So far so good. I’d still like to see the logs from the other two scans, combofix and DecKard’s, as SAS found a downloader as well as other things.
Open HJT, run a system scan only and place a check mark next to these lines
R3 - URLSearchHook: (no name) - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - (no file)
O21 - SSODL: gormet - {56ADD755-12F9-4E62-824D-BA46E9413B06} - C:\WINDOWS\gormet.dll (file missing)
O24 - Desktop Component 0: Privacy Protection - file:///C:\WINDOWS\privacy_danger\index.htm
You should update your java, as the older versions are vulnerable to infections.
Open an Internet Explorer (only) window and go to http://www.java.com/en/download/manual.jsp > In the middle of the page, click on the Download button to the right of Java Runtime Environment (JRE) 6u3 > If Information Bar pop-ups up, right-click on it and say it’s OK to display the blocked content.
You do not have to install the Java Web Start ActiveX Control
Accept the license agreement > Click on Windows (XP,Vista, .etc) Offline Installation, Multi-language and Save the file jre-6u3-windows-i586-p.exe to your desktop; do not Run it.
When the download is complete, close all browser windows and double-click on the saved file to install the update.
Delete the downloaded installation file after completing the above procedure and reboot if not prompted to do so.
Open Control Panel > Add/Remove Programs:
Uninstall anything that says Sun Java, Java JRE, or similar except Java TM 6 Update 3 which you just installed.
Close Add/Remove Programs.
In Windows Explorer, navigate to C:\Program Files[b]Java[/b] <=this folder, if found. Delete any subfolders except the subfolder jre1.6.0_03 which was just created by the installation above.
Do NOT delete C:\Program Files\JavaVM <=this folder, if found!
I also didn’t see a third party firewall. Windows firewall doesn’t provide outbout monitoring. You may want to check this thread for a good free firewall.
http://forum.avast.com/index.php?topic=30808.0
