Inactive IEXPLORER.EXE virus

[Inactive] IEXPLORER.EXE virus

Hi everyone. Unfortunately I have IEXPLORER.EXE popping up in my task manager ALL the time. No matter how many times I close it, the blasted thing reappears within seconds.

The symptoms that I'm getting from this malware are:
- The internet explorer clicking noise
- random music playing(rarely but it happens)
- wave randomly going down to zero

I have done a scan of my computer using dds.scr. Here are the two outputs:

DDS.TXT
DDS (Ver_10-03-17.01) - NTFSx86
Run by Jeffery at 2:22:38.93 on Wed 07/14/2010
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_18
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1022.492 [GMT -4:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe 4
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
svchost.exe 4
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\TP-LINK\TL-WN321G Wireless Utility\Installer\WINXP\TWCU.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\AVG\AVG9\avgupd.exe
C:\Documents and Settings\Jeffery\Desktop\dds.scr

============== Pseudo HJT Report ===============

uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
uURLSearchHooks: AOLSearchHook Class: {54eb34ea-e6be-4cfd-9f4f-c4a0c2eafa22} - c:\program files\aim search\AOLSearch.dll
uURLSearchHooks: H - No File
mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
mURLSearchHooks: AOLSearchHook Class: {54eb34ea-e6be-4cfd-9f4f-c4a0c2eafa22} - c:\program files\aim search\AOLSearch.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll
BHO: AOLSearchHook Class: {54eb34ea-e6be-4cfd-9f4f-c4a0c2eafa22} - c:\program files\aim search\AOLSearch.dll
BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
TB: MSN Toolbar: {bdad1dad-c946-4a17-adc1-64b5b4ff55d0} - c:\program files\msn toolbar\01.01.2607.0\en-us\msntb.dll
TB: {A057A204-BACC-4D26-9990-79A187E2698E} - No File
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
uRun: [Aim6]
uRun: [MsnMsgr] "c:\program files\msn messenger\MsnMsgr.Exe" /background
uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe "
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [AdobeBridge]
mRun: [<NO NAME>]
mRun: [HPLJ Config] c:\program files\hewlett-packard\hp laserjet 1010 series\setconfig.exe -c direct -p \\scef88f7\P1 -pn "hp LaserJet 1010 Series Driver" -n 0 -l 1033 -sl 120000
mRun: [CTHelper] CTHELPER.EXE
mRun: [AsioReg] REGSVR32.EXE /S CTASIO.DLL
mRun: [SBDrvDet] c:\program files\creative\sb drive det\SBDrvDet.exe /r
mRun: [UpdReg] c:\windows\UpdReg.EXE
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe "
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe "
mRun: [AdobeCS4ServiceManager] "c:\program files\common files\adobe\cs4servicemanager\CS4ServiceManager.exe" -launchedbylogin
mRun: [AVG9_TRAY] c:\progra~1\avg\avg9\avgtray.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\tl-wn3~1.lnk - c:\program files\tp-link\tl-wn321g wireless utility\installer\winxp\TWCU.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\winzip~1.lnk - c:\program files\winzip\WZQKPICK.EXE
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
Trusted Zone: aol.com\free
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/products/plugin/1.4/jinstall-14_07-windows-i586.cab
DPF: {CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/1.4/jinstall-14_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: Antiwpa - antiwpa.dll
Notify: avgrsstarter - avgrsstx.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\jeffery\applic~1\mozilla\firefox\profiles\8oev05gc.default\
FF - prefs.js: browser.search.defaulturl - hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType=tb50fftrie7&query=
FF - prefs.js: browser.search.selectedEngine - Yahoo! Search
FF - prefs.js: browser.startup.homepage - hxxp://en-US.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-USfficial
FF - prefs.js: keyword.URL - hxxp://ca.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_ca&p=
FF - plugin: c:\program files\microsoft\office live\npOLW.dll
FF - plugin: c:\program files\viewpoint\viewpoint media player\npViewpoint.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - truec:\program files\mozilla firefox\greprefs\security-prefs.js - pref( "security.ssl3.rsa_seed_sha ", true);

============= SERVICES / DRIVERS ===============

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-9-6 216200]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2009-9-6 29584]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-9-6 242896]
R2 avg9wd;AVG Free WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2010-3-14 308064]
S0 Lbd;Lbd;c:\windows\system32\drivers\lbd.sys --> c:\windows\system32\drivers\Lbd.sys [?]
S3 pbfilter;pbfilter;c:\documents and settings\jeffery\my documents\peer block\pbfilter.sys [2010-2-10 14424]

=============== Created Last 30 ================

2010-07-13 18:04:46 50 ----a-w- c:\windows\wininit.ini
2010-07-12 18:11:34 0 d-----w- C:\Rooter$
2010-07-12 16:48:56 0 d-----w- c:\docume~1\jeffery\applic~1\Malwarebytes
2010-07-12 16:48:49 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-07-12 16:48:48 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-07-12 16:48:48 0 d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-07-12 16:48:48 0 d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2010-07-12 16:32:08 0 d-----w- c:\windows\SxsCaPendDel
2010-07-12 16:07:07 0 d-----w- c:\windows\system32\NtmsData
2010-07-12 16:04:05 0 d-----w- C:\7-12-2010
2010-07-09 17:37:44 0 d-----w- c:\program files\Trend Micro

==================== Find3M ====================

2010-06-03 12:23:27 242896 ----a-w- c:\windows\system32\drivers\avgtdix.sys

============= FINISH: 2:24:06.78 ===============


ATTACH.TXT

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-03-17.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 9/6/2009 2:00:38 PM
System Uptime: 7/14/2010 2:17:32 AM (0 hours ago)

Motherboard: Hewlett-Packard | | X4000 System Board
Processor: Intel(R) XEON(TM) CPU 2.00GHz | CPU1 | 1994/400mhz
Processor: Intel(R) XEON(TM) CPU 2.00GHz | CPU2 | 1995/400mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 112 GiB total, 42.188 GiB free.
E: is CDROM ()
G: is Removable

==== Disabled Device Manager Items =============

Class GUID: {4D36E96F-E325-11CE-BFC1-08002BE10318}
Description: PS/2 Compatible Mouse
Device ID: ACPI\PNP0F13\4&3A2C8C4B&0
Manufacturer: Microsoft
Name: PS/2 Compatible Mouse
PNP Device ID: ACPI\PNP0F13\4&3A2C8C4B&0
Service: i8042prt

==== System Restore Points ===================

RP265: 4/15/2010 3:13:50 AM - System Checkpoint
RP266: 4/16/2010 3:47:05 AM - System Checkpoint
RP267: 4/17/2010 5:14:48 AM - System Checkpoint
RP268: 4/18/2010 5:22:47 AM - System Checkpoint
RP269: 4/19/2010 6:22:51 AM - System Checkpoint
RP270: 4/20/2010 6:33:53 AM - System Checkpoint
RP271: 4/21/2010 7:22:36 AM - System Checkpoint
RP272: 4/21/2010 8:09:00 AM - Avg Update
RP273: 4/21/2010 8:10:15 AM - Avg Update
RP274: 4/22/2010 8:22:36 AM - System Checkpoint
RP275: 4/23/2010 9:41:27 AM - System Checkpoint
RP276: 4/24/2010 9:57:17 AM - System Checkpoint
RP277: 4/25/2010 10:36:58 PM - System Checkpoint
RP278: 4/26/2010 11:48:48 PM - System Checkpoint
RP279: 4/28/2010 12:17:25 AM - System Checkpoint
RP280: 4/29/2010 2:28:21 AM - System Checkpoint
RP281: 4/30/2010 2:50:36 AM - System Checkpoint
RP282: 5/9/2010 9:10:17 PM - Avg Update
RP283: 5/12/2010 1:23:08 AM - System Checkpoint
RP284: 5/13/2010 4:17:45 AM - System Checkpoint
RP285: 5/14/2010 4:34:12 AM - System Checkpoint
RP286: 5/15/2010 4:42:50 AM - System Checkpoint
RP287: 5/16/2010 5:04:34 AM - System Checkpoint
RP288: 5/17/2010 5:37:26 AM - System Checkpoint
RP289: 5/18/2010 9:47:08 AM - Unsigned driver install
RP290: 5/19/2010 1:42:45 AM - Installed Windows Media Player Firefox Plugin
RP291: 5/20/2010 3:34:46 AM - System Checkpoint
RP292: 5/22/2010 12:39:17 AM - System Checkpoint
RP293: 5/23/2010 3:53:30 AM - System Checkpoint
RP294: 5/24/2010 3:54:31 AM - System Checkpoint
RP295: 5/25/2010 4:18:51 AM - System Checkpoint
RP296: 5/26/2010 4:22:56 AM - System Checkpoint
RP297: 5/27/2010 5:22:57 AM - System Checkpoint
RP298: 5/28/2010 6:18:37 AM - System Checkpoint
RP299: 5/29/2010 7:18:37 AM - System Checkpoint
RP300: 5/30/2010 7:55:08 AM - System Checkpoint
RP301: 5/31/2010 8:49:14 AM - System Checkpoint
RP302: 6/1/2010 9:49:03 AM - System Checkpoint
RP303: 6/2/2010 10:14:14 AM - System Checkpoint
RP304: 6/3/2010 8:23:35 AM - Avg Update
RP305: 6/4/2010 9:06:35 AM - System Checkpoint
RP306: 6/5/2010 10:06:34 AM - System Checkpoint
RP307: 6/6/2010 11:06:34 AM - System Checkpoint
RP308: 6/7/2010 12:06:34 PM - System Checkpoint
RP309: 6/8/2010 1:06:38 PM - System Checkpoint
RP310: 6/9/2010 2:13:27 PM - System Checkpoint
RP311: 6/10/2010 2:17:58 PM - System Checkpoint
RP312: 6/11/2010 2:37:49 PM - System Checkpoint
RP313: 6/12/2010 3:37:49 PM - System Checkpoint
RP314: 6/13/2010 4:37:49 PM - System Checkpoint
RP315: 6/14/2010 5:18:01 PM - System Checkpoint
RP316: 6/15/2010 5:37:49 PM - System Checkpoint
RP317: 6/16/2010 6:37:49 PM - System Checkpoint
RP318: 6/17/2010 7:11:05 PM - System Checkpoint
RP319: 6/18/2010 7:37:33 PM - System Checkpoint
RP320: 6/19/2010 8:37:33 PM - System Checkpoint
RP321: 6/20/2010 9:37:33 PM - System Checkpoint
RP322: 6/21/2010 10:37:33 PM - System Checkpoint
RP323: 6/22/2010 11:37:34 PM - System Checkpoint
RP324: 6/24/2010 12:37:23 AM - System Checkpoint
RP325: 6/25/2010 3:51:40 AM - Avg Update
RP326: 6/26/2010 5:44:53 AM - System Checkpoint
RP327: 6/27/2010 6:37:28 AM - System Checkpoint
RP328: 6/28/2010 7:37:29 AM - System Checkpoint
RP329: 6/29/2010 7:39:48 AM - System Checkpoint
RP330: 6/30/2010 8:39:47 AM - System Checkpoint
RP331: 7/1/2010 9:39:36 AM - System Checkpoint
RP332: 7/2/2010 10:39:37 AM - System Checkpoint
RP333: 7/4/2010 2:06:17 AM - System Checkpoint
RP334: 7/5/2010 2:40:09 AM - System Checkpoint
RP335: 7/6/2010 3:40:05 AM - System Checkpoint
RP336: 7/7/2010 4:40:09 AM - System Checkpoint
RP337: 7/8/2010 6:23:03 AM - System Checkpoint
RP338: 7/8/2010 2:04:09 PM - Installed Windows Defender
RP339: 7/9/2010 1:37:43 PM - Installed HiJackThis
RP340: 7/12/2010 12:25:58 PM - Removed Windows Defender
RP341: 7/12/2010 1:55:10 PM - OTL Restore Point

==== Installed Programs ======================

µTorrent
7-Zip 4.65
Adobe AIR
Adobe Anchor Service CS4
Adobe Bridge CS4
Adobe CMaps CS4
Adobe Color - Photoshop Specific CS4
Adobe Color EU Extra Settings CS4
Adobe Color JA Extra Settings CS4
Adobe Color NA Recommended Settings CS4
Adobe Color Video Profiles CS CS4
Adobe CSI CS4
Adobe Default Language CS4
Adobe Device Central CS4
Adobe Dreamweaver CS4
Adobe Drive CS4
Adobe Dynamiclink Support
Adobe ExtendScript Toolkit CS4
Adobe Extension Manager CS4
Adobe Flash CS4
Adobe Flash CS4 Extension - Flash Lite STI en
Adobe Flash CS4 Professional
Adobe Flash CS4 STI-en
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Fonts All
Adobe Linguistics CS4
Adobe Media Encoder CS4
Adobe Media Encoder CS4 Importer
Adobe Media Player
Adobe Output Module
Adobe PDF Library Files CS4
Adobe Photoshop CS4
Adobe Photoshop CS4 Support
Adobe Reader 9.1.3
Adobe Search for Help
Adobe Service Manager Extension
Adobe Setup
Adobe Shockwave Player 11.5
Adobe Type Support CS4
Adobe Update Manager CS4
Adobe WinSoft Linguistics Plugin
Adobe XMP Panels CS4
AdobeColorCommonSetCMYK
AdobeColorCommonSetRGB
AIM 6
AIM Search
Apple Application Support
Apple Mobile Device Support
Apple Software Update
AVG Free 9.0
Bonjour
Compatibility Pack for the 2007 Office system
Connect
Creative System Information
Crystal Reports Basic for Visual Studio 2008
DVD Decrypter (Remove Only)
Feature Showcase Demo
High Definition Audio Driver Package - KB888111
HiJackThis
Hotfix for Windows XP (KB954708)
hp LaserJet 1010 Series
IPP Port Monitor
iTunes
Java 2 Runtime Environment, SE v1.4.1_07
Java 2 SDK, SE v1.4.1_07
Java DB 10.5.3.0
Java Web Start
Java(TM) 6 Update 18
Java(TM) SE Development Kit 6 Update 16
Java(TM) SE Development Kit 6 Update 18
kuler
Malwarebytes' Anti-Malware
Microsoft .NET Compact Framework 2.0 SP2
Microsoft .NET Compact Framework 3.5
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft .NET Framework 3.0 Service Pack 1
Microsoft .NET Framework 3.5
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Device Emulator version 3.0 - ENU
Microsoft Document Explorer 2008
Microsoft Games for Windows - LIVE Redistributable
Microsoft Office Live Add-in 1.3
Microsoft Office Outlook Connector
Microsoft Office Professional Edition 2003
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Visual Web Developer 2007
Microsoft Office Visual Web Developer MUI (English) 2007
Microsoft Silverlight
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)
Microsoft SQL Server 2005 Tools Express Edition
Microsoft SQL Server Compact 3.5 Design Tools ENU
Microsoft SQL Server Compact 3.5 ENU
Microsoft SQL Server Compact 3.5 for Devices ENU
Microsoft SQL Server Database Publishing Wizard 1.2
Microsoft SQL Server Native Client
Microsoft SQL Server Setup Support Files (English)
Microsoft SQL Server VSS Writer
Microsoft VC9 runtime libraries
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual Studio 2005 Tools for Office Runtime
Microsoft Visual Studio 2008 Professional Edition - ENU
Microsoft Visual Studio Web Authoring Component
Microsoft Windows SDK for Visual Studio 2008 .NET Framework Tools
Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries
Microsoft Windows SDK for Visual Studio 2008 SDK Reference Assemblies and IntelliSense
Microsoft Windows SDK for Visual Studio 2008 Tools
Microsoft Windows SDK for Visual Studio 2008 Win32 Tools
Microsoft XNA Framework Redistributable 3.0
Microsoft XNA Framework Redistributable 3.1
Microsoft XNA Game Studio 3.1
Microsoft XNA Game Studio 3.1 (ARP entry)
Microsoft XNA Game Studio 3.1 (devenv)
Microsoft XNA Game Studio 3.1 (Platformer)
Microsoft XNA Game Studio 3.1 (Redists)
Microsoft XNA Game Studio 3.1 (Shared Components)
Microsoft XNA Game Studio 3.1 (XnaLiveProxy)
Microsoft XNA Game Studio 3.1 Documentation
Microsoft XNA Game Studio Platform Tools
Mozilla Firefox (3.5.7)
MSN
MSN Messenger 7.5
MSN Toolbar
MSXML 6.0 Parser (KB933579)
NetBeans IDE 6.7.1
PDF Settings CS4
Photoshop Camera Raw
Pixel Bender Toolkit
Print Server Driver
Print Server Utility
PuTTY version 0.60
QuickTime
Realtek High Definition Audio Driver
Skypeâ„¢ 4.1
Sound Blaster Audigy 2 ZS
Suite Shared Configuration CS4
System Requirements Lab
TextPad 5
TL-WN321G Wireless Utility
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
Visual Studio 2005 Tools for Office Second Edition Runtime
Visual Studio Tools for the Office system 3.0 Runtime
VLC media player 1.0.3
WebFldrs XP
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Media Player Firefox Plugin
Windows Mobile 5.0 SDK R2 for Pocket PC
Windows Mobile 5.0 SDK R2 for Smartphone
WinRAR archiver
WinSCP 4.1.9
WinZip 12.0
XML Paper Specification Shared Components Pack 1.0

==== Event Viewer Messages From Past Week ========

7/9/2010 1:30:09 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments " " in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
7/9/2010 1:21:06 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD AvgLdx86 AvgMfx86 AvgTdiX Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip
7/9/2010 1:21:06 PM, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
7/9/2010 1:21:06 PM, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
7/9/2010 1:21:06 PM, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
7/9/2010 1:21:06 PM, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.
7/9/2010 1:21:06 PM, error: Service Control Manager [7001] - The Bonjour Service service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
7/9/2010 1:21:06 PM, error: Service Control Manager [7001] - The Apple Mobile Device service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
7/14/2010 2:19:06 AM, error: Dhcp [1002] - The IP address lease 192.168.1.9 for the Network Card with network address 0023CDBF12B3 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).
7/13/2010 2:00:45 PM, error: System Error [1003] - Error code 100000d1, parameter1 00000000, parameter2 0000001c, parameter3 00000001, parameter4 8288d00c.
7/12/2010 12:50:45 PM, error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 1 time(s).
7/12/2010 12:50:44 PM, error: Service Control Manager [7031] - The AVG Free WatchDog service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service.
7/12/2010 12:50:43 PM, error: Service Control Manager [7034] - The SQL Server VSS Writer service terminated unexpectedly. It has done this 1 time(s).
7/12/2010 12:50:43 PM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).
7/12/2010 12:50:43 PM, error: Service Control Manager [7034] - The Bonjour Service service terminated unexpectedly. It has done this 1 time(s).
7/12/2010 12:50:43 PM, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
7/12/2010 12:02:02 AM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments " " in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
7/12/2010 11:43:18 AM, error: Dhcp [1002] - The IP address lease 192.168.1.12 for the Network Card with network address 0023CDBF12B3 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).
7/12/2010 1:06:37 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Lbd
7/12/2010 1:05:27 PM, error: Dhcp [1002] - The IP address lease 192.168.1.7 for the Network Card with network address 0023CDBF12B3 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).
7/11/2010 11:42:26 PM, error: Dhcp [1002] - The IP address lease 192.168.1.8 for the Network Card with network address 0023CDBF12B3 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).

==== End Of File ===========================

If anyone could help me it would be greatly appreaciated. Thanks in advance!

 

I see. I will uninstall it right now. I was unaware that my torrent program could be the source of my problem! thank you.

 

Bootkit Remover version 1.0.0.1
(c) 2009 eSage Lab
www.esagelab.com

\\.\C: -> \\.\PhysicalDrive0
MD5: 454f8f8f464d74f8b4b6306cbff41597

Size Device Name MBR Status
--------------------------------------------
111 GB \\.\PhysicalDrive0 Unknown boot code

Unknown boot code has been found on some of your physical disks.
To inspect the boot code manually, dump the master boot sector:
remover.exe dump <device_name> [output_file]
To disinfect the master boot sector, use the following command:
remover.exe fix <device_name>


Press any key to quit...

This was the output I got.

 

Bootkit Remover version 1.0.0.1
(c) 2009 eSage Lab
www.esagelab.com

\\.\C: -> \\.\PhysicalDrive0
MD5: 6def5ffcbcdbdb4082f1015625e597bd

Size Device Name MBR Status
--------------------------------------------
111 GB \\.\PhysicalDrive0 OK (DOS/Win32 Boot code found)


Press any key to quit...

 

It might be a little early to say this but I think the fix.bat and remover.exe files did the trick. I haven't heard any internet explorer click noises, my volume doesn't seem to go down to zero,I haven't gotten any popups and most importantly iexplorer.exe isn't in the task menu.

Here is my malwarebytes log:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4305

Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

7/15/2010 8:27:52 PM
mbam-log-2010-07-15 (20-27-52).txt

Scan type: Quick scan
Objects scanned: 141513
Time elapsed: 13 minute(s), 4 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

I'm going to run GMER.exe now. I will copy and paste the results after the scan is done.

 

Well i kept my computer on throughout the night so that it could complete the scan. It completed the scan, but as I pressed the save button the program froze. I restarted my computer and I still see the same output in the white window(i'm not sure if this is the output you're looking for).

Here is the output.

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit quick scan 2010-07-16 09:00:52
Windows 5.1.2600 Service Pack 2
Running: gmer.exe; Driver: C:\DOCUME~1\Jeffery\LOCALS~1\Temp\pxtdypob.sys


---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

---- EOF - GMER 1.0.15 ----

My computer is still functioning normally.

 

Sorry for taking so long to respond broni. I have been kinda busy over the weekend. Here is the output from the combofix scan you've requested.

 

ComboFix 10-07-16.02 - Jeffery 07/19/2010 2:34.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1022.541 [GMT -4:00]
Running from: c:\documents and settings\Jeffery\Desktop\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\images
c:\windows\system32\images\toolbar\calendar.gif
c:\windows\system32\images\toolbar\crlogo.gif
c:\windows\system32\images\toolbar\export.gif
c:\windows\system32\images\toolbar\export_over.gif
c:\windows\system32\images\toolbar\exportd.gif
c:\windows\system32\images\toolbar\First.gif
c:\windows\system32\images\toolbar\first_over.gif
c:\windows\system32\images\toolbar\Firstd.gif
c:\windows\system32\images\toolbar\gotopage.gif
c:\windows\system32\images\toolbar\gotopage_over.gif
c:\windows\system32\images\toolbar\gotopaged.gif
c:\windows\system32\images\toolbar\grouptree.gif
c:\windows\system32\images\toolbar\grouptree_over.gif
c:\windows\system32\images\toolbar\grouptreed.gif
c:\windows\system32\images\toolbar\grouptreepressed.gif
c:\windows\system32\images\toolbar\Last.gif
c:\windows\system32\images\toolbar\last_over.gif
c:\windows\system32\images\toolbar\Lastd.gif
c:\windows\system32\images\toolbar\Next.gif
c:\windows\system32\images\toolbar\next_over.gif
c:\windows\system32\images\toolbar\Nextd.gif
c:\windows\system32\images\toolbar\Prev.gif
c:\windows\system32\images\toolbar\prev_over.gif
c:\windows\system32\images\toolbar\Prevd.gif
c:\windows\system32\images\toolbar\print.gif
c:\windows\system32\images\toolbar\print_over.gif
c:\windows\system32\images\toolbar\printd.gif
c:\windows\system32\images\toolbar\Refresh.gif
c:\windows\system32\images\toolbar\refresh_over.gif
c:\windows\system32\images\toolbar\refreshd.gif
c:\windows\system32\images\toolbar\Search.gif
c:\windows\system32\images\toolbar\search_over.gif
c:\windows\system32\images\toolbar\searchd.gif
c:\windows\system32\images\toolbar\up.gif
c:\windows\system32\images\toolbar\up_over.gif
c:\windows\system32\images\toolbar\upd.gif
c:\windows\system32\images\tree\begindots.gif
c:\windows\system32\images\tree\beginminus.gif
c:\windows\system32\images\tree\beginplus.gif
c:\windows\system32\images\tree\blank.gif
c:\windows\system32\images\tree\blankdots.gif
c:\windows\system32\images\tree\dots.gif
c:\windows\system32\images\tree\lastdots.gif
c:\windows\system32\images\tree\lastminus.gif
c:\windows\system32\images\tree\lastplus.gif
c:\windows\system32\images\tree\Magnify.gif
c:\windows\system32\images\tree\minus.gif
c:\windows\system32\images\tree\minusbox.gif
c:\windows\system32\images\tree\plus.gif
c:\windows\system32\images\tree\plusbox.gif
c:\windows\system32\images\tree\singleminus.gif
c:\windows\system32\images\tree\singleplus.gif

.
((((((((((((((((((((((((( Files Created from 2010-06-19 to 2010-07-19 )))))))))))))))))))))))))))))))
.

2010-07-15 16:11 . 2010-07-15 16:11 624920 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgiproxy.exe
2010-07-15 16:11 . 2010-07-15 16:11 1690464 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.dll
2010-07-15 16:11 . 2010-07-15 16:11 1038688 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.exe
2010-07-15 16:11 . 2010-07-15 16:11 813336 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avginet.dll
2010-07-12 18:11 . 2010-07-12 18:11 -------- d-----w- C:\Rooter$
2010-07-12 16:48 . 2010-07-12 16:48 -------- d-----w- c:\documents and settings\Jeffery\Application Data\Malwarebytes
2010-07-12 16:48 . 2010-04-29 19:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-07-12 16:48 . 2010-07-12 16:48 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-07-12 16:48 . 2010-07-12 16:48 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-07-12 16:48 . 2010-04-29 19:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-07-12 16:32 . 2010-07-12 17:05 -------- d-----w- c:\windows\SxsCaPendDel
2010-07-12 16:07 . 2010-07-12 16:07 -------- d-----w- c:\windows\system32\NtmsData
2010-07-12 16:04 . 2010-07-12 16:04 -------- d-----w- C:\7-12-2010
2010-07-09 17:37 . 2010-07-09 17:37 388096 ----a-r- c:\documents and settings\Jeffery\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-07-09 17:37 . 2010-07-09 17:37 -------- d-----w- c:\program files\Trend Micro

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-19 06:36 . 2009-09-29 01:29 -------- d-----w- c:\documents and settings\Jeffery\Application Data\uTorrent
2010-07-16 13:21 . 2009-10-28 00:58 -------- d-----w- c:\documents and settings\Jeffery\Application Data\Skype
2010-07-15 16:11 . 2009-09-06 23:42 384 ----a-w- c:\windows\system32\DVCStateBkp-{00000004-00000000-00000006-00001102-00000004-20021102}.dat
2010-07-15 16:11 . 2009-09-06 23:42 384 ----a-w- c:\windows\system32\DVCState-{00000004-00000000-00000006-00001102-00000004-20021102}.dat
2010-07-15 02:47 . 2009-10-28 01:04 -------- d-----w- c:\documents and settings\Jeffery\Application Data\skypePM
2010-07-12 18:09 . 2009-09-07 14:12 64072 ----a-w- c:\documents and settings\Jeffery\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-07-12 16:32 . 2010-03-29 22:44 -------- d-----w- c:\program files\Lavasoft
2010-07-12 16:32 . 2010-03-29 22:44 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2010-07-12 16:09 . 2010-01-04 07:53 -------- d-----w- c:\documents and settings\Jeffery\Application Data\vlc
2010-06-07 04:40 . 2010-06-07 04:40 -------- d-----w- c:\program files\7-Zip
2010-06-03 12:23 . 2009-09-06 19:47 242896 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-06-03 12:23 . 2009-09-06 19:47 29584 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-06-01 22:35 . 2010-06-01 22:35 -------- d-----w- c:\program files\SystemRequirementsLab
2010-06-01 22:35 . 2010-06-01 22:35 85504 ----a-w- c:\documents and settings\Jeffery\Application Data\SystemRequirementsLab\srlproxy_cyri_4.1.71.0A.dll
2010-06-01 22:35 . 2010-06-01 22:35 -------- d-----w- c:\documents and settings\Jeffery\Application Data\SystemRequirementsLab
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{A3BC75A2-1F87-4686-AA43-5347D756017C} "= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]

[HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2010-04-19 14:25 2117704 ----a-w- c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829} "= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829} "= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr "= "c:\program files\MSN Messenger\MsnMsgr.Exe" [2006-01-24 7094272]
"uTorrent "= "c:\program files\uTorrent\uTorrent.exe" [2010-05-16 322352]
"Skype "= "c:\program files\Skype\Phone\Skype.exe" [2009-10-09 25623336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HPLJ Config "= "c:\program files\Hewlett-Packard\hp LaserJet 1010 Series\SetConfig.exe -c Direct -p \\SCEF88F7\P1 -pn hp LaserJet 1010 Series Driver -n 0 -l 1033 -sl 120000" [X]
"CTHelper "= "CTHELPER.EXE" [2003-06-20 24576]
"AsioReg "= "CTASIO.DLL" [2003-06-20 118784]
"SBDrvDet "= "c:\program files\Creative\SB Drive Det\SBDrvDet.exe" [2002-12-03 45056]
"UpdReg "= "c:\windows\UpdReg.EXE" [2000-05-11 90112]
"Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"QuickTime Task "= "c:\program files\QuickTime\QTTask.exe" [2009-09-05 417792]
"iTunesHelper "= "c:\program files\iTunes\iTunesHelper.exe" [2009-09-09 305440]
"AdobeCS4ServiceManager "= "c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"AVG9_TRAY "= "c:\progra~1\AVG\AVG9\avgtray.exe" [2010-06-03 2065248]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
TL-WN321G Wireless Utility.lnk - c:\program files\TP-LINK\TL-WN321G Wireless Utility\Installer\WINXP\TWCU.exe [2009-9-6 622592]
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2008-9-11 525664]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-03-14 14:17 12464 ----a-w- c:\windows\system32\avgrsstx.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableNotifications "= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe "=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe "=
"c:\\Program Files\\AIM6\\aim6.exe "=
"c:\\Program Files\\Messenger\\msmsgs.exe "=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe "=
"c:\\Program Files\\iTunes\\iTunes.exe "=
"c:\\Program Files\\uTorrent\\uTorrent.exe "=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe "=
"c:\\Program Files\\NetBeans 6.7.1\\bin\\netbeans.exe "=
"c:\\Program Files\\Adobe\\Adobe Dreamweaver CS4\\Dreamweaver.exe "=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe "=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe "=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe "=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe "=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe "=
"c:\\Program Files\\Skype\\Phone\\Skype.exe "=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP "= 5353:TCP:Adobe CSI CS4

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [9/6/2009 3:47 PM 216200]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [9/6/2009 3:47 PM 242896]
R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [3/14/2010 10:17 AM 308064]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys --> c:\windows\system32\DRIVERS\Lbd.sys [?]
S3 pbfilter;pbfilter;c:\documents and settings\Jeffery\My Documents\Peer Block\pbfilter.sys [2/10/2010 5:23 PM 14424]
.
Contents of the 'Scheduled Tasks' folder

2010-07-01 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 16:34]
.
.
------- Supplementary Scan -------
.
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
Trusted Zone: aol.com\free
FF - ProfilePath - c:\documents and settings\Jeffery\Application Data\Mozilla\Firefox\Profiles\8oev05gc.default\
FF - prefs.js: browser.search.defaulturl - hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType=tb50fftrie7&query=
FF - prefs.js: browser.search.selectedEngine - Yahoo! Search
FF - prefs.js: browser.startup.homepage - hxxp://en-US.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-USfficial
FF - prefs.js: keyword.URL - hxxp://ca.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_ca&p=
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true.
- - - - ORPHANS REMOVED - - - -

URLSearchHooks-HookURL - (no file)
URLSearchHooks-Rank - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKCU-Run-Aim6 - (no file)
HKCU-Run-AdobeBridge - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-19 02:41
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2010-07-19 02:43:54
ComboFix-quarantined-files.txt 2010-07-19 06:43

Pre-Run: 45,162,016,768 bytes free
Post-Run: 45,191,647,232 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT= "Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS= "Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - 166477DC54993E2526D587B44406A398
(sorry for the double post)