I installed Microsoft Essentials yesterday, updated, scaned, found nothing. The reason you do not see it is because I removed it. My system capacity is low so I do not keep programs around. I also installed and ran Maleware bytes... but as you can see from Hijackthis it is now removed. I will also be removing SuperAntiSpyware when we are done here. Oh by the way, SuperAntiSpyware also installed Internet Chrome, I took it back out. Anyway here are the logs you asked about.
Malwarebytes Anti-Malware (Trial) 1.61.0.1400
www.malwarebytes.org
Database version: v2012.07.04.06
Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Administrator :: USER1-B2623AFF9 [administrator]
Protection: Enabled
7/4/2012 5:54:15 PM
mbam-log-2012-07-04 (17-54-15).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 201731
Time elapsed: 4 minute(s), 20 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)
**********************************
SUPERAntiSpyware Scan Log
http://www.superantispyware.com
Generated 07/04/2012 at 06:27 PM
Application Version : 5.5.1006
Core Rules Database Version : 8845
Trace Rules Database Version: 6657
Scan type : Quick Scan
Total Scan Time : 00:07:24
Operating System Information
Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator
Memory items scanned : 404
Memory threats detected : 0
Registry items scanned : 28602
Registry threats detected : 0
File items scanned : 7186
File threats detected : 29
Adware.Tracking Cookie
C:\Documents and Settings\Administrator\Cookies\Y9KXYIQY.txt [ /atdmt.com ]
C:\Documents and Settings\Administrator\Cookies\9LG8SRQO.txt [ /ero-advertising.com ]
C:\Documents and Settings\Administrator\Cookies\6B9TFNEA.txt [ /media6degrees.com ]
C:\Documents and Settings\Administrator\Cookies\8CNHJW06.txt [ /www.googleadservices.com ]
C:\Documents and Settings\Administrator\Cookies\FZV2MDDH.txt [ /c.atdmt.com ]
C:\Documents and Settings\Administrator\Cookies\PR5YKGXD.txt [ /adserver.adtechus.com ]
C:\Documents and Settings\Administrator\Cookies\C5DX8W18.txt [ /ads.saymedia.com ]
C:\Documents and Settings\Administrator\Cookies\W7JQMSAX.txt [ /adbrite.com ]
C:\Documents and Settings\Administrator\Cookies\Z1UAJMKW.txt [ /revsci.net ]
C:\Documents and Settings\Administrator\Cookies\UAO1JSK3.txt [ /tacoda.at.atwola.com ]
C:\Documents and Settings\Administrator\Cookies\B6S5198K.txt [ /tribalfusion.com ]
C:\Documents and Settings\Administrator\Cookies\2X0WJNP2.txt [ /adxpansion.com ]
C:\Documents and Settings\Administrator\Cookies\NFZUF04N.txt [ /mm.chitika.net ]
C:\Documents and Settings\Administrator\Cookies\FWOKM8RU.txt [ /nextag.com ]
C:\Documents and Settings\Administrator\Cookies\ROI5ADKN.txt [ /kontera.com ]
C:\Documents and Settings\Administrator\Cookies\SR6MDEW8.txt [ /interclick.com ]
C:\Documents and Settings\Administrator\Cookies\PKX59P8S.txt [ /doubleclick.net ]
C:\Documents and Settings\Administrator\Cookies\YZG52MUQ.txt [ /serving-sys.com ]
C:\Documents and Settings\Administrator\Cookies\AK7BREZ3.txt [ /statcounter.com ]
C:\Documents and Settings\Administrator\Cookies\739QWPCA.txt [ /microsoftsto.112.2o7.net ]
C:\Documents and Settings\Administrator\Cookies\ABIS4O6R.txt [ /advertising.com ]
C:\Documents and Settings\Administrator\Cookies\CLAJGLI9.txt [ /collective-media.net ]
C:\Documents and Settings\Administrator\Cookies\G0LJQVXG.txt [ /ar.atwola.com ]
C:\Documents and Settings\Administrator\Cookies\M4XISJX2.txt [ /ad.yieldmanager.com ]
C:\Documents and Settings\Administrator\Cookies\JGAOE9F1.txt [ /tacoda.net ]
C:\Documents and Settings\Administrator\Cookies\7I2TW0X5.txt [ /accounts.google.com ]
C:\Documents and Settings\Administrator\Cookies\8FDUDITD.txt [ /casalemedia.com ]
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\B1C2PC0G.txt [ Cookie:administrator@www.google.com/accounts/recovery ]
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\UVP2ABFW.txt [ Cookie:administrator@google.com/accounts/recovery/ ]
************************************************
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 6:36:18 PM, on 7/4/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxduserv.exe
C:\WINDOWS\system32\lxducoms.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\UMonit2K.exe
C:\Program Files\Lexmark 5600-6600 Series\lxdumon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Lexmark 5600-6600 Series\lxduMsdMon.exe
C:\Documents and Settings\Administrator\My Documents\HijackThis\HiJackThis_v2.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
file:///C:/Documents%20and%20Setting...top/Google.mht
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Lexmark Printable Web - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Gene USB Monitor] C:\WINDOWS\system32\UMonit2K.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [lxdumon.exe] "C:\Program Files\Lexmark 5600-6600 Series\lxdumon.exe"
O4 - HKLM\..\Run: [lxduamon] "C:\Program Files\Lexmark 5600-6600 Series\lxduamon.exe"
O4 - HKLM\..\Run: [Lexmark 5600-6600 Series Fax Server] "C:\Program Files\Lexmark 5600-6600 Series\fm3032.exe" /s
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: OneNote Table Of Contents.onetoc2
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxduCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxduserv.exe
O23 - Service: lxdu_device - - C:\WINDOWS\system32\lxducoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
--
End of file - 4868 bytes
********************************************************
That it you have them all now. Thanks