PCTech Forums

hello,
my computer has been running abnormally as of one week ago, and I'm not sure whether it's just me or something wrong. Could you please inspect my log? thanks a lot!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:19:04 PM, on 13/01/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Program Files\McAfee\MPS\mpsevh.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe
C:\Program Files\Dell Photo AIO Printer 966\memcard.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\McAfee\MSK\mskagent.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineTrayIcon.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Calvin\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sympatico.msn.ca/?lang=en-CA
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Dell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [ECenter] c:\dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Dell PC Fax\fm3032.exe" /s
O4 - HKLM\..\Run: [dlcqmon.exe] "C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe"
O4 - HKLM\..\Run: [MemoryCardManager] "C:\Program Files\Dell Photo AIO Printer 966\memcard.exe"
O4 - HKLM\..\Run: [DLCQCATS] rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\DLCQtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [Dell DataSafe Scheduler] "C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - https://support.dell.com/systemprofiler/SysProExe.CAB
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/So ... b56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-CA/a-U ... E_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: dlcq_device - - C:\Windows\system32\dlcqcoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe

--
End of file - 10590 bytes

cc481613,

Your log is clean.

What exactly is your system doing that make you think you have a problem?

its just that my computer is unable to properly shut down sometimes, and normal applications are just running slower than normal...

cc481613

Please download to your desktop.

Double click combofix.exe and follow the prompts.

When it's done running it will produce a log for you. Please post that log in your next reply.

Important Note - Do not mouseclick combofix's window while it's running, that may cause it to stall.

ComboFix 08-01-16.4 - Calvin 2008-01-15 22:37:15.1 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1033.18.2052 [GMT -8:00]
Running from: C:\Users\Calvin\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((( Files Created from 2007-12-16 to 2008-01-16 )))))))))))))))))))))))))))))))
.

2008-01-15 22:34 . 2000-08-31 08:00 51,200 --a------ C:\Windows\NirCmd.exe
2008-01-12 23:38 . 2008-01-12 23:38 <DIR> d-------- C:\Fraps
2008-01-08 21:52 . 2008-01-08 22:18 <DIR> d-------- C:\Users\All Users\Spybot - Search & Destroy
2008-01-08 17:58 . 2008-01-08 17:58 802,816 --a------ C:\Windows\System32\drivers\tcpip.sys
2008-01-08 17:58 . 2008-01-08 17:58 216,760 --a------ C:\Windows\System32\drivers\netio.sys
2008-01-08 17:58 . 2008-01-08 17:58 167,424 --a------ C:\Windows\System32\tcpipcfg.dll
2008-01-08 17:58 . 2008-01-08 17:58 24,064 --a------ C:\Windows\System32\netcfg.exe
2008-01-08 17:58 . 2008-01-08 17:58 22,016 --a------ C:\Windows\System32\netiougc.exe
2008-01-08 17:58 . 2008-01-08 17:58 118 --a------ C:\Windows\System32\MRT.INI
2008-01-08 17:56 . 2008-01-08 17:56 4,247,552 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
2008-01-08 17:56 . 2008-01-08 17:56 1,686,016 --a------ C:\Windows\System32\gameux.dll
2008-01-08 17:56 . 2008-01-08 17:56 1,060,920 --a------ C:\Windows\System32\drivers\ntfs.sys
2008-01-08 17:56 . 2008-01-08 17:56 211,000 --a------ C:\Windows\System32\drivers\volsnap.sys
2008-01-08 17:56 . 2008-01-08 17:56 154,624 --a------ C:\Windows\System32\drivers\nwifi.sys
2008-01-08 17:56 . 2008-01-08 17:56 110,136 --a------ C:\Windows\System32\drivers\ataport.sys
2008-01-08 17:56 . 2008-01-08 17:56 45,112 --a------ C:\Windows\System32\drivers\pciidex.sys
2008-01-08 17:56 . 2008-01-08 17:56 21,560 --a------ C:\Windows\System32\drivers\atapi.sys
2008-01-08 17:56 . 2008-01-08 17:56 15,928 --a------ C:\Windows\System32\drivers\pciide.sys
2008-01-08 17:56 . 2008-01-08 17:56 11,776 --a------ C:\Windows\System32\sbunattend.exe
2008-01-07 11:14 . 2006-03-03 11:07 143,360 --a------ C:\Windows\System32\dunzip32.dll
2008-01-07 11:13 . 2008-01-07 11:13 <DIR> d-------- C:\Program Files\McAfee.com
2008-01-07 11:13 . 2008-01-07 11:14 <DIR> d-------- C:\Program Files\Common Files\McAfee
2008-01-07 11:13 . 2006-12-22 16:02 170,408 --a------ C:\Windows\System32\drivers\mfehidk.sys
2008-01-07 11:13 . 2007-03-02 14:17 120,360 --a------ C:\Windows\System32\drivers\Mpfp.sys
2008-01-07 11:13 . 2006-12-22 16:02 71,496 --a------ C:\Windows\System32\drivers\mfeavfk.sys
2008-01-07 11:13 . 2006-12-22 16:02 37,480 --a------ C:\Windows\System32\drivers\mfesmfk.sys
2008-01-07 11:13 . 2006-12-22 16:02 34,184 --a------ C:\Windows\System32\drivers\mfebopk.sys
2008-01-07 11:13 . 2006-12-22 16:02 32,008 --a------ C:\Windows\System32\drivers\mferkdk.sys
2008-01-07 11:12 . 2008-01-15 16:29 <DIR> d-------- C:\Program Files\McAfee
2008-01-07 05:24 . 2008-01-07 05:24 <DIR> d--hs---- C:\Users\Calvin\'
2008-01-07 05:24 . 2008-01-07 19:04 147,456 --a------ C:\Users\Calvin\vbzip10.dll
2008-01-07 02:53 . 2008-01-15 00:09 <DIR> d-a------ C:\Users\All Users\TEMP
2008-01-05 17:27 . 2008-01-05 17:27 <DIR> d-------- C:\Windows\Profiles\All Users\Application Data\SupportSoft
2008-01-05 17:27 . 2008-01-05 17:27 <DIR> d-------- C:\Windows\Profiles
2008-01-05 16:31 . 2008-01-05 18:30 10,740 --a------ C:\Windows\System32\drivers\SYMEVENT.CAT
2008-01-05 16:31 . 2008-01-05 18:30 805 --a------ C:\Windows\System32\drivers\SYMEVENT.INF
2008-01-05 16:29 . 2008-01-07 06:24 <DIR> d-------- C:\Users\All Users\Symantec
2008-01-05 16:29 . 2008-01-07 06:26 <DIR> d-------- C:\Program Files\Common Files\Symantec Shared
2007-12-25 15:24 . 2007-12-25 15:24 78 --a------ C:\Windows\system\WIN32S.INI
2007-12-25 15:23 . 1994-08-24 00:00 188,960 --a------ C:\Windows\system\WINGDE.DLL
2007-12-25 15:23 . 1994-09-21 00:00 92,208 --a------ C:\Windows\system\WING.DLL
2007-12-25 15:23 . 1994-09-21 00:00 12,800 --a------ C:\Windows\system\WING32.DLL
2007-12-25 15:23 . 1994-09-21 00:00 6,736 --a------ C:\Windows\system\WINGDIB.DRV
2007-12-25 15:23 . 1994-09-21 00:00 5,024 --a------ C:\Windows\system\WINGPAL.WND
2007-12-25 15:23 . 1994-06-27 00:00 1,966 --a------ C:\Windows\system\DVA.386
2007-12-25 12:12 . 2007-12-25 12:12 <DIR> d-------- C:\Program Files\Dell DataSafe Online
2007-12-23 10:04 . 2007-12-23 10:05 <DIR> d-------- C:\Program Files\QuickTime
2007-12-20 14:15 . 2007-12-20 14:15 <DIR> d-------- C:\Nexon
2007-12-20 12:34 . 2007-12-20 12:34 <DIR> d-------- C:\Users\All Users\NexonUS
2007-12-19 22:42 . 2007-12-20 08:12 <DIR> d-------- C:\Users\All Users\NVIDIA

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-09 08:08 --------- d---a-w C:\Users\Calvin\AppData\Roaming\U3
2008-01-09 03:04 --------- d-----w C:\Program Files\Windows Sidebar
2008-01-09 03:04 --------- d-----w C:\Program Files\Windows Mail
2008-01-09 01:56 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-01-09 01:56 449,024 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-01-09 01:56 2,143,744 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-01-09 01:56 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-01-05 18:17 --------- d-----w C:\Program Files\Java
2007-12-13 06:29 --------- d---a-w C:\Users\Calvin\AppData\Roaming\Apple Computer
2007-12-12 14:58 9,728 ----a-w C:\Windows\System32\LAPRXY.DLL
2007-12-12 14:58 223,232 ----a-w C:\Windows\System32\WMASF.DLL
2007-12-12 14:58 1,327,104 ----a-w C:\Windows\System32\quartz.dll
2007-12-12 14:57 824,832 ----a-w C:\Windows\System32\wininet.dll
2007-12-12 14:57 56,320 ----a-w C:\Windows\System32\iesetup.dll
2007-12-12 14:57 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2007-12-12 14:57 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2007-12-12 14:56 84,992 ----a-w C:\Windows\system32\drivers\srvnet.sys
2007-12-12 14:56 58,368 ----a-w C:\Windows\system32\drivers\mrxsmb20.sys
2007-12-12 14:56 130,048 ----a-w C:\Windows\system32\drivers\srv2.sys
2007-12-12 14:56 101,888 ----a-w C:\Windows\system32\drivers\mrxsmb.sys
2007-12-12 14:55 3,504,824 ----a-w C:\Windows\System32\ntkrnlpa.exe
2007-12-12 14:55 3,470,520 ----a-w C:\Windows\System32\ntoskrnl.exe
2007-12-10 01:22 --------- d-----w C:\Program Files\Dell Photo AIO Printer 966
2007-12-10 01:22 --------- d-----w C:\Program Files\Dell PC Fax
2007-12-09 20:41 --------- d-----w C:\Program Files\AC3Filter
2007-12-07 04:18 --------- d---a-w C:\Users\Calvin\AppData\Roaming\Thunderbird
2007-12-03 05:00 --------- d-----w C:\Program Files\Common Files\InstallShield
2007-12-03 04:59 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-02 17:31 --------- d-----w C:\Users\Calvin\AppData\Roaming\DataSafeOnline
2007-11-27 05:57 --------- d---a-w C:\Users\Calvin\AppData\Roaming\WeatherDPA
2007-11-25 16:58 --------- d-----w C:\Users\Calvin\AppData\Roaming\Roxio
2007-11-24 16:35 --------- d-----w C:\Program Files\Xvid
2007-11-21 04:49 --------- d-----w C:\Program Files\SoundSpectrum
2007-11-19 03:45 --------- d---a-w C:\Users\Calvin\AppData\Roaming\SoundSpectrum
2007-11-17 19:53 1,244,672 ----a-w C:\Windows\System32\mcmde.dll
2007-11-17 02:22 --------- d-----w C:\Users\Mom\AppData\Roaming\DellFaxCtr
2007-11-16 07:38 --------- d-----w C:\Program Files\Common Files\Adobe
2007-11-16 07:29 --------- d---a-w C:\Users\Calvin\AppData\Roaming\DellFaxCtr
2007-11-16 07:25 --------- d-----w C:\Program Files\Abbyy FineReader 6.0 Sprint
2007-11-14 01:51 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr
2007-11-14 01:51 67,584 ----a-w C:\Windows\System32\wlanhlp.dll
2007-11-14 01:51 542,720 ----a-w C:\Windows\System32\sysmain.dll
2007-11-14 01:51 502,784 ----a-w C:\Windows\System32\wlansvc.dll
2007-11-14 01:51 47,104 ----a-w C:\Windows\System32\wlanapi.dll
2007-11-14 01:51 297,984 ----a-w C:\Windows\System32\wlansec.dll
2007-11-14 01:51 290,816 ----a-w C:\Windows\System32\wlanmsm.dll
2007-11-14 01:51 24,064 ----a-w C:\Windows\System32\wtsapi32.dll
2007-11-14 01:51 2,923,520 ----a-w C:\Windows\explorer.exe
2007-11-14 01:51 2,027,008 ----a-w C:\Windows\System32\win32k.sys
2007-11-04 16:32 374 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb6334.dat
2007-11-04 14:50 555 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb8467.dat
2007-11-04 14:50 18,432 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb41.dat
2007-10-17 17:23 10,752 ----a-w C:\Windows\System32\WhoisCL.exe
2007-09-22 16:22 174 --sha-w C:\Program Files\desktop.ini
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [2007-03-15 09:09 460784]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 04:35 125440]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-08 17:56 1232896]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 11:54 5674352]
"DellSupportCenter"="C:\Program Files\Dell Support Center\bin\sprtcmd.exe" [2007-10-09 18:56 202544]
"Dell DataSafe Scheduler"="C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe" [2007-12-02 16:30 308464]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46 1460560]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 04:36 201728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-09-05 10:57 1006264]
"RtHDVCpl"="RtHDVCpl.exe" [2007-05-11 05:26 4452352 C:\Windows\RtHDVCpl.exe]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2006-10-03 08:37 81920]
"RoxWatchTray"="C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2006-11-05 08:22 221184]
"dscactivate"="C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-10-09 18:57 16384]
"ECenter"="c:\dell\E-Center\EULALauncher.exe" [2007-03-16 02:20 17920]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-11-02 18:36 267048]
"FaxCenterServer"="C:\Program Files\Dell PC Fax\fm3032.exe" [2007-06-29 07:49 312560]
"dlcqmon.exe"="C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe" [2007-06-29 07:47 292080]
"MemoryCardManager"="C:\Program Files\Dell Photo AIO Printer 966\memcard.exe" [2007-06-29 07:48 304368]
"DLCQCATS"="C:\Windows\system32\spool\DRIVERS\W32X86\3\DLCQtime.dll" [2006-10-15 21:31 106496]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-09-17 08:07 86016]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-09-17 08:07 8497696]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-09-17 08:07 81920]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-12-11 10:56 286720]
"MskAgentexe"="C:\Program Files\McAfee\MSK\MskAgent.exe" [2007-01-17 17:30 152144]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"LogonHoursAction"= 2 (0x2)
"DontDisplayLogonHoursWarnings"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)

R1 DLARTL_M;DLARTL_M;C:\Windows\system32\Drivers\DLARTL_M.SYS [2007-02-08 19:05]
R2 dlcq_device;dlcq_device;C:\Windows\system32\dlcqcoms.exe [2006-12-12 00:22]
R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files\Spybot []
R2 sprtsvc_dellsupportcenter;SupportSoft Sprocket Service (dellsupportcenter);C:\Program Files\Dell Support Center\bin\sprtsvc.exe /service []
R3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver;C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-01 23:30]
S2 0087771200443356mcinstcleanup;McAfee Application Installer Cleanup (0087771200443356);C:\Windows\TEMP\008777~1.EXE C:\PROGRA~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog []
S3 NAL;Nal Service ;C:\Windows\system32\Drivers\iqvw32.sys [2007-03-09 14:04]
S3 R300;R300;C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-01 23:36]
S4 RelevantKnowledge;RelevantKnowledge;C:\Windows\system32\rlservice.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalSystemNetworkRestricted REG_MULTI_SZ hidserv UxSms WdiSystemHost Netman trkwks AudioEndpointBuilder WUDFSvc irmon sysmain IPBusEnum dot3svc PcaSvc EMDMgmt TabletInputService wlansvc WPDBusEnum

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3d670c13-8f53-11dc-bc1e-001aa090d113}]
\shell\AutoRun\command - K:\LaunchU3.exe -a

*Newly Created Service* - NPPTNT2
*Newly Created Service* - PROCEXP90
.
Contents of the 'Scheduled Tasks' folder
"2008-01-15 09:29:33 C:\Windows\Tasks\McDefragTask.job"
- c:\program files\mcafee\mqc\QcConsol.exe'
"2008-01-08 02:58:01 C:\Windows\Tasks\McQcTask.job"
- c:\program files\mcafee\mqc\QcConsol.exe
"2008-01-15 04:00:02 C:\Windows\Tasks\Norton Internet Security - Run Full System Scan - Calvin.job"
- C:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exeB/TASK:
"2008-01-16 06:40:02 C:\Windows\Tasks\User_Feed_Synchronization-{0FC40BB8-6DE1-4C3A-BFFC-6DC12BF1D332}.job"
- C:\Windows\system32\msfeedssync.exe
"2008-01-16 01:20:23 C:\Windows\Tasks\User_Feed_Synchronization-{893D5EE2-FA10-4615-B039-239B29105AB9}.job"
- C:\Windows\system32\msfeedssync.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-15 22:40:14
Windows 6.0.6000 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
DLCQCATS = rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\DLCQtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\Windows\explorer.exe [6.00.6000.16549]
-> C:\Windows\system32\DLAAPI_W.DLL
.
Completion time: 2008-01-15 22:41:35
.
2008-01-16 00:34:42 --- E O F ---

ComboFix 08-01-17.3 - Calvin 2008-01-16 17:24:42.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1033.18.2165 [GMT -8:00]
Running from: C:\Users\Calvin\Desktop\ComboFix.exe
Command switches used :: C:\Users\Calvin\Desktop\CFScript.txt
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE
C:\Users\Calvin\vbzip10.dll
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Users\All Users\TEMP

.
((((((((((((((((((((((((( Files Created from 2007-12-17 to 2008-01-17 )))))))))))))))))))))))))))))))
.

2008-01-15 22:34 . 2000-08-31 08:00 51,200 --a------ C:\Windows\NirCmd.exe
2008-01-12 23:38 . 2008-01-12 23:38 <DIR> d-------- C:\Fraps
2008-01-08 21:52 . 2008-01-16 16:52 <DIR> d-------- C:\Users\All Users\Spybot - Search & Destroy
2008-01-08 17:58 . 2008-01-08 17:58 802,816 --a------ C:\Windows\System32\drivers\tcpip.sys
2008-01-08 17:58 . 2008-01-08 17:58 216,760 --a------ C:\Windows\System32\drivers\netio.sys
2008-01-08 17:58 . 2008-01-08 17:58 167,424 --a------ C:\Windows\System32\tcpipcfg.dll
2008-01-08 17:58 . 2008-01-08 17:58 24,064 --a------ C:\Windows\System32\netcfg.exe
2008-01-08 17:58 . 2008-01-08 17:58 22,016 --a------ C:\Windows\System32\netiougc.exe
2008-01-08 17:58 . 2008-01-08 17:58 118 --a------ C:\Windows\System32\MRT.INI
2008-01-08 17:56 . 2008-01-08 17:56 4,247,552 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
2008-01-08 17:56 . 2008-01-08 17:56 1,686,016 --a------ C:\Windows\System32\gameux.dll
2008-01-08 17:56 . 2008-01-08 17:56 1,060,920 --a------ C:\Windows\System32\drivers\ntfs.sys
2008-01-08 17:56 . 2008-01-08 17:56 211,000 --a------ C:\Windows\System32\drivers\volsnap.sys
2008-01-08 17:56 . 2008-01-08 17:56 154,624 --a------ C:\Windows\System32\drivers\nwifi.sys
2008-01-08 17:56 . 2008-01-08 17:56 110,136 --a------ C:\Windows\System32\drivers\ataport.sys
2008-01-08 17:56 . 2008-01-08 17:56 45,112 --a------ C:\Windows\System32\drivers\pciidex.sys
2008-01-08 17:56 . 2008-01-08 17:56 21,560 --a------ C:\Windows\System32\drivers\atapi.sys
2008-01-08 17:56 . 2008-01-08 17:56 15,928 --a------ C:\Windows\System32\drivers\pciide.sys
2008-01-08 17:56 . 2008-01-08 17:56 11,776 --a------ C:\Windows\System32\sbunattend.exe
2008-01-07 11:14 . 2006-03-03 11:07 143,360 --a------ C:\Windows\System32\dunzip32.dll
2008-01-07 11:13 . 2008-01-07 11:13 <DIR> d-------- C:\Program Files\McAfee.com
2008-01-07 11:13 . 2008-01-07 11:14 <DIR> d-------- C:\Program Files\Common Files\McAfee
2008-01-07 11:13 . 2006-12-22 16:02 170,408 --a------ C:\Windows\System32\drivers\mfehidk.sys
2008-01-07 11:13 . 2007-03-02 14:17 120,360 --a------ C:\Windows\System32\drivers\Mpfp.sys
2008-01-07 11:13 . 2006-12-22 16:02 71,496 --a------ C:\Windows\System32\drivers\mfeavfk.sys
2008-01-07 11:13 . 2006-12-22 16:02 37,480 --a------ C:\Windows\System32\drivers\mfesmfk.sys
2008-01-07 11:13 . 2006-12-22 16:02 34,184 --a------ C:\Windows\System32\drivers\mfebopk.sys
2008-01-07 11:13 . 2006-12-22 16:02 32,008 --a------ C:\Windows\System32\drivers\mferkdk.sys
2008-01-07 11:12 . 2008-01-15 16:29 <DIR> d-------- C:\Program Files\McAfee
2008-01-07 05:24 . 2008-01-07 05:24 <DIR> d--hs---- C:\Users\Calvin\'
2008-01-05 17:27 . 2008-01-05 17:27 <DIR> d-------- C:\Windows\Profiles\All Users\Application Data\SupportSoft
2008-01-05 17:27 . 2008-01-05 17:27 <DIR> d-------- C:\Windows\Profiles
2008-01-05 16:31 . 2008-01-05 18:30 10,740 --a------ C:\Windows\System32\drivers\SYMEVENT.CAT
2008-01-05 16:31 . 2008-01-05 18:30 805 --a------ C:\Windows\System32\drivers\SYMEVENT.INF
2008-01-05 16:29 . 2008-01-07 06:24 <DIR> d-------- C:\Users\All Users\Symantec
2008-01-05 16:29 . 2008-01-07 06:26 <DIR> d-------- C:\Program Files\Common Files\Symantec Shared
2007-12-25 15:24 . 2007-12-25 15:24 78 --a------ C:\Windows\system\WIN32S.INI
2007-12-25 15:23 . 1994-08-24 00:00 188,960 --a------ C:\Windows\system\WINGDE.DLL
2007-12-25 15:23 . 1994-09-21 00:00 92,208 --a------ C:\Windows\system\WING.DLL
2007-12-25 15:23 . 1994-09-21 00:00 12,800 --a------ C:\Windows\system\WING32.DLL
2007-12-25 15:23 . 1994-09-21 00:00 6,736 --a------ C:\Windows\system\WINGDIB.DRV
2007-12-25 15:23 . 1994-09-21 00:00 5,024 --a------ C:\Windows\system\WINGPAL.WND
2007-12-25 15:23 . 1994-06-27 00:00 1,966 --a------ C:\Windows\system\DVA.386
2007-12-25 12:12 . 2007-12-25 12:12 <DIR> d-------- C:\Program Files\Dell DataSafe Online
2007-12-23 10:04 . 2007-12-23 10:05 <DIR> d-------- C:\Program Files\QuickTime
2007-12-20 14:15 . 2007-12-20 14:15 <DIR> d-------- C:\Nexon
2007-12-20 12:34 . 2007-12-20 12:34 <DIR> d-------- C:\Users\All Users\NexonUS
2007-12-19 22:42 . 2007-12-20 08:12 <DIR> d-------- C:\Users\All Users\NVIDIA

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-09 08:08 --------- d---a-w C:\Users\Calvin\AppData\Roaming\U3
2008-01-09 03:04 --------- d-----w C:\Program Files\Windows Sidebar
2008-01-09 03:04 --------- d-----w C:\Program Files\Windows Mail
2008-01-09 01:56 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-01-09 01:56 449,024 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-01-09 01:56 2,143,744 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-01-09 01:56 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-01-05 18:17 --------- d-----w C:\Program Files\Java
2007-12-13 06:29 --------- d---a-w C:\Users\Calvin\AppData\Roaming\Apple Computer
2007-12-12 14:58 9,728 ----a-w C:\Windows\System32\LAPRXY.DLL
2007-12-12 14:58 223,232 ----a-w C:\Windows\System32\WMASF.DLL
2007-12-12 14:58 1,327,104 ----a-w C:\Windows\System32\quartz.dll
2007-12-12 14:57 824,832 ----a-w C:\Windows\System32\wininet.dll
2007-12-12 14:57 56,320 ----a-w C:\Windows\System32\iesetup.dll
2007-12-12 14:57 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2007-12-12 14:57 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2007-12-12 14:56 84,992 ----a-w C:\Windows\system32\drivers\srvnet.sys
2007-12-12 14:56 58,368 ----a-w C:\Windows\system32\drivers\mrxsmb20.sys
2007-12-12 14:56 130,048 ----a-w C:\Windows\system32\drivers\srv2.sys
2007-12-12 14:56 101,888 ----a-w C:\Windows\system32\drivers\mrxsmb.sys
2007-12-12 14:55 3,504,824 ----a-w C:\Windows\System32\ntkrnlpa.exe
2007-12-12 14:55 3,470,520 ----a-w C:\Windows\System32\ntoskrnl.exe
2007-12-10 01:22 --------- d-----w C:\Program Files\Dell Photo AIO Printer 966
2007-12-10 01:22 --------- d-----w C:\Program Files\Dell PC Fax
2007-12-09 20:41 --------- d-----w C:\Program Files\AC3Filter
2007-12-07 04:18 --------- d---a-w C:\Users\Calvin\AppData\Roaming\Thunderbird
2007-12-03 05:00 --------- d-----w C:\Program Files\Common Files\InstallShield
2007-12-03 04:59 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-02 17:31 --------- d-----w C:\Users\Calvin\AppData\Roaming\DataSafeOnline
2007-11-27 05:57 --------- d---a-w C:\Users\Calvin\AppData\Roaming\WeatherDPA
2007-11-25 16:58 --------- d-----w C:\Users\Calvin\AppData\Roaming\Roxio
2007-11-24 16:35 --------- d-----w C:\Program Files\Xvid
2007-11-21 04:49 --------- d-----w C:\Program Files\SoundSpectrum
2007-11-19 03:45 --------- d---a-w C:\Users\Calvin\AppData\Roaming\SoundSpectrum
2007-11-17 19:53 1,244,672 ----a-w C:\Windows\System32\mcmde.dll
2007-11-17 02:22 --------- d-----w C:\Users\Mom\AppData\Roaming\DellFaxCtr
2007-11-14 01:51 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr
2007-11-14 01:51 67,584 ----a-w C:\Windows\System32\wlanhlp.dll
2007-11-14 01:51 542,720 ----a-w C:\Windows\System32\sysmain.dll
2007-11-14 01:51 502,784 ----a-w C:\Windows\System32\wlansvc.dll
2007-11-14 01:51 47,104 ----a-w C:\Windows\System32\wlanapi.dll
2007-11-14 01:51 297,984 ----a-w C:\Windows\System32\wlansec.dll
2007-11-14 01:51 290,816 ----a-w C:\Windows\System32\wlanmsm.dll
2007-11-14 01:51 24,064 ----a-w C:\Windows\System32\wtsapi32.dll
2007-11-14 01:51 2,923,520 ----a-w C:\Windows\explorer.exe
2007-11-14 01:51 2,027,008 ----a-w C:\Windows\System32\win32k.sys
2007-11-04 16:32 374 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb6334.dat
2007-11-04 14:50 555 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb8467.dat
2007-11-04 14:50 18,432 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb41.dat
2007-10-17 17:23 10,752 ----a-w C:\Windows\System32\WhoisCL.exe
2007-09-22 16:22 174 --sha-w C:\Program Files\desktop.ini
.

((((((((((((((((((((((((((((( snapshot@2008-01-15_22.40.40.48 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-01-16 00:27:42 67,584 --s-a-w C:\Windows\bootstat.dat
+ 2008-01-17 00:25:45 67,584 --s-a-w C:\Windows\bootstat.dat
- 2008-01-16 06:36:03 1,404,928 ----a-w C:\Windows\erdnt\Hiv-backup\Users\00000001\NTUSER.DAT
+ 2008-01-17 01:23:31 1,404,928 ----a-w C:\Windows\erdnt\Hiv-backup\Users\00000001\NTUSER.DAT
- 2008-01-16 06:36:03 1,404,928 ----a-w C:\Windows\erdnt\Hiv-backup\Users\00000002\NTUSER.DAT
+ 2008-01-17 01:23:31 1,404,928 ----a-w C:\Windows\erdnt\Hiv-backup\Users\00000002\NTUSER.DAT
- 2008-01-16 06:36:03 3,780,608 ----a-w C:\Windows\erdnt\Hiv-backup\Users\00000003\NTUSER.DAT
+ 2008-01-17 01:23:31 3,780,608 ----a-w C:\Windows\erdnt\Hiv-backup\Users\00000003\NTUSER.DAT
- 2008-01-16 06:36:04 2,613,248 ----a-w C:\Windows\erdnt\Hiv-backup\Users\00000004\UsrClass.dat
+ 2008-01-17 01:23:31 2,613,248 ----a-w C:\Windows\erdnt\Hiv-backup\Users\00000004\UsrClass.dat
- 2008-01-16 05:42:51 262,144 ----a-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\usrclass.dat
+ 2008-01-17 00:40:52 262,144 ----a-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\usrclass.dat
- 2008-01-16 05:16:13 1,572,864 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
+ 2008-01-17 00:27:28 1,572,864 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
- 2008-01-16 00:38:11 16,384 --sha-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-01-16 07:07:08 16,384 --sha-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2008-01-16 00:38:11 32,768 --sha-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-01-16 07:07:08 32,768 --sha-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-01-16 05:47:48 262,144 ----a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\usrclass.dat
+ 2008-01-17 00:28:39 262,144 ----a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\usrclass.dat
- 2008-01-16 00:38:11 16,384 --sha-w C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-01-16 07:07:08 16,384 --sha-w C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-01-16 06:39:58 1,572,864 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
+ 2008-01-17 01:27:26 1,572,864 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
- 2008-01-16 05:12:41 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-01-17 00:29:35 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2008-01-16 05:12:41 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-01-17 00:29:35 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-01-16 05:12:41 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-01-17 00:29:35 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-01-16 06:37:10 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.dat
+ 2008-01-17 01:24:34 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.dat
- 2008-01-16 00:29:52 14,870 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1790924192-2944971578-4197939686-1000_UserData.bin
+ 2008-01-17 00:28:12 14,926 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1790924192-2944971578-4197939686-1000_UserData.bin
- 2008-01-16 00:29:51 71,240 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2008-01-17 00:28:12 71,248 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
- 2008-01-16 00:29:47 52,814 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2008-01-17 00:28:08 52,838 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [2007-03-15 09:09 460784]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 04:35 125440]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-08 17:56 1232896]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 11:54 5674352]
"DellSupportCenter"="C:\Program Files\Dell Support Center\bin\sprtcmd.exe" [2007-10-09 18:56 202544]
"Dell DataSafe Scheduler"="C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe" [2007-12-02 16:30 308464]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 04:36 201728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-09-05 10:57 1006264]
"RtHDVCpl"="RtHDVCpl.exe" [2007-05-11 05:26 4452352 C:\Windows\RtHDVCpl.exe]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2006-10-03 08:37 81920]
"RoxWatchTray"="C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2006-11-05 08:22 221184]
"dscactivate"="C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-10-09 18:57 16384]
"ECenter"="c:\dell\E-Center\EULALauncher.exe" [2007-03-16 02:20 17920]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-11-02 18:36 267048]
"FaxCenterServer"="C:\Program Files\Dell PC Fax\fm3032.exe" [2007-06-29 07:49 312560]
"dlcqmon.exe"="C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe" [2007-06-29 07:47 292080]
"MemoryCardManager"="C:\Program Files\Dell Photo AIO Printer 966\memcard.exe" [2007-06-29 07:48 304368]
"DLCQCATS"="C:\Windows\system32\spool\DRIVERS\W32X86\3\DLCQtime.dll" [2006-10-15 21:31 106496]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-09-17 08:07 86016]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-09-17 08:07 8497696]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-09-17 08:07 81920]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-12-11 10:56 286720]
"MskAgentexe"="C:\Program Files\McAfee\MSK\MskAgent.exe" [2007-01-17 17:30 152144]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"LogonHoursAction"= 2 (0x2)
"DontDisplayLogonHoursWarnings"= 1 (0x1)

R1 DLARTL_M;DLARTL_M;C:\Windows\system32\Drivers\DLARTL_M.SYS [2007-02-08 19:05]
R2 dlcq_device;dlcq_device;C:\Windows\system32\dlcqcoms.exe [2006-12-12 00:22]
R2 sprtsvc_dellsupportcenter;SupportSoft Sprocket Service (dellsupportcenter);C:\Program Files\Dell Support Center\bin\sprtsvc.exe /service []
R3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver;C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-01 23:30]
S2 0284681200529661mcinstcleanup;McAfee Application Installer Cleanup (0284681200529661);C:\Windows\TEMP\028468~1.EXE C:\PROGRA~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog []
S3 NAL;Nal Service ;C:\Windows\system32\Drivers\iqvw32.sys [2007-03-09 14:04]
S3 R300;R300;C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-01 23:36]
S4 RelevantKnowledge;RelevantKnowledge;C:\Windows\system32\rlservice.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalSystemNetworkRestricted REG_MULTI_SZ hidserv UxSms WdiSystemHost Netman trkwks AudioEndpointBuilder WUDFSvc irmon sysmain IPBusEnum dot3svc PcaSvc EMDMgmt TabletInputService wlansvc WPDBusEnum

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3d670c13-8f53-11dc-bc1e-001aa090d113}]
\shell\AutoRun\command - K:\LaunchU3.exe -a

.
Contents of the 'Scheduled Tasks' folder
"2008-01-15 09:29:33 C:\Windows\Tasks\McDefragTask.job"
- c:\program files\mcafee\mqc\QcConsol.exe'
"2008-01-08 02:58:01 C:\Windows\Tasks\McQcTask.job"
- c:\program files\mcafee\mqc\QcConsol.exe
"2008-01-15 04:00:02 C:\Windows\Tasks\Norton Internet Security - Run Full System Scan - Calvin.job"
- C:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exeB/TASK:
"2008-01-17 01:25:02 C:\Windows\Tasks\User_Feed_Synchronization-{0FC40BB8-6DE1-4C3A-BFFC-6DC12BF1D332}.job"
- C:\Windows\system32\msfeedssync.exe
"2008-01-17 00:29:34 C:\Windows\Tasks\User_Feed_Synchronization-{893D5EE2-FA10-4615-B039-239B29105AB9}.job"
- C:\Windows\system32\msfeedssync.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-16 17:27:31
Windows 6.0.6000 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
DLCQCATS = rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\DLCQtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\Windows\Explorer.exe [6.00.6000.16549]
-> C:\Windows\system32\DLAAPI_W.DLL
.
Completion time: 2008-01-16 17:28:26
ComboFix2.txt 2008-01-16 06:41:37
.
2008-01-16 00:34:42 --- E O F ---

also... how do I remove Norton AV? I already ran Norton Antivirus Removal Tool from Norton's official website...

cc481613,

Do you mean removal tool?

Also I need to see a new hijackthis log

sorry for forgetting about the HijackThis log... here it is:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:38:05 AM, on 17/01/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe
C:\Program Files\Dell Photo AIO Printer 966\memcard.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\McAfee\MSK\mskagent.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineTrayIcon.exe
C:\Program Files\Windows Mail\WinMail.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\McAfee\MPS\mpsevh.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Windows\system32\wbem\unsecapp.exe
c:\program files\mcafee\msc\mcuimgr.exe
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Calvin\Desktop\HiJackThis.exe
C:\Windows\system32\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sympatico.msn.ca/?lang=en-CA
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [ECenter] c:\dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Dell PC Fax\fm3032.exe" /s
O4 - HKLM\..\Run: [dlcqmon.exe] "C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe"
O4 - HKLM\..\Run: [MemoryCardManager] "C:\Program Files\Dell Photo AIO Printer 966\memcard.exe"
O4 - HKLM\..\Run: [DLCQCATS] rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\DLCQtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [Dell DataSafe Scheduler] "C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O15 - ESC Trusted Zone: http://*.update.microsoft.com
O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - https://support.dell.com/systemprofiler/SysProExe.CAB
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/So ... b56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-CA/a-U ... E_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O23 - Service: McAfee Application Installer Cleanup (0284681200529661) (0284681200529661mcinstcleanup) - Unknown owner - C:\Windows\TEMP\028468~1.EXE (file missing)
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: dlcq_device - - C:\Windows\system32\dlcqcoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--
End of file - 9903 bytes

If you wanted the ComboFix log too, here it is:

ComboFix 08-01-17.3 - Calvin 2008-01-16 17:24:42.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1033.18.2165 [GMT -8:00]
Running from: C:\Users\Calvin\Desktop\ComboFix.exe
Command switches used :: C:\Users\Calvin\Desktop\CFScript.txt
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE
C:\Users\Calvin\vbzip10.dll
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Users\All Users\TEMP

.
((((((((((((((((((((((((( Files Created from 2007-12-17 to 2008-01-17 )))))))))))))))))))))))))))))))
.

2008-01-15 22:34 . 2000-08-31 08:00 51,200 --a------ C:\Windows\NirCmd.exe
2008-01-12 23:38 . 2008-01-12 23:38 <DIR> d-------- C:\Fraps
2008-01-08 21:52 . 2008-01-16 16:52 <DIR> d-------- C:\Users\All Users\Spybot - Search & Destroy
2008-01-08 17:58 . 2008-01-08 17:58 802,816 --a------ C:\Windows\System32\drivers\tcpip.sys
2008-01-08 17:58 . 2008-01-08 17:58 216,760 --a------ C:\Windows\System32\drivers\netio.sys
2008-01-08 17:58 . 2008-01-08 17:58 167,424 --a------ C:\Windows\System32\tcpipcfg.dll
2008-01-08 17:58 . 2008-01-08 17:58 24,064 --a------ C:\Windows\System32\netcfg.exe
2008-01-08 17:58 . 2008-01-08 17:58 22,016 --a------ C:\Windows\System32\netiougc.exe
2008-01-08 17:58 . 2008-01-08 17:58 118 --a------ C:\Windows\System32\MRT.INI
2008-01-08 17:56 . 2008-01-08 17:56 4,247,552 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
2008-01-08 17:56 . 2008-01-08 17:56 1,686,016 --a------ C:\Windows\System32\gameux.dll
2008-01-08 17:56 . 2008-01-08 17:56 1,060,920 --a------ C:\Windows\System32\drivers\ntfs.sys
2008-01-08 17:56 . 2008-01-08 17:56 211,000 --a------ C:\Windows\System32\drivers\volsnap.sys
2008-01-08 17:56 . 2008-01-08 17:56 154,624 --a------ C:\Windows\System32\drivers\nwifi.sys
2008-01-08 17:56 . 2008-01-08 17:56 110,136 --a------ C:\Windows\System32\drivers\ataport.sys
2008-01-08 17:56 . 2008-01-08 17:56 45,112 --a------ C:\Windows\System32\drivers\pciidex.sys
2008-01-08 17:56 . 2008-01-08 17:56 21,560 --a------ C:\Windows\System32\drivers\atapi.sys
2008-01-08 17:56 . 2008-01-08 17:56 15,928 --a------ C:\Windows\System32\drivers\pciide.sys
2008-01-08 17:56 . 2008-01-08 17:56 11,776 --a------ C:\Windows\System32\sbunattend.exe
2008-01-07 11:14 . 2006-03-03 11:07 143,360 --a------ C:\Windows\System32\dunzip32.dll
2008-01-07 11:13 . 2008-01-07 11:13 <DIR> d-------- C:\Program Files\McAfee.com
2008-01-07 11:13 . 2008-01-07 11:14 <DIR> d-------- C:\Program Files\Common Files\McAfee
2008-01-07 11:13 . 2006-12-22 16:02 170,408 --a------ C:\Windows\System32\drivers\mfehidk.sys
2008-01-07 11:13 . 2007-03-02 14:17 120,360 --a------ C:\Windows\System32\drivers\Mpfp.sys
2008-01-07 11:13 . 2006-12-22 16:02 71,496 --a------ C:\Windows\System32\drivers\mfeavfk.sys
2008-01-07 11:13 . 2006-12-22 16:02 37,480 --a------ C:\Windows\System32\drivers\mfesmfk.sys
2008-01-07 11:13 . 2006-12-22 16:02 34,184 --a------ C:\Windows\System32\drivers\mfebopk.sys
2008-01-07 11:13 . 2006-12-22 16:02 32,008 --a------ C:\Windows\System32\drivers\mferkdk.sys
2008-01-07 11:12 . 2008-01-15 16:29 <DIR> d-------- C:\Program Files\McAfee
2008-01-07 05:24 . 2008-01-07 05:24 <DIR> d--hs---- C:\Users\Calvin\'
2008-01-05 17:27 . 2008-01-05 17:27 <DIR> d-------- C:\Windows\Profiles\All Users\Application Data\SupportSoft
2008-01-05 17:27 . 2008-01-05 17:27 <DIR> d-------- C:\Windows\Profiles
2008-01-05 16:31 . 2008-01-05 18:30 10,740 --a------ C:\Windows\System32\drivers\SYMEVENT.CAT
2008-01-05 16:31 . 2008-01-05 18:30 805 --a------ C:\Windows\System32\drivers\SYMEVENT.INF
2008-01-05 16:29 . 2008-01-07 06:24 <DIR> d-------- C:\Users\All Users\Symantec
2008-01-05 16:29 . 2008-01-07 06:26 <DIR> d-------- C:\Program Files\Common Files\Symantec Shared
2007-12-25 15:24 . 2007-12-25 15:24 78 --a------ C:\Windows\system\WIN32S.INI
2007-12-25 15:23 . 1994-08-24 00:00 188,960 --a------ C:\Windows\system\WINGDE.DLL
2007-12-25 15:23 . 1994-09-21 00:00 92,208 --a------ C:\Windows\system\WING.DLL
2007-12-25 15:23 . 1994-09-21 00:00 12,800 --a------ C:\Windows\system\WING32.DLL
2007-12-25 15:23 . 1994-09-21 00:00 6,736 --a------ C:\Windows\system\WINGDIB.DRV
2007-12-25 15:23 . 1994-09-21 00:00 5,024 --a------ C:\Windows\system\WINGPAL.WND
2007-12-25 15:23 . 1994-06-27 00:00 1,966 --a------ C:\Windows\system\DVA.386
2007-12-25 12:12 . 2007-12-25 12:12 <DIR> d-------- C:\Program Files\Dell DataSafe Online
2007-12-23 10:04 . 2007-12-23 10:05 <DIR> d-------- C:\Program Files\QuickTime
2007-12-20 14:15 . 2007-12-20 14:15 <DIR> d-------- C:\Nexon
2007-12-20 12:34 . 2007-12-20 12:34 <DIR> d-------- C:\Users\All Users\NexonUS
2007-12-19 22:42 . 2007-12-20 08:12 <DIR> d-------- C:\Users\All Users\NVIDIA

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-09 08:08 --------- d---a-w C:\Users\Calvin\AppData\Roaming\U3
2008-01-09 03:04 --------- d-----w C:\Program Files\Windows Sidebar
2008-01-09 03:04 --------- d-----w C:\Program Files\Windows Mail
2008-01-09 01:56 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-01-09 01:56 449,024 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-01-09 01:56 2,143,744 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-01-09 01:56 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-01-05 18:17 --------- d-----w C:\Program Files\Java
2007-12-13 06:29 --------- d---a-w C:\Users\Calvin\AppData\Roaming\Apple Computer
2007-12-12 14:58 9,728 ----a-w C:\Windows\System32\LAPRXY.DLL
2007-12-12 14:58 223,232 ----a-w C:\Windows\System32\WMASF.DLL
2007-12-12 14:58 1,327,104 ----a-w C:\Windows\System32\quartz.dll
2007-12-12 14:57 824,832 ----a-w C:\Windows\System32\wininet.dll
2007-12-12 14:57 56,320 ----a-w C:\Windows\System32\iesetup.dll
2007-12-12 14:57 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2007-12-12 14:57 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2007-12-12 14:56 84,992 ----a-w C:\Windows\system32\drivers\srvnet.sys
2007-12-12 14:56 58,368 ----a-w C:\Windows\system32\drivers\mrxsmb20.sys
2007-12-12 14:56 130,048 ----a-w C:\Windows\system32\drivers\srv2.sys
2007-12-12 14:56 101,888 ----a-w C:\Windows\system32\drivers\mrxsmb.sys
2007-12-12 14:55 3,504,824 ----a-w C:\Windows\System32\ntkrnlpa.exe
2007-12-12 14:55 3,470,520 ----a-w C:\Windows\System32\ntoskrnl.exe
2007-12-10 01:22 --------- d-----w C:\Program Files\Dell Photo AIO Printer 966
2007-12-10 01:22 --------- d-----w C:\Program Files\Dell PC Fax
2007-12-09 20:41 --------- d-----w C:\Program Files\AC3Filter
2007-12-07 04:18 --------- d---a-w C:\Users\Calvin\AppData\Roaming\Thunderbird
2007-12-03 05:00 --------- d-----w C:\Program Files\Common Files\InstallShield
2007-12-03 04:59 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-02 17:31 --------- d-----w C:\Users\Calvin\AppData\Roaming\DataSafeOnline
2007-11-27 05:57 --------- d---a-w C:\Users\Calvin\AppData\Roaming\WeatherDPA
2007-11-25 16:58 --------- d-----w C:\Users\Calvin\AppData\Roaming\Roxio
2007-11-24 16:35 --------- d-----w C:\Program Files\Xvid
2007-11-21 04:49 --------- d-----w C:\Program Files\SoundSpectrum
2007-11-19 03:45 --------- d---a-w C:\Users\Calvin\AppData\Roaming\SoundSpectrum
2007-11-17 19:53 1,244,672 ----a-w C:\Windows\System32\mcmde.dll
2007-11-17 02:22 --------- d-----w C:\Users\Mom\AppData\Roaming\DellFaxCtr
2007-11-14 01:51 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr
2007-11-14 01:51 67,584 ----a-w C:\Windows\System32\wlanhlp.dll
2007-11-14 01:51 542,720 ----a-w C:\Windows\System32\sysmain.dll
2007-11-14 01:51 502,784 ----a-w C:\Windows\System32\wlansvc.dll
2007-11-14 01:51 47,104 ----a-w C:\Windows\System32\wlanapi.dll
2007-11-14 01:51 297,984 ----a-w C:\Windows\System32\wlansec.dll
2007-11-14 01:51 290,816 ----a-w C:\Windows\System32\wlanmsm.dll
2007-11-14 01:51 24,064 ----a-w C:\Windows\System32\wtsapi32.dll
2007-11-14 01:51 2,923,520 ----a-w C:\Windows\explorer.exe
2007-11-14 01:51 2,027,008 ----a-w C:\Windows\System32\win32k.sys
2007-11-04 16:32 374 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb6334.dat
2007-11-04 14:50 555 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb8467.dat
2007-11-04 14:50 18,432 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb41.dat
2007-10-17 17:23 10,752 ----a-w C:\Windows\System32\WhoisCL.exe
2007-09-22 16:22 174 --sha-w C:\Program Files\desktop.ini
.

((((((((((((((((((((((((((((( snapshot@2008-01-15_22.40.40.48 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-01-16 00:27:42 67,584 --s-a-w C:\Windows\bootstat.dat
+ 2008-01-17 00:25:45 67,584 --s-a-w C:\Windows\bootstat.dat
- 2008-01-16 06:36:03 1,404,928 ----a-w C:\Windows\erdnt\Hiv-backup\Users\00000001\NTUSER.DAT
+ 2008-01-17 01:23:31 1,404,928 ----a-w C:\Windows\erdnt\Hiv-backup\Users\00000001\NTUSER.DAT
- 2008-01-16 06:36:03 1,404,928 ----a-w C:\Windows\erdnt\Hiv-backup\Users\00000002\NTUSER.DAT
+ 2008-01-17 01:23:31 1,404,928 ----a-w C:\Windows\erdnt\Hiv-backup\Users\00000002\NTUSER.DAT
- 2008-01-16 06:36:03 3,780,608 ----a-w C:\Windows\erdnt\Hiv-backup\Users\00000003\NTUSER.DAT
+ 2008-01-17 01:23:31 3,780,608 ----a-w C:\Windows\erdnt\Hiv-backup\Users\00000003\NTUSER.DAT
- 2008-01-16 06:36:04 2,613,248 ----a-w C:\Windows\erdnt\Hiv-backup\Users\00000004\UsrClass.dat
+ 2008-01-17 01:23:31 2,613,248 ----a-w C:\Windows\erdnt\Hiv-backup\Users\00000004\UsrClass.dat
- 2008-01-16 05:42:51 262,144 ----a-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\usrclass.dat
+ 2008-01-17 00:40:52 262,144 ----a-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\usrclass.dat
- 2008-01-16 05:16:13 1,572,864 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
+ 2008-01-17 00:27:28 1,572,864 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
- 2008-01-16 00:38:11 16,384 --sha-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-01-16 07:07:08 16,384 --sha-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2008-01-16 00:38:11 32,768 --sha-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-01-16 07:07:08 32,768 --sha-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-01-16 05:47:48 262,144 ----a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\usrclass.dat
+ 2008-01-17 00:28:39 262,144 ----a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\usrclass.dat
- 2008-01-16 00:38:11 16,384 --sha-w C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-01-16 07:07:08 16,384 --sha-w C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-01-16 06:39:58 1,572,864 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
+ 2008-01-17 01:27:26 1,572,864 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
- 2008-01-16 05:12:41 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-01-17 00:29:35 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2008-01-16 05:12:41 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-01-17 00:29:35 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-01-16 05:12:41 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-01-17 00:29:35 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-01-16 06:37:10 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.dat
+ 2008-01-17 01:24:34 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.dat
- 2008-01-16 00:29:52 14,870 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1790924192-2944971578-4197939686-1000_UserData.bin
+ 2008-01-17 00:28:12 14,926 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1790924192-2944971578-4197939686-1000_UserData.bin
- 2008-01-16 00:29:51 71,240 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2008-01-17 00:28:12 71,248 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
- 2008-01-16 00:29:47 52,814 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2008-01-17 00:28:08 52,838 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [2007-03-15 09:09 460784]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 04:35 125440]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-08 17:56 1232896]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 11:54 5674352]
"DellSupportCenter"="C:\Program Files\Dell Support Center\bin\sprtcmd.exe" [2007-10-09 18:56 202544]
"Dell DataSafe Scheduler"="C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe" [2007-12-02 16:30 308464]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 04:36 201728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-09-05 10:57 1006264]
"RtHDVCpl"="RtHDVCpl.exe" [2007-05-11 05:26 4452352 C:\Windows\RtHDVCpl.exe]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2006-10-03 08:37 81920]
"RoxWatchTray"="C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2006-11-05 08:22 221184]
"dscactivate"="C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-10-09 18:57 16384]
"ECenter"="c:\dell\E-Center\EULALauncher.exe" [2007-03-16 02:20 17920]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-11-02 18:36 267048]
"FaxCenterServer"="C:\Program Files\Dell PC Fax\fm3032.exe" [2007-06-29 07:49 312560]
"dlcqmon.exe"="C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe" [2007-06-29 07:47 292080]
"MemoryCardManager"="C:\Program Files\Dell Photo AIO Printer 966\memcard.exe" [2007-06-29 07:48 304368]
"DLCQCATS"="C:\Windows\system32\spool\DRIVERS\W32X86\3\DLCQtime.dll" [2006-10-15 21:31 106496]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-09-17 08:07 86016]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-09-17 08:07 8497696]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-09-17 08:07 81920]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-12-11 10:56 286720]
"MskAgentexe"="C:\Program Files\McAfee\MSK\MskAgent.exe" [2007-01-17 17:30 152144]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"LogonHoursAction"= 2 (0x2)
"DontDisplayLogonHoursWarnings"= 1 (0x1)

R1 DLARTL_M;DLARTL_M;C:\Windows\system32\Drivers\DLARTL_M.SYS [2007-02-08 19:05]
R2 dlcq_device;dlcq_device;C:\Windows\system32\dlcqcoms.exe [2006-12-12 00:22]
R2 sprtsvc_dellsupportcenter;SupportSoft Sprocket Service (dellsupportcenter);C:\Program Files\Dell Support Center\bin\sprtsvc.exe /service []
R3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver;C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-01 23:30]
S2 0284681200529661mcinstcleanup;McAfee Application Installer Cleanup (0284681200529661);C:\Windows\TEMP\028468~1.EXE C:\PROGRA~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog []
S3 NAL;Nal Service ;C:\Windows\system32\Drivers\iqvw32.sys [2007-03-09 14:04]
S3 R300;R300;C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-01 23:36]
S4 RelevantKnowledge;RelevantKnowledge;C:\Windows\system32\rlservice.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalSystemNetworkRestricted REG_MULTI_SZ hidserv UxSms WdiSystemHost Netman trkwks AudioEndpointBuilder WUDFSvc irmon sysmain IPBusEnum dot3svc PcaSvc EMDMgmt TabletInputService wlansvc WPDBusEnum

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3d670c13-8f53-11dc-bc1e-001aa090d113}]
\shell\AutoRun\command - K:\LaunchU3.exe -a

.
Contents of the 'Scheduled Tasks' folder
"2008-01-15 09:29:33 C:\Windows\Tasks\McDefragTask.job"
- c:\program files\mcafee\mqc\QcConsol.exe'
"2008-01-08 02:58:01 C:\Windows\Tasks\McQcTask.job"
- c:\program files\mcafee\mqc\QcConsol.exe
"2008-01-15 04:00:02 C:\Windows\Tasks\Norton Internet Security - Run Full System Scan - Calvin.job"
- C:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exeB/TASK:
"2008-01-17 01:25:02 C:\Windows\Tasks\User_Feed_Synchronization-{0FC40BB8-6DE1-4C3A-BFFC-6DC12BF1D332}.job"
- C:\Windows\system32\msfeedssync.exe
"2008-01-17 00:29:34 C:\Windows\Tasks\User_Feed_Synchronization-{893D5EE2-FA10-4615-B039-239B29105AB9}.job"
- C:\Windows\system32\msfeedssync.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-16 17:27:31
Windows 6.0.6000 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
DLCQCATS = rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\DLCQtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\Windows\Explorer.exe [6.00.6000.16549]
-> C:\Windows\system32\DLAAPI_W.DLL
.
Completion time: 2008-01-16 17:28:26
ComboFix2.txt 2008-01-16 06:41:37
.
2008-01-16 00:34:42 --- E O F ---

cc481613,

Your log is clean

I always like to check to make sure something didn't startup again.
And yes Norton is all gone.

Thanks a lot... It's working fine now!!!