2008-01-09 12:30 72208 c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\DNA\\btdna.exe"=
"C:\\Program Files\\BitTorrent\\bittorrent.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-15 16:20]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-15 16:16]
R3 ha20x2k;Creative 20X HAL Driver;C:\WINDOWS\system32\drivers\ha20x2k.sys [2005-10-29 20:16]

*Newly Created Service* - SASDIFSV
*Newly Created Service* - SASENUM
*Newly Created Service* - SASKUTIL
*Newly Created Service* - TMCOMM
.
Contents of the 'Scheduled Tasks' folder
"2008-06-11 10:09:32 C:\WINDOWS\Tasks\MP Scheduled Scan.job"
- C:\Program Files\Windows Defender\MpCmdRun.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-11 09:38:00
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\explorer.exe
-> C:\WINDOWS\system32\nview.dll
.
Completion time: 2008-06-11  9:38:55
ComboFix-quarantined-files.txt  2008-06-11 16:38:48
ComboFix2.txt  2008-05-04 09:19:28

Pre-Run: 277,692,137,472 bytes free
Post-Run: 277,689,974,784 bytes free

226 --- E O F --- 2008-06-11 06:13:53

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 06/11/2008 at 09:48 AM

Application Version : 4.15.1000

Core Rules Database Version : 3479
Trace Rules Database Version: 1470

Scan type       : Quick Scan
Total Scan Time : 00:09:19

Memory items scanned      : 429
Memory threats detected   : 0
Registry items scanned    : 430
Registry threats detected : 0
File items scanned        : 8296
File threats detected     : 1

Adware.Tracking Cookie
 C:\Documents and Settings\Administrator\Cookies\administrator@indextools[2].txt

 

Here is all the logs from the progs require...please help me