IE Defender virus popups

Welcome. Thank you for using Dell Community Forums.
I am reviewing your log.
In the meantime, you can help me by doing the following:

* Have you have posted this issue on another forum? If so, please provide a link to the topic.

* If you are using any cracked software, please remove it.
Definition of cracked software:
http://en.wikipedia.org/wiki/Software_cracking

* If you are using any P2P (file sharing) programs, please remove them before we clean your computer.
The nature of such software and the high incidence of malware in files downloaded with them is counter productive to restoring your PC to a healthy state.

* If this computer belongs to someone else, do you have authority to apply the fixes we will use?

* Have you already fixed entries using HijackThis? If so, please restore all the backups and then post another log.

* After we begin working, please print or copy all instructions to Notepad in order to assist you when carrying out procedures.
Please follow all instructions in sequence. Do not, on your own, install/re-install any programs or run any fixes or scanners that you have not been instructed to use because this may cause conflicts with the tools that I am using.

** We may be using some specialized tools during our fix. Certain embedded files that are part of legitimate programs or specialized fix tools such as process.exe, restart.exe, SmiUpdate.exe, reboot.exe, ws2fix.exe, prcviewer.exe and nircmd.exe may at times be detected by some anti-virus/anti-malware scanners as a "RiskTool", "Hacking tool", "Potentially unwanted tool", or even "malware (virus/trojan)" when that is not the case.
Such programs have legitimate uses in contexts where an authorized user or administrator has knowingly installed it. These detections do not necessarily mean the file is malware or a bad program. It means it has the potential for being misused by others. Anti-virus scanners cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert you or even automatically remove them.

* If your replies do not fit in one post while we are handling your issue, please reply to yourself until all text is submitted. It may take several posts.

Your version of Hijackthis is outdated. Please uninstall that using the u ninstall feature or by using Add/Remove Programs.

Please download HJT Installer for version 2.02 from Here to your desktop.
If not available use this alternate link: Here

• Click the Download button. When the Trend Micro HJT install box appears, double click on the HJTInstall.exe. Click on Install.
• It will be installed by default here: C:\Program Files\Trend Micro\HijackThis.
• A shortcut to the application will also be placed on your Desktop.
• The program will open automatically after installation.
• You can double-click the icon that was placed on the Desktop to run subsequent HijackThis scans or you can use the icon inside the folder. The folder HijackThis is where you will find the HJT logs that you save. When you use the application to remove anything, you will also find the backup copies made by HJT inside this folder.
• The first time you open HijackThis, check the Main Menu button at the bottom center. When the main menu appears check the box "Show this window when I start HijackThis".
• Click on "Do a system scan and save logfile."
  When the log pops up in Notepad, copy and paste that file back here.
• DO NOT have HijackThis fix anything yet. Most of what it finds will be harmless or even required.
• Before closing HJT, please click on the AnalyzeThis button. "Analyze This" DOES NOT mean "Analyze My Log". You will need to post your log as a reply back in this thread.
• Close the web page that appears and then close the program
• 
  
  I look forward to your reply.

I have dowloaded newer version of HJT and included logfile. The computer belongs to me, I have not posted elsewhere, I have no P2P files that I am aware of, no cracked software, I fixed no entries using HJT. The only thing I did do is use XoftspySE to identify and eliminate any spyware that it could identify. It did not have an effect on this virus however.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:57:09 PM, on 1/7/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\DRIVERS\PRINTER\540\StatMon.exe
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\issch.exe
C:\Program Files\Norton Password Manager\AcctMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\XoftSpySE\XoftSpy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.comcast.net/toolbar2.0/search/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.comcast.net/toolbar2.0/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Rates - {038F228B-EED3-4A87-A565-F88FC99EBA91} - C:\WINDOWS\toprates.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll
O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Neopets - {CD292324-974F-4224-D074-CACA427AA030} - C:\PROGRA~1\Neopets\Toolbar\Toolbar.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Neopets - {CD292324-974F-4224-D074-CACA427AA030} - C:\PROGRA~1\Neopets\Toolbar\Toolbar.dll
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [DellStatusMonitor] "C:\DRIVERS\PRINTER\540\StatMon.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\issch.exe" -start
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [tgcmd] C:\Program Files\Support.com\bin\tgcmd.exe /server /startmonitor /deaf
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4CC35DAD-40EA-4640-ACC2-A1A3B6FB3E06} (NeoterisSetup Control) - https://remote2.schwab.com/dana-cached/setup/NeoterisSetup.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1117419880640
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - https://remote2.schwab.com/svordp/msrdp.cab,DanaInfo=svowebinterface.schwab.com+
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} (Symantec Download Bridge) - http://a248.e.akamai.net/f/248/5462/2h/www.symantecstore.com/v2.0-img/operations/symbizpr/xcontrol/SymDlBrg.cab
O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/ydropper/ydropper1_6us.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/web_games/popcap/bejeweled2/popcaploader_v6.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Viewpoint Manager Service - Unknown owner - C:\Program Files\Viewpoint\Common\ViewpointService.exe (file missing)
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

--
End of file - 14803 bytes

Download and scan with SUPERAntiSpyware Free for Home Users

• Double-click SUPERAntiSpyware.exe and use the default settings for installation.
• An icon will be created on your desktop. Double-click that icon to launch the program.
• If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download and unzip them from here.)
  
  
• Under "Configuration and Preferences", click the Preferences button.
• Click the Scanning Control tab.
• Under Scanner Options make sure the following are checked (leave all others unchecked):
  • Close browsers before scanning.
  • Scan for tracking cookies.
  • Terminate memory threats before quarantining.
• Click the "Close" button to leave the control center screen.
• Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
• On the left, make sure you check C:\Fixed Drive.
• On the right, under "Complete Scan", choose Perform Complete Scan.
• Click "Next" to start the scan. Please be patient while it scans your computer.
• After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
• Make sure everything has a checkmark next to it and click "Next".
• A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
• If asked if you want to reboot, click "Yes".
• To retrieve the removal information after reboot, launch SUPERAntispyware again.
  • Click Preferences, then click the Statistics/Logs tab.
  • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
  • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
  • Please copy and paste the Scan Log results in your next reply.
• Click Close to exit the program.

Also please include a fresh HijackThis log and let me know how things are running.

3rd and final portion ofSuper Antispyware log:

C:\Documents and Settings\James Lauterbach\Local Settings\Temp\Cookies\james lauterbach@247realmedia[1].txt
C:\Documents and Settings\James Lauterbach\Local Settings\Temp\Cookies\james lauterbach@2o7[1].txt
C:\Documents and Settings\James Lauterbach\Local Settings\Temp\Cookies\james lauterbach@ads.cnn[1].txt
C:\Documents and Settings\James Lauterbach\Local Settings\Temp\Cookies\james lauterbach@ads.pointroll[1].txt
C:\Documents and Settings\James Lauterbach\Local Settings\Temp\Cookies\james lauterbach@advertising[1].txt
C:\Documents and Settings\James Lauterbach\Local Settings\Temp\Cookies\james lauterbach@atdmt[2].txt
C:\Documents and Settings\James Lauterbach\Local Settings\Temp\Cookies\james lauterbach@cnn.122.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Local Settings\Temp\Cookies\james lauterbach@doubleclick[1].txt
C:\Documents and Settings\James Lauterbach\Local Settings\Temp\Cookies\james lauterbach@icc.intellisrv[2].txt
C:\Documents and Settings\James Lauterbach\Local Settings\Temp\Cookies\james lauterbach@mediaplex[1].txt
C:\Documents and Settings\James Lauterbach\Local Settings\Temp\Cookies\james lauterbach@nextag[2].txt
C:\Documents and Settings\James Lauterbach\Local Settings\Temp\Cookies\james lauterbach@perf.overture[1].txt
C:\Documents and Settings\James Lauterbach\Local Settings\Temp\Cookies\james lauterbach@primediabusiness.122.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Local Settings\Temp\Cookies\james lauterbach@sales.liveperson[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@247realmedia[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@2o7[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@2o7[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ad.yieldmanager[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@adbrite[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@adecn[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@adknowledge[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@adlegend[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@adopt.euroclick[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@adopt.specificclick[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@adrevolver[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@adrevolver[3].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ads.addynamix[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ads.cc214142[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ads.monster[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ads.pointroll[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ads.realcastmedia[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ads.realtechnetwork[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@adv.webmd[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@advertising[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@anad.tacoda[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@apmebf[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@as-eu.falkag[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@as1.falkag[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@atdmt[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@atwola[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@azjmp[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@belnk[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@bizrate[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@bluestreak[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@buildabear.122.2o7[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@burstnet[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@buycom.122.2o7[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@casalemedia[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@charmingshoppes.112.2o7[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@citi.bridgetrack[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@commission-junction[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@counter.hitslink[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@cratebarrel.112.2o7[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@data1.perf.overture[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@data2.perf.overture[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@data3.perf.overture[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@delias.crossmediaservices[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@dist.belnk[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@doubleclick[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@e-2dj6wfk4ckdjwlo.stats.esomniture[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@e-2dj6wfloanc5ofp.stats.esomniture[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@e-2dj6wgkieidjwfq.stats.esomniture[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@e-2dj6whl4soczkcp.stats.esomniture[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@e-2dj6whmykocpadp.stats.esomniture[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@e-2dj6wjkyclajwbp.stats.esomniture[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@e-2dj6wjloekdzggp.stats.esomniture[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@e-2dj6wjlyeoazwgo.stats.esomniture[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@e-2dj6wjlyspc5skp.stats.esomniture[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@e-2dj6wjmieoc5okp.stats.esomniture[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@e2itg.pbteen[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@edge.ru4[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-bestbuy.hitbox[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-buyseasons.hitbox[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-clearchannel.hitbox[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-comcast.hitbox[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-dcshoes.hitbox[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-dig.hitbox[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-foxmovies.hitbox[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-hasbro.hitbox[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-leapfrog.hitbox[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-nestleusainc.hitbox[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-publiciswest.hitbox[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-reebok.hitbox[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-thesofacollectionllc.hitbox[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-ti.hitbox[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-triseptsoultions.hitbox[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-ubid.hitbox[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-warnerbrothers.hitbox[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-wizardsofthecoast.hitbox[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ehg-zoomerang.hitbox[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@fastclick[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@fcstats.bcentral[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@findwhat[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@fishermansexpress[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@focalex[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@giftscom.122.2o7[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@hitbox[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@hits.clickandtrack[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@hurricanedigitalmedia[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@indexstats[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@indextools[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@interclick[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@keywordmax[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@limitedtoo.directtrack[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@linksynergy[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@marketlive.122.2o7[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@maxserving[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@media.adrevolver[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@media3.sitebrand[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@mediaplex[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@mediaservices.myspace[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@microsofteup.112.2o7[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@motricity.122.2o7[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@msnportal.112.2o7[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@nextag[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@okcounter[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@optimost[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@overture[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@partner2profit[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@partygaming.122.2o7[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@pbteen[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@pch.122.2o7[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@perf.overture[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@pro-market[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@qksrv[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@questionmarket[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@realmedia[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@reduxads.valuead[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@regalinteractive[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@revenue[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@revsci[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@reztrack[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@roiservice[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@sales.liveperson[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@server.cpmstar[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@serving-sys[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@smileycentral[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@specificclick[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@stat.dealtime[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@stat.onestat[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@statcounter[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@stats.foresite[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@statse.webtrendslive[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@tacoda[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@targetnet[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@teenfashionn[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@teentrendsgirls.everythinggirl[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@tradedoubler[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@trafficmp[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@tribalfusion[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@tripod[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@valueclick[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@ww2.pbteen[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@www.burstbeacon[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@www.findgift[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@www.pbteen[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@www.ppctracking[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@xiti[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@yieldmanager[2].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@z1.adserver[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@zedo[1].txt
C:\Documents and Settings\Madison Lauterbach\Cookies\madison lauterbach@zipzoomfly.122.2o7[1].txt
C:\WINDOWS\Temp\Cookies\james lauterbach@2o7[1].txt

Trojan.Media-Codec/V4
C:\Program Files\Video Add-on

Here is my last HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:42:45 AM, on 1/8/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\DRIVERS\PRINTER\540\StatMon.exe
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\issch.exe
C:\Program Files\Norton Password Manager\AcctMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.comcast.net/toolbar2.0/search/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.comcast.net/toolbar2.0/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll
O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [DellStatusMonitor] "C:\DRIVERS\PRINTER\540\StatMon.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\issch.exe" -start
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [tgcmd] C:\Program Files\Support.com\bin\tgcmd.exe /server /startmonitor /deaf
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4CC35DAD-40EA-4640-ACC2-A1A3B6FB3E06} (NeoterisSetup Control) - https://remote2.schwab.com/dana-cached/setup/NeoterisSetup.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1117419880640
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - https://remote2.schwab.com/svordp/msrdp.cab,DanaInfo=svowebinterface.schwab.com+
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} (Symantec Download Bridge) - http://a248.e.akamai.net/f/248/5462/2h/www.symantecstore.com/v2.0-img/operations/symbizpr/xcontrol/SymDlBrg.cab
O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/ydropper/ydropper1_6us.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/web_games/popcap/bejeweled2/popcaploader_v6.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Viewpoint Manager Service - Unknown owner - C:\Program Files\Viewpoint\Common\ViewpointService.exe (file missing)
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

--
End of file - 14801 bytes

2nd half of SuperAntispyware log:

Adware.Tracking Cookie
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ehg-dig.hitbox[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ads.pointroll[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@list[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james_lauterbach@questionmarket[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james_lauterbach@adinterax[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@counter.hitslink[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@247realmedia[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@server.iad.liveperson[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ads.belointeractive[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@68614869[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@stats.ahacafe[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james_lauterbach@tacoda[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@casalemedia[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ehg-vailresorts.hitbox[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@adtech[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james_lauterbach@atdmt[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@meetupcom.122.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@try.screensavers[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@zedo[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@hitbox[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ehg-standardandpoors.hitbox[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@media.hotels[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james_lauterbach@richmedia.yahoo[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@edge.ru4[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@realmedia[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@adlegend[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@trafficmp[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ehg-bestwestern.hitbox[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@keywordmax[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@fastclick[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@anat.tacoda[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@cgi-bin[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@85084061[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ehg-dupontreg.hitbox[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@statcounter[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@revsci[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@brightcove.112.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@tribalfusion[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@advertising[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james_lauterbach@mediaplex[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@perf.overture[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@adserver[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@clickondetroit[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@blockbuster.112.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james_lauterbach@doubleclick[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@statse.webtrendslive[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ehg-apollogroup.hitbox[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@www.clickondetroit[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ehg-morningstar.hitbox[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@i.screensavers[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@amznshopbop.122.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@57386690[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@specificclick[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@adopt.euroclick[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james_lauterbach@adrevolver[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@screensavers[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@www.cohomefinder[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@keybank.112.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@upi.112.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@traffic[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ads.cnn[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@cratebarrel.112.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@overture[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james_lauterbach@2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@medianewsgroup[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@adserver.inventorspot[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@homestore.122.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@sales.liveperson[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@adserving.autotrader[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@viavh1video.112.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@exitexchange[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@metacafe.122.2o7[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@oasc02.247realmedia[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@bizjournals.112.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@adopt.specificclick[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@oasc04.247realmedia[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@yadro[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@scrippsfoodnet.112.2o7[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@atwola[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james_lauterbach@media.adrevolver[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@nextag[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ehg-foxsports.hitbox[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@burstnet[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@s.clickability[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@collective-media[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ads.as4x.tmcs[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@webtrack.bestsoftware[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@valueclick[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@anad.tacoda[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@entrepreneur.122.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@apmebf[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ehg-talbots.hitbox[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@web4.realtracker[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@gmgmacfs.112.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@eas.apm.emediate[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james_lauterbach@dynamicsitestats[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@underarmour.112.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james_lauterbach@www.googleadservices[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@rotator.adjuggler[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ehg-chrysler.hitbox[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ads.adbrite[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@track.bestbuy[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ecnext.advertserve[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@dcssjkq7h00000gco3eh32w66_1m1y[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james_lauterbach@clickbank[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@adbrite[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@server2.bkvtrack[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@optimize.indieclick[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ehg-zvents.hitbox[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ads.swiftnews[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james_lauterbach@ad.yieldmanager[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ehg-traderpublishing.hitbox[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@gcc[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@cohomefinder[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@m1.webstats.motigo[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@1069095226[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ads.adsag[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@roiservice[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@whitehorse.112.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@msnportal.112.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@78221172[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@1059477059[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@partner2profit[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@marketlive.122.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ehg-concept2.hitbox[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james_lauterbach@indextools[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ehg-hollywoodmedia.hitbox[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@1071476948[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@www.traffic[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@e-2dj6wjlyokdzaho.stats.esomniture[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@pro-market[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@atlas.entrepreneur[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@mediaservices.myspace[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@csi.valueclick[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@9551721[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@iacas.adbureau[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@st[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@nike.112.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@xren_cj[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@toplist[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@serving-sys[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@bellglobemediapublishing.122.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@S002-00-8-1-169441-20846[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@st[3].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ehg-precisionweb.hitbox[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@nielsen.112.2o7[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@stats4.clicktracks[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ads.addesktop[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@ehg-yamahamotors.hitbox[2].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@123stat[1].txt
C:\Documents and Settings\James Lauterbach\Cookies\james lauterbach@spamblockerutility[2].txt
C:\Documents and Settings\Guest\Cookies\guest@2o7[2].txt
C:\Documents and Settings\Guest\Cookies\guest@ad.yieldmanager[1].txt
C:\Documents and Settings\Guest\Cookies\guest@adbrite[1].txt
C:\Documents and Settings\Guest\Cookies\guest@adecn[1].txt
C:\Documents and Settings\Guest\Cookies\guest@adlegend[1].txt
C:\Documents and Settings\Guest\Cookies\guest@adopt.specificclick[2].txt
C:\Documents and Settings\Guest\Cookies\guest@adrevolver[2].txt
C:\Documents and Settings\Guest\Cookies\guest@adrevolver[3].txt
C:\Documents and Settings\Guest\Cookies\guest@ads.adbrite[2].txt
C:\Documents and Settings\Guest\Cookies\guest@ads.addynamix[1].txt
C:\Documents and Settings\Guest\Cookies\guest@ads.pointroll[1].txt
C:\Documents and Settings\Guest\Cookies\guest@advertising[1].txt
C:\Documents and Settings\Guest\Cookies\guest@amznshopbop.122.2o7[1].txt
C:\Documents and Settings\Guest\Cookies\guest@apmebf[2].txt
C:\Documents and Settings\Guest\Cookies\guest@atdmt[1].txt
C:\Documents and Settings\Guest\Cookies\guest@bizrate[1].txt
C:\Documents and Settings\Guest\Cookies\guest@casalemedia[1].txt
C:\Documents and Settings\Guest\Cookies\guest@citi.bridgetrack[2].txt
C:\Documents and Settings\Guest\Cookies\guest@dealtime[1].txt
C:\Documents and Settings\Guest\Cookies\guest@doubleclick[1].txt
C:\Documents and Settings\Guest\Cookies\guest@ehg-myspaceinc.hitbox[2].txt
C:\Documents and Settings\Guest\Cookies\guest@eyewonder[1].txt
C:\Documents and Settings\Guest\Cookies\guest@fastclick[2].txt
C:\Documents and Settings\Guest\Cookies\guest@hitbox[2].txt
C:\Documents and Settings\Guest\Cookies\guest@media.adrevolver[1].txt
C:\Documents and Settings\Guest\Cookies\guest@media.mtvnservices[1].txt
C:\Documents and Settings\Guest\Cookies\guest@media6degrees[1].txt
C:\Documents and Settings\Guest\Cookies\guest@mediaplex[2].txt
C:\Documents and Settings\Guest\Cookies\guest@mediaservices.myspace[1].txt
C:\Documents and Settings\Guest\Cookies\guest@metacafe.122.2o7[1].txt
C:\Documents and Settings\Guest\Cookies\guest@nextag[2].txt
C:\Documents and Settings\Guest\Cookies\guest@overture[2].txt
C:\Documents and Settings\Guest\Cookies\guest@partner2profit[1].txt
C:\Documents and Settings\Guest\Cookies\guest@questionmarket[1].txt
C:\Documents and Settings\Guest\Cookies\guest@realmedia[1].txt
C:\Documents and Settings\Guest\Cookies\guest@server2.bkvtrack[1].txt
C:\Documents and Settings\Guest\Cookies\guest@serving-sys[2].txt
C:\Documents and Settings\Guest\Cookies\guest@shopping.112.2o7[1].txt
C:\Documents and Settings\Guest\Cookies\guest@sixapart.adbureau[2].txt
C:\Documents and Settings\Guest\Cookies\guest@specificclick[2].txt
C:\Documents and Settings\Guest\Cookies\guest@stat.dealtime[2].txt
C:\Documents and Settings\Guest\Cookies\guest@statcounter[1].txt
C:\Documents and Settings\Guest\Cookies\guest@statse.webtrendslive[2].txt
C:\Documents and Settings\Guest\Cookies\guest@trafficmp[1].txt
C:\Documents and Settings\Guest\Cookies\guest@tremor.adbureau[2].txt
C:\Documents and Settings\Guest\Cookies\guest@tribalfusion[1].txt
C:\Documents and Settings\Guest\Cookies\guest@zedo[1].txt

I did as instructed, I can't get everything to fit in one reply posting, so I will reply in several posts. The popups stopped and computer seems to be running just fine:

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 01/08/2008 at 00:14 AM

Application Version : 3.9.1008

Core Rules Database Version : 3376
Trace Rules Database Version: 1370

Scan type : Complete Scan
Total Scan Time : 02:18:13

Memory items scanned : 672
Memory threats detected : 1
Registry items scanned : 6973
Registry threats detected : 27
File items scanned : 128334
File threats detected : 391

Trojan.Smitfraud Variant-Gen/IEDef
C:\WINDOWS\TOPRATES.DLL
C:\WINDOWS\TOPRATES.DLL
HKLM\Software\Classes\CLSID\{038F228B-EED3-4A87-A565-F88FC99EBA91}
HKCR\CLSID\{038F228B-EED3-4A87-A565-F88FC99EBA91}
HKCR\CLSID\{038F228B-EED3-4A87-A565-F88FC99EBA91}
HKCR\CLSID\{038F228B-EED3-4A87-A565-F88FC99EBA91}#AppID
HKCR\CLSID\{038F228B-EED3-4A87-A565-F88FC99EBA91}#LocalizedString
HKCR\CLSID\{038F228B-EED3-4A87-A565-F88FC99EBA91}\Elevation
HKCR\CLSID\{038F228B-EED3-4A87-A565-F88FC99EBA91}\Elevation#Enabled
HKCR\CLSID\{038F228B-EED3-4A87-A565-F88FC99EBA91}\Implemented Categories
HKCR\CLSID\{038F228B-EED3-4A87-A565-F88FC99EBA91}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}
HKCR\CLSID\{038F228B-EED3-4A87-A565-F88FC99EBA91}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}
HKCR\CLSID\{038F228B-EED3-4A87-A565-F88FC99EBA91}\InprocServer32
HKCR\CLSID\{038F228B-EED3-4A87-A565-F88FC99EBA91}\InprocServer32#ThreadingModel
HKCR\CLSID\{038F228B-EED3-4A87-A565-F88FC99EBA91}\ProgID
HKCR\CLSID\{038F228B-EED3-4A87-A565-F88FC99EBA91}\TypeLib
HKCR\CLSID\{038F228B-EED3-4A87-A565-F88FC99EBA91}\Version
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{038F228B-EED3-4A87-A565-F88FC99EBA91}

Neopets Toolbar
HKLM\Software\Classes\CLSID\{CD292324-974F-4224-D074-CACA427AA030}
HKCR\CLSID\{CD292324-974F-4224-D074-CACA427AA030}
HKCR\CLSID\{CD292324-974F-4224-D074-CACA427AA030}
HKCR\CLSID\{CD292324-974F-4224-D074-CACA427AA030}\InprocServer32
HKCR\CLSID\{CD292324-974F-4224-D074-CACA427AA030}\InprocServer32#ThreadingModel
HKCR\CLSID\{CD292324-974F-4224-D074-CACA427AA030}\ProgID
C:\PROGRA~1\NEOPETS\TOOLBAR\TOOLBAR.DLL
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CD292324-974F-4224-D074-CACA427AA030}
HKLM\Software\Microsoft\Internet Explorer\Toolbar#{CD292324-974F-4224-D074-CACA427AA030}
HKCR\Toolbar.Neopets
HKCR\Toolbar.Neopets\Clsid
HKU\S-1-5-21-3498084104-1309430383-1471941673-1008\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser#{CD292324-974F-4224-D074-CACA427AA030}

Please launch HijackThis and place a checkmark next to the following:
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/web_games/popcap/bejeweled2/popcaploader_v6.cab
O23 - Service: Viewpoint Manager Service - Unknown owner - C:\Program Files\Viewpoint\Common\ViewpointService.exe (file missing)


Did you or your ISP set this? If so leave it as is. If you don't know, ask your ISP
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0

Close all windows except Hijackthis and click "Fix Checked".

Close HijackThis and reboot.

Run Disk Cleanup in each user's profile:
Click "Start > Programs > Accessories > System Tools > Disk Cleanup"
Please make sure only the following are checked:
-- Downloaded Program Files
-- Temporary Internet Files
-- Recycle Bin
-- Temporary Files
Click "OK" and Disk Cleanup will delete those files for you.

Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. It is possible that you may be running Java code in your applications that absolutely require a specific version of the JRE to run. Please follow these steps to remove older version Java components and update.

Updating Java:

• Download the latest version of Java Runtime Environment (JRE) 6.
• Scroll down to where it says "Java Runtime Environment (JRE) 6u3 allows end-users to run Java applications".
• Click the "Download" button to the right.
• Check the box that says: "Accept License Agreement".
• The page will refresh.
• Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
• Close any programs you may have running - especially your web browser.
• Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
• Check any item with Java Runtime Environment (JRE or J2SE) in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each of the Java versions.
• 
  
• Reboot your computer once all Java components are removed.
• Then from your desktop double-click on jre-6u3-windows-i586-p.exe to install the newest version.

Official JAVA Installation Instructions if needed.


Following that, please post a fresh Hijackthis log for final review. If all is well, we'll flush System Restore.

I did the last series of instructions including downloading new version of Java. Here is latest HJT log, one thing I noticed is it seemed to impact the connection to my printer, is that something that we will address also? Thanks.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:09:38 PM, on 1/9/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\DRIVERS\PRINTER\540\StatMon.exe
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\issch.exe
C:\Program Files\Norton Password Manager\AcctMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.comcast.net/toolbar2.0/search/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.comcast.net/toolbar2.0/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [DellStatusMonitor] "C:\DRIVERS\PRINTER\540\StatMon.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\issch.exe" -start
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [tgcmd] C:\Program Files\Support.com\bin\tgcmd.exe /server /startmonitor /deaf
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4CC35DAD-40EA-4640-ACC2-A1A3B6FB3E06} (NeoterisSetup Control) - https://remote2.schwab.com/dana-cached/setup/NeoterisSetup.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1117419880640
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - https://remote2.schwab.com/svordp/msrdp.cab,DanaInfo=svowebinterface.schwab.com+
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} (Symantec Download Bridge) - http://a248.e.akamai.net/f/248/5462/2h/www.symantecstore.com/v2.0-img/operations/symbizpr/xcontrol/SymDlBrg.cab
O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/ydropper/ydropper1_6us.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

--
End of file - 14292 bytes

That looks good. You may have to reinstall your printer.

The infection may still be in your System Restore, so we can flush that and give you a clean Restore Point.

After you get your printer working, purge the System Restore:
If everything is running well....
To flush the XP System Restore Points:
(Using XP, you must be logged in as Administrator to do this.)
Go to Start>Run and type msconfig Press enter.
When msconfig opens, click the Launch System Restore Button.
On the next page, click the System Restore Settings Link on the left.
Check the box labeled Turn Off System Restore.

Reboot. Go back in and turn System Restore ON. A new Restore Point will be created.

I suggest keeping Super AntiSpyware updated to use for part of your regular maintenance.

Here is my standard list of simple steps that you can take to reduce the chance of infection in the future.

You may have already taken some of these steps, and depending on your current security, you may not need to implement all of these:
1. Visit Windows Update:
Make sure that you have all the Critical Updates recommended for your operating system and IE. The first defense against infection is a properly patched OS.
Windows Update: http://v4.windowsupdate.microsoft.com/en/default.asp

2. Consider installing the following free programs:
a. SpywareBlaster: (Not recommended for Vista)
http://www.javacoolsoftware.com/spywareblaster.html
Tutorial here: http://www.bleepingcomputer.com/forums/tutorial49.html
b. SpywareGuard:
http://www.javacoolsoftware.com/spywareguard.html
Tutorial here: http://www.bleepingcomputer.com/tutorials/tutorial50.html
Periodically check for updates in both programs.

3. Please use a firewall and realtime anti-virus. Keep the anti-virus software and firewall software up to date.
Note: Zone Alarm Firewall (by Checkpoint) has a free version http://www.zonelabs.com/store/content/company/products/trial_zaFamily/trial_zaFamily.jsp?lid=home_freedownloads

4. You might consider installing Mozilla / Firefox.
http://www.mozilla.org/

5. Do not use file sharing. Even the safest P2P file sharing programs that do not contain bundled spyware, still expose you to risks because of the very nature of the P2P file sharing process. By default, most P2P file sharing programs are configured to automatically launch at startup. They are also configured to allow other P2P users on the same network open access to a shared directory on your computer. The reason for this is simple. File sharing relies on its members giving and gaining unfettered access to computers across the P2P network. However, this practice can make you vulnerable to data and identity theft. Even if you change those risky default settings to a safer configuration, the act of downloading files from an anonymous source greatly increases your exposure to infection. That is because the files you are downloading may actually contain a disguised threat. Many very malicious worms and trojans, such as the Storm Worm, target and spread across P2P files sharing networks because of their known
vulnerabilities.

6. Before using or purchasing any Spyware/Malware protection/removal program, always check the following Rogue/Suspect Spyware Lists.
http://www.spywarewarrior.com/rogue_anti-spyware.htm
http://www.malwarebytes.org/database.php

7. If you have not already done so, you might want to install CCleaner and run it in each user's profile: http://www.ccleaner.com/
** UNcheck the option to install the Yahoo toolbar that is checked by default for the Standard version, or download the toolbar-free versions (Slim or Basic) when given the option for those.

8. If you use Adobe Reader it may need to be updated to be sure that you have a more secure version. If you are using a version prior to v. 6.05, you should update to 6.05, preferably version 8.1.0 or higher.
It would be best to remove prior versions before updating to a new version.
If you need additional assistance, the Adobe forums are here: http://www.adobe.com/support/forums/main.html

9. Make sure you are using the most updated version of Java.
The current version is Java Runtime Environment (JRE) 6u3
You can go here to download the latest version of Java Runtime Environment (JRE) 6.
Scroll down to where it says " Java Runtime Environment (JRE) 6u3 allows end-users to run Java applications".

Click the link to download the Windows (Offline Installation) package: Save it, do not run it. When the download is complete, close the browser.

Remove all prior versions using Add/Remove Programs, and delete the Java folder in Program Files.
Reboot your computer once all Java components are removed.
Then from your desktop double-click on jre-6u3-windows-i586-p.exe to install the newest version.
Official JAVA Installation Instructions if needed.
Reboot.

10. Practice Safe Surfing with with TrendProtect by Trendmicro.
TrendProtect is a browser plugin that assigns a safety rating to domains listed in your search engine. TrendProtect also adds a new button to your browser's toolbar area. The icon and color of the button changes to indicate whether the page currently open is safe, unsafe, trusted, or unrated, or whether it contains unwanted content.

The following color codes are used by TrendProtect to indicate the safety of each site.

Red for Warning
Yellow for Use Caution
Green for Safe
Grey for Unknown

11. Here are some helpful articles:
"So how did I get infected in the first place?"
by TonyKlein
http://computercops.biz/postlite7736-.html

"I'm not pulling your leg, honest"
by Sandi Hardmeier
http://www.microsoft.com/windows/IE/community/columns/pulling.mspx

12. This is an excellent resource for users of all levels. General computer maintenance as well as internet security is covered.
Rootkits for Dummies
(Paperback)
by Larry Stevenson (Author), Nancy Altholz (Author)

Let us know if we have not resolved your problem. Otherwise, you are good to go.
Happy and Safe Surfing!