Ok...Here you go.
SDFix: Version 1.104
Run by Richard Osborne on Sat 09/15/2007 at 08:49 PM
Microsoft Windows XP [Version 5.1.2600]
Running From: C:\DOCUME~1\RICHAR~1\Desktop\SDFix
Safe Mode:
Checking Services:
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting...
Normal Mode:
Checking Files:
No Trojan Files Found
Removing Temp Files...
ADS Check:
C:\WINDOWS
No streams found.
C:\WINDOWS\system32
No streams found.
C:\WINDOWS\system32\svchost.exe
No streams found.
C:\WINDOWS\system32\ntoskrnl.exe
No streams found.
Final Check:
Remaining Services:
------------------
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameter s\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameter s\firewallpolicy\domainprofile\authorizedapplications\list]
Remaining Files:
---------------
Files with Hidden Attributes:
C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp
C:\WINDOWS\SoftwareDistribution\Download\0a120212db9f8797932f46def01672fc\d ownload\BIT1B.tmp
C:\WINDOWS\SoftwareDistribution\Download\1fb659e25c21839251d560da33cbcfad\B IT10.tmp
C:\WINDOWS\SoftwareDistribution\Download\33831624a2e810dc854ea2f820d0dd53\B IT9.tmp
C:\WINDOWS\SoftwareDistribution\Download\4387300ca1dcf29784a47c30e67cb637\d ownload\BIT19.tmp
C:\WINDOWS\SoftwareDistribution\Download\495213e4cb2a90b1fa5505a5fab8e00b\B IT13.tmp
C:\WINDOWS\SoftwareDistribution\Download\4cc8107fde988bba1481bb736cc96c29\d ownload\BIT1E.tmp
C:\WINDOWS\SoftwareDistribution\Download\55b5c397ff94db07e8c1c336efaf0a7b\B IT14.tmp
C:\WINDOWS\SoftwareDistribution\Download\6b5f9b6e24a379bdb34ad3589556de3e\d ownload\BIT1F.tmp
C:\WINDOWS\SoftwareDistribution\Download\7b94d041c29d0b8d724c97ae0005e71b\B ITB.tmp
C:\WINDOWS\SoftwareDistribution\Download\8a10de02595aa748279afc6c628f49a8\d ownload\BIT1C.tmp
C:\WINDOWS\SoftwareDistribution\Download\972f9ceb5c3be430fe6cdcb43653d74d\B ITE.tmp
C:\WINDOWS\SoftwareDistribution\Download\adc42e4e6905251cac80b18a8dccd42a\B IT15.tmp
C:\WINDOWS\SoftwareDistribution\Download\aebb83db003f77a45671fd2c1557da38\d ownload\BIT18.tmp
C:\WINDOWS\SoftwareDistribution\Download\cf0471ca1f3f12affe6c8fea1ffc6ddb\B ITA.tmp
C:\WINDOWS\SoftwareDistribution\Download\d1c98689cdcd0ea9312780ffc77a2cbe\B IT7.tmp
C:\WINDOWS\SoftwareDistribution\Download\d378d94379aa314a2f8a03df7faef1bc\d ownload\BIT1D.tmp
C:\WINDOWS\SoftwareDistribution\Download\d424e8f655073b64c82b6f4f138d5f7e\B ITF.tmp
C:\WINDOWS\SoftwareDistribution\Download\f941c900a413f153861a4032214a1aec\d ownload\BIT1A.tmp
C:\WINDOWS\system32\config\SAM.tmp.LOG
C:\WINDOWS\system32\config\SECURITY.tmp.LOG
Finished!
_________________________________________________________________________
SUPERAntiSpyware Scan Log
http://www.superantispyware.com
Generated 09/15/2007 at 08:09 PM
Application Version : 3.9.1008
Core Rules Database Version : 3307
Trace Rules Database Version: 1313
Scan type : Complete Scan
Total Scan Time : 01:19:06
Memory items scanned : 417
Memory threats detected : 1
Registry items scanned : 6024
Registry threats detected : 15
File items scanned : 54556
File threats detected : 141
Trojan.SVSHOST
C:\WINDOWS\SYSTEM32\SVSHOST.EXE
C:\WINDOWS\SYSTEM32\SVSHOST.EXE
[Microsoft Updates] C:\WINDOWS\SYSTEM32\SVSHOST.EXE
[Microsoft Updates] C:\WINDOWS\SYSTEM32\SVSHOST.EXE
C:\WINDOWS\Prefetch\SVSHOST.EXE-2DCA3CE2.pf
Adware.Tracking Cookie
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@adrevolver[2].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@upspiral[1].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@statse.webtrendslive[2].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@stats1.reliablestats[1].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@zedo[3].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ads.pointroll[2].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@media.adrevolver[2].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www.upspiral[1].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@questionmarket[3].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@advertising[3].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@burstnet[3].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@winantivirus[2].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www.winantispyware[2].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@clickaider[1].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@bs.serving-sys[1].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@media.adrevolver[3].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@serving-sys[2].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ad.yieldmanager[2].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@trafficmp[1].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@goclick[2].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@cpvfeed[2].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@tribalfusion[2].txt
C:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@fastclick[3].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@2.adbrite[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@2o7[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@3.adbrite[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@a.websponsors[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@acvs.mediaonenetwork[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ad.adtegrity[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ad.bannerconnect[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ad.depositfiles[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ad.yieldmanager[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ad.zanox[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ad1.clickhype[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@adecn[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@adknowledge[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@adopt.specificclick[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ads.123india[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ads.adbrite[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ads.as4x.tmcs[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ads.cnn[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ads.ozonemedia.co[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ads.realtechnetwork[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ads.revsci[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ads.sheknows[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ads.us.e-planning[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ads.warnerbros[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@adv.surinter[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@aff.primaryads[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@agoramedia[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@anad.tacoda[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@anat.tacoda[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@atwola[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@audit.median[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@azjmp[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@belnk[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@burstnet[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@campaign.indieclick[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@clicksmartaffiliates[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@clicksor[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@clicktorrent[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@counterstats[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@cpvfeed[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@dist.belnk[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@edge.ru4[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@ehg-dig.hitbox[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@enterprise.clickdefense[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@gostats[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@h.starware[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@hentaicounter[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@hotbar[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@icc.intellisrv[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@imrworldwide[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@informationcentral0.tripod[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@interclick[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@kanoodle[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@media.jcarter[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@mediaonenetwork[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@my-calorie-counter[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@netmediagroup[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@nextag[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@partner2profit[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@popularscreensavers[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@precisionclick[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@publishers.clickbooth[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@qnsr[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@sales.liveperson[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@sales.liveperson[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@sales.liveperson[3].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@sales.liveperson[4].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@sales.liveperson[5].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@sales.liveperson[6].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@sales.liveperson[7].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@sec1.liveperson[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@sec1.liveperson[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@secure.agoramedia[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@server.lon.liveperson[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@server.lon.liveperson[3].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@spamblockerutility[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@stats.gamestop[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@stats.manticoretechnology[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@superstats[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@teen-stop[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@toplist[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@toseeka[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@track.bestbuy[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@try.starware[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@try.starware[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@vhost.oddcast[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www.burstbeacon[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www.clicktorrent[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www.googleadservices[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www.googleadservices[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www.googleadservices[3].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www.googleadservices[5].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www.googleadservices[6].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www.googleadservices[7].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www.googleadservices[9].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www.mlclick[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www.short-media[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www1.addfreestats[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www2.addfreestats[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www3.addfreestats[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www4.addfreestats[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www5.addfreestats[1].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www6.addfreestats[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www7.addfreestats[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@www8.addfreestats[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@xiti[2].txt
F:\Documents and Settings\Richard Osborne\Cookies\richard_osborne@yadro[1].txt
Adware.Zango Toolbar/Hb
HKCR\CLSID\{8109FD3D-D891-4F80-8339-50A4913ACE6F}
HKCR\CLSID\{8109FD3D-D891-4F80-8339-50A4913ACE6F}\InprocServer32
HKCR\CLSID\{8109FD3D-D891-4F80-8339-50A4913ACE6F}\InprocServer32#ThreadingModel
HKCR\CLSID\{8109FD3D-D891-4F80-8339-50A4913ACE6F}\ProgID
HKCR\CLSID\{8109FD3D-D891-4F80-8339-50A4913ACE6F}\Programmable
HKCR\CLSID\{8109FD3D-D891-4F80-8339-50A4913ACE6F}\TypeLib
HKCR\CLSID\{8109FD3D-D891-4F80-8339-50A4913ACE6F}\VersionIndependentProgID
HKCR\TypeLib\{5937CD7F-1C0B-41E1-9075-60EBDF3C7D34}
HKCR\TypeLib\{5937CD7F-1C0B-41E1-9075-60EBDF3C7D34}\1.0
HKCR\TypeLib\{5937CD7F-1C0B-41E1-9075-60EBDF3C7D34}\1.0\0
HKCR\TypeLib\{5937CD7F-1C0B-41E1-9075-60EBDF3C7D34}\1.0\0\win32
HKCR\TypeLib\{5937CD7F-1C0B-41E1-9075-60EBDF3C7D34}\1.0\FLAGS
HKCR\TypeLib\{5937CD7F-1C0B-41E1-9075-60EBDF3C7D34}\1.0\HELPDIR
Trojan.Downloader-Gen/HitItQuitIt
C:\PROGRAM FILES\TREND MICRO\HIJACKTHIS\BACKUPS\BACKUP-20070914-185821-869.DLL
F:\NEW FOLDER\PROGRAM FILES\TREND MICRO\HIJACKTHIS\BACKUPS\BACKUP-20070914-185821-869.DLL
__________________________________________________________________________
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:08:31 PM, on 9/15/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Watch2007.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "C:\Program Files\RivaTuner v2.0 RC 16\RivaTuner.exe" /S
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [AAWTray] C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Watch2007.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) -
http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) -
http://www.systemrequirementslab.com/sysreqlab2.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) -
http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) -
http://cdn2.zone.msn.com/binFramewor...o.cab56649.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) -
http://zone.msn.com/bingame/popcaploader_v10.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
_________________________________________________________________________
I checked in the Manage Add-ons on my browser and the 2 .dll files are now gone.
Welcome to Tech Support Guy! Read our Welcome Guide or take a minute to watch the video below!
Malware Removal & HijackThis Logs 
Search 
