Sorry to take so long. Here are the ComboFix and HijackThis logs:
ComboFix 08-02.03.1 - Mike 2008-02-03 15:28:25.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.635 [GMT -5:00]
Running from: C:\Documents and Settings\Mike\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Mike\Desktop\CFScript.txt
* Created a new restore point
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!FILE
C:\WINDOWS\system32\imvfhxdv.dll
C:\WINDOWS\system32\koeujneb.tmp
C:\WINDOWS\system32\ljjijjg.dll.vir
C:\WINDOWS\system32\mnmfsfoj.dll
C:\WINDOWS\system32\oebjvmoa.dll
C:\WINDOWS\system32\vdxhfvmi.ini
C:\WINDOWS\system32\xkyhychq.dll
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\WINDOWS\system32\imvfhxdv.dll
C:\WINDOWS\system32\koeujneb.tmp
C:\WINDOWS\system32\ljjijjg.dll.vir
C:\WINDOWS\system32\mnmfsfoj.dll
C:\WINDOWS\system32\oebjvmoa.dll
C:\WINDOWS\system32\vdxhfvmi.ini
C:\WINDOWS\system32\xkyhychq.dll
.
((((((((((((((((((((((((( Files Created from 2008-01-03 to 2008-02-03 )))))))))))))))))))))))))))))))
.
2008-02-03 14:35 . 2008-02-03 14:35 <DIR> d-------- C:\Software Downloads
2008-02-02 03:57 . 2008-02-03 13:04 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Trend Micro
2008-02-02 03:56 . 2008-02-03 13:11 <DIR> d-------- C:\Program Files\Trend Micro
2008-02-02 02:34 . 2008-02-02 02:46 <DIR> d-------- C:\Documents and Settings\Mike\.housecall6.6
2008-02-02 02:33 . 2008-02-02 02:33 <DIR> d-------- C:\WINDOWS\Sun
2008-02-02 02:30 . 2007-09-24 23:31 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-02-02 02:29 . 2008-02-02 02:30 <DIR> d-------- C:\Program Files\Java
2008-02-02 02:29 . 2008-02-02 02:29 <DIR> d-------- C:\Program Files\Common Files\Java
2008-01-31 22:18 . 2008-01-31 22:18 <DIR> d-------- C:\Program Files\StumbleUpon
2008-01-31 22:18 . 2008-02-03 15:27 <DIR> d-------- C:\Documents and Settings\Mike\Application Data\StumbleUpon
2008-01-31 21:38 . 2008-02-03 09:50 <DIR> d-------- C:\VundoFix Backups
2008-01-28 07:20 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2008-01-28 07:20 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2008-01-28 07:20 . 2007-12-20 23:11 81,920 --a------ C:\WINDOWS\system32\IEDFix.exe
2008-01-28 07:20 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
2008-01-28 07:20 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2008-01-27 08:11 . 2008-01-27 08:11 <DIR> d-------- C:\Program Files\Macrovision Corporation
2008-01-27 08:11 . 2008-01-27 08:11 <DIR> d-------- C:\Documents and Settings\Mike\Application Data\InstallShield
2008-01-27 05:40 . 2008-02-02 03:51 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-01-26 18:58 . 2008-01-28 07:22 1,444 --a------ C:\WINDOWS\system32\tmp.reg
2008-01-26 18:48 . 2008-01-26 18:48 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2008-01-26 18:30 . 2008-01-27 05:41 <DIR> d-------- C:\Documents and Settings\Mike\Application Data\Lavasoft
2008-01-26 18:29 . 2008-02-02 03:50 <DIR> d-------- C:\Program Files\Lavasoft
2008-01-26 18:06 . 2008-01-26 18:12 <DIR> d-------- C:\Program Files\Enigma Software Group
2008-01-24 21:11 . 2008-01-24 21:11 <DIR> d-------- C:\Documents and Settings\Mike\Application Data\InterVideo
2008-01-24 21:09 . 2008-01-24 21:09 <DIR> d-------- C:\Program Files\InterVideo Information Service
2008-01-24 21:09 . 2008-01-24 21:09 <DIR> d-------- C:\Program Files\Common Files\Ulead
2008-01-24 21:09 . 2006-05-11 18:41 654 --------- C:\WINDOWS\remove.iss
2008-01-24 21:05 . 2008-01-24 21:05 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\InstallShield
2008-01-24 21:04 . 2008-01-24 21:04 <DIR> d-------- C:\Program Files\Common Files\InterVideo
2008-01-24 21:03 . 2008-01-24 21:04 <DIR> d-------- C:\Program Files\InterVideo
2008-01-24 20:37 . 2008-01-24 20:37 <DIR> d-------- C:\Program Files\XP Codec Pack
2008-01-24 20:27 . 2008-01-24 20:27 <DIR> d-------- C:\DECCHECK
2008-01-23 09:41 . 2008-01-23 09:41 97,216 --a------ C:\WINDOWS\system32\drivers\AnyDVD.sys
2008-01-20 05:14 . 2008-01-20 05:14 <DIR> d-------- C:\Program Files\Firehand Technologies
2008-01-20 05:14 . 2005-11-21 17:01 126,976 --a------ C:\WINDOWS\Firehand Ember Screen Saver.scr
2008-01-20 01:23 . 2008-01-20 01:23 <DIR> d-------- C:\Documents and Settings\Mike\Application Data\Picajet.com
2008-01-19 14:24 . 2008-01-19 14:24 <DIR> d-------- C:\Program Files\GSpot270a
2008-01-17 04:01 . 2008-01-17 04:02 <DIR> d-------- C:\Program Files\iTunes
2008-01-17 04:01 . 2008-01-17 04:01 <DIR> d-------- C:\Program Files\iPod
2008-01-17 03:59 . 2008-01-17 03:59 <DIR> d-------- C:\Program Files\QuickTime
2008-01-12 15:07 . 2008-01-12 15:07 <DIR> d-------- C:\Program Files\QuickPar
2008-01-10 15:27 . 2008-01-10 15:27 90,112 --a------ C:\WINDOWS\system32\QuickTimeVR.qtx
2008-01-10 15:27 . 2008-01-10 15:27 57,344 --a------ C:\WINDOWS\system32\QuickTime.qts
2008-01-07 00:16 . 2008-01-07 00:16 <DIR> d-------- C:\Documents and Settings\Mike\Application Data\vlc
2008-01-07 00:09 . 2008-01-07 00:09 <DIR> d-------- C:\Program Files\VideoLAN
2008-01-06 00:39 . 2008-01-06 00:39 <DIR> d-------- C:\Program Files\AC3Filter
2008-01-06 00:39 . 2007-06-07 14:11 380,928 --a------ C:\WINDOWS\system32\ac3filter.acm
2008-01-05 23:56 . 2007-11-29 17:30 120,056 --------- C:\WINDOWS\system32\pxcpyi64.exe
2008-01-05 23:56 . 2007-11-29 17:30 118,520 --------- C:\WINDOWS\system32\pxinsi64.exe
2008-01-04 23:01 . 2008-01-04 23:01 <DIR> d-------- C:\Program Files\XviD
2008-01-04 22:53 . 2008-01-06 00:22 <DIR> d-------- C:\Documents and Settings\Mike\Application Data\DivX
2008-01-04 22:30 . 2008-01-06 00:21 <DIR> d-------- C:\Program Files\DivX
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-03 18:05 --------- d-----w C:\Documents and Settings\Mike\Application Data\uTorrent
2008-02-02 08:52 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-02-02 08:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2008-02-02 08:49 --------- d-----w C:\Program Files\Symantec
2008-01-27 21:15 --------- d-----w C:\Program Files\twc
2008-01-27 21:15 --------- d-----w C:\Program Files\Common Files\SupportSoft
2008-01-27 12:36 --------- d-----w C:\Program Files\Google
2008-01-27 12:35 --------- d-----w C:\Program Files\IrfanView
2008-01-27 12:33 --------- d-----w C:\Program Files\Yahoo!
2008-01-27 12:33 --------- d-----w C:\Documents and Settings\All Users\Application Data\YAHOO
2008-01-27 12:32 --------- d-----w C:\Program Files\Common Files\SureThing Shared
2008-01-27 12:30 --------- d-----w C:\Program Files\Stamps.com Internet Postage
2008-01-27 12:27 --------- d-----w C:\Program Files\Hewlett-Packard
2008-01-27 12:21 --------- d-----w C:\Program Files\Common Files\HP
2008-01-25 02:10 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-01-25 02:09 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-25 02:03 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-01-13 05:02 --------- d-----w C:\Documents and Settings\Mike\Application Data\Ahead
2008-01-06 23:14 --------- d-----w C:\Program Files\Movavi Video Converter 6
2008-01-04 05:28 --------- d-----w C:\Documents and Settings\Default User\Application Data\Apple Computer
2008-01-02 12:50 --------- d-----w C:\Documents and Settings\Mike\Application Data\Apple Computer
2008-01-02 00:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\Movavi Video Converter 6
2008-01-02 00:44 --------- d-----w C:\Program Files\Common Files\MOVAVI
2008-01-02 00:42 --------- d-----w C:\Program Files\Magic Video Converter
2007-12-31 20:35 --------- d-----w C:\Program Files\Common Files\Apple
2007-12-31 20:35 --------- d-----w C:\Program Files\Apple Software Update
2007-12-31 20:35 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple
2007-12-28 20:18 --------- d-----w C:\Program Files\Western Digital Technologies
2007-12-26 20:16 --------- d-----w C:\Program Files\Picasa2
2007-12-11 03:07 --------- d-----w C:\Documents and Settings\Mike\Application Data\Stamps.com Internet Postage
2007-12-04 01:33 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
2007-12-04 01:33 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
2007-12-04 01:33 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
2007-12-04 01:33 682,496 ----a-w C:\WINDOWS\system32\DivX.dll
2007-11-29 22:30 524,288 ----a-w C:\WINDOWS\system32\DivXsm.exe
2007-11-29 22:30 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
2007-11-29 22:30 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2007-11-29 22:30 129,784 ------w C:\WINDOWS\system32\PxAFS.DLL
2007-11-29 22:30 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
2007-11-29 22:28 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
2007-11-29 22:28 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
2007-11-28 21:55 156,992 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2007-11-28 21:53 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll
2007-11-28 21:53 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
2007-11-28 21:53 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll
2007-11-28 21:53 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll
2007-11-28 21:53 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
2007-11-28 21:53 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll
2007-11-28 21:52 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
2007-11-07 09:26 721,920 ----a-w C:\WINDOWS\system32\lsasrv.dll
2007-07-22 16:56 604 ---ha-w C:\Program Files\STLL Notifier
2006-10-03 08:43 2,402,550 ----a-w C:\WINDOWS\inf\SET2F2.tmp
2004-07-24 04:44 1,431,144 ----a-w C:\WINDOWS\inf\SET365.tmp
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 02:56 15360]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-10 12:30 68856]
"PhotoShow Deluxe Media Manager"="C:\PROGRA~1\Ahead\NEROPH~1\data\Xtras\mssysmgr.exe" [2005-02-25 19:28 212992]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" [2005-11-10 11:44 94208]
"AnyDVD"="C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe" [2008-01-23 12:04 1670080]
"OE"="C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe" [ ]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-01-10 15:27 385024]
"PWRISOVM.EXE"="C:\Program Files\PowerISO\PWRISOVM.EXE" [2007-04-09 07:23 200704]
"NWEReboot"="" []
"medicsp2"="C:\Program Files\twc\medicsp2\bin\sprtcmd.exe" [ ]
"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2005-10-14 16:49 94208]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2005-10-14 16:50 114688]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2005-10-14 16:46 77824]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 02:06 40048]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"UfSeAgnt.exe"="C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe" [ ]
C:\Documents and Settings\Mike\Start Menu\Programs\Startup\
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 22:16:50 113664]
Webshots.lnk - C:\Program Files\Webshots\Launcher.exe [2007-06-10 13:32:06 63064]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe [2006-02-19 06:21:22 288472]
hp psc 2000 Series.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe [2003-04-09 19:41:38 323646]
hpoddt01.exe.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [2003-04-09 20:11:12 28672]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
\Shell\AutoRun\command - E:\wd_windows_tools\setup.exe
.
Contents of the 'Scheduled Tasks' folder
"2008-01-28 20:42:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2007-10-12 21:48:00 C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 2200 series#1184190452.job"
- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqfrucl.exe4-I
"2008-02-03 20:25:00 C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 2200 series#1186514663.job"
- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqfrucl.exe4-I
"2008-02-03 04:48:00 C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 2200 series#1186717674.job"
- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqfrucl.exe4-I
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2008-02-03 15:29:35
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-02-03 15:30:00
ComboFix-quarantined-files.txt 2008-02-03 20:29:52
ComboFix2.txt 2008-02-03 19:59:55
.
2008-01-09 11:03:39 --- E O F ---
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:41:39 PM, on 2/4/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\PROGRA~1\Ahead\NEROPH~1\data\Xtras\mssysmgr.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Webshots\webshots.scr
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoSTS08.exe
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [medicsp2] C:\Program Files\twc\medicsp2\bin\sprtcmd.exe /P medicsp2
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [UfSeAgnt.exe] "C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Ahead\NEROPH~1\data\Xtras\mssysmgr.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe
O4 - HKCU\..\Run: [OE] "C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe"
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: StumbleUpon PhotoBlog It! - res://StumbleUponIEBar.dll/blogimage
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.micros...b?1181462887873O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://update.micros...b?1181499042546O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) -
http://javadl-esd.su...ows-i586-jc.cabO16 - DPF: {B7D07999-2ADB-4AEB-997E-F61CB7B2E2CD} (TSEasyInstallX Control) -
http://www.trendsecu...asyInstallX.CABO16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.m...ash/swflash.cabO23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
--
End of file - 9009 bytes
All of the Symantec stuff that appears is because I reinstalled Norton Internet Security 2007. I had previously installed the Trend Micro Internet Security trial version and removed it through Control Panel. Then, I had purchased and attempted to install Trend Micro Internet Security Pro but its install wizard would not work; neither could I reinstall the trial version. Rather than do without antivirus and antispyware protection, I went back to Norton.