Solved Virus or Something on new computer after downloading antivirus

[Resolved] Virus or Something on new computer after downloading antivirus

I RECENTLY GOT A COMPUTER THAT HAD WINDOWS INSTALLED BUT NO ANTI VIRUS. I HAD AVG ON OLD COMPUTER BUT I HAVE AVAST ON ANOTHER. I DECIDED TO DOWNLOAD AVAST FROM AVAST.COM LIKE MY OTHER. IN THE PROCESS OF THE DOWNLOAD EVEN AFTER I CHOSE TO HAVE IT DOWN LOAD IN ENGLISH SOMETHING HAPPENED AND IT DOWNLOADED IN A DIFFERENT LANGUAGE THAT I COULDN'T EVEN READ. THEN I TRIED TO GET IT OFF MY COMPUTER. I EVEN USED REVO UNINSTALLER AND IT STILL WOULN'DT COME OFF. THEN I NOTIED THAT ALL MY WINDOWS OR MICROSOFT PAGES WILL NOT LOAD AND MY SYSTEM RESTORE WILL NOT LOAD, CAN'T USE MY HOTMAIL, OR FACEBOOK, YOU CAN GO TO ANY OTHER INTERNET SITES BUT CAN'T GO TO MICROSOFT.COM OR RUN ONLINE SCANNERS. i THEN DOWNLOADED AVG AND RAN SCAN TO SEE IF THERE WAS A VIRUS IT DIDN'T DETECT ANYTHING. I ALSO DOWNLOADED MALWAREBYTES AND IT HAS NOT DETECTED ANYTHING. I DID FIND OUT BY READING FORUMS THAT THERE WAS A AVAST UNINSTALL UTILITY. SO I USED THAT AND IT SUPPOSEDLLY FINISHED REMOVING THE REST. BUT IT STILL DIDN'T CHANGE ANYTHING AS FOR AS WINDOWS AND STUFF WORKING. ALSO READING ONE OF YOUR FORUMS I SEEN A POST OF SOMETHING TO MINE AND YOU HAD THEM RUN CMD AND TYPE IN THE MICROSOFT SITES. I DID THAT AND MY NUMBERS DID NOT MATCH. THE FIRST WAS 207.46.197.32 THE SECOND WAS 98.124.198.1

ALSO HERE IS THE OTHER LOGS YOU REQUESTED;
DDS (Ver_11-03-05.01) - NTFSx86
Run by LYNDA at 22:39:04.42 on Tue 04/26/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.348 [GMT -7:00]
.
AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
============== Running Processes ===============
.
C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
svchost.exe
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\AVG\AVG10\avgnsx.exe
C:\Program Files\AVG\AVG10\avgemcx.exe
C:\Documents and Settings\LYNDA\Application Data\mjusbsp\magicJack.exe
C:\WINDOWS\system32\wpabaln.exe
C:\PROGRA~1\AVG\AVG10\avgrsx.exe
C:\Program Files\AVG\AVG10\avgcsrvx.exe
C:\Program Files\FrostWire\FrostWire.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\LYNDA\My Documents\dds.scr
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.msn.com
uWindow Title = Internet Explorer, optimized for Bing and MSN
uDefault_Page_URL = hxxp://www.msn.com
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg10\avgssie.dll
BHO: Support.com Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Support.com Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
TB: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [cdloader] "c:\documents and settings\lynda\application data\mjusbsp\cdloader2.exe" MAGICJACK
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
mRun: [igfxtray] "c:\windows\system32\igfxtray.exe "
mRun: [igfxhkcmd] "c:\windows\system32\hkcmd.exe "
mRun: [igfxpers] "c:\windows\system32\igfxpers.exe "
mRun: [SoundMAXPnP] "c:\program files\analog devices\core\smax4pnp.exe "
mRun: [AVG_TRAY] "c:\program files\avg\avg10\avgtray.exe "
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe "
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe "
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe "
StartupFolder: c:\docume~1\lynda\startm~1\programs\startup\frostw~1.lnk - c:\program files\frostwire\FrostWire.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {9732FB42-C321-11D1-836F-00A0C993F125} - hxxp://www.pcpitstop.com/mhLbl.cab
DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - hxxp://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?40658.2755671296
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg10\avgpp.dll
Notify: igfxcui - igfxdev.dll
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2011-2-22 22992]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2011-1-19 32464]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2011-1-7 248656]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2011-3-1 34896]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2011-2-10 296400]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg10\identity protection\agent\bin\AVGIDSAgent.exe [2011-2-15 7421280]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg10\avgwdsvc.exe [2011-2-8 269520]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2011-3-30 134480]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2011-2-10 24144]
R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2011-2-10 27216]
.
=============== Created Last 30 ================
.
2011-04-26 23:17:07 -------- d-----w- c:\docume~1\lynda\applic~1\FrostWire
2011-04-26 23:16:16 -------- d-----w- c:\program files\FrostWire
2011-04-26 17:24:57 -------- d-----w- c:\docume~1\lynda\locals~1\applic~1\PCHealth
2011-04-26 17:13:45 -------- d-----w- C:\edd80e0c9b1634385e74ad867f8b
2011-04-26 10:04:47 -------- d-----w- c:\windows\system32\XPSViewer
2011-04-26 10:04:13 89088 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
2011-04-26 10:03:57 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2011-04-26 10:03:57 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2011-04-26 10:03:57 597504 ------w- c:\windows\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2011-04-26 10:03:57 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2011-04-26 10:03:57 575488 ------w- c:\windows\system32\xpsshhdr.dll
2011-04-26 10:03:57 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2011-04-26 10:03:57 1676288 ------w- c:\windows\system32\xpssvcs.dll
2011-04-26 10:03:57 117760 ------w- c:\windows\system32\prntvpt.dll
2011-04-26 10:03:56 -------- d-----w- C:\a19d35e46de103a1d0e8
2011-04-25 19:16:02 -------- d-----w- c:\program files\WiseFixer
2011-04-25 18:50:33 -------- d-----w- c:\docume~1\alluse~1\applic~1\PC Drivers HeadQuarters
2011-04-24 01:42:17 -------- d-----w- c:\docume~1\lynda\applic~1\Malwarebytes
2011-04-24 01:42:08 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-04-24 01:42:07 -------- d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2011-04-24 01:42:03 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-04-24 01:42:03 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-04-22 16:46:27 388096 ----a-r- c:\docume~1\lynda\applic~1\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe
2011-04-22 16:46:27 -------- d-----w- c:\program files\Trend Micro
2011-04-22 16:10:29 -------- d-----w- c:\docume~1\lynda\applic~1\FixCleaner
2011-04-22 15:31:29 -------- d-----w- c:\docume~1\lynda\locals~1\applic~1\PackageAware
2011-04-22 14:53:49 -------- d-----w- c:\windows\system32\appmgmt
2011-04-22 06:44:29 602112 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2011-04-22 06:44:28 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2011-04-22 06:44:26 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2011-04-22 06:44:26 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2011-04-22 06:44:24 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2011-04-22 06:44:23 1991680 -c----w- c:\windows\system32\dllcache\iertutil.dll
2011-04-22 06:44:21 11080704 -c----w- c:\windows\system32\dllcache\ieframe.dll
2011-04-22 06:36:32 -------- d-----w- c:\docume~1\lynda\locals~1\applic~1\tjnet
2011-04-22 06:25:38 -------- d-sh--w- c:\documents and settings\lynda\IECompatCache
2011-04-22 06:24:24 -------- d-----w- c:\windows\ie8updates
2011-04-21 20:44:28 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2011-04-21 20:44:28 272128 ------w- c:\windows\system32\drivers\bthport.sys
2011-04-21 20:30:13 -------- d-----w- c:\docume~1\lynda\locals~1\applic~1\magicJack
2011-04-21 20:30:05 -------- d-----w- c:\docume~1\alluse~1\applic~1\magicJack
2011-04-21 20:26:41 -------- d-----w- c:\docume~1\lynda\applic~1\mjusbsp
2011-04-21 20:22:38 455936 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2011-04-21 20:12:38 2148864 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2011-04-21 20:12:37 2192768 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2011-04-21 20:12:36 2069376 -c----w- c:\windows\system32\dllcache\ntkrnlpa.exe
2011-04-21 20:12:36 2027008 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2011-04-21 20:09:02 5120 ----a-w- c:\windows\system32\xpsp4res.dll
2011-04-21 20:04:51 -------- d-----w- c:\windows\system32\PreInstall
2011-04-21 20:04:48 -------- d--h--w- c:\windows\$hf_mig$
2011-04-21 20:01:39 -------- d-----w- c:\docume~1\lynda\applic~1\AVG10
2011-04-21 19:57:27 -------- d--h--w- c:\docume~1\alluse~1\applic~1\Common Files
2011-04-21 19:56:19 -------- d-----w- c:\windows\system32\drivers\AVG
2011-04-21 19:56:19 -------- d-----w- c:\docume~1\alluse~1\applic~1\AVG10
2011-04-21 19:55:44 -------- d-----w- c:\program files\AVG
2011-04-21 19:27:45 -------- d-----w- c:\docume~1\alluse~1\applic~1\MFAData
2011-04-21 18:10:54 60032 ----a-w- c:\windows\system32\drivers\USBAUDIO.sys
2011-04-21 15:27:17 -------- d-----w- c:\program files\VS Revo Group
2011-04-21 15:12:50 -------- d-----w- c:\docume~1\lynda\locals~1\applic~1\AskToolbar
2011-04-21 15:12:20 -------- d-----w- c:\docume~1\lynda\locals~1\applic~1\Temp
2011-04-21 15:12:08 -------- d-----w- c:\docume~1\lynda\locals~1\applic~1\Google
2011-04-21 15:11:51 40112 ----a-w- c:\windows\avastSS.scr
2011-04-21 15:11:39 -------- d-----w- c:\program files\AVAST Software
2011-04-21 15:11:39 -------- d-----w- c:\docume~1\alluse~1\applic~1\AVAST Software
2011-04-21 14:59:00 -------- d-----w- c:\docume~1\lynda\applic~1\Sammsoft
2011-04-21 14:52:46 -------- d-----w- c:\program files\Ask.com
2011-04-21 14:38:30 -------- d-sh--w- c:\documents and settings\lynda\PrivacIE
2011-04-21 14:36:14 -------- d-----w- c:\windows\system32\SoftwareDistribution
2011-03-31 00:17:22 134480 ----a-w- c:\windows\system32\drivers\AVGIDSDriver.sys
.
==================== Find3M ====================
.
2011-03-07 05:33:50 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-03-04 06:37:06 420864 ----a-w- c:\windows\system32\vbscript.dll
2011-03-03 13:21:11 1857920 ----a-w- c:\windows\system32\win32k.sys
2011-02-22 23:06:29 916480 ----a-w- c:\windows\system32\wininet.dll
2011-02-22 23:06:29 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-02-22 23:06:29 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2011-02-22 11:41:59 385024 ----a-w- c:\windows\system32\html.iec
2011-02-18 16:02:55 162 ----a-w- C:\DeleteContent.bat
2011-02-15 12:56:39 290432 ----a-w- c:\windows\system32\atmfd.dll
2011-02-09 13:53:52 270848 ----a-w- c:\windows\system32\sbe.dll
2011-02-09 13:53:52 186880 ----a-w- c:\windows\system32\encdec.dll
2011-02-08 13:33:55 978944 ----a-w- c:\windows\system32\mfc42.dll
2011-02-08 13:33:55 974848 ----a-w- c:\windows\system32\mfc42u.dll
2011-02-03 04:40:23 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-02-03 02:19:39 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-02-02 07:58:35 2067456 ----a-w- c:\windows\system32\mstscax.dll
2011-01-27 11:57:06 677888 ----a-w- c:\windows\system32\mstsc.exe
.
============= FINISH: 22:44:55.17 ===============
GMER 1.0.15.15570 - http://www.gmer.net
Rootkit quick scan 2011-04-26 10:30:51
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e ST340014AS rev.8.12
Running: 0tvrovwf.exe; Driver: C:\DOCUME~1\LYNDA\LOCALS~1\Temp\kwtyqpow.sys


---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Ntfs \Ntfs AVGIDSFilter.Sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. )
AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\Fastfat \Fat AVGIDSFilter.Sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. )
AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

---- EOF - GMER 1.0.15 ----
MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows XP Professional
Windows Information: Service Pack 3 (build 2600)
Logical Drives Mask: 0x0000003c

Kernel Drivers (total 125):
0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
0x806E5000 \WINDOWS\system32\hal.dll
0xF7ABE000 \WINDOWS\system32\KDCOM.DLL
0xF79CE000 \WINDOWS\system32\BOOTVID.dll
0xF748F000 ACPI.sys
0xF7AC0000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
0xF747E000 pci.sys
0xF75BE000 isapnp.sys
0xF7B86000 pciide.sys
0xF783E000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
0xF7AC2000 intelide.sys
0xF75CE000 MountMgr.sys
0xF745F000 ftdisk.sys
0xF7AC4000 dmload.sys
0xF7439000 dmio.sys
0xF7846000 PartMgr.sys
0xF75DE000 VolSnap.sys
0xF7421000 atapi.sys
0xF75EE000 disk.sys
0xF75FE000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
0xF7401000 fltMgr.sys
0xF73EF000 sr.sys
0xF73D8000 KSecDD.sys
0xF734B000 Ntfs.sys
0xF731E000 NDIS.sys
0xF7304000 Mup.sys
0xF784E000 avgrkx86.sys
0xF79D2000 AVGIDSEH.Sys
0xF762E000 \SystemRoot\system32\DRIVERS\intelppm.sys
0xF718E000 \SystemRoot\system32\DRIVERS\ialmnt5.sys
0xF717A000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
0xF7150000 \SystemRoot\system32\DRIVERS\b57xp32.sys
0xF7896000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0xF712C000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0xF789E000 \SystemRoot\system32\DRIVERS\usbehci.sys
0xF70EC000 \SystemRoot\system32\drivers\smwdm.sys
0xF70C8000 \SystemRoot\system32\drivers\portcls.sys
0xF763E000 \SystemRoot\system32\drivers\drmk.sys
0xF70A5000 \SystemRoot\system32\drivers\ks.sys
0xF6FF2000 \SystemRoot\system32\drivers\senfilt.sys
0xF6FDE000 \SystemRoot\system32\DRIVERS\parport.sys
0xF764E000 \SystemRoot\system32\DRIVERS\serial.sys
0xF7A76000 \SystemRoot\system32\DRIVERS\serenum.sys
0xF765E000 \SystemRoot\system32\DRIVERS\cdrom.sys
0xF766E000 \SystemRoot\system32\DRIVERS\redbook.sys
0xF7C8B000 \SystemRoot\system32\DRIVERS\audstub.sys
0xF767E000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0xF7A7E000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0xF6FC7000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0xF768E000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0xF769E000 \SystemRoot\system32\DRIVERS\raspptp.sys
0xF78D6000 \SystemRoot\system32\DRIVERS\TDI.SYS
0xF6FB6000 \SystemRoot\system32\DRIVERS\psched.sys
0xF76AE000 \SystemRoot\system32\DRIVERS\msgpc.sys
0xF78E6000 \SystemRoot\system32\DRIVERS\ptilink.sys
0xF78F6000 \SystemRoot\system32\DRIVERS\raspti.sys
0xF6F86000 \SystemRoot\system32\DRIVERS\rdpdr.sys
0xF76BE000 \SystemRoot\system32\DRIVERS\termdd.sys
0xF7906000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0xF790E000 \SystemRoot\system32\DRIVERS\mouclass.sys
0xF7ACA000 \SystemRoot\system32\DRIVERS\swenum.sys
0xF6F00000 \SystemRoot\system32\DRIVERS\update.sys
0xF7AA2000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0xF76DE000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xF76FE000 \SystemRoot\system32\DRIVERS\usbhub.sys
0xF7ACE000 \SystemRoot\system32\DRIVERS\USBD.SYS
0xF770E000 \SystemRoot\system32\DRIVERS\avgmfx86.sys
0xF7AD8000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xF7CDD000 \SystemRoot\System32\Drivers\Null.SYS
0xF7ADC000 \SystemRoot\System32\Drivers\Beep.SYS
0xF7966000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0xF796E000 \SystemRoot\System32\drivers\vga.sys
0xF7AE0000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xF7AE4000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xF797E000 \SystemRoot\System32\Drivers\Msfs.SYS
0xF798E000 \SystemRoot\System32\Drivers\Npfs.SYS
0xF7A5E000 \SystemRoot\system32\DRIVERS\rasacd.sys
0xAA6C5000 \SystemRoot\system32\DRIVERS\ipsec.sys
0xAA66C000 \SystemRoot\system32\DRIVERS\tcpip.sys
0xAA625000 \SystemRoot\system32\DRIVERS\avgtdix.sys
0xAA5FF000 \SystemRoot\system32\DRIVERS\ipnat.sys
0xF772E000 \SystemRoot\system32\DRIVERS\wanarp.sys
0xAA5D7000 \SystemRoot\system32\DRIVERS\netbt.sys
0xAA5B5000 \SystemRoot\System32\drivers\afd.sys
0xF773E000 \SystemRoot\system32\DRIVERS\netbios.sys
0xAA562000 \SystemRoot\system32\DRIVERS\rdbss.sys
0xAA4F2000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xF775E000 \SystemRoot\System32\Drivers\Fips.SYS
0xAA4B6000 \SystemRoot\system32\DRIVERS\avgldx86.sys
0xF79B6000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0xF6F76000 \SystemRoot\system32\DRIVERS\hidusb.sys
0xF777E000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0xF7876000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
0xF778E000 \SystemRoot\system32\drivers\usbaudio.sys
0xF6F6A000 \SystemRoot\system32\DRIVERS\mouhid.sys
0xF779E000 \SystemRoot\system32\DRIVERS\usbccid.sys
0xF6F62000 \SystemRoot\system32\DRIVERS\SMCLIB.SYS
0xF7A9E000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0xAA46A000 \SystemRoot\System32\Drivers\Fastfat.SYS
0xF77BE000 \SystemRoot\System32\Drivers\Cdfs.SYS
0xAA402000 \SystemRoot\System32\Drivers\dump_atapi.sys
0xF7B00000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
0xBF800000 \SystemRoot\System32\win32k.sys
0xAA4AA000 \SystemRoot\System32\drivers\Dxapi.sys
0xF78DE000 \SystemRoot\System32\watchdog.sys
0xBF000000 \SystemRoot\System32\drivers\dxg.sys
0xF7CDC000 \SystemRoot\System32\drivers\dxgthk.sys
0xBF021000 \SystemRoot\System32\ialmdnt5.dll
0xBF012000 \SystemRoot\System32\ialmrnt5.dll
0xBF043000 \SystemRoot\System32\ialmdev5.DLL
0xBF07E000 \SystemRoot\System32\ialmdd5.DLL
0xBF16E000 \SystemRoot\System32\ATMFD.DLL
0xAA2E6000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0xA9FDD000 \SystemRoot\system32\drivers\wdmaud.sys
0xAA162000 \SystemRoot\system32\drivers\sysaudio.sys
0xA9DA2000 \SystemRoot\system32\DRIVERS\mrxdav.sys
0xF78BE000 \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys
0xF794E000 \SystemRoot\system32\DRIVERS\AVGIDSFilter.Sys
0xA9BA2000 \SystemRoot\system32\DRIVERS\AVGIDSDriver.Sys
0xA9B4A000 \SystemRoot\system32\DRIVERS\srv.sys
0xA96D1000 \SystemRoot\System32\Drivers\HTTP.sys
0xA93AB000 \SystemRoot\system32\drivers\kmixer.sys
0xA913A000 \??\C:\DOCUME~1\LYNDA\LOCALS~1\Temp\kwtyqpow.sys
0xF7B54000 \SystemRoot\system32\drivers\splitter.sys
0x7C900000 \WINDOWS\system32\ntdll.dll

Processes (total 41):
0 System Idle Process
4 System
588 C:\WINDOWS\system32\smss.exe
620 C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
780 csrss.exe
812 C:\WINDOWS\system32\winlogon.exe
864 C:\WINDOWS\system32\services.exe
880 C:\WINDOWS\system32\lsass.exe
1056 C:\WINDOWS\system32\svchost.exe
1140 svchost.exe
1236 C:\WINDOWS\system32\svchost.exe
1348 svchost.exe
1496 svchost.exe
1676 C:\WINDOWS\system32\spoolsv.exe
1724 scardsvr.exe
1944 C:\WINDOWS\explorer.exe
208 svchost.exe
264 C:\Program Files\AVG\AVG10\avgwdsvc.exe
284 C:\WINDOWS\system32\hkcmd.exe
408 C:\WINDOWS\system32\igfxpers.exe
416 C:\Program Files\Analog Devices\Core\smax4pnp.exe
440 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
444 C:\Program Files\AVG\AVG10\avgtray.exe
476 C:\Program Files\Common Files\Java\Java Update\jusched.exe
772 C:\WINDOWS\system32\ctfmon.exe
840 C:\Program Files\Java\jre6\bin\jqs.exe
1104 C:\Program Files\Messenger\msmsgs.exe
1368 C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
560 C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe
1200 C:\Program Files\AVG\AVG10\avgnsx.exe
1444 C:\Program Files\AVG\AVG10\avgemcx.exe
3036 alg.exe
2576 C:\Documents and Settings\LYNDA\Application Data\mjusbsp\magicJack.exe
1832 C:\WINDOWS\system32\wuauclt.exe
2452 C:\WINDOWS\system32\wpabaln.exe
1800 C:\PROGRA~1\AVG\AVG10\avgrsx.exe
2212 C:\Program Files\AVG\AVG10\avgcsrvx.exe
1536 C:\Program Files\Internet Explorer\iexplore.exe
1224 C:\Program Files\Internet Explorer\iexplore.exe
732 C:\Program Files\Internet Explorer\iexplore.exe
1864 C:\Documents and Settings\LYNDA\Local Settings\Temporary Internet Files\Content.IE5\L03BWTUY\MBRCheck[1].exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)

PhysicalDrive0 Model Number: ST340014AS, Rev: 8.12

Size Device Name MBR Status
--------------------------------------------
37 GB \\.\PhysicalDrive0 Windows XP MBR code detected
SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A


Done!
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6453

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

4/26/2011 11:17:52 PM
mbam-log-2011-04-26 (23-17-52).txt

Scan type: Quick scan
Objects scanned: 146088
Time elapsed: 3 minute(s), 46 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

I DIDN'T ATTACH THE attach on because I don't know how to get it zipped thanks

 

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_11-03-05.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 4/21/2011 11:26:51 AM
System Uptime: 4/26/2011 1:06:44 PM (9 hours ago)
.
Motherboard: Dell Inc. | | 0G8310
Processor: Intel(R) Pentium(R) 4 CPU 3.00GHz | Microprocessor | 2992/800mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 37 GiB total, 27.472 GiB free.
D: is CDROM ()
E: is CDROM ()
F: is Removable
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP24: 4/23/2011 7:04:55 PM - Revo Uninstaller's restore point - FixCleaner
RP25: 4/23/2011 7:05:16 PM - Removed FixCleaner
RP26: 4/24/2011 7:13:49 PM - System Checkpoint
RP27: 4/25/2011 11:48:49 AM - Installed Driver Detective.
RP28: 4/25/2011 11:57:32 AM - Revo Uninstaller's restore point - Driver Detective
RP29: 4/25/2011 11:57:38 AM - Removed Driver Detective.
RP30: 4/26/2011 3:00:14 AM - Software Distribution Service 3.0
RP31: 4/26/2011 10:06:56 AM - Software Distribution Service 3.0
RP32: 4/26/2011 10:45:51 AM - Software Distribution Service 3.0
.
==== Installed Programs ======================
.
Adobe Flash Player 10 Plugin
Adobe Reader 9.4.4
Adobe Shockwave Player 11.5
Ask Toolbar
AVG 2011
FrostWire 4.21.5
HiJackThis
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Image Resizer Powertoy for Windows XP
ImgBurn
Intel(R) Graphics Media Accelerator Driver
Java Auto Updater
Java(TM) 6 Update 24
magicJack
Malwarebytes' Anti-Malware
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Silverlight
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
OpenOffice.org 3.2
Revo Uninstaller 1.92
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Windows Internet Explorer 8 (KB2497640)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2503658)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2506223)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2511455)
Security Update for Windows XP (KB2524375)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982665)
SoundMAX
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows XP (KB2345886)
Update for Windows XP (KB898461)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
VLC media player 1.1.5
WebFldrs XP
Windows Internet Explorer 8
WiseFixer 3.2
.
==== Event Viewer Messages From Past Week ========
.
4/26/2011 10:19:18 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x800706be: Update for Windows XP (KB961118).
4/26/2011 10:17:32 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft .NET Framework 3.5 SP1 on Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008 x86 (KB2416473).
4/26/2011 10:17:21 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Microsoft .NET Framework 3.5 SP1 and .NET Framework 2.0 SP2 Update for Windows Server 2003 and Windows XP x86 (KB982524).
4/26/2011 10:17:10 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Update to .NET Framework 3.5 Service Pack 1 for the .NET Framework Assistant 1.0 x86 (KB963707).
4/26/2011 10:17:02 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft .NET Framework 2.0 SP2 and 3.5 SP1 on Windows Server 2003 and Windows XP x86 (KB2418241).
4/26/2011 10:16:41 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for .NET Framework 2.0 SP2 and 3.5 SP1 on Windows Server 2003 and Windows XP x86 (KB2446704).
4/26/2011 10:16:17 AM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).
4/23/2011 9:04:32 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Aavmker4 aswSnx aswSP aswTdi Avgldx86 Avgmfx86 Fips intelppm
4/23/2011 8:44:57 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Aavmker4 AFD aswRdr aswSnx aswSP aswTdi Avgldx86 Avgmfx86 Avgtdix Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip
4/23/2011 8:44:57 PM, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
4/23/2011 8:44:57 PM, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
4/23/2011 8:44:57 PM, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
4/23/2011 8:44:57 PM, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.
4/23/2011 8:44:14 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments " " in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
4/23/2011 8:44:03 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments " " in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
4/23/2011 7:40:22 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the avast! Antivirus service.
4/22/2011 9:19:55 PM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC000009A' while processing the file '~DF2DDD.tmp' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume.
4/22/2011 12:25:49 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070003: Security Update for Windows XP (KB2478960).
4/22/2011 11:10:52 PM, error: Server [2505] - The server could not bind to the transport \Device\NetBT_Tcpip_{9B5757AA-C9A6-4CF9-98B6-7F1391849C1B} because another computer on the network has the same name. The server could not start.
4/22/2011 11:10:49 PM, error: Server [2505] - The server could not bind to the transport \Device\NetbiosSmb because another computer on the network has the same name. The server could not start.
.
==== End Of File ===========================

Just a note: my son recently just downlowned the p2p it currently is not the probblem. I am aware of your caution. The problem I am describing started with a clean machine. New, Only microsoft windows installed. I started downloading the updates and it had no antivirus. It started after I downloaded the messed up avast. Everything worked fine before. I have had this computer for two weeks trying to deal with this problem.

 

According to what I read since I have avg I need to uninstall it before doing the combo fix because it will not run properly . Well I tried to download the uninstaller program (appremover) that you suggested and I got a windows error message that says" windows has found a problem with this file" it will not let it run.

 

ComboFix 11-04-28.03 - LYNDA 04/29/2011 20:23:43.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.593 [GMT -7:00]
Running from: c:\documents and settings\LYNDA\Desktop\ComboFix.exe
.
.
((((((((((((((((((((((((( Files Created from 2011-03-28 to 2011-04-30 )))))))))))))))))))))))))))))))
.
.
2011-04-26 23:16 . 2011-04-26 23:17 -------- d-----w- c:\program files\FrostWire
2011-04-26 17:13 . 2011-04-26 17:16 -------- d-----w- C:\edd80e0c9b1634385e74ad867f8b
2011-04-25 19:16 . 2011-04-25 19:16 -------- d-----w- c:\program files\WiseFixer
2011-04-25 18:50 . 2011-04-25 18:50 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Drivers HeadQuarters
2011-04-24 01:42 . 2010-12-21 01:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-04-24 01:42 . 2011-04-24 01:42 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2011-04-24 01:42 . 2011-04-24 01:42 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-04-24 01:42 . 2010-12-21 01:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-04-22 16:46 . 2011-04-22 16:46 -------- d-----w- c:\program files\Trend Micro
2011-04-22 15:56 . 2011-04-22 15:56 -------- d-sh--w- c:\windows\system32\config\systemprofile\PrivacIE
2011-04-22 15:56 . 2011-04-22 15:56 -------- d-----w- c:\windows\system32\config\systemprofile\Local Settings\Application Data\AskToolbar
2011-04-22 15:52 . 2011-04-22 15:52 -------- d-----w- c:\program files\Microsoft Silverlight
2011-04-22 13:46 . 2011-04-22 13:46 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2011-04-22 07:53 . 2011-04-22 07:53 -------- d-----w- c:\program files\Common Files\Adobe
2011-04-22 06:44 . 2011-02-22 23:06 602112 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2011-04-22 06:44 . 2011-02-22 23:06 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2011-04-22 06:44 . 2011-02-22 23:06 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2011-04-22 06:44 . 2011-02-22 23:06 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2011-04-22 06:44 . 2011-02-22 23:06 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2011-04-22 06:44 . 2011-02-22 23:06 1991680 -c----w- c:\windows\system32\dllcache\iertutil.dll
2011-04-22 06:44 . 2011-02-22 23:06 11080704 -c----w- c:\windows\system32\dllcache\ieframe.dll
2011-04-22 06:24 . 2011-04-22 07:29 -------- d-----w- c:\windows\ie8updates
2011-04-21 20:44 . 2008-06-13 11:05 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2011-04-21 20:44 . 2008-06-13 11:05 272128 ------w- c:\windows\system32\drivers\bthport.sys
2011-04-21 20:36 . 2011-04-21 20:36 -------- d-----w- c:\windows\Sun
2011-04-21 20:35 . 2011-04-21 20:35 -------- d-----w- c:\program files\Common Files\Java
2011-04-21 20:30 . 2011-04-21 20:30 -------- d-----w- c:\documents and settings\All Users\Application Data\magicJack
2011-04-21 20:25 . 2011-04-21 20:25 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Google
2011-04-21 20:22 . 2011-02-17 13:18 455936 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2011-04-21 20:12 . 2010-12-09 13:42 2148864 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2011-04-21 20:12 . 2010-12-09 13:38 2192768 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2011-04-21 20:12 . 2010-12-09 13:07 2027008 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2011-04-21 20:12 . 2010-12-09 13:07 2069376 -c----w- c:\windows\system32\dllcache\ntkrnlpa.exe
2011-04-21 20:09 . 2011-02-17 12:32 5120 ----a-w- c:\windows\system32\xpsp4res.dll
2011-04-21 20:04 . 2011-04-22 14:59 -------- d--h--w- c:\windows\$hf_mig$
2011-04-21 19:57 . 2011-04-21 19:57 -------- d--h--w- c:\documents and settings\All Users\Application Data\Common Files
2011-04-21 19:55 . 2011-04-21 19:55 -------- d-----w- c:\program files\AVG
2011-04-21 19:27 . 2011-04-21 20:01 -------- d-----w- c:\documents and settings\All Users\Application Data\MFAData
2011-04-21 19:21 . 2011-04-21 19:21 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Google
2011-04-21 18:27 . 2011-04-23 04:20 -------- d-----w- c:\documents and settings\LYNDA
2011-04-21 18:26 . 2010-11-18 03:20 -------- d-----w- c:\windows\system32\config\systemprofile\Local Settings\Application Data\Adobe
2011-04-21 18:26 . 2010-11-18 03:03 -------- d-sh--w- c:\documents and settings\Default User\IETldCache
2011-04-21 18:10 . 2008-04-14 07:15 60032 ----a-w- c:\windows\system32\drivers\USBAUDIO.sys
2011-04-21 15:27 . 2011-04-21 15:27 -------- d-----w- c:\program files\VS Revo Group
2011-04-21 15:12 . 2011-04-21 15:12 -------- d-----w- c:\windows\system32\config\systemprofile\Local Settings\Application Data\Google
2011-04-21 15:12 . 2011-04-22 15:17 -------- d-----w- c:\program files\Google
2011-04-21 15:11 . 2011-04-18 17:25 40112 ----a-w- c:\windows\avastSS.scr
2011-04-21 15:11 . 2011-04-21 15:11 -------- d-----w- c:\documents and settings\All Users\Application Data\AVAST Software
2011-04-21 14:52 . 2011-04-26 18:01 -------- d-----w- c:\program files\Ask.com
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-07 05:33 . 2010-11-18 02:42 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-03-04 06:37 . 2010-11-18 01:31 420864 ----a-w- c:\windows\system32\vbscript.dll
2011-03-03 13:21 . 2010-11-18 01:31 1857920 ----a-w- c:\windows\system32\win32k.sys
2011-02-22 23:06 . 2010-11-18 01:31 916480 ----a-w- c:\windows\system32\wininet.dll
2011-02-22 23:06 . 2010-11-18 01:31 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-02-22 23:06 . 2010-11-18 01:31 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2011-02-22 11:41 . 2010-11-18 01:31 385024 ----a-w- c:\windows\system32\html.iec
2011-02-18 16:02 . 2010-11-18 01:31 162 ----a-w- C:\DeleteContent.bat
2011-02-17 13:18 . 2010-11-18 01:31 455936 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-02-17 13:18 . 2010-11-18 01:31 357888 ----a-w- c:\windows\system32\drivers\srv.sys
2011-02-15 12:56 . 2010-11-18 01:31 290432 ----a-w- c:\windows\system32\atmfd.dll
2011-02-09 13:53 . 2010-11-18 01:31 270848 ----a-w- c:\windows\system32\sbe.dll
2011-02-09 13:53 . 2010-11-18 01:31 186880 ----a-w- c:\windows\system32\encdec.dll
2011-02-08 13:33 . 2010-11-18 01:31 978944 ----a-w- c:\windows\system32\mfc42.dll
2011-02-08 13:33 . 2010-11-18 01:31 974848 ----a-w- c:\windows\system32\mfc42u.dll
2011-02-03 04:40 . 2010-11-18 03:21 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-02-03 02:19 . 2010-11-18 03:28 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-02-02 07:58 . 2010-11-18 02:41 2067456 ----a-w- c:\windows\system32\mstscax.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2011-02-02 02:17 1487240 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440} "= "c:\program files\Ask.com\GenericAskToolbar.dll" [2011-02-02 1487240]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440} "= "c:\program files\Ask.com\GenericAskToolbar.dll" [2011-02-02 1487240]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"cdloader "= "c:\documents and settings\LYNDA\Application Data\mjusbsp\cdloader2.exe" [2010-12-03 50592]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"igfxtray "= "c:\windows\system32\igfxtray.exe" [2006-03-24 94208]
"igfxhkcmd "= "c:\windows\system32\hkcmd.exe" [2006-03-24 77824]
"igfxpers "= "c:\windows\system32\igfxpers.exe" [2006-03-24 118784]
"SoundMAXPnP "= "c:\program files\Analog Devices\Core\smax4pnp.exe" [2004-10-14 1404928]
"SunJavaUpdateSched "= "c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
.
c:\documents and settings\LYNDA\Start Menu\Programs\Startup\
FrostWire On Startup.lnk - c:\program files\FrostWire\FrostWire.exe [2011-3-17 114688]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe "=
"%windir%\\system32\\sessmgr.exe "=
"c:\\Program Files\\FrostWire\\FrostWire.exe "=
"c:\\Documents and Settings\\LYNDA\\Application Data\\mjusbsp\\magicJack.exe "=
.
.
Contents of the 'Scheduled Tasks' folder
.
2011-04-30 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\program files\Ask.com\UpdateTask.exe [2011-02-02 02:17]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.msn.com
.
- - - - ORPHANS REMOVED - - - -
.
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-04-29 20:27
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(2216)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
.
Completion time: 2011-04-29 20:28:33
ComboFix-quarantined-files.txt 2011-04-30 03:28
.
Pre-Run: 29,342,371,840 bytes free
Post-Run: 29,448,081,408 bytes free
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT= "Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug= "do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS= "Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 3ADCC79BDE1844036C9D9209B1DFBE61

 

After running the combo fix it seems to have fixed most of the problems so far. I am able to go to system restore, microsoft, hotmail, etc. Need to get virus protection back on since removed the avg. Have recommended download?

 

I had posted the results of the combo fix but not seeing the results posted.

 

Ok Thanks

 

I downloaded avg again and ran scan didn't find infection but found an issue with volume/restore

Ran OTL but only gave me the txt results and not the extras results

OTL logfile created on: 4/30/2011 10:49:56 AM - Run 3
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\LYNDA\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1,014.00 Mb Total Physical Memory | 434.00 Mb Available Physical Memory | 43.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 78.00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37.24 Gb Total Space | 27.04 Gb Free Space | 72.59% Space Free | Partition Type: NTFS
Drive E: | 1.64 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive F: | 17.59 Mb Total Space | 17.32 Mb Free Space | 98.44% Space Free | Partition Type: FAT

Computer Name: GENERAL1 | User Name: LYNDA | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/04/30 02:07:57 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\LYNDA\Desktop\OTL.exe
PRC - [2011/03/17 15:27:40 | 000,114,688 | ---- | M] (FrostWire Group) -- C:\Program Files\FrostWire\FrostWire.exe
PRC - [2011/02/17 06:21:58 | 002,190,688 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgtray.exe
PRC - [2011/02/15 05:38:06 | 007,421,280 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
PRC - [2011/02/11 06:25:52 | 001,080,672 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgnsx.exe
PRC - [2011/02/10 07:55:18 | 001,148,256 | ---- | M] () -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe
PRC - [2011/02/08 05:33:42 | 000,269,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgwdsvc.exe
PRC - [2011/02/08 05:33:20 | 000,658,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgrsx.exe
PRC - [2011/02/08 05:32:52 | 001,025,376 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgemcx.exe
PRC - [2011/02/08 05:32:48 | 000,351,072 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgcsrvx.exe
PRC - [2011/02/08 05:32:46 | 000,656,736 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgchsvx.exe
PRC - [2008/08/21 05:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


========== Modules (SafeList) ==========

MOD - [2011/04/30 02:07:57 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\LYNDA\Desktop\OTL.exe
MOD - [2010/08/23 09:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - [2011/03/18 08:11:02 | 000,947,528 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe -- (AVG Security Toolbar Service)
SRV - [2011/02/15 05:38:06 | 007,421,280 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2011/02/08 05:33:42 | 000,269,520 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\avgwdsvc.exe -- (avgwd)


========== Driver Services (SafeList) ==========

DRV - [2011/03/30 17:17:22 | 000,134,480 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver)
DRV - [2011/03/01 14:25:18 | 000,034,896 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2011/02/22 08:13:02 | 000,022,992 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Stopped] -- C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys -- (AVGIDSEH)
DRV - [2011/02/10 07:54:00 | 000,296,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2011/02/10 07:53:54 | 000,027,216 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys -- (AVGIDSShim)
DRV - [2011/02/10 07:53:52 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter)
DRV - [2011/01/19 04:32:56 | 000,032,464 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\avgrkx86.sys -- (Avgrkx86)
DRV - [2011/01/07 06:41:46 | 000,248,656 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2006/07/14 10:45:20 | 000,156,160 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2005/05/13 17:27:56 | 000,028,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbccid.sys -- (USBCCID)
DRV - [2004/09/17 09:02:54 | 000,732,928 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\senfilt.sys -- (senfilt)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2700602446-796306802-2744786170-1004\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-2700602446-796306802-2744786170-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com
IE - HKU\S-1-5-21-2700602446-796306802-2744786170-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG10\Firefox4\ [2011/04/30 01:31:51 | 000,000,000 | ---D | M]


O1 HOSTS File: ([2008/08/21 05:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
O3 - HKLM\..\Toolbar: (no name) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - No CLSID value found.
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-21-2700602446-796306802-2744786170-1004\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - Startup: C:\Documents and Settings\LYNDA\Start Menu\Programs\Startup\FrostWire On Startup.lnk = C:\Program Files\FrostWire\FrostWire.exe (FrostWire Group)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2700602446-796306802-2744786170-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2700602446-796306802-2744786170-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-2700602446-796306802-2744786170-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-2700602446-796306802-2744786170-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {9732FB42-C321-11D1-836F-00A0C993F125} http://www.pcpitstop.com/mhLbl.cab (mhLabel Class)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?40658.2755671296 (Update Class)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 184.16.4.22
O18 - Protocol\Handler\avgsecuritytoolbar {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\LYNDA\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\LYNDA\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/11/17 19:44:44 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009/08/03 10:04:35 | 000,027,992 | R--- | M] (magicJack L.P.) - E:\autorun.exe -- [ CDFS ]
O32 - AutoRun File - [2009/08/03 10:04:35 | 000,016,158 | R--- | M] () - E:\autorun.ico -- [ CDFS ]
O32 - AutoRun File - [2009/08/03 10:04:35 | 000,000,308 | R--- | M] () - E:\autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2009/08/03 10:04:35 | 000,728,816 | R--- | M] (magicJack L.P.) - E:\autorunu.exe -- [ CDFS ]
O32 - AutoRun File - [2009/08/01 16:17:00 | 000,000,270 | ---- | M] () - F:\autorun.inf -- [ FAT ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync) - C:\Program Files\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart) - C:\Program Files\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)

========== Files/Folders - Created Within 30 Days ==========

[2011/04/30 02:24:59 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2011/04/30 02:07:49 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\LYNDA\Desktop\OTL.exe
[2011/04/30 01:32:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
[2011/04/30 01:31:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\AVG 2011
[2011/04/30 01:30:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AVG10
[2011/04/30 01:30:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\AVG
[2011/04/29 20:22:33 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2011/04/29 20:20:33 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2011/04/29 20:20:33 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2011/04/29 20:20:33 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2011/04/29 20:20:33 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2011/04/29 20:20:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2011/04/29 20:19:58 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011/04/28 13:10:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Application Data\ImgBurn
[2011/04/27 10:42:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Application Data\OpenOffice.org
[2011/04/26 16:17:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\My Documents\FrostWire
[2011/04/26 16:17:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Application Data\FrostWire
[2011/04/26 16:16:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Start Menu\Programs\FrostWire
[2011/04/26 16:16:16 | 000,000,000 | ---D | C] -- C:\Program Files\FrostWire
[2011/04/26 10:24:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Local Settings\Application Data\PCHealth
[2011/04/26 10:15:50 | 000,446,464 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\LYNDA\My Documents\TFC.exe
[2011/04/26 10:13:45 | 000,000,000 | ---D | C] -- C:\edd80e0c9b1634385e74ad867f8b
[2011/04/26 03:04:47 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer
[2011/04/26 03:04:41 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2011/04/26 03:04:29 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2011/04/26 03:03:56 | 000,000,000 | ---D | C] -- C:\a19d35e46de103a1d0e8
[2011/04/25 11:50:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\My Documents\Downloads
[2011/04/25 11:50:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
[2011/04/25 11:21:22 | 000,000,000 | R-SD | C] -- C:\WINDOWS\assembly
[2011/04/25 11:20:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET
[2011/04/23 21:02:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC
[2011/04/23 19:56:44 | 000,000,000 | R--D | C] -- C:\Documents and Settings\LYNDA\Start Menu\Programs\Administrative Tools
[2011/04/23 18:42:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Application Data\Malwarebytes
[2011/04/23 18:42:08 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/04/23 18:42:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/04/23 18:42:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2011/04/23 18:42:03 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011/04/23 18:42:03 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/04/22 09:46:27 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2011/04/22 09:46:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Start Menu\Programs\HiJackThis
[2011/04/22 09:18:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\My Documents\New Folder
[2011/04/22 09:10:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Application Data\FixCleaner
[2011/04/22 08:52:06 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2011/04/22 08:31:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Local Settings\Application Data\PackageAware
[2011/04/22 08:17:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Google
[2011/04/22 07:53:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt
[2011/04/22 00:53:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2011/04/22 00:53:26 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2011/04/21 23:36:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Local Settings\Application Data\tjnet
[2011/04/21 23:25:38 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\LYNDA\IECompatCache
[2011/04/21 23:24:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates
[2011/04/21 13:36:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun
[2011/04/21 13:35:41 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2011/04/21 13:30:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Local Settings\Application Data\magicJack
[2011/04/21 13:30:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\magicJack
[2011/04/21 13:26:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Application Data\mjusbsp
[2011/04/21 13:25:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[2011/04/21 13:04:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2011/04/21 13:04:48 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2011/04/21 13:01:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Application Data\AVG10
[2011/04/21 12:57:27 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\Common Files
[2011/04/21 12:55:44 | 000,000,000 | ---D | C] -- C:\Program Files\AVG
[2011/04/21 12:27:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\MFAData
[2011/04/21 12:21:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2011/04/21 11:27:08 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LYNDA\Application Data\Microsoft
[2011/04/21 11:27:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Application Data\Identities
[2011/04/21 11:27:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Application Data\Adobe
[2011/04/21 11:27:07 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\LYNDA\SendTo
[2011/04/21 11:27:07 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\LYNDA\Recent
[2011/04/21 11:27:07 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\LYNDA\Application Data
[2011/04/21 11:27:07 | 000,000,000 | R--D | C] -- C:\Documents and Settings\LYNDA\Start Menu\Programs\Startup
[2011/04/21 11:27:07 | 000,000,000 | R--D | C] -- C:\Documents and Settings\LYNDA\Start Menu
[2011/04/21 11:27:07 | 000,000,000 | R--D | C] -- C:\Documents and Settings\LYNDA\My Documents\My Pictures
[2011/04/21 11:27:07 | 000,000,000 | R--D | C] -- C:\Documents and Settings\LYNDA\My Documents\My Music
[2011/04/21 11:27:07 | 000,000,000 | R--D | C] -- C:\Documents and Settings\LYNDA\My Documents
[2011/04/21 11:27:07 | 000,000,000 | R--D | C] -- C:\Documents and Settings\LYNDA\Favorites
[2011/04/21 11:27:07 | 000,000,000 | R--D | C] -- C:\Documents and Settings\LYNDA\Start Menu\Programs\Accessories
[2011/04/21 11:27:07 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\LYNDA\IETldCache
[2011/04/21 11:27:07 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\LYNDA\Cookies
[2011/04/21 11:27:07 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\LYNDA\Templates
[2011/04/21 11:27:07 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\LYNDA\PrintHood
[2011/04/21 11:27:07 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\LYNDA\NetHood
[2011/04/21 11:27:07 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\LYNDA\Local Settings
[2011/04/21 11:27:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Application Data\vlc
[2011/04/21 11:27:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Application Data\Sun
[2011/04/21 11:27:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Local Settings\Application Data\Microsoft
[2011/04/21 11:27:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Start Menu\Programs\ImgBurn
[2011/04/21 11:27:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Desktop
[2011/04/21 11:27:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Local Settings\Application Data\Adobe
[2011/04/21 08:27:17 | 000,000,000 | ---D | C] -- C:\Program Files\VS Revo Group
[2011/04/21 08:27:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Start Menu\Programs\Revo Uninstaller
[2011/04/21 08:12:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Local Settings\Application Data\Temp
[2011/04/21 08:12:08 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2011/04/21 08:12:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Local Settings\Application Data\Google
[2011/04/21 08:11:51 | 000,040,112 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2011/04/21 08:11:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AVAST Software
[2011/04/21 07:59:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LYNDA\Application Data\Sammsoft
[2011/04/21 07:38:30 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\LYNDA\PrivacIE
[2011/04/21 07:36:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution

========== Files - Modified Within 30 Days ==========

[2011/04/30 09:06:30 | 113,744,505 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm
[2011/04/30 02:07:57 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\LYNDA\Desktop\OTL.exe
[2011/04/30 02:03:01 | 000,012,598 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/04/30 02:03:01 | 000,012,598 | ---- | M] () -- C:\WINDOWS\System32\wpa.bak
[2011/04/30 01:31:55 | 000,000,690 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\AVG 2011.lnk
[2011/04/30 00:43:18 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/04/30 00:43:13 | 1063,399,424 | -HS- | M] () -- C:\hiberfil.sys
[2011/04/29 20:22:38 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2011/04/29 20:19:40 | 004,333,078 | R--- | M] () -- C:\Documents and Settings\LYNDA\Desktop\ComboFix.exe
[2011/04/29 20:13:21 | 000,001,004 | ---- | M] () -- C:\Documents and Settings\LYNDA\Desktop\magicJack.lnk
[2011/04/26 22:39:02 | 000,625,664 | ---- | M] () -- C:\Documents and Settings\LYNDA\My Documents\dds.scr
[2011/04/26 16:17:57 | 000,000,868 | ---- | M] () -- C:\Documents and Settings\LYNDA\Start Menu\Programs\Startup\FrostWire On Startup.lnk
[2011/04/26 16:16:49 | 000,000,874 | ---- | M] () -- C:\Documents and Settings\LYNDA\Application Data\Microsoft\Internet Explorer\Quick Launch\FrostWire 4.21.5.lnk
[2011/04/26 16:16:49 | 000,000,856 | ---- | M] () -- C:\Documents and Settings\LYNDA\Desktop\FrostWire 4.21.5.lnk
[2011/04/26 10:51:39 | 000,432,356 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/04/26 10:51:39 | 000,067,312 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/04/26 10:28:38 | 000,301,568 | ---- | M] () -- C:\Documents and Settings\LYNDA\My Documents\0tvrovwf.exe
[2011/04/26 10:16:12 | 000,446,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\LYNDA\My Documents\TFC.exe
[2011/04/26 03:26:24 | 000,117,360 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/04/23 21:38:27 | 000,001,917 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011/04/23 21:21:17 | 000,000,815 | ---- | M] () -- C:\Documents and Settings\LYNDA\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/04/23 21:08:13 | 000,002,577 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2011/04/23 18:42:08 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/04/22 10:00:14 | 000,002,447 | ---- | M] () -- C:\Documents and Settings\LYNDA\Desktop\HiJackThis.lnk
[2011/04/22 00:54:28 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2011/04/22 00:18:37 | 000,000,804 | ---- | M] () -- C:\Documents and Settings\LYNDA\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2011/04/22 00:18:37 | 000,000,786 | ---- | M] () -- C:\Documents and Settings\LYNDA\Desktop\Windows Media Player.lnk
[2011/04/21 11:26:51 | 000,000,099 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2011/04/21 11:26:42 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2011/04/21 11:13:50 | 000,004,996 | ---- | M] () -- C:\WINDOWS\System32\pid.PNF
[2011/04/18 10:25:12 | 000,040,112 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr

========== Files Created - No Company Name ==========

[2011/04/30 09:06:30 | 113,744,505 | ---- | C] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm
[2011/04/30 02:03:02 | 000,012,598 | ---- | C] () -- C:\WINDOWS\System32\wpa.bak
[2011/04/30 01:31:55 | 000,000,690 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\AVG 2011.lnk
[2011/04/29 20:22:38 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2011/04/29 20:22:34 | 000,260,272 | RHS- | C] () -- C:\cmldr
[2011/04/29 20:20:33 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011/04/29 20:20:33 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011/04/29 20:20:33 | 000,089,088 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011/04/29 20:20:33 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011/04/29 20:20:33 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2011/04/29 20:18:59 | 004,333,078 | R--- | C] () -- C:\Documents and Settings\LYNDA\Desktop\ComboFix.exe
[2011/04/26 22:38:50 | 000,625,664 | ---- | C] () -- C:\Documents and Settings\LYNDA\My Documents\dds.scr
[2011/04/26 16:17:57 | 000,000,868 | ---- | C] () -- C:\Documents and Settings\LYNDA\Start Menu\Programs\Startup\FrostWire On Startup.lnk
[2011/04/26 16:16:49 | 000,000,874 | ---- | C] () -- C:\Documents and Settings\LYNDA\Application Data\Microsoft\Internet Explorer\Quick Launch\FrostWire 4.21.5.lnk
[2011/04/26 16:16:49 | 000,000,856 | ---- | C] () -- C:\Documents and Settings\LYNDA\Desktop\FrostWire 4.21.5.lnk
[2011/04/26 10:28:32 | 000,301,568 | ---- | C] () -- C:\Documents and Settings\LYNDA\My Documents\0tvrovwf.exe
[2011/04/23 21:09:41 | 1063,399,424 | -HS- | C] () -- C:\hiberfil.sys
[2011/04/23 18:42:08 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/04/22 09:46:27 | 000,002,447 | ---- | C] () -- C:\Documents and Settings\LYNDA\Desktop\HiJackThis.lnk
[2011/04/22 00:53:37 | 000,002,347 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Reader 9.lnk
[2011/04/22 00:53:37 | 000,001,729 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2011/04/22 00:18:37 | 000,000,804 | ---- | C] () -- C:\Documents and Settings\LYNDA\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2011/04/21 13:29:47 | 000,001,010 | ---- | C] () -- C:\Documents and Settings\LYNDA\Start Menu\Programs\magicJack.lnk
[2011/04/21 13:29:47 | 000,001,004 | ---- | C] () -- C:\Documents and Settings\LYNDA\Desktop\magicJack.lnk
[2011/04/21 11:27:29 | 000,000,786 | ---- | C] () -- C:\Documents and Settings\LYNDA\Desktop\Windows Media Player.lnk
[2011/04/21 11:27:12 | 000,000,815 | ---- | C] () -- C:\Documents and Settings\LYNDA\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/04/21 11:27:12 | 000,000,079 | ---- | C] () -- C:\Documents and Settings\LYNDA\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2011/04/21 11:27:08 | 010,392,259 | ---- | C] () -- C:\Documents and Settings\LYNDA\Desktop\GX280 User's Guide.pdf
[2011/04/21 11:27:08 | 000,001,599 | ---- | C] () -- C:\Documents and Settings\LYNDA\Start Menu\Programs\Remote Assistance.lnk
[2011/04/21 11:27:08 | 000,001,528 | ---- | C] () -- C:\Documents and Settings\LYNDA\Desktop\ImgBurn.lnk
[2011/04/21 11:27:08 | 000,000,803 | ---- | C] () -- C:\Documents and Settings\LYNDA\Start Menu\Programs\Internet Explorer.lnk
[2011/04/21 11:27:08 | 000,000,792 | ---- | C] () -- C:\Documents and Settings\LYNDA\Start Menu\Programs\Windows Media Player.lnk
[2011/04/21 11:27:08 | 000,000,738 | ---- | C] () -- C:\Documents and Settings\LYNDA\Start Menu\Programs\Outlook Express.lnk
[2010/11/17 20:51:33 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2010/11/17 19:46:53 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/11/17 19:42:27 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010/11/17 18:31:23 | 000,000,409 | ---- | C] () -- C:\WINDOWS\System32\Oeminfo.ini
[2010/11/17 18:31:14 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2010/11/17 18:31:12 | 000,432,356 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2010/11/17 18:31:12 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2010/11/17 18:31:12 | 000,067,312 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2010/11/17 18:31:12 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2010/11/17 18:31:11 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2010/11/17 18:31:11 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2010/11/17 18:31:11 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2010/11/17 18:31:11 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2010/11/17 18:31:11 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2010/11/17 18:31:07 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2010/11/17 18:31:06 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2010/11/17 11:37:05 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010/11/17 11:36:20 | 000,117,360 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT

========== LOP Check ==========

[2011/04/21 08:11:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVAST Software
[2011/04/30 02:03:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
[2011/04/30 01:33:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG10
[2011/04/21 12:57:27 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Common Files
[2011/04/21 13:30:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\magicJack
[2011/04/30 00:58:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MFAData
[2011/04/25 11:50:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
[2011/04/21 13:01:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LYNDA\Application Data\AVG10
[2011/04/23 19:34:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LYNDA\Application Data\FixCleaner
[2011/04/30 00:44:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LYNDA\Application Data\FrostWire
[2011/04/28 13:10:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LYNDA\Application Data\ImgBurn
[2011/04/29 20:13:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LYNDA\Application Data\mjusbsp
[2011/04/27 10:42:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LYNDA\Application Data\OpenOffice.org
[2011/04/21 08:27:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LYNDA\Application Data\Sammsoft

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2010/11/17 19:44:44 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2011/04/21 11:26:42 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2011/04/29 20:22:38 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2009/06/15 15:44:40 | 000,064,784 | ---- | M] () -- C:\CabExtractor.exe
[2004/08/03 23:00:00 | 000,260,272 | RHS- | M] () -- C:\cmldr
[2011/04/29 20:28:34 | 000,011,019 | ---- | M] () -- C:\ComboFix.txt
[2010/11/17 19:44:44 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2011/02/18 09:02:55 | 000,000,162 | ---- | M] () -- C:\DeleteContent.bat
[2011/04/30 00:43:13 | 1063,399,424 | -HS- | M] () -- C:\hiberfil.sys
[2010/11/17 19:44:44 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010/11/17 19:44:44 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2008/08/21 05:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2008/08/21 05:00:00 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2011/04/30 00:43:12 | 1598,029,824 | -HS- | M] () -- C:\pagefile.sys
[2010/03/18 08:06:07 | 000,000,381 | ---- | M] () -- C:\UnattendInstallation.bat

< %systemroot%\Fonts\*.com >
[2006/04/18 15:39:28 | 000,026,040 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:58:52 | 000,030,808 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2010/11/17 19:44:17 | 000,000,067 | -HS- | M] () -- C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 05:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2008/07/06 03:50:03 | 000,597,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2011/04/18 10:25:12 | 000,040,112 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2010/11/17 11:35:57 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2010/11/17 11:35:57 | 001,089,536 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2010/11/17 11:35:56 | 000,917,504 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2011/03/22 13:00:59 | 000,000,294 | -HS- | M] () -- C:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/04/21 11:27:32 | 000,000,119 | -HS- | M] () -- C:\Documents and Settings\LYNDA\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2010/11/17 19:56:02 | 000,000,079 | ---- | M] () -- C:\Documents and Settings\LYNDA\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >
[2011/04/29 20:19:40 | 004,333,078 | R--- | M] () -- C:\Documents and Settings\LYNDA\Desktop\ComboFix.exe
[2010/06/12 11:41:22 | 011,862,896 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\LYNDA\Desktop\Microsoft Security Essentials Installer.exe
[2011/04/30 02:07:57 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\LYNDA\Desktop\OTL.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

< %PROGRAMFILES%\Internet Explorer\*.tmp >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %USERPROFILE%\My Documents\*.exe >
[2011/04/26 10:28:38 | 000,301,568 | ---- | M] () -- C:\Documents and Settings\LYNDA\My Documents\0tvrovwf.exe
[2011/04/26 10:16:12 | 000,446,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\LYNDA\My Documents\TFC.exe

< %USERPROFILE%\*.exe >

< %systemroot%\ADDINS\*.* >

< %systemroot%\assembly\*.bak2 >

< %systemroot%\Config\*.* >

< %systemroot%\REPAIR\*.bak2 >

< %systemroot%\SECURITY\Database\*.sdb /x >

< %systemroot%\SYSTEM\*.bak2 >

< %systemroot%\Web\*.bak2 >

< %systemroot%\Driver Cache\*.* >

< %PROGRAMFILES%\Mozilla Firefox\0*.exe >

< %ProgramFiles%\Microsoft Common\*.* >

< %ProgramFiles%\TinyProxy. >

< %USERPROFILE%\Favorites\*.url /x >
[2011/04/21 11:27:32 | 000,000,122 | -HS- | M] () -- C:\Documents and Settings\LYNDA\Favorites\Desktop.ini

< %systemroot%\system32\*.bk >

< %systemroot%\*.te >

< %systemroot%\system32\system32\*.* >

< %ALLUSERSPROFILE%\*.dat /x >

< %systemroot%\system32\drivers\*.rmv >

< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >

< dir /b "%systemroot%\*.exe" | find /i " " /c >

< %PROGRAMFILES%\Microsoft\*.* >

< %systemroot%\System32\Wbem\proquota.exe >

< %PROGRAMFILES%\Mozilla Firefox\*.dat >

< %USERPROFILE%\Cookies\*.txt /x >
[2011/04/30 09:53:45 | 000,049,152 | ---- | M] () -- C:\Documents and Settings\LYNDA\Cookies\index.dat

< %SystemRoot%\system32\fonts\*.* >

< %systemroot%\system32\winlog\*.* >

< %systemroot%\system32\Language\*.* >

< %systemroot%\system32\Settings\*.* >

< %systemroot%\system32\*.quo >

< %SYSTEMROOT%\AppPatch\*.exe >

< %SYSTEMROOT%\inf\*.exe >
[2008/08/21 05:00:00 | 000,208,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\inf\unregmp2.exe

< %SYSTEMROOT%\Installer\*.exe >

< %systemroot%\system32\config\*.bak2 >

< %systemroot%\system32\Computers\*.* >

< %SystemRoot%\system32\Sound\*.* >

< %SystemRoot%\system32\SpecialImg\*.* >

< %SystemRoot%\system32\code\*.* >

< %SystemRoot%\system32\draft\*.* >

< %SystemRoot%\system32\MSSSys\*.* >

< %ProgramFiles%\Javascript\*.* >

< %systemroot%\pchealth\helpctr\System\*.exe /s >

< %systemroot%\Web\*.exe >

< %systemroot%\system32\msn\*.* >

< %systemroot%\system32\*.tro >

< %AppData%\Microsoft\Installer\msupdates\*.* >

< %ProgramFiles%\Messenger\*.* >
[2008/08/21 05:00:00 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\custsat.dll
[2007/04/03 00:37:24 | 000,004,821 | ---- | M] () -- C:\Program Files\Messenger\logowin.gif
[2007/04/03 00:37:24 | 000,007,047 | ---- | M] () -- C:\Program Files\Messenger\lvback.gif
[2008/05/02 07:01:49 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msgsc.dll
[2008/04/14 00:00:30 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msgslang.dll
[2008/04/14 06:42:30 | 001,695,232 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe
[2007/04/03 00:37:24 | 000,002,882 | ---- | M] () -- C:\Program Files\Messenger\newalert.wav
[2007/04/03 00:37:24 | 000,006,156 | ---- | M] () -- C:\Program Files\Messenger\newemail.wav
[2007/04/03 00:37:26 | 000,006,160 | ---- | M] () -- C:\Program Files\Messenger\online.wav
[2007/04/03 00:37:28 | 000,004,454 | ---- | M] () -- C:\Program Files\Messenger\type.wav
[2007/04/03 00:34:02 | 000,115,981 | ---- | M] () -- C:\Program Files\Messenger\xpmsgr.chm

< %systemroot%\system32\systhem32\*.* >

< %systemroot%\system\*.exe >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\ Auto Update\Results\Install|LastSuccessTime /rs >


< >

< End of report >

 

All processes killed
Error: Unable to interpret <O3 - HKLM\..\Toolbar: (no name) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - No CLSID value found.> in the current context!
Error: Unable to interpret <O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.> in the current context!
Error: Unable to interpret <O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.> in the current context!
Error: Unable to interpret <[2011/04/18 10:25:12 | 000,040,112 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr> in the current context!
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: LYNDA
->Temp folder emptied: 12540486 bytes
->Temporary Internet Files folder emptied: 244973284 bytes
->Java cache emptied: 11566 bytes
->Flash cache emptied: 2874141 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 16480 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 787621 bytes

Total Files Cleaned = 249.00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default User

User: LocalService

User: LYNDA
->Flash cache emptied: 0 bytes

User: NetworkService

Total Flash Files Cleaned = 0.00 mb

Error: Unable to interpret <[Reboot][2011/04/21 08:11:39 | 000,000,000 | ---D | C] -- C:\Documents and > in the current context!

OTL by OldTimer - Version 3.2.22.3 log created on 05022011_211201

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

 

Results of screen317's Security Check version 0.99.7
Windows XP Service Pack 3
Internet Explorer 8
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Enabled!
AVG 2011
Antivirus up to date!
```````````````````````````````
Anti-malware/Other Utilities Check:
Malwarebytes' Anti-Malware
Java(TM) 6 Update 24
Out of date Java installed!
Adobe Flash Player 10.0.42.34
Adobe Reader 9.4.4
Out of date Adobe Reader installed!
````````````````````````````````
Process Check:
objlist.exe by Laurent
AVG avgwdsvc.exe
AVG avgtray.exe
AVG avgrsx.exe
AVG avgnsx.exe
AVG avgemc.exe
``````````End of Log````````````

 

All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}\ not found.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
C:\WINDOWS\avastSS.scr moved successfully.
C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\sounds folder moved successfully.
C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\report folder moved successfully.
C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\moved folder moved successfully.
C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\log folder moved successfully.
C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\journal folder moved successfully.
C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\integ folder moved successfully.
C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\HtmlData folder moved successfully.
C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\fw folder moved successfully.
C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\chest folder moved successfully.
C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\backup folder moved successfully.
C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\arpot\TEMP folder moved successfully.
C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\arpot folder moved successfully.
C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast folder moved successfully.
C:\Documents and Settings\All Users\Application Data\AVAST Software folder moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LYNDA
->Temp folder emptied: 102213 bytes
->Temporary Internet Files folder emptied: 42072319 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 686 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 89884 bytes

Total Files Cleaned = 40.00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default User

User: LocalService

User: LYNDA
->Flash cache emptied: 0 bytes

User: NetworkService

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.22.3 log created on 05032011_024250

Files\Folders moved on Reboot...
C:\Documents and Settings\LYNDA\Local Settings\Temp\config.dat moved successfully.
C:\Documents and Settings\LYNDA\Local Settings\Temporary Internet Files\Content.IE5\W6R33SHA\00b42e3a-b809-49b2-b433-cc45b2bc89d33rd_party_BBS[2].htm moved successfully.
C:\Documents and Settings\LYNDA\Local Settings\Temporary Internet Files\Content.IE5\W6R33SHA\98796-active-virus-something-new-computer-after-downloading-antivirus-2[1].html moved successfully.
C:\Documents and Settings\LYNDA\Local Settings\Temporary Internet Files\Content.IE5\W6R33SHA\audmeasure[1].gif moved successfully.
C:\Documents and Settings\LYNDA\Local Settings\Temporary Internet Files\Content.IE5\W6R33SHA\iframescript[3].htm moved successfully.
C:\Documents and Settings\LYNDA\Local Settings\Temporary Internet Files\Content.IE5\W6R33SHA\p-01-0VIaSjnOLg[1].gif moved successfully.
C:\Documents and Settings\LYNDA\Local Settings\Temporary Internet Files\Content.IE5\OWTQECBH\ads[3].htm moved successfully.
C:\Documents and Settings\LYNDA\Local Settings\Temporary Internet Files\Content.IE5\OWTQECBH\audmeasure[1].gif moved successfully.
C:\Documents and Settings\LYNDA\Local Settings\Temporary Internet Files\Content.IE5\OWTQECBH\p-01-0VIaSjnOLg[1].gif moved successfully.
C:\Documents and Settings\LYNDA\Local Settings\Temporary Internet Files\Content.IE5\5MGTFHRB\;ord=1706434404[1].htm moved successfully.
C:\Documents and Settings\LYNDA\Local Settings\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.

Registry entries deleted on Reboot...