Active Google Redirecting Search Results

[Active] Google Redirecting Search Results

Hello, I'm Kendall. I've been browsing this forum for a little while, trying to find a solution to my problem, but, as I realized, the solution varies from computer to computer, therefore I am starting my own topic.

For the past few days, Google has been redirecting me to other websites when I click on the search results. Also, banner ads for "VIMAX male enhancement" are on every website I go to. Even children's websites like Neopets.com and Nickelodeon. I have tried to solve the problem, but I can't. I have AVG Anti-Virus installed on my computer and I have run scans several times. However, there seems to be a problem with AVG. It will not update the software (automatically or manually), will not remove the infections, and disables all sceduled scans. Whenever I do scan the computer, there are quite a few problems that come up. These are the most recent scan results (AVG's interface will not allow me to copy and paste, so I am posting screenshots):
http://i111.photobucket.com/albums/n158/kks_x/rootkits.jpg
http://i111.photobucket.com/albums/n158/kks_x/warnings.jpg


I read in the forum instructions that I needed to post the two logfiles from the DDS program as well. Here they are:

tion
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-03-16.01)

Microsoft® Windows Vistaâ„¢ Ultimate
Boot Device: \Device\HarddiskVolume1
Install Date: 3/14/2009 9:52:18 AM
System Uptime: 3/20/2009 10:47:48 AM (1 hours ago)

Motherboard: Dell Inc. | | 0YC523
Processor: Intel(R) Pentium(R) D CPU 2.80GHz | Microprocessor | 2793/800mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 149 GiB total, 85.671 GiB free.
D: is CDROM ()
E: is CDROM ()
F: is Removable

==== Disabled Device Manager Items =============

==== System Restore Points ===================


==== Installed Programs ======================

Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Reader 9.1
Adobe Shockwave Player 11
AIM 6
ATI Catalyst Install Manager
AVG 8.5
Battlefield 1942
Catalyst Control Center - Branding
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center Graphics Previews Vista
Catalyst Control Center HydraVision Full
Catalyst Control Center InstallProxy
ccc-core-static
ccc-utility
CCC Help English
Counter-Strike: Source
Creative MediaSource Go!
DesertCombat 0.7
getPlus(R) for Adobe
GIMP 2.6.4
Google Toolbar for Internet Explorer
GTOneCare
Half-Life 2
Half-Life 2: Episode One
Half-Life 2: Episode Two
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Java(TM) 6 Update 12
Linksys Wireless-G PCI Adapter Driver - WMP54Gv4.1
Medal of Honor Allied Assault
Medal of Honor Allied Assault(tm) Breakthrough
Medal of Honor Pacific Assault(tm)
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Visual C++ 2005 Redistributable
Portal
Skins
Steam
System Requirements Lab
Team Fortress 2
Viewpoint Media Player
WinRAR archiver
World of Warcraft FREE Trial

==== End Of File ===========================


.
DDS (Ver_09-03-16.01) - NTFSx86
Run by Kendall at 11:04:26.81 on Fri 03/20/2009
Internet Explorer: 7.0.6001.18000
Microsoft® Windows Vistaâ„¢ Ultimate 6.0.6001.1.1252.1.1033.18.1021.243 [GMT -5:00]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskeng.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\msiexec.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10b.exe
C:\Windows\System32\wsqmcons.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\taskeng.exe
C:\Users\Kendall\Downloads\dds.scr

============== Pseudo HJT Report ===============

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.0.926.3450\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_219B3E1547538286.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: &Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [Aim6] "c:\program files\aim6\aim6.exe" /d locale=en-US ee://aol/imApp
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe "
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe "
mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe "
mRunOnce: [Uninstall getPlus(R) for Adobe] "c:\program files\nos\bin\getPlus_HelperSvc.exe" /UninstallGet1noarp
mPolicies-system: ConsentPromptBehaviorUser = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab
DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} - hxxp://www.systemrequirementslab.com/srl_bin/sysreqlab_srl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://dl8-cdn-01.sun.com/s/ESD7/JSCDL/jdk/6u12-b04/jinstall-6u12-windows-i586-jc.cab?e=1237069429535&h=bcb1699a191e192d4852b433610d920c/&filename=jinstall-6u12-windows-i586-jc.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab
DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - hxxp://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
TCP: NameServer = 85.255.112.189,85.255.112.178
TCP: {602DA5B5-3D15-4287-BAEB-EF63F1FA1907} = 85.255.112.189,85.255.112.178
TCP: {72314FBD-7ADC-4C6A-B038-5982DB64B67C} = 85.255.112.189,85.255.112.178
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~1\micros~2\office12\GR99D3~1.DLL
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg8\avgpp.dll
AppInit_DLLs: avgrsstx.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL

============= SERVICES / DRIVERS ===============

R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [2009-3-17 12552]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-3-17 325640]
R1 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-3-17 107912]
R2 avg8wd;AVG8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe [2009-3-17 298264]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\viewpoint\common\ViewpointService.exe [2009-3-14 24652]
R3 rt61x86;Linksys Wireless-G PCI Adapter Driver;c:\windows\system32\drivers\WMP54Gv41x86.sys [2009-3-14 286208]
S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\nos\bin\getPlus_HelperSvc.exe [2009-3-20 33176]

=============== Created Last 30 ================

2009-03-20 10:53 <DIR> --d----- c:\programdata\Adobe
2009-03-20 10:40 <DIR> --d----- c:\programdata\NOS
2009-03-20 10:37 <DIR> --d----- c:\users\kendall\.gimp-2.6
2009-03-20 10:37 <DIR> --d----- c:\users\kendall\.gegl-0.0
2009-03-20 10:36 <DIR> --d----- c:\program files\GIMP-2.0
2009-03-19 18:09 348,160 a------- c:\windows\system32\msvcr71.dll
2009-03-19 18:09 499,712 a------- c:\windows\system32\msvcp71.dll
2009-03-19 17:03 <DIR> --d----- c:\windows\system32\Adobe
2009-03-17 14:37 <DIR> --d-h--- C:\$AVG8.VAULT$
2009-03-17 14:13 10,520 a------- c:\windows\system32\avgrsstx.dll
2009-03-17 14:13 12,552 a------- c:\windows\system32\drivers\avgrkx86.sys
2009-03-17 14:13 107,912 a------- c:\windows\system32\drivers\avgtdix.sys
2009-03-17 14:13 325,640 a------- c:\windows\system32\drivers\avgldx86.sys
2009-03-17 14:13 <DIR> --d----- c:\windows\system32\drivers\Avg
2009-03-17 14:13 <DIR> --d----- c:\program files\AVG
2009-03-17 14:13 <DIR> --d----- c:\programdata\avg8
2009-03-17 14:13 <DIR> --d----- c:\progra~2\avg8
2009-03-17 13:12 <DIR> --d----- C:\SDFix
2009-03-16 19:33 729,088 a------- c:\windows\iun6002.exe
2009-03-16 18:41 530 a------- c:\windows\eReg.dat
2009-03-16 09:25 <DIR> --d----- c:\users\Kendall
2009-03-16 00:09 11,264 a------- c:\windows\INRES.DLL
2009-03-16 00:09 885 a------- c:\windows\system32\Ludap17.ini
2009-03-16 00:09 39 a------- c:\windows\system32\ctzapxx.ini
2009-03-16 00:09 <DIR> --d----- c:\windows\system32\Data
2009-03-16 00:06 53,248 a------- c:\windows\system32\CSVer.dll
2009-03-16 00:05 <DIR> --d----- C:\Intel
2009-03-16 00:01 <DIR> --d----- c:\program files\RadarSync
2009-03-15 23:44 <DIR> --d----- c:\programdata\PC Drivers HeadQuarters
2009-03-15 23:44 <DIR> --d----- c:\progra~2\PC Drivers HeadQuarters
2009-03-15 23:28 123,199,055 a------- c:\windows\MEMORY.DMP
2009-03-15 20:07 <DIR> --d----- c:\program files\EA GAMES
2009-03-15 19:01 <DIR> --d----- c:\program files\LucasArts
2009-03-15 16:22 32,592 a------- c:\windows\system32\msonpmon.dll
2009-03-15 16:02 <DIR> --d----- c:\windows\PCHEALTH
2009-03-15 15:53 <DIR> --d----- c:\program files\Microsoft Visual Studio 8
2009-03-15 15:47 <DIR> --d----- c:\programdata\Microsoft Help
2009-03-14 21:13 65,536 a------- c:\windows\system32\xinput1_3.dll
2009-03-14 21:13 65,536 a------- c:\windows\system32\xinput1_2.dll
2009-03-14 20:58 <DIR> --d----- c:\programdata\ATI
2009-03-14 20:54 0 a------- c:\windows\ativpsrm.bin
2009-03-14 20:53 <DIR> --d----- c:\program files\ATI Technologies
2009-03-14 20:53 <DIR> --d----- c:\program files\ATI
2009-03-14 20:52 <DIR> --d----- C:\ATI
2009-03-14 18:43 <DIR> --d----- c:\program files\Alcohol Soft
2009-03-14 18:40 717,296 a------- c:\windows\system32\drivers\sptd.sys
2009-03-14 18:35 <DIR> --d----- c:\program files\SystemRequirementsLab
2009-03-14 17:23 410,984 a------- c:\windows\system32\deploytk.dll
2009-03-14 17:13 <DIR> --d----- c:\windows\system32\appmgmt
2009-03-14 17:08 <DIR> --d----- C:\Downloads
2009-03-14 16:28 364 ---shr-- C:\autorun.inf
2009-03-14 15:40 50 a------- c:\windows\MegaManager.INI
2009-03-14 15:32 <DIR> --d----- c:\programdata\Megaupload
2009-03-14 15:32 <DIR> --d----- c:\programdata\EmailNotifier
2009-03-14 15:32 <DIR> --d----- c:\progra~2\Megaupload
2009-03-14 15:32 <DIR> --d----- c:\progra~2\EmailNotifier
2009-03-14 14:31 <DIR> --d----- c:\program files\common files\Steam
2009-03-14 14:31 <DIR> --d----- c:\program files\Steam
2009-03-14 13:24 <DIR> --d----- c:\programdata\Viewpoint
2009-03-14 13:24 <DIR> --d----- c:\progra~2\Viewpoint
2009-03-14 13:24 <DIR> --d----- c:\program files\Viewpoint
2009-03-14 13:24 <DIR> --d----- c:\programdata\acccore
2009-03-14 13:24 <DIR> --d----- c:\progra~2\acccore
2009-03-14 13:24 <DIR> --d----- c:\programdata\AOL OCP
2009-03-14 13:24 <DIR> --d----- c:\programdata\AOL
2009-03-14 13:24 <DIR> --d----- c:\program files\common files\AOL
2009-03-14 13:23 <DIR> --d----- c:\program files\AIM6
2009-03-14 13:23 368 a---h--- C:\IPH.PH
2009-03-14 12:37 647,872 -------- c:\windows\system32\Mscomct2.ocx
2009-03-14 12:37 41,984 -------- c:\windows\Ctregrun.exe
2009-03-14 12:36 306,688 a------- c:\windows\IsUninst.exe
2009-03-14 12:34 <DIR> --d----- c:\program files\Creative
2009-03-14 12:09 <DIR> --d----- c:\windows\system32\Activator
2009-03-14 11:48 <DIR> --d----- c:\windows\Panther
2009-03-14 11:48 8,192 a--s-r-- C:\BOOTSECT.BAK
2009-03-14 11:48 333,203 a--shr-- C:\bootmgr
2009-03-14 11:48 <DIR> --dsh--- C:\Boot
2009-03-14 11:30 <DIR> --d----- c:\windows\pss
2009-03-14 10:59 4,152,184 a------- c:\windows\system32\wgaer_m.exe
2009-03-14 10:59 1,303 a------- c:\windows\system32\WGAScanner.xml
2009-03-14 10:56 2,048 a------- c:\windows\system32\tzres.dll
2009-03-14 10:50 <DIR> --d----- c:\program files\uTorrent
2009-03-14 10:50 181,408 a--shr-- C:\grldr
2009-03-14 10:43 105,016 a------- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-03-14 10:43 97,800 a------- c:\windows\system32\infocardapi.dll
2009-03-14 10:43 37,384 a------- c:\windows\system32\infocardcpl.cpl
2009-03-14 10:43 622,080 a------- c:\windows\system32\icardagt.exe
2009-03-14 10:43 43,544 a------- c:\windows\system32\PresentationHostProxy.dll
2009-03-14 10:43 11,264 a------- c:\windows\system32\icardres.dll
2009-03-14 10:43 781,344 a------- c:\windows\system32\PresentationNative_v0300.dll
2009-03-14 10:43 326,160 a------- c:\windows\system32\PresentationHost.exe
2009-03-14 10:42 80,053 a------- c:\windows\system32\slmgr.vbs
2009-03-14 10:37 96,760 a------- c:\windows\system32\dfshim.dll
2009-03-14 10:37 282,112 a------- c:\windows\system32\mscoree.dll
2009-03-14 10:37 41,984 a------- c:\windows\system32\netfxperf.dll
2009-03-14 10:37 158,720 a------- c:\windows\system32\mscorier.dll
2009-03-14 10:37 83,968 a------- c:\windows\system32\mscories.dll
2009-03-14 10:25 738,304 a------- c:\windows\system32\inetcomm.dll
2009-03-14 10:24 1,645,568 a------- c:\windows\system32\connect.dll
2009-03-14 10:22 3,601,464 a------- c:\windows\system32\ntkrnlpa.exe
2009-03-14 10:22 3,549,240 a------- c:\windows\system32\ntoskrnl.exe
2009-03-14 10:22 2,033,152 a------- c:\windows\system32\win32k.sys
2009-03-14 10:22 1,314,816 a------- c:\windows\system32\quartz.dll
2009-03-14 10:20 <DIR> --d----- c:\programdata\Google
2009-03-14 10:20 <DIR> --dsh--- c:\windows\Installer
2009-03-14 10:18 1,334,272 a------- c:\windows\system32\msxml6.dll
2009-03-14 10:14 1,524,736 a------- c:\windows\system32\wucltux.dll
2009-03-14 10:14 162,064 a------- c:\windows\system32\wuwebv.dll
2009-03-14 10:14 31,232 a------- c:\windows\system32\wuapp.exe
2009-03-14 10:09 52,864 a----r-- c:\windows\system32\SetupWizard.exe
2009-03-14 10:08 286,208 a------- c:\windows\system32\drivers\WMP54Gv41x86.sys
2009-03-14 10:00 0 a---h--- c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf

==================== Find3M ====================

2009-03-16 00:09 86,016 a------- c:\windows\inf\infstrng.dat
2009-03-16 00:09 51,200 a------- c:\windows\inf\infpub.dat
2009-03-16 00:09 86,016 a------- c:\windows\inf\infstor.dat
2009-03-14 11:20 665,600 a------- c:\windows\inf\drvindex.dat
2009-02-04 02:29 4,303,360 a------- c:\windows\system32\drivers\atikmdag.sys
2009-02-04 00:02 442,368 a------- c:\windows\system32\ATIDEMGX.dll
2009-02-04 00:00 159,744 a------- c:\windows\system32\atitmmxx.dll
2009-02-04 00:00 348,160 a------- c:\windows\system32\atipdlxx.dll
2009-02-04 00:00 274,432 a------- c:\windows\system32\Oemdspif.dll
2009-02-04 00:00 11,264 a------- c:\windows\system32\atimuixx.dll
2009-02-04 00:00 43,520 a------- c:\windows\system32\ati2edxx.dll
2009-02-03 23:59 286,720 a------- c:\windows\system32\Ati2evxx.dll
2009-02-03 23:58 729,088 a------- c:\windows\system32\Ati2evxx.exe
2009-02-03 23:43 3,903,488 a------- c:\windows\system32\atiumdag.dll
2009-02-03 23:22 4,905,472 a------- c:\windows\system32\atiumdva.dll
2009-02-03 23:11 11,366,400 a------- c:\windows\system32\atioglxx.dll
2009-02-03 23:07 51,712 a------- c:\windows\system32\amdpcom32.dll
2009-02-03 23:07 131,072 a------- c:\windows\system32\atiadlxx.dll
2009-02-03 22:53 53,248 a------- c:\windows\system32\drivers\ati2erec.dll
2009-02-03 22:01 57,344 a------- c:\windows\system32\aticalrt.dll
2009-02-03 22:01 53,248 a------- c:\windows\system32\aticalcl.dll
2009-02-03 21:58 3,252,224 a------- c:\windows\system32\aticaldd.dll
2009-01-15 01:11 827,392 a------- c:\windows\system32\wininet.dll
2008-01-20 21:41 174 a--sh--- c:\program files\desktop.ini
2006-11-02 07:40 287,440 a------- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 07:40 287,440 a------- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 07:40 30,674 a------- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 07:40 30,674 a------- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 04:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 04:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 04:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 04:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat

============= FINISH: 11:05:09.19 ===============


I would appreciate any help taht can be given. Thank you.

 

Hi kendallion
Welcome to WindowsBBS

Thanks for the information.

Please do the following.

Download ComboFix from Here to your Desktop.

It's best to disable realtime protection applications as they sometimes interfere with the tool.
Check this link for any applicable programs you may have.

• Close all open programs and windows
• Double click combofix.exe and follow the prompts.
• Vista users right click Combofix.exe and select Run As Administrator.
• When finished, it shall produce a log for you. Post the Combofix log

Note: Do not mouseclick combofix's window while its running. That may cause it to stall

**NOTE - Allow ComboFix to update if prompted.

Thanks
Geri

 

ComboFix 09-03-22.01 - Kendall 2009-03-22 20:01:13.1 - NTFSx86
Microsoft® Windows Vistaâ„¢ Ultimate 6.0.6001.1.1252.1.1033.18.1021.181 [GMT -5:00]
Running from: c:\users\Kendall\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
c:\recycler\S-4-5-26-100023457-100027202-100000577-7943.com
c:\windows\system32\drivers\gaopdxtxffaqobnrnetvpvubqrobxwveixkxta.sys
c:\windows\system32\gaopdxbexopbsgnltvvhounxnvsucmgiytefix.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_gaopdxserv.sys


((((((((((((((((((((((((( Files Created from 2009-02-23 to 2009-03-23 )))))))))))))))))))))))))))))))
.

2009-03-22 19:39 . 2009-03-22 19:39 <DIR> d-------- c:\users\All Users\Last.fm
2009-03-22 19:39 . 2009-03-22 19:39 <DIR> d-------- c:\programdata\Last.fm
2009-03-22 19:38 . 2009-03-22 19:38 <DIR> d-------- c:\program files\Last.fm
2009-03-22 16:50 . 2009-03-22 16:50 <DIR> d-------- c:\program files\Any Video Converter
2009-03-22 15:57 . 2009-03-22 16:15 <DIR> d-------- c:\users\Kameron\AppData\Roaming\Orbit
2009-03-22 15:42 . 2009-03-22 15:42 <DIR> d-------- c:\program files\FLV Player
2009-03-22 15:30 . 2008-06-04 17:42 364,544 --a------ c:\windows\System32\PropertyGrid.ocx
2009-03-22 15:30 . 2008-12-24 08:02 274,432 --a------ c:\windows\System32\TubeFinder.exe
2009-03-22 15:30 . 2008-06-04 17:42 208,500 --a------ c:\windows\System32\ReyXpBasics.tlb
2009-03-22 15:30 . 2008-06-04 17:42 152,848 --a------ c:\windows\System32\COMDLG32.OCX
2009-03-22 15:30 . 2008-06-04 17:42 141,312 --a------ c:\windows\System32\MSCMCFR.DLL
2009-03-22 15:30 . 2008-06-04 17:42 119,568 --a------ c:\windows\System32\VB6FR.DLL
2009-03-22 15:30 . 2008-06-04 17:42 101,888 --a------ c:\windows\System32\VB6STKIT.DLL
2009-03-22 15:30 . 2008-06-04 17:42 84,512 --a------ c:\windows\System32\PICCLP32.OCX
2009-03-22 15:30 . 2008-06-04 17:42 32,768 --a------ c:\windows\System32\CMDLGFR.DLL
2009-03-22 15:30 . 2008-06-04 17:42 24,576 --a------ c:\windows\System32\ControlSubX.ocx
2009-03-22 15:30 . 2008-06-04 17:42 9,728 --a------ c:\windows\System32\PCCLPFR.DLL
2009-03-22 15:15 . 2009-03-22 17:01 <DIR> d-------- c:\users\Kameron\AppData\Roaming\Any Video Converter
2009-03-22 14:55 . 2009-03-22 14:55 0 --ah----- c:\windows\System32\drivers\Msft_User_WpdRapi_01_00_00.Wdf
2009-03-20 11:52 . 2009-03-20 12:56 <DIR> d-------- c:\users\Kendall\AppData\Roaming\gtk-2.0
2009-03-20 11:52 . 2009-03-20 11:52 <DIR> d-------- c:\users\Kendall\.thumbnails
2009-03-20 10:54 . 2009-03-20 10:54 <DIR> d-------- c:\program files\Common Files\Adobe AIR
2009-03-20 10:53 . 2009-03-20 10:55 <DIR> d-------- c:\users\All Users\Adobe
2009-03-20 10:53 . 2009-03-20 10:54 <DIR> d-------- c:\program files\Common Files\Adobe
2009-03-20 10:40 . 2009-03-21 10:31 <DIR> d-------- c:\users\All Users\NOS
2009-03-20 10:40 . 2009-03-21 10:31 <DIR> d-------- c:\programdata\NOS
2009-03-20 10:40 . 2009-03-21 10:31 <DIR> d-------- c:\program files\NOS
2009-03-20 10:37 . 2009-03-20 12:56 <DIR> d-------- c:\users\Kendall\.gimp-2.6
2009-03-20 10:37 . 2009-03-20 10:37 <DIR> d-------- c:\users\Kendall\.gegl-0.0
2009-03-20 10:36 . 2009-03-20 10:36 <DIR> d-------- c:\program files\GIMP-2.0
2009-03-19 18:09 . 2009-01-16 18:34 499,712 --a------ c:\windows\System32\msvcp71.dll
2009-03-19 18:09 . 2009-01-16 18:34 348,160 --a------ c:\windows\System32\msvcr71.dll
2009-03-19 17:03 . 2009-03-19 18:08 <DIR> d-------- c:\windows\System32\Adobe
2009-03-17 14:37 . 2009-03-22 15:38 <DIR> d--h----- C:\$AVG8.VAULT$
2009-03-17 14:13 . 2009-03-17 14:13 <DIR> d-------- c:\windows\System32\drivers\Avg
2009-03-17 14:13 . 2009-03-17 14:13 <DIR> d-------- c:\users\All Users\avg8
2009-03-17 14:13 . 2009-03-17 14:13 <DIR> d-------- c:\programdata\avg8
2009-03-17 14:13 . 2009-03-17 14:13 <DIR> d-------- c:\program files\AVG
2009-03-17 14:13 . 2009-03-17 14:13 325,640 --a------ c:\windows\System32\drivers\avgldx86.sys
2009-03-17 14:13 . 2009-03-17 14:13 107,912 --a------ c:\windows\System32\drivers\avgtdix.sys
2009-03-17 14:13 . 2009-03-17 14:13 12,552 --a------ c:\windows\System32\drivers\avgrkx86.sys
2009-03-17 14:13 . 2009-03-17 14:13 10,520 --a------ c:\windows\System32\avgrsstx.dll
2009-03-17 13:12 . 2008-11-06 02:03 <DIR> d-------- C:\SDFix
2009-03-16 19:33 . 2009-03-16 21:03 729,088 --a------ c:\windows\iun6002.exe
2009-03-16 18:41 . 2009-03-16 20:57 530 --a------ c:\windows\eReg.dat
2009-03-16 11:50 . 2009-03-16 11:50 <DIR> d-------- c:\users\Kendall\AppData\Roaming\acccore
2009-03-16 09:26 . 2009-03-16 09:26 <DIR> d-------- c:\users\Kendall\AppData\Roaming\ATI
2009-03-16 09:25 . 2009-03-16 09:25 <DIR> dr------- c:\users\Kendall\Videos
2009-03-16 09:25 . 2009-03-16 09:25 <DIR> dr------- c:\users\Kendall\Searches
2009-03-16 09:25 . 2009-03-16 09:25 <DIR> dr------- c:\users\Kendall\Saved Games
2009-03-16 09:25 . 2009-03-20 12:33 <DIR> dr------- c:\users\Kendall\Pictures
2009-03-16 09:25 . 2009-03-16 09:25 <DIR> dr------- c:\users\Kendall\Music
2009-03-16 09:25 . 2009-03-16 09:25 <DIR> dr------- c:\users\Kendall\Links
2009-03-16 09:25 . 2009-03-20 11:02 <DIR> dr------- c:\users\Kendall\Downloads
2009-03-16 09:25 . 2009-03-20 10:32 <DIR> dr------- c:\users\Kendall\Documents
2009-03-16 09:25 . 2009-03-16 09:25 <DIR> dr------- c:\users\Kendall\Contacts
2009-03-16 09:25 . 2006-11-02 07:35 <DIR> d-------- c:\users\Kendall\AppData\Roaming\Media Center Programs
2009-03-16 09:25 . 2009-03-16 09:25 <DIR> d--h----- c:\users\Kendall\AppData
2009-03-16 09:25 . 2009-03-20 12:56 <DIR> d-------- c:\users\Kendall
2009-03-16 00:09 . 2009-03-16 00:09 <DIR> d-------- c:\windows\System32\Data
2009-03-16 00:09 . 2005-06-15 11:07 11,264 --a------ c:\windows\INRES.DLL
2009-03-16 00:09 . 2006-08-28 12:20 885 --a------ c:\windows\System32\Ludap17.ini
2009-03-16 00:09 . 2005-03-08 14:14 39 --a------ c:\windows\System32\ctzapxx.ini
2009-03-16 00:06 . 2009-03-17 13:50 <DIR> d-------- c:\program files\Intel
2009-03-16 00:06 . 2008-05-01 16:35 53,248 --a------ c:\windows\System32\CSVer.dll
2009-03-16 00:05 . 2009-03-16 00:05 <DIR> d-------- C:\Intel
2009-03-16 00:01 . 2009-03-16 00:13 <DIR> d-------- c:\program files\RadarSync
2009-03-15 23:44 . 2009-03-15 23:44 <DIR> d-------- c:\users\All Users\PC Drivers HeadQuarters
2009-03-15 23:44 . 2009-03-15 23:44 <DIR> d-------- c:\programdata\PC Drivers HeadQuarters
2009-03-15 23:28 . 2009-03-22 13:49 130,653,711 --a------ c:\windows\MEMORY.DMP
2009-03-15 21:52 . 2009-03-15 21:52 <DIR> d-------- c:\users\Kameron\AppData\Roaming\DAEMON Tools Pro
2009-03-15 20:07 . 2009-03-16 18:34 <DIR> d-------- c:\program files\EA GAMES
2009-03-15 19:01 . 2009-03-15 19:01 <DIR> d-------- c:\program files\LucasArts
2009-03-15 16:22 . 2006-10-26 19:56 32,592 --a------ c:\windows\System32\msonpmon.dll
2009-03-15 16:07 . 2009-03-15 16:07 <DIR> d-------- c:\program files\Microsoft Works
2009-03-15 16:02 . 2009-03-15 16:02 <DIR> d-------- c:\windows\PCHEALTH
2009-03-15 16:02 . 2009-03-15 16:02 <DIR> d-------- c:\program files\Microsoft.NET
2009-03-15 15:53 . 2009-03-15 15:53 <DIR> d-------- c:\program files\Microsoft Visual Studio 8
2009-03-15 15:49 . 2009-03-15 15:49 <DIR> dr-h----- C:\MSOCache
2009-03-15 15:47 . 2009-03-15 16:23 <DIR> d-------- c:\users\All Users\Microsoft Help
2009-03-15 15:47 . 2009-03-15 16:23 <DIR> d-------- c:\programdata\Microsoft Help
2009-03-14 21:13 . 2009-03-14 21:13 65,536 --a------ c:\windows\System32\xinput1_3.dll
2009-03-14 21:13 . 2009-03-14 21:13 65,536 --a------ c:\windows\System32\xinput1_2.dll
2009-03-14 20:58 . 2009-03-14 20:58 <DIR> d-------- c:\users\Kameron\AppData\Roaming\ATI
2009-03-14 20:58 . 2009-03-14 20:58 <DIR> d-------- c:\users\All Users\ATI
2009-03-14 20:58 . 2009-03-14 20:58 <DIR> d-------- c:\programdata\ATI
2009-03-14 20:54 . 2009-03-14 20:54 0 --a------ c:\windows\ativpsrm.bin
2009-03-14 20:53 . 2009-03-14 20:55 <DIR> d-------- c:\program files\ATI Technologies
2009-03-14 20:53 . 2009-03-16 01:06 <DIR> d-------- c:\program files\ATI
2009-03-14 20:52 . 2009-03-14 20:52 <DIR> d-------- C:\ATI
2009-03-14 18:43 . 2009-03-15 22:05 <DIR> d-------- c:\program files\Alcohol Soft
2009-03-14 18:40 . 2009-03-15 21:49 717,296 --a------ c:\windows\System32\drivers\sptd.sys
2009-03-14 18:35 . 2009-03-14 18:35 <DIR> d-------- c:\program files\SystemRequirementsLab
2009-03-14 17:23 . 2009-03-14 17:23 410,984 --a------ c:\windows\System32\deploytk.dll
2009-03-14 17:22 . 2009-03-14 17:22 <DIR> d-------- c:\program files\Java
2009-03-14 17:08 . 2009-03-22 16:13 <DIR> d-------- C:\Downloads
2009-03-14 15:40 . 2009-03-14 15:43 50 --a------ c:\windows\MegaManager.INI
2009-03-14 15:32 . 2009-03-14 15:32 <DIR> d-------- c:\users\All Users\Megaupload
2009-03-14 15:32 . 2009-03-14 15:32 <DIR> d-------- c:\users\All Users\EmailNotifier
2009-03-14 15:32 . 2009-03-14 15:32 <DIR> d-------- c:\programdata\Megaupload
2009-03-14 15:32 . 2009-03-14 15:32 <DIR> d-------- c:\programdata\EmailNotifier
2009-03-14 14:31 . 2009-03-18 14:35 <DIR> d-------- c:\program files\Steam
2009-03-14 14:31 . 2009-03-18 14:33 <DIR> d-------- c:\program files\Common Files\Steam
2009-03-14 13:25 . 2009-03-14 13:25 <DIR> d-------- c:\users\Kameron\AppData\Roaming\acccore
2009-03-14 13:24 . 2009-03-14 13:24 <DIR> d-------- c:\users\All Users\Viewpoint
2009-03-14 13:24 . 2009-03-14 13:26 <DIR> d-------- c:\users\All Users\AOL OCP
2009-03-14 13:24 . 2009-03-14 13:24 <DIR> d-------- c:\users\All Users\AOL
2009-03-14 13:24 . 2009-03-14 13:24 <DIR> d-------- c:\users\All Users\acccore
2009-03-14 13:24 . 2009-03-14 13:24 <DIR> d-------- c:\programdata\Viewpoint
2009-03-14 13:24 . 2009-03-14 13:26 <DIR> d-------- c:\programdata\AOL OCP
2009-03-14 13:24 . 2009-03-14 13:24 <DIR> d-------- c:\programdata\AOL
2009-03-14 13:24 . 2009-03-14 13:24 <DIR> d-------- c:\programdata\acccore
2009-03-14 13:24 . 2009-03-14 13:24 <DIR> d-------- c:\program files\Viewpoint
2009-03-14 13:24 . 2009-03-14 13:24 <DIR> d-------- c:\program files\Common Files\AOL
2009-03-14 13:23 . 2009-03-14 13:25 <DIR> d-------- c:\program files\AIM6
2009-03-14 13:23 . 2009-03-14 13:25 368 --ah----- C:\IPH.PH
2009-03-14 12:37 . 2000-05-22 03:58 647,872 --------- c:\windows\System32\Mscomct2.ocx
2009-03-14 12:37 . 1999-10-10 20:00 41,984 --------- c:\windows\Ctregrun.exe
2009-03-14 12:36 . 1998-10-29 16:45 306,688 --a------ c:\windows\IsUninst.exe
2009-03-14 12:34 . 2009-03-16 00:09 <DIR> d-------- c:\program files\Creative
2009-03-14 12:34 . 2009-03-15 20:02 <DIR> d-------- c:\program files\Common Files\InstallShield
2009-03-14 12:09 . 2009-03-14 12:09 <DIR> d-------- c:\windows\System32\Activator
2009-03-14 11:48 . 2009-03-14 10:52 <DIR> d-------- c:\windows\Panther
2009-03-14 11:48 . 2009-03-14 11:48 <DIR> d--hs---- C:\Boot
2009-03-14 11:48 . 2008-01-20 21:22 333,203 -rahs---- C:\bootmgr

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-15 21:06 --------- d-----w c:\program files\MSBuild
2009-03-14 15:59 --------- d-----w c:\program files\Windows Mail
2009-02-04 07:29 4,303,360 ----a-w c:\windows\system32\drivers\atikmdag.sys
2009-02-04 05:02 442,368 ----a-w c:\windows\System32\ATIDEMGX.dll
2009-02-04 05:00 43,520 ----a-w c:\windows\System32\ati2edxx.dll
2009-02-04 05:00 348,160 ----a-w c:\windows\System32\atipdlxx.dll
2009-02-04 05:00 274,432 ----a-w c:\windows\System32\Oemdspif.dll
2009-02-04 05:00 159,744 ----a-w c:\windows\System32\atitmmxx.dll
2009-02-04 05:00 11,264 ----a-w c:\windows\System32\atimuixx.dll
2009-02-04 04:59 286,720 ----a-w c:\windows\System32\Ati2evxx.dll
2009-02-04 04:58 729,088 ----a-w c:\windows\System32\Ati2evxx.exe
2009-02-04 04:43 3,903,488 ----a-w c:\windows\System32\atiumdag.dll
2009-02-04 04:22 4,905,472 ----a-w c:\windows\System32\atiumdva.dll
2009-02-04 04:11 11,366,400 ----a-w c:\windows\System32\atioglxx.dll
2009-02-04 04:07 51,712 ----a-w c:\windows\System32\amdpcom32.dll
2009-02-04 04:07 131,072 ----a-w c:\windows\System32\atiadlxx.dll
2009-02-04 03:53 53,248 ----a-w c:\windows\system32\drivers\ati2erec.dll
2009-02-04 03:01 57,344 ----a-w c:\windows\System32\aticalrt.dll
2009-02-04 03:01 53,248 ----a-w c:\windows\System32\aticalcl.dll
2009-02-04 02:58 3,252,224 ----a-w c:\windows\System32\aticaldd.dll
2009-01-15 06:11 827,392 ----a-w c:\windows\System32\wininet.dll
2008-01-21 02:41 174 --sha-w c:\program files\desktop.ini
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar "= "c:\program files\Windows Sidebar\sidebar.exe" [2008-01-20 1233920]
"swg "= "c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-03-14 39408]
"Aim6 "= "c:\program files\AIM6\aim6.exe" [2008-10-21 50472]
"WMPNSCFG "= "c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-20 202240]
"WindowsWelcomeCenter "= "oobefldr.dll" [2008-01-20 c:\windows\System32\oobefldr.dll]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched "= "c:\program files\Java\jre6\bin\jusched.exe" [2009-03-14 148888]
"StartCCC "= "c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-02-03 61440]
"GrooveMonitor "= "c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 31016]
"AVG8_TRAY "= "c:\progra~1\AVG\AVG8\avgtray.exe" [2009-03-17 1932568]
"Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"Windows Mobile-based device management "= "c:\windows\WindowsMobile\wmdSync.exe" [2008-01-20 215552]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser "= 0 (0x0)
"EnableUIADesktopToggle "= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs "=avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UACDisableNotify "=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall "= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{0777C3EB-C3CC-411B-8774-A15C29A72B42} "= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent (TCP-In)
"{80AAD9DE-A552-4582-8F9A-85BE98E30ECC} "= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent (UDP-In)
"{0FE3946C-FAD7-4EED-83BB-BF2883F50A2D} "= UDP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{9820A5CD-5F60-4D36-8F10-37653EA89350} "= TCP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{201524DA-E90C-4F7B-BC9F-27A205E85941} "= UDP:c:\program files\AIM6\aim6.exe:AIM
"{DBB3B597-8C0F-4BBD-BF30-A81030F63C3E} "= TCP:c:\program files\AIM6\aim6.exe:AIM
"TCP Query User{2BFFEA4F-8B90-46FD-A49D-7D04685C5BC0}c:\\program files\\java\\jre6\\bin\\javaw.exe "= UDP:c:\program files\java\jre6\bin\javaw.exe:Java(TM) Platform SE binary
"UDP Query User{BB3E1542-422C-4B6B-B087-087107C3C05E}c:\\program files\\java\\jre6\\bin\\javaw.exe "= TCP:c:\program files\java\jre6\bin\javaw.exe:Java(TM) Platform SE binary
"TCP Query User{C0F166C8-D49D-4A44-A304-BED9D5570B33}c:\\program files\\java\\jre6\\bin\\java.exe "= UDP:c:\program files\java\jre6\bin\java.exe:Java(TM) Platform SE binary
"UDP Query User{A9B79D3D-C825-4CDB-A660-F36CAC07E644}c:\\program files\\java\\jre6\\bin\\java.exe "= TCP:c:\program files\java\jre6\bin\java.exe:Java(TM) Platform SE binary
"{5C238B79-74EE-44C8-8638-3035CF59A11A} "= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{85EFC7C1-90A9-4AF3-BEDC-D48BE8B85CCC} "= UDP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{7787D196-F86A-4909-874D-1EC95B6B2314} "= TCP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{B4F53579-D9D7-47CD-9EAC-C5645945486A} "= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{E674F7F8-11F9-4C7E-93F2-9DDBB404C1F0} "= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{546204CF-8B23-46C9-85A2-32B633F0C8EE} "= c:\program files\AVG\AVG8\avgam.exe:avgam.exe
"{8D55FB02-18E9-4A77-A0CA-16EE20C8134F} "= c:\program files\AVG\AVG8\avgdiag.exe:avgdiag.exe
"{D37D6746-9EF1-4B6E-8EF1-330BFA13D9B0} "= c:\program files\AVG\AVG8\avgdiagex.exe:avgdiagex.exe
"{531139F0-E5C3-409F-AD39-8B3E115CFB81} "= c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe
"{C6AE713A-2E0A-4FFC-8677-E4F4212BB575} "= c:\program files\AVG\AVG8\avgnsx.exe:avgnsx.exe
"{507576E0-99EA-451A-8995-AE556F215F51} "= UDP:990:LocalSubnet:LocalSubnet|IF={F2762661-A098-4356-B344-0E4475F59A0A}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr%systemroot%\WindowsMobile\wmdSync.exe,-4001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall "= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall "= 0 (0x0)

R0 AvgRkx86;avgrkx86.sys;c:\windows\System32\drivers\avgrkx86.sys [2009-03-17 12552]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\System32\drivers\avgldx86.sys [2009-03-17 325640]
R1 AvgTdiX;AVG8 Network Redirector;c:\windows\System32\drivers\avgtdix.sys [2009-03-17 107912]
R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-03-17 298264]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [2009-03-14 24652]
R3 rt61x86;Linksys Wireless-G PCI Adapter Driver;c:\windows\System32\drivers\WMP54Gv41x86.sys [2009-03-14 286208]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9362dac9-10af-11de-a505-806e6f6e6963}]
\shell\AutoRun\command - D:\setup.exe
.
Contents of the 'Scheduled Tasks' folder

2009-03-22 c:\windows\Tasks\User_Feed_Synchronization-{1F90871E-1516-466A-B256-77ADFCCF939E}.job
- c:\windows\system32\msfeedssync.exe [2008-01-20 21:23]
.
.
------- Supplementary Scan -------
.
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-22 20:06:06
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files:

**************************************************************************
.
Completion time: 2009-03-22 20:07:53
ComboFix-quarantined-files.txt 2009-03-23 01:07:51

Pre-Run: 92,841,873,408 bytes free
Post-Run: 92,859,396,096 bytes free

257 --- E O F --- 2009-03-14 16:20:05

 

Hi
OK please do this.

Download ATF Cleaner by Atribune and save it to your Desktop.
This is a good tool to get rid of the temporary garbage you pick up while surfing the net.
Double click ATF-Cleaner.exe to run the program.
Check the boxes to the left of:

Windows Temp
Current User Temp
All Users Temp
Cookies
Temporary Internet Files
Prefetch
Java Cache
Recycle bin

The rest are optional - if you want it to remove everything check "Select All ".
Finally, click Empty Selected. When you get the "Done Cleaning" message, click OK.

Now a on line scan.

Please do an online scan with Kaspersky WebScanner

It's best to disable real time protection applications as they sometimes interfere with the scan.
Check this link for any applicable programs you may have.

Click on “Accept” If your pop –up blocker blocks any windows from opening.

Click Run on the window that opens.
Windows Vista users you must open the web browser using the Run as Administrator command.

• The program will launch and then begin downloading the latest definition files:
• Under Scan on the left side.Click on My Computer
• This will start the program and scan your system.
• Click the “Scan Report” On the left side.
• The scan will take a while so be patient and let it run.
• Once the scan is complete it will display if your system has been infected.
  • Click the Save Report As button, and in the Browse dialog box, type a name for the scan report file that you want to create and select its type Text file. Click OK to save the file.:
• Save the text file to your desktop.
• Copy and paste that information in your next post.

Please post the Kaspersky results.

Also let me know how things are running.

Thanks
Geri

 

The Kapersky scanner kept freezing. I tried it a few times and even left it overnight. However, my AVG anti-virus is working again. My computer is working perfectly. No more redirecting of stupid banner advertisements. : D

Thanks so much!

 

Hi
OK please try this one.

Please go HERE to run Panda's ActiveScan

• Once you are on the Panda site click the Scan your PC button
• A new window will open...click the Check Now button
• Enter your Country
• Enter your State/Province
• Enter your e-mail address and click send
• Select either Home User or Company
• Click the big Scan Now button
• If it wants to install an ActiveX component allow it
• It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
• When download is complete, click on My Computer to start the scan
• When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Post the contents of the ActiveScan report

Thanks
Geri