Well, nevermind.  I was able to fix the problem myself.  After running a program called SDFix.exe, which restored all the registry files (obviously a registry file was corrupted). 


SDFix: Version 1.142

Run by Jim Shellhouse on Sat 02/16/2008 at 03:43 PM

Microsoft Windows XP [Version 5.1.2600]

Running From: C:\SDFix\SDFix

Safe Mode:
Checking Services:


Restoring Windows Registry Values
Restoring Windows Default Hosts File
Resetting SecurityProviders Value
Resetting AppInit_DLLs value


Rebooting...


Normal Mode:
Checking Files:

Trojan Files Found:

C:\Documents and Settings\Jim Shellhouse\Application Data\Ultimate Cleaner\settings.dat - Deleted
C:\Documents and Settings\Jim Shellhouse\Application Data\ultra\uninstall.bat - Deleted
C:\.protected - Deleted
C:\Documents and Settings\Jim Shellhouse\Start Menu\Programs\Startup\.protected - Deleted
C:\Documents and Settings\Linda Shellhouse\Start Menu\Programs\Startup\.protected - Deleted
C:\WINDOWS\.protected - Deleted
C:\WINDOWS\system32\drivers\etc\.protected - Deleted
C:\Documents and Settings\Jim Shellhouse\Application Data\Install.dat  - Deleted
C:\WINDOWS\inf\ultra.inf  - Deleted
C:\WINDOWS\system32\wowfx.dll  - Deleted



Folder C:\Documents and Settings\Jim Shellhouse\Application Data\Ultimate Cleaner - Removed
Folder C:\Documents and Settings\Jim Shellhouse\Application Data\ultra - Removed
Folder C:\Program Files\Helper - Removed


Removing Temp Files...

ADS Check:
 


                                 Final Check:

catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-16 15:50:43
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:b7a582bd
"s2"=dword:5fc717c8
"h0"=dword:00000002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000001
"ujdew"=hex:f5,d9,32,e7,c2,81,ae,2f,8d,c2,5c,f3,bc,81,a8,fc,f2,64,ed,73,24,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:eb,3c,fa,67,ff,51,09,8f,54,76,71,c7,4d,fb,f8,24,ad,97,4c,95,85,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,07,b4,c1,d3,8c,c5,e3,7b,cb,c7,be,7f,99,f0,f7,c0,d9,..
"khjeh"=hex:3f,0a,21,9e,33,2e,5c,59,5b,39,f1,c2,1e,c1,f4,5b,c1,fb,da,a4,18,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:aa,5c,09,16,40,7c,89,50,7f,b3,b8,b4,6e,47,1d,86,67,a3,a6,3b,88,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000001
"ujdew"=hex:f5,d9,32,e7,c2,81,ae,2f,8d,c2,5c,f3,bc,81,a8,fc,f2,64,ed,73,24,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:eb,3c,fa,67,ff,51,09,8f,54,76,71,c7,4d,fb,f8,24,ad,97,4c,95,85,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,07,b4,c1,d3,8c,c5,e3,7b,cb,c7,be,7f,99,f0,f7,c0,d9,..
"khjeh"=hex:3f,0a,21,9e,33,2e,5c,59,5b,39,f1,c2,1e,c1,f4,5b,c1,fb,da,a4,18,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:aa,5c,09,16,40,7c,89,50,7f,b3,b8,b4,6e,47,1d,86,67,a3,a6,3b,88,..

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe:*:Enabled:AOL"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe:*:Enabled:AOL"
"C:\\Program Files\\America Online 9.0\\waol.exe"="C:\\Program Files\\America Online 9.0\\waol.exe:*:Enabled:AOL"
"C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"="C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe:*:Enabled:AOL Loader"
"C:\\Program Files\\Common Files\\AOL\\1147461705\\ee\\aolsoftware.exe"="C:\\Program Files\\Common Files\\AOL\\1147461705\\ee\\aolsoftware.exe:*:Enabled:AOL Services"
"C:\\Program Files\\Common Files\\AOL\\1147461705\\ee\\aim6.exe"="C:\\Program Files\\Common Files\\AOL\\1147461705\\ee\\aim6.exe:*:Enabled:AIM"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Common Files\\AOL\\1157666823\\ee\\aolsoftware.exe"="C:\\Program Files\\Common Files\\AOL\\1157666823\\ee\\aolsoftware.exe:*:Enabled:AOL Services"
"C:\\Program Files\\Common Files\\AOL\\1157666823\\ee\\aim6.exe"="C:\\Program Files\\Common Files\\AOL\\1157666823\\ee\\aim6.exe:*:Enabled:AIM"
"C:\\Program Files\\AIM\\aim.exe"="C:\\Program Files\\AIM\\aim.exe:*:Enabled:AOL Instant Messenger"
"C:\\Program Files\\FlashGet\\flashget.exe"="C:\\Program Files\\FlashGet\\flashget.exe:*:Enabled:Flashget"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\uTorrent\\utorrent.exe"="C:\\Program Files\\uTorrent\\utorrent.exe:*:Enabled:æTorrent"
"C:\\Program Files\\TurboTax\\Deluxe 2006\\32bit\\ttax.exe"="C:\\Program Files\\TurboTax\\Deluxe 2006\\32bit\\ttax.exe:LocalSubNet:Enabled:TurboTax"
"C:\\Program Files\\TurboTax\\Deluxe 2006\\32bit\\updatemgr.exe"="C:\\Program Files\\TurboTax\\Deluxe 2006\\32bit\\updatemgr.exe:LocalSubNet:Enabled:TurboTax Update Manager"
"C:\\Program Files\\Ares\\Ares.exe"="C:\\Program Files\\Ares\\Ares.exe:*:Enabled:Ares p2p for windows"
"C:\\Program Files\\AIM6\\aim6.exe"="C:\\Program Files\\AIM6\\aim6.exe:*:Enabled:AIM"
"C:\\Program Files\\BitLord\\BitLord.exe"="C:\\Program Files\\BitLord\\BitLord.exe:*:Enabled:BitLord"
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox"
"C:\\Program Files\\Activision\\SHReK the THiRD Demo\\SHReK the THiRD.exe"="C:\\Program Files\\Activision\\SHReK the THiRD Demo\\SHReK the THiRD.exe:*:Enabled:SHReK the THiRD(TM) Demo"
"C:\\Program Files\\Windows Media Player\\wmplayer.exe"="C:\\Program Files\\Windows Media Player\\wmplayer.exe:*:Enabled:Windows Media Player"
"C:\\Program Files\\Sony\\Station\\LaunchPad\\LaunchPad.exe"="C:\\Program Files\\Sony\\Station\\LaunchPad\\LaunchPad.exe:*:Enabled:LaunchPad"
"C:\\Program Files\\Sony\\Station\\LaunchPad\\_aunchPad.exe"="C:\\Program Files\\Sony\\Station\\LaunchPad\\_aunchPad.exe:*:Enabled:_aunchPad"
"C:\\Program Files\\MySpace\\IM\\MySpaceIM.exe"="C:\\Program Files\\MySpace\\IM\\MySpaceIM.exe:*:Enabled:MySpaceIM"
"C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\printer.exe"="C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\printer.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\WINDOWS\\system32\\printer.exe"="C:\\WINDOWS\\system32\\printer.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\WINDOWS\\system32\\spoolvs.exe"="C:\\WINDOWS\\system32\\spoolvs.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\WINDOWS\\shell.exe"="C:\\WINDOWS\\shell.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Jim Shellhouse\\Start Menu\\Programs\\Startup\\findfast.exe"="C:\\Documents and Settings\\Jim Shellhouse\\Start Menu\\Programs\\Startup\\findfast.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\autorun.exe"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\autorun.exe:*:Enabled:@xpsp2res.dll,-22019"
"%windir%\\system32\\winav.exe"="%windir%\\system32\\winav.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\trant.exe"="C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\trant.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Dustin.JIM.000\\Start Menu\\Programs\\Startup\\findfast.exe"="C:\\Documents and Settings\\Dustin.JIM.000\\Start Menu\\Programs\\Startup\\findfast.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Linda Shellhouse\\Start Menu\\Programs\\Startup\\findfast.exe"="C:\\Documents and Settings\\Linda Shellhouse\\Start Menu\\Programs\\Startup\\findfast.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Linda Shellhouse\\Application Data\\trant.exe"="C:\\Documents and Settings\\Linda Shellhouse\\Application Data\\trant.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Linda Shellhouse\\Application Data\\mcrupdate.exe"="C:\\Documents and Settings\\Linda Shellhouse\\Application Data\\mcrupdate.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\spyguard.exe"="C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\spyguard.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\pcpriv.exe"="C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\pcpriv.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\mcrupdate.exe"="C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\mcrupdate.exe:*:Enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe:*:Enabled:AOL"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe:*:Enabled:AOL"
"C:\\Program Files\\America Online 9.0\\waol.exe"="C:\\Program Files\\America Online 9.0\\waol.exe:*:Enabled:AOL"
"C:\\Program Files\\AIM\\aim.exe"="C:\\Program Files\\AIM\\aim.exe:*:Enabled:AOL Instant Messenger"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\printer.exe"="C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\printer.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\WINDOWS\\system32\\printer.exe"="C:\\WINDOWS\\system32\\printer.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\WINDOWS\\system32\\spoolvs.exe"="C:\\WINDOWS\\system32\\spoolvs.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\WINDOWS\\shell.exe"="C:\\WINDOWS\\shell.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Jim Shellhouse\\Start Menu\\Programs\\Startup\\findfast.exe"="C:\\Documents and Settings\\Jim Shellhouse\\Start Menu\\Programs\\Startup\\findfast.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\autorun.exe"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\autorun.exe:*:Enabled:@xpsp2res.dll,-22019"
"%windir%\\system32\\winav.exe"="%windir%\\system32\\winav.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\trant.exe"="C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\trant.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Dustin.JIM.000\\Start Menu\\Programs\\Startup\\findfast.exe"="C:\\Documents and Settings\\Dustin.JIM.000\\Start Menu\\Programs\\Startup\\findfast.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Linda Shellhouse\\Start Menu\\Programs\\Startup\\findfast.exe"="C:\\Documents and Settings\\Linda Shellhouse\\Start Menu\\Programs\\Startup\\findfast.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Linda Shellhouse\\Application Data\\trant.exe"="C:\\Documents and Settings\\Linda Shellhouse\\Application Data\\trant.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Linda Shellhouse\\Application Data\\mcrupdate.exe"="C:\\Documents and Settings\\Linda Shellhouse\\Application Data\\mcrupdate.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\spyguard.exe"="C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\spyguard.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\pcpriv.exe"="C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\pcpriv.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\mcrupdate.exe"="C:\\Documents and Settings\\Jim Shellhouse\\Application Data\\mcrupdate.exe:*:Enabled:@xpsp2res.dll,-22019"

Remaining Files:
---------------

File Backups: - C:\SDFix\SDFix\backups\backups.zip

Files with Hidden Attributes:

Sun  4 Feb 2007           291 A.SH. --- "C:\vdx.sys"
Tue 11 Sep 2007             4 ..SHR --- "C:\WINOS.SYS"
Fri 12 May 2006            56 A.SHR --- "C:\i386\A1A32BE9C7.sys"
Fri 12 May 2006         2,516 A.SH. --- "C:\i386\KGyGaAvL.sys"
Fri 12 May 2006             8 ..SHR --- "C:\WINDOWS\system32\2BC0129815.sys"
Sun 16 Jul 2006            88 ..SHR --- "C:\WINDOWS\system32\664F8D64DA.sys"
Mon 15 May 2006            56 ..SHR --- "C:\WINDOWS\system32\A1A32BE9C7.sys"
Fri 15 Feb 2008            56 ..SHR --- "C:\WINDOWS\system32\DA648D4F66.sys"
Fri 15 Feb 2008         5,852 A.SH. --- "C:\WINDOWS\system32\KGyGaAvL.sys"
Fri  7 Oct 2005     1,847,296 ...HR --- "C:\Program Files\Microsoft Works Suite 2006\Setup\LAUNCHER.EXE"
Fri  7 Oct 2005        62,464 ...HR --- "C:\Program Files\Microsoft Works Suite 2006\Setup\MNYINSTA.DLL"
Fri  7 Oct 2005        95,232 ...HR --- "C:\Program Files\Microsoft Works Suite 2006\Setup\RMVSUITE.EXE"
Fri  7 Oct 2005        36,864 ...HR --- "C:\Program Files\Microsoft Works Suite 2006\Setup\SETUPLNG.DLL"
Fri  7 Oct 2005        20,480 ...HR --- "C:\Program Files\Microsoft Works Suite 2006\Setup\UNREGWTR.EXE"
Mon  7 May 2007             0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Fri 11 May 2007             8 A..H. --- "C:\Documents and Settings\Dustin.JIM.000\Application Data\GTek\GTUpdate\AUpdate\Channels\ch_u1\lock.tmp"
Fri 11 May 2007             8 A..H. --- "C:\Documents and Settings\Dustin.JIM.000\Application Data\GTek\GTUpdate\AUpdate\Channels\ch_u2\lock.tmp"
Fri 11 May 2007             8 A..H. --- "C:\Documents and Settings\Dustin.JIM.000\Application Data\GTek\GTUpdate\AUpdate\Channels\ch_u3\lock.tmp"
Fri 11 May 2007             8 A..H. --- "C:\Documents and Settings\Dustin.JIM.000\Application Data\GTek\GTUpdate\AUpdate\Channels\ch_u4\lock.tmp"
Sat 21 Apr 2007             8 A..H. --- "C:\Documents and Settings\Linda Shellhouse\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\lock.tmp"
Sat 21 Apr 2007             8 A..H. --- "C:\Documents and Settings\Linda Shellhouse\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\lock.tmp"
Tue 24 Apr 2007             8 A..H. --- "C:\Documents and Settings\Linda Shellhouse\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\lock.tmp"
Sun 29 Apr 2007             8 A..H. --- "C:\Documents and Settings\Linda Shellhouse\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\lock.tmp"

Finished!

Next time please post your log on the appropriate board.

 

It appears that you have more work to do. SDFix is to be run only under the supervision of someone trained in its use. Not only has it left components on your computer, but your system is not clean and is still vulnerable. Please follow mombodog's advice above to post your log. Because we find the nature of P2P programs counter productive to restoring your PC to a healthy state, we ask that you remove P2P file sharing programs prior to posting your log. Thanks. :)