[PaperAssassin]

Hi everyone, I'm surfing with internet explorer, but whenever I remain on the same webpage for 2 or 3 minutes, my browser gets taken over and automatically goes to this Mozilla Firefox download page. The exact URL is: http://google.htplay...r...&115443682/

On top of that, I get pop-ups re: WinAntiVirus Pro all the time as well. All this spyware at once; how do I clean it all up? Thanks. My HiJackThis log as follows:

Logfile of HijackThis v1.99.1
Scan saved at 10:00:00 PM, on 1/9/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\csrss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\svchosts.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\alg.exe
D:\WINDOWS\system32\wscntfy.exe
D:\WINDOWS\TEMP\VRTF.tmp
D:\Program Files\Internet Explorer\iexplore.exe
D:\WINDOWS\system32\wuauclt.exe
D:\WINDOWS\Mixer.exe
D:\Program Files\HP\hpcoretech\hpcmpmgr.exe
D:\WINDOWS\system32\csrs.exe
D:\Program Files\Common Files\{6407E903-0978-1033-0806-020806200001}\Update.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
D:\Documents and Settings\All Users\Start Menu\Programs\Startup\Wincbr.exe
D:\WINDOWS\system32\wuauclt.exe
D:\WINDOWS\system32\srshost.exe
D:\Program Files\hijackthis\HijackThis.exe

O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [HP Component Manager] "D:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [NeroCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CTDrive] rundll32.exe D:\WINDOWS\system32\drvmar.dll,startup
O4 - HKLM\..\Run: [{6407E903-0977-1033-0806-020806200001}] "D:\Program Files\Common Files\{6407E903-0977-1033-0806-020806200001}\Update.exe" mc-110-12-0000272
O4 - HKLM\..\Run: [Intel Driver] csrs.exe
O4 - HKLM\..\Run: [Microsoft Windows Update] D:\WINDOWS\system32\srshost.exe
O4 - HKLM\..\Run: [DllRunning] rundll32.exe "D:\WINDOWS\system32\lptjkshd.dll",setvm
O4 - HKLM\..\Run: [{6407E903-0978-1033-0806-020806200001}] "D:\Program Files\Common Files\{6407E903-0978-1033-0806-020806200001}\Update.exe" mc-110-12-0000272
O4 - HKLM\..\RunServices: [Intel Driver] csrs.exe
O4 - HKLM\..\RunServices: [Microsoft Windows Update] D:\WINDOWS\system32\srshost.exe
O4 - HKCU\..\Run: [Microsoft Windows Update] D:\WINDOWS\system32\srshost.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Wincbr.exe
O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O23 - Service: COM+ Messages - Unknown owner - D:\WINDOWS\system32\svchosts.exe" -e mc-110-12-0000272 (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

Edited by PaperAssassin, 10 January 2007 - 12:07 AM.