Ok. Did what you asked & downloaded the file. Worked very easily..
Here's the combofix log. This is the one I just did. I still haven't been able to find the one from yesterday. My time right now is short, so I'll look again later.
ComboFix 08-04-22.5 - mel 2008-04-24 15:22:10.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.490 [GMT -4:00]
Running from: C:\Documents and Settings\mel\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\mel\Desktop\WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
* Created a new restore point
* Resident AV is active
.
((((((((((((((((((((((((( Files Created from 2008-03-24 to 2008-04-24 )))))))))))))))))))))))))))))))
.
2008-04-22 23:57 . 2006-04-27 17:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2008-04-22 23:57 . 2003-06-05 21:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
2008-04-22 23:57 . 2004-07-31 18:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2008-04-21 23:00 . 2008-04-21 23:01 <DIR> d-------- C:\Program Files\Panda Security
2008-04-21 00:46 . 2008-04-21 00:46 <DIR> d-------- C:\Program Files\Trend Micro
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-24 03:24 --------- d-----w C:\Documents and Settings\All Users\Application Data\SiteAdvisor
2008-04-22 21:35 --------- d-----w C:\Program Files\McAfee
2008-04-18 22:43 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-04-18 22:10 --------- d-----w C:\Program Files\SpywareBlaster
2008-04-18 22:05 --------- d-----w C:\Program Files\SUPERAntiSpyware
2008-04-14 03:23 --------- d-----w C:\Documents and Settings\mel\Application Data\ComcastToolbar
2008-03-21 20:30 --------- d-----w C:\Program Files\Java
2008-03-19 09:47 1,845,248 ----a-w C:\WINDOWS\system32\win32k.sys
2008-03-04 17:04 606,848 ----a-w C:\WINDOWS\flashax.exe
2008-03-04 17:04 194,560 ----a-w C:\WINDOWS\Jungle Gin Screen Saver #1.scr
2008-03-04 17:04 12,288 ----a-w C:\WINDOWS\impborl.dll
2008-03-01 13:06 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
2008-02-20 05:32 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
2008-02-14 05:50 551,883 ----a-w C:\WINDOWS\pug_scrsvr.scr
2008-02-14 05:50 400,690 ----a-w C:\WINDOWS\thedogscr1.scr
2008-02-14 05:49 377,226 ----a-w C:\WINDOWS\wht_scrsvr1.scr
2008-02-12 14:56 691,545 ----a-w C:\WINDOWS\unins001.exe
2008-02-12 14:34 72,748 ----a-w C:\WINDOWS\unins000.exe
.
((((((((((((((((((((((((((((( snapshot@2008-04-23_23.36.22.98 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-04-24 03:23:55 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-04-24 19:12:24 2,048 --s-a-w C:\WINDOWS\bootstat.dat
- 2008-04-24 03:29:17 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2008-04-24 19:17:36 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2008-04-24 03:29:17 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2008-04-24 19:17:36 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 08:00 15360]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 12:43 2097488]
"AdobeUpdater"="C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe" [ ]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 18:20 866584]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"SiteAdvisor"="C:\Program Files\SiteAdvisor\6253\SiteAdv.exe" [2007-03-30 11:42 36904]
"mcagent_exe"="C:\Program Files\McAfee.com\Agent\mcagent.exe" [2007-08-04 02:33 582992]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 12:55 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL 2007-04-28 11:40 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"C:\\WINDOWS\\system32\\LEXPPS.EXE"=
"C:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe"=
R2 UxTuneUp;TuneUp Theme Extension;C:\WINDOWS\System32\svchost.exe [2004-08-04 08:00]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a0b491cf-c841-11da-9903-806d6172696f}]
\Shell\AutoRun\command - D:\atisetup.exe
\Shell\launch\command - D:\atisetup.exe
.
Contents of the 'Scheduled Tasks' folder
"2008-04-15 05:11:58 C:\WINDOWS\Tasks\McDefragTask.job"
- c:\program files\mcafee\mqc\QcConsol.exe'
"2008-03-01 06:07:24 C:\WINDOWS\Tasks\McQcTask.job"
- c:\program files\mcafee\mqc\QcConsol.exe
"2008-04-24 19:15:24 C:\WINDOWS\Tasks\MP Scheduled Scan.job"
- C:\Program Files\Windows Defender\MpCmdRun.exe
.
**************************************************************************
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2008-04-24 15:23:46
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-04-24 15:25:35
ComboFix-quarantined-files.txt 2008-04-24 19:24:59
ComboFix2.txt 2008-04-24 03:37:53
ComboFix3.txt 2007-04-24 17:00:13
Pre-Run: 138,403,938,304 bytes free
Post-Run: 138,373,545,984 bytes free
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
114 --- E O F --- 2008-04-23 03:44:02