AVG detected SHEUR3.CDGB virus

my operating system widows XP pro. I have AVG free updated and installed. I have run the following programs to try and fix the problem, malewarebytes, spybot search and destroy, cleanup, rkill, housecall, and ccleaner. The computer is running slow and Outlook would not open, however I did manage to get outlook to work. My browser keeps getting hijacked and popups occurring. I am not an experienced user and would love some assistance. Thank You!! Below is my OTL file.

OTL logfile created on: 6/9/2011 1:05:10 PM - Run 2
OTL by OldTimer - Version 3.2.23.0 Folder = C:\Documents and Settings\Bob Dunlap\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.12 Gb Available Physical Memory | 56.04% Memory free
3.85 Gb Paging File | 3.05 Gb Available in Paging File | 79.25% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.79 Gb Total Space | 160.86 Gb Free Space | 69.10% Space Free | Partition Type: NTFS
Drive F: | 465.76 Gb Total Space | 449.40 Gb Free Space | 96.49% Space Free | Partition Type: NTFS
Drive N: | 180.30 Gb Total Space | 165.82 Gb Free Space | 91.97% Space Free | Partition Type: NTFS

Computer Name: 4FNB4J1 | User Name: Bob Dunlap | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Bob Dunlap\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG10\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG10\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\DisplayFusion\DisplayFusion.exe (Binary Fortress Software)
PRC - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe ()
PRC - C:\Program Files\AVG\AVG10\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AirPort\APAgent.exe (Apple Inc.)
PRC - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\Program Files\Panasonic\VideoCam Suite 2\VideoCamSuiteAutoStart.exe (Panasonic Corporation)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\bgsvcgen.exe (B.H.A Corporation)
PRC - C:\Program Files\Visioneer\OneTouch 4.0\OtMonEx.exe (Visioneer Inc)
PRC - C:\Program Files\Visioneer\OneTouch 4.0\OtService.exe (Visioneer Inc)
PRC - C:\Program Files\Intuit\QuickBooks\Components\QBAgent\qbdagent2001.exe ()
PRC - C:\WINDOWS\system32\mrtmngr.exe (Marimba Inc.)

========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\Bob Dunlap\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\DisplayFusion\Hooks\DisplayFusionHookx86_5571DFCC-E81A-4544-8D0F-04D1A4B91FC6.dll (Binary Fortress Software)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV - (AVGIDSAgent) -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
SRV - (avgwd) -- C:\Program Files\AVG\AVG10\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (bgsvcgen) -- C:\WINDOWS\System32\bgsvcgen.exe (B.H.A Corporation)
SRV - (OneTouch 4.0 Monitor) -- C:\Program Files\Visioneer\OneTouch 4.0\OtService.exe (Visioneer Inc)
SRV - (Pml Driver HPZ12) -- C:\WINDOWS\system32\hpzipm12.exe (HP)

========== Driver Services (SafeList) ==========

DRV - (MBAMSwissArmy) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (AVGIDSDriver) -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys (AVG Technologies CZ, s.r.o. )
DRV - (Avgtdix) -- C:\WINDOWS\system32\drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgrkx86) -- C:\WINDOWS\system32\DRIVERS\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgmfx86) -- C:\WINDOWS\system32\drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSEH) -- C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSShim) -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSFilter) -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys (AVG Technologies CZ, s.r.o. )
DRV - (Avgldx86) -- C:\WINDOWS\system32\drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (k57w2k) Broadcom NetLink ™ -- C:\WINDOWS\system32\drivers\k57xp32.sys (Broadcom Corporation)
DRV - (SFAUDIO) -- C:\WINDOWS\system32\drivers\sfaudio.sys (Sonic Focus, Inc)
DRV - (DLADResM) -- C:\WINDOWS\system32\drivers\DLADResM.SYS (Roxio)
DRV - (DLABMFSM) -- C:\WINDOWS\system32\drivers\DLABMFSM.SYS (Roxio)
DRV - (DLAUDF_M) -- C:\WINDOWS\system32\drivers\DLAUDF_M.SYS (Roxio)
DRV - (DLAUDFAM) -- C:\WINDOWS\system32\drivers\DLAUDFAM.SYS (Roxio)
DRV - (DLAOPIOM) -- C:\WINDOWS\system32\drivers\DLAOPIOM.SYS (Roxio)
DRV - (DLABOIOM) -- C:\WINDOWS\system32\drivers\DLABOIOM.SYS (Roxio)
DRV - (DLAPoolM) -- C:\WINDOWS\system32\drivers\DLAPoolM.SYS (Roxio)
DRV - (DLAIFS_M) -- C:\WINDOWS\system32\drivers\DLAIFS_M.SYS (Roxio)
DRV - (DLARTL_M) -- C:\WINDOWS\system32\drivers\DLARTL_M.SYS (Roxio)
DRV - (DLACDBHM) -- C:\WINDOWS\System32\Drivers\DLACDBHM.SYS (Roxio)
DRV - (cdrbsdrv) -- C:\WINDOWS\System32\drivers\cdrbsdrv.sys (B.H.A Corporation)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Page_URL = http://g.msn.com/USREL/1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = http://g.msn.com/USREL/1

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.co...ie=utf8&oe=utf8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://money.cnn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: [email protected]:1.0
FF - prefs.js..extensions.enabledItems: {687ACFC8-C065-4488-864A-BDD83F183E86}:1.9.1
FF - prefs.js..extensions.enabledItems: {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:10.0.0.1209
FF - prefs.js..keyword.URL: "http://search.avg.co...s&lng=en-US&q="
FF - prefs.js..network.proxy.no_proxies_on: "localho,t,127.0.0.1,*.local"

FF - HKLM\software\mozilla\Firefox\extensions\\{687ACFC8-C065-4488-864A-BDD83F183E86}: C:\Documents and Settings\Bob Dunlap\Local Settings\Application Data\{687ACFC8-C065-4488-864A-BDD83F183E86} [2010/07/12 12:28:24 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG10\Firefox4\ [2011/06/03 08:10:28 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/05/07 14:25:09 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/06/09 12:53:59 | 000,000,000 | ---D | M]

[2010/01/15 09:51:58 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Bob Dunlap\Application Data\Mozilla\Extensions
[2011/06/07 09:20:46 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Bob Dunlap\Application Data\Mozilla\Firefox\Profiles\tn2t9gic.default\extensions
[2010/08/23 12:52:56 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Bob Dunlap\Application Data\Mozilla\Firefox\Profiles\tn2t9gic.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/03/30 14:06:18 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) --
[2011/06/03 08:10:28 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAM FILES\AVG\AVG10\FIREFOX4
[2009/04/10 08:41:19 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011/05/07 14:25:06 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browsercomps.dll
[2010/01/01 04:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\bing.xml

Hosts file not found
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - File not found
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AirPort Base Station Agent] C:\Program Files\AirPort\APAgent.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKCU..\Run: [DisplayFusion] C:\Program Files\DisplayFusion\DisplayFusion.exe (Binary Fortress Software)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\QuickBooks 2001 Delivery Agent.lnk = C:\Program Files\Intuit\QuickBooks\Components\QBAgent\qbdagent2001.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\VideoCam Suite 2.0.lnk = C:\Program Files\Panasonic\VideoCam Suite 2\VideoCamSuiteAutoStart.exe (Panasonic Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoBandCustomize = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarCustomize = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogOff = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisallowRun = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoBandCustomize = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarCustomize = 0
O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Program%20Files/Bejeweled%202/Images/stg_drm.ocx (SpinTop DRM Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.ma...r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} http://office.micros...ntent/opuc4.cab (Office Update Installation Engine)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files/Bejeweled%202/Images/armhelper.ocx (ArmHelper Control)
O16 - DPF: {DB9DE2A8-D1BA-472A-B1F8-39697899DEF7} http://192.168.1.11/HiDvrOcx.cab (HiDvrOcx Control)
O16 - DPF: Microsoft XML Parser for Java file:///C:/WINDOWS/Java/classes/xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 71.242.0.12
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Filter\x-sdch {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/04/25 17:29:32 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/11/30 15:45:30 | 000,000,132 | ---- | M] () - F:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2005/12/08 20:03:16 | 000,000,000 | RH-D | M] - N:\autorun -- [ NTFS ]
O32 - AutoRun File - [2002/10/17 10:56:50 | 000,000,036 | RH-- | M] () - N:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync) - C:\Program Files\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart) - C:\Program Files\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/06/09 13:04:52 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Bob Dunlap\Desktop\OTL.exe
[2011/06/09 12:21:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bob Dunlap\Desktop\RK_Quarantine
[2011/06/09 12:00:52 | 000,189,520 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\System32\drivers\tmcomm.sys
[2011/06/08 09:31:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bob Dunlap\Application Data\Oxyro
[2011/06/08 09:31:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bob Dunlap\Application Data\Asekg
[2011/06/07 14:07:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Apple
[2011/06/07 10:55:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Macromedia
[2011/06/07 10:55:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Adobe
[2011/06/07 09:20:44 | 000,000,000 | ---D | C] -- C:\Program Files\PageRage
[2011/06/07 09:20:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Tarma Installer
[2011/06/07 09:20:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bob Dunlap\Application Data\E21617BF15A187CFFAFA1D7E13C9F898
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/06/09 13:04:38 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Bob Dunlap\Desktop\OTL.exe
[2011/06/09 12:55:16 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011/06/09 12:54:31 | 000,002,521 | ---- | M] () -- C:\Documents and Settings\Bob Dunlap\Desktop\Microsoft Office Outlook 2007.lnk
[2011/06/09 12:44:32 | 000,000,432 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{3AEDDAD4-45A2-4C79-AC91-8FBCC34541BF}.job
[2011/06/09 12:41:05 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/06/09 12:39:39 | 000,000,868 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2011/06/09 12:39:09 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/06/09 12:39:03 | 2145,333,248 | -HS- | M] () -- C:\hiberfil.sys
[2011/06/09 11:47:34 | 000,000,949 | ---- | M] () -- C:\WINDOWS\wininit.ini
[2011/06/08 09:15:02 | 117,588,799 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm
[2011/06/07 14:07:47 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/06/07 11:38:01 | 000,001,400 | ---- | M] () -- C:\WINDOWS\winpoint.ini
[2011/06/06 11:41:34 | 000,040,785 | ---- | M] () -- C:\Documents and Settings\Bob Dunlap\Desktop\2010 W2's.pdf
[2011/06/03 08:10:29 | 000,000,692 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\AVG 2011.lnk
[2011/06/02 11:03:04 | 000,462,388 | ---- | M] () -- C:\Documents and Settings\Bob Dunlap\Desktop\uProMXuserguidev1.pdf
[2011/05/29 09:11:30 | 000,039,984 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/05/29 09:11:20 | 000,022,712 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011/05/26 12:29:15 | 004,250,503 | ---- | M] () -- C:\Documents and Settings\Bob Dunlap\Desktop\oops.wmv
[2011/05/16 16:59:26 | 000,002,515 | ---- | M] () -- C:\Documents and Settings\Bob Dunlap\Desktop\Microsoft Office Word 2007.lnk
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/06/09 12:34:21 | 2145,333,248 | -HS- | C] () -- C:\hiberfil.sys
[2011/06/06 11:41:34 | 000,040,785 | ---- | C] () -- C:\Documents and Settings\Bob Dunlap\Desktop\2010 W2's.pdf
[2011/06/02 11:03:04 | 000,462,388 | ---- | C] () -- C:\Documents and Settings\Bob Dunlap\Desktop\uProMXuserguidev1.pdf
[2011/05/26 12:29:15 | 004,250,503 | ---- | C] () -- C:\Documents and Settings\Bob Dunlap\Desktop\oops.wmv
[2011/03/28 15:33:28 | 000,000,197 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\RmUserCfg.ini
[2011/03/28 15:33:28 | 000,000,020 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\IpAndPort.fig
[2011/01/03 12:17:45 | 000,000,272 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\~UIUoAa8LKG2
[2011/01/03 12:17:45 | 000,000,152 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\~UIUoAa8LKG2r
[2011/01/03 12:17:37 | 000,000,536 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\UIUoAa8LKG2
[2010/12/09 19:49:50 | 000,048,128 | ---- | C] () -- C:\WINDOWS\System32\HiDvrOcxCHT.dll
[2010/12/09 19:49:50 | 000,048,128 | ---- | C] () -- C:\WINDOWS\System32\HiDvrOcxCHS.dll
[2010/07/21 17:04:44 | 000,016,968 | ---- | C] () -- C:\WINDOWS\System32\drivers\hitmanpro35.sys
[2010/07/21 15:11:30 | 000,000,036 | ---- | C] () -- C:\Documents and Settings\Bob Dunlap\Local Settings\Application Data\housecall.guid.cache
[2010/07/12 12:28:25 | 000,000,120 | ---- | C] () -- C:\WINDOWS\Tjipulopocitalu.dat
[2010/07/12 12:28:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Ypoho.bin
[2010/01/15 09:51:48 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009/10/19 17:39:27 | 000,000,024 | ---- | C] () -- C:\WINDOWS\popcinfot.dat
[2009/10/06 15:50:55 | 000,000,016 | ---- | C] () -- C:\WINDOWS\popcinfo.dat
[2009/09/11 10:38:08 | 000,045,760 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2009/08/03 19:39:42 | 000,074,752 | ---- | C] () -- C:\WINDOWS\System32\jst.dll
[2009/08/03 19:39:42 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\PMLJNI.dll
[2009/04/30 19:54:39 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2009/04/30 18:55:36 | 000,006,550 | ---- | C] () -- C:\WINDOWS\jautoexp.dat
[2009/04/30 18:54:56 | 000,007,102 | ---- | C] () -- C:\WINDOWS\Icoadb32.dat
[2009/04/30 13:34:10 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Bob Dunlap\Application Data\$_hpcst$.hpc
[2009/04/30 12:08:37 | 000,000,000 | ---- | C] () -- C:\WINDOWS\vtpwra.INI
[2009/04/23 20:55:34 | 000,026,860 | ---- | C] () -- C:\WINDOWS\maxlink.ini
[2009/04/23 20:02:41 | 000,000,058 | ---- | C] () -- C:\WINDOWS\mchguid.ini
[2009/04/23 20:02:41 | 000,000,058 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\mchguid.ini
[2009/04/23 20:02:01 | 000,001,400 | ---- | C] () -- C:\WINDOWS\winpoint.ini
[2009/04/22 08:49:42 | 000,003,399 | R--- | C] () -- C:\WINDOWS\System32\hptcpmon.ini
[2009/04/22 08:49:42 | 000,000,292 | ---- | C] () -- C:\WINDOWS\System32\AddPort.ini
[2009/04/22 08:46:45 | 000,000,103 | ---- | C] () -- C:\WINDOWS\System32\hptrace.ini
[2009/04/22 08:45:53 | 000,019,194 | ---- | C] () -- C:\WINDOWS\hpclj3500.ini
[2009/04/20 10:25:19 | 000,021,504 | ---- | C] () -- C:\WINDOWS\jestertb.dll
[2009/04/10 15:32:51 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2009/04/10 11:29:14 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativvaxx.dat
[2009/04/10 11:29:14 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2009/04/10 11:29:14 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2009/04/10 11:29:14 | 000,174,819 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2009/04/10 11:29:14 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ATIODE.exe
[2009/04/10 11:29:14 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ATIODCLI.exe
[2009/04/10 11:29:04 | 000,077,824 | ---- | C] () -- C:\WINDOWS\setpwr32.exe
[2009/04/10 11:28:33 | 000,001,154 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2009/04/10 09:00:01 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2009/04/10 08:44:26 | 000,000,949 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2008/09/08 10:37:36 | 000,010,875 | ---- | C] () -- C:\WINDOWS\ESOA.INI
[2008/09/08 10:37:36 | 000,000,053 | ---- | C] () -- C:\WINDOWS\PRSRVDLL.INI
[2008/05/26 22:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 22:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2008/04/25 17:31:41 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2008/04/25 17:27:18 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008/04/25 17:26:32 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2008/04/25 12:16:24 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2008/04/25 12:16:22 | 000,466,420 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2008/04/25 12:16:22 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2008/04/25 12:16:22 | 000,079,636 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2008/04/25 12:16:22 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2008/04/25 12:16:22 | 000,004,627 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2008/04/25 12:16:21 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2008/04/25 12:16:20 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2008/04/25 12:16:18 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2008/04/25 12:16:18 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2008/04/25 12:16:13 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2008/04/25 12:16:11 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2008/04/25 05:22:39 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2008/04/25 05:21:52 | 000,227,208 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2007/09/27 11:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 11:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 11:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2004/03/06 02:30:52 | 000,000,173 | ---- | C] () -- C:\WINDOWS\SETSCAN.INI
[2002/03/04 10:16:34 | 000,110,592 | R--- | C] () -- C:\WINDOWS\System32\Jpeg32.dll
[2001/07/31 06:17:12 | 000,094,274 | ---- | C] () -- C:\WINDOWS\System32\HPBHEALR.DLL

========== LOP Check ==========

[2011/06/09 12:40:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG10
[2011/02/09 18:31:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\avg9
[2011/02/09 18:32:38 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Common Files
[2010/01/15 15:14:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GARMIN
[2010/09/28 15:04:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Hitman Pro
[2011/05/07 11:46:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MFAData
[2011/01/27 15:06:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\nNcOoGf06504
[2010/05/26 12:34:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Panasonic
[2009/10/19 17:38:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PopCap Games
[2009/04/23 20:55:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ScanSoft
[2009/04/23 21:00:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SSScanAppDataDir
[2009/04/23 21:00:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SSScanWizard
[2011/06/09 11:47:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Tarma Installer
[2011/06/09 12:12:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2010/04/09 13:24:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/09/09 19:23:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/06/23 13:44:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2011/06/09 11:24:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\Asekg
[2011/02/09 18:34:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\AVG10
[2010/07/12 13:16:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\BACS.exe
[2010/07/21 11:56:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\Binary Fortress Software
[2009/04/23 20:02:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\Calyx Software
[2010/07/21 11:59:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\DisplayFusion
[2011/06/07 09:23:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\E21617BF15A187CFFAFA1D7E13C9F898
[2010/01/15 15:04:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\GARMIN
[2010/09/28 15:42:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\GetRightToGo
[2009/04/23 20:57:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\LinkManager 4.0
[2009/05/20 11:46:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\OfficeUpdate12
[2009/04/30 11:44:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\OneTouch 4.0
[2011/06/08 13:39:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\Oxyro
[2010/05/26 12:35:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\Panasonic
[2009/04/30 11:47:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\ScanSoft
[2009/10/06 15:10:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\SpinTop
[2011/03/07 15:20:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\webex
[2009/04/10 08:39:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\Windows Desktop Search
[2009/04/20 10:57:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob Dunlap\Application Data\Windows Search
[2011/06/09 12:44:32 | 000,000,432 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{3AEDDAD4-45A2-4C79-AC91-8FBCC34541BF}.job

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 94 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:57DC3B52
@Alternate Data Stream - 136 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C41CE1F6
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C7F04040

< End of report >

#1
takin advantage

Posted 09 June 2011 - 11:15 AM

Advertisements

Similar Topics

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us