28

combofix log:

ComboFix 08-01-31.5 - Compaq_Owner 2008-02-01 13:07:59.4 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.109 [GMT -5:00]
Running from: C:\Documents and Settings\Compaq_Owner\Desktop\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

D:\Autorun.inf . . . . failed to delete

.
((((((((((((((((((((((((( Files Created from 2008-01-01 to 2008-02-01 )))))))))))))))))))))))))))))))
.

2008-02-01 13:03 . 2007-12-14 01:59 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-02-01 13:02 . 2008-02-01 13:03 d-------- C:\Program Files\Java
2008-02-01 13:02 . 2008-02-01 13:02 d-------- C:\Program Files\Common Files\Java
2008-01-30 18:41 . 2007-12-04 09:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2008-01-30 18:41 . 2007-12-04 09:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2008-01-30 18:41 . 2007-12-04 09:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2008-01-30 18:40 . 2007-12-04 07:54 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr
2008-01-30 18:40 . 2007-12-04 09:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2008-01-30 18:40 . 2007-12-04 09:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2008-01-30 18:39 . 2008-01-30 18:39 d-------- C:\Program Files\Alwil Software
2008-01-30 18:39 . 2007-12-04 08:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe
2008-01-30 18:39 . 2004-01-09 04:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx
2008-01-30 18:11 . 2008-01-30 18:11 18,884,808 --a------ C:\setupeng.exe
2008-01-29 18:05 . 2008-01-29 18:05 407,680 --a------ C:\aswclnr.exe
2008-01-08 23:20 . 2008-01-13 13:13 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-01-08 23:20 . 2008-01-08 23:20 1,409 --a------ C:\WINDOWS\QTFont.for

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-01 18:11 --------- d-----w C:\Program Files\Plaxo
2008-01-31 04:38 --------- d-----w C:\Documents and Settings\Compaq_Owner\Application Data\LimeWire
2008-01-31 04:28 --------- d-----w C:\Program Files\EMBARQ Online Security
2008-01-31 03:26 --------- d-----w C:\Program Files\Palm
2008-01-31 03:22 --------- d-----w C:\Documents and Settings\All Users\Application Data\F-Secure
2008-01-28 23:36 --------- d-----w C:\Program Files\PC-Doctor for Windows
2007-12-24 21:08 --------- d-----w C:\Documents and Settings\Compaq_Owner\Application Data\Viewpoint
2007-12-24 21:07 --------- d-----w C:\Documents and Settings\All Users\Application Data\Viewpoint
2005-12-29 02:05 497 —ha-w C:\Documents and Settings\Compaq_Owner\hpothb07.dat
2005-09-09 01:32 164 —ha-w C:\Documents and Settings\All Users\hpothb07.dat
2005-08-31 02:21 185 —ha-w C:\Documents and Settings\All Users\Application Data\hpothb07.dat
2005-08-31 02:18 497 —ha-w C:\Documents and Settings\Default User\hpothb07.dat
2005-08-31 02:18 497 —ha-w C:\Documents and Settings\Administrator\hpothb07.dat
2005-08-31 02:18 0 —ha-w C:\Documents and Settings\NetworkService\hpothb07.dat
2005-08-31 02:18 0 —ha-w C:\Documents and Settings\LocalService\hpothb07.dat
2006-06-17 15:00 0 --sha-w C:\WINDOWS\SMINST\HPCD.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
Note empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
“ctfmon.exe”=“C:\WINDOWS\system32\ctfmon.exe” [2004-08-03 16:00 15360]
“MsnMsgr”=“C:\Program Files\MSN Messenger\MsnMsgr.exe”
“PlaxoUpdate”=“C:\Program Files\Plaxo\2.13.1.3\PlaxoHelper.exe” [2007-12-11 17:21 227914]
“updateMgr”=“C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe” [2006-03-30 15:45 313472]
“swg”=“C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe” [2007-11-12 14:53 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
“hpsysdrv”=“c:\windows\system\hpsysdrv.exe” [1998-05-07 18:04 52736]
“IgfxTray”=“C:\WINDOWS\system32\igfxtray.exe” [2004-08-21 00:55 155648]
“UpdateManager”=“C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe” [2003-08-19 10:01 110592]
“TkBellExe”=“C:\Program Files\Common Files\Real\Update_OB\realsched.exe” [2004-10-22 00:31 180269]
“iTunesHelper”=“C:\Program Files\iTunes\iTunesHelper.exe” [2004-06-04 21:38 286720]
“Recguard”=“C:\WINDOWS\SMINST\RECGUARD.EXE” [2004-04-14 22:43 233472]
“VTTimer”=“VTTimer.exe”
“SiSPower”=“SiSPower.dll” [2004-09-24 11:49 49152 C:\WINDOWS\system32\SiSPower.dll]
“AGRSMMSG”=“AGRSMMSG.exe” [2005-03-04 11:01 88209 C:\WINDOWS\AGRSMMSG.exe]
“PS2”=“C:\WINDOWS\system32\ps2.exe”
“LSBWatcher”=“c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe” [2004-10-14 23:54 253952]
“HPDJ Taskbar Utility”=“C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe” [2003-12-04 07:44 176128]
“HPHUPD05”=“C:\Program Files\Hewlett-Packard{D946675D-1D6C-4dc8-9E0D-B4B8EAA30EAA}\hphupd05.exe” [2003-11-12 08:23 49152]
“HP Component Manager”=“C:\Program Files\HP\hpcoretech\hpcmpmgr.exe” [2003-12-22 08:38 241664]
“HPHmon05”=“C:\WINDOWS\system32\hphmon05.exe” [2004-02-02 03:41 495616]
“PrinTray”=“C:\WINDOWS\System32\spool\DRIVERS\W32X86\2\printray.exe” [2000-05-09 10:38 36864]
“REGSHAVE”=“C:\Program Files\REGSHAVE\REGSHAVE.exe” [2002-02-04 21:32 53248]
“AlcxMonitor”=“ALCXMNTR.EXE” [2004-09-07 22:47 57344 C:\WINDOWS\ALCXMNTR.EXE]
“QuickTime Task”=“C:\Program Files\QuickTime\qttask.exe” [2004-10-22 01:01 98304]
“ISUSPM Startup”=“C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe” [2004-04-17 21:41 196608]
“MSKDetectorExe”=“C:\Program Files\McAfee\SpamKiller\MSKDetct.exe” [2004-08-03 17:18 1083392]
“avast!”=“C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe” [2007-12-04 08:00 79224]
“SunJavaUpdateSched”=“C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe” [2007-12-14 03:42 144784]

C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Startup
Palm Registration.lnk - C:\Program Files\Palm\register.exe [2008-01-30 22:26:10 2494464]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 21:05:26 29696]

S4 dueavlel;dueavlel;C:\WINDOWS\system32\drivers\ikuracjg.dat