donackle

Still not getting dequarantine_log, just combofix, but here it is..

..and yes, everything seems to be working fine.

ComboFix 08-06-08.8 - welcome 2008-06-16 921.4 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.639 [GMT -6:00]
Running from: C:\Documents and Settings\welcome\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\welcome\Desktop\CFScript.txt
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2008-05-16 to 2008-06-16 )))))))))))))))))))))))))))))))
.

2008-06-11 09:18 . 2008-04-14 05:01 272,128 --------- C:\WINDOWS\system32\drivers\bthport.sys
2008-06-11 09:18 . 2008-04-14 05:01 272,128 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys
2008-06-10 16:28 . 2008-06-10 16:28 <DIR> d-------- C:\Documents and Settings\welcome\Application Data\Malwarebytes
2008-06-10 16:27 . 2008-06-10 16:27 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-06-10 14:18 . 2008-06-10 15:25 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\SITEguard
2008-06-10 14:14 . 2008-06-10 14:14 <DIR> d-------- C:\Program Files\Common Files\iS3
2008-06-10 14:14 . 2008-06-10 15:28 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\STOPzilla!
2008-06-10 13:06 . 2008-06-10 13:06 2 --a------ C:\WINDOWS\msoffice.ini
2008-06-09 14:30 . 2008-06-09 13:53 1,959,843 --a------ C:\ComboFix.exe
2008-06-04 09:26 . 2008-06-04 09:26 <DIR> d-------- C:\Deckard
2008-06-03 16:29 . 2008-06-10 13:51 <DIR> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2008-06-03 15:40 . 2008-06-03 15:41 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\U3
2008-06-03 07:49 . 2008-04-22 22:16 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll
2008-06-03 07:49 . 2007-04-17 03:32 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat
2008-06-03 07:49 . 2007-03-07 23:10 991,232 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui
2008-06-03 07:49 . 2008-04-22 22:16 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll
2008-06-03 07:49 . 2008-04-22 22:16 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll
2008-06-03 07:49 . 2008-04-22 22:16 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll
2008-06-03 07:49 . 2008-04-22 22:16 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll
2008-06-03 07:49 . 2008-04-22 22:16 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2008-06-03 07:49 . 2008-04-22 01:39 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-06-03 07:16 . 2008-06-03 07:16 <DIR> d--hs---- C:\WINDOWS\ftpcache
2008-06-03 07:16 . 2008-06-03 07:16 <DIR> d-------- C:\Program Files\CCleaner
2008-06-03 07:04 . 2006-02-28 06:00 129,536 --a--c--- C:\WINDOWS\system32\dllcache\acledit.dll
2008-06-03 07:04 . 2006-02-28 06:00 129,536 --a------ C:\WINDOWS\system32\acledit.dll
2008-06-02 22:26 . 2008-06-09 14:43 <DIR> d-------- C:\Documents and Settings\welcome\Application Data\U3
2008-06-02 21:24 . 2008-06-03 07:16 <DIR> d---s---- C:\Documents and Settings\Administrator\UserData
2008-06-02 18:56 . 2008-06-02 18:56 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\SUPERAntiSpyware.com
2008-06-02 18:13 . 2008-06-02 18:13 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2008-06-02 18:10 . 2008-06-03 14:28 <DIR> d-------- C:\Program Files\SUPERAntiSpyware
2008-06-02 18:10 . 2008-06-03 14:28 <DIR> d-------- C:\Documents and Settings\welcome\Application Data\SUPERAntiSpyware.com
2008-06-02 16:40 . 2007-08-13 18:54 33,792 --a--c--- C:\WINDOWS\system32\dllcache\custsat.dll
2008-06-02 13:43 . 2008-06-11 09:53 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
2008-06-02 13:43 . 2008-06-11 09:53 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-06-02 11:57 . 2008-06-02 11:57 <DIR> d-------- C:\WINDOWS\Recent
2008-06-02 10:56 . 2008-06-10 14:59 96,966 --a------ C:\WINDOWS\system32\drivers\klin.dat
2008-06-02 10:56 . 2008-06-10 14:59 88,774 --a------ C:\WINDOWS\system32\drivers\klick.dat
2008-06-02 10:55 . 2008-06-02 10:55 <DIR> d-------- C:\Program Files\Kaspersky Lab
2008-06-02 10:55 . 2008-06-16 08:43 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-06-02 10:55 . 2008-06-16 09:07 3,062,560 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2008-06-02 10:55 . 2008-06-16 09:07 88,352 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2008-06-02 10:55 . 2008-06-14 16:40 41,804 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2008-06-02 10:55 . 2008-06-14 16:40 9,164 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.idx
2008-06-02 10:34 . 2008-06-02 10:34 <DIR> d-------- C:\KAV
2008-06-02 10:15 . 2007-09-06 10:45 45,056 --a------ C:\WINDOWS\system32\iprntlgn.exe
2008-06-02 10:15 . 2007-09-06 10:45 32,768 --a------ C:\WINDOWS\system32\nipplgex.dll
2008-05-24 23:33 . 2008-06-03 07:15 <DIR> d-------- C:\Documents and Settings\welcome\Application Data\uTorrent
2008-05-24 23:31 . 2004-08-10 06:00 4,224 --a------ C:\WINDOWS\system32\beep.sys
2008-05-24 23:30 . 2008-05-24 23:33 <DIR> d-------- C:\Program Files\uTorrent
2008-05-24 13:39 . 2008-06-10 15:09 <DIR> d-------- C:\Temp
2008-05-21 14:58 . 2008-05-21 14:58 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-05-21 14:58 . 2008-05-21 14:58 1,409 --a------ C:\WINDOWS\QTFont.for
2008-05-19 22:00 . 2008-05-19 22:03 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\AOL OCP

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-10 20:59 112,144 ----a-w C:\WINDOWS\system32\drivers\kl1.sys
2008-06-10 19:45 --------- d-----w C:\Program Files\Common Files\AOL
2008-06-10 19:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\AOL
2008-06-10 19:06 --------- d-----w C:\Documents and Settings\welcome\Application Data\AOL
2008-06-10 19:06 --------- d-----w C:\Documents and Settings\Administrator\Application Data\AOL
2008-06-04 15:07 --------- d-----w C:\Program Files\TOSHIBA
2008-06-03 09:07 --------- d-----w C:\Program Files\DIGStream
2008-06-03 02:23 --------- d-----w C:\Program Files\Yahoo!
2008-06-02 23:24 --------- d-----w C:\Program Files\Metamail Inc
2008-06-02 19:47 --------- d-----w C:\Program Files\Toshiba Games
2008-06-02 16:59 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-06-02 16:59 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2008-05-26 02:15 --------- d-----w C:\Documents and Settings\welcome\Application Data\ZoomBrowser EX
2008-05-15 00:30 --------- d-----w C:\Documents and Settings\All Users\Application Data\ZoomBrowser
2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
2008-05-07 04:55 1,288,192 ----a-w C:\WINDOWS\system32\quartz.dll
2008-04-23 04:16 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
2008-03-27 08:12 151,583 ----a-w C:\WINDOWS\system32\msjint40.dll
2008-03-19 09:47 1,845,248 ----a-w C:\WINDOWS\system32\win32k.sys
2006-12-13 03:10 0 ----a-w C:\Documents and Settings\welcome\Application Data\wklnhst.dat
2006-10-03 08:43 2,402,550 ----a-w C:\WINDOWS\inf\SETC6.tmp
.

((((((((((((((((((((((((((((( snapshot_2008-06-12_ 9.21.14.81 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-06-12 15:18:07 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-06-16 14:42:17 2,048 --s-a-w C:\WINDOWS\bootstat.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 06:00 15360]
"TOSCDSPD"="C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2004-12-30 02:32 65536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2005-11-27 23:55 98304]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2005-11-27 23:55 118784]
"THotkey"="C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe" [2006-01-05 16:02 352256]
"SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2005-12-16 02:34 82009]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-12-16 02:32 761945]
"NDSTray.exe"="NDSTray.exe" []
"Tvs"="C:\Program Files\Toshiba\Tvs\TvsTray.exe" [2005-11-30 14:25 73728]
"SmoothView"="C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe" [2005-04-26 18:13 122880]
"Pinger"="c:\toshiba\ivp\ism\pinger.exe" [2005-03-17 19:37 151552]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-12-05 13:37 667718]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-11-28 12:41 602182]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe" [2003-03-08 22:30 188416]
"iPrint Tray"="C:\WINDOWS\system32\iprntctl.exe" [2007-09-06 10:45 40960]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2006-10-30 10:36 256576]
"iPrint Event Monitor"="C:\WINDOWS\system32\iprntlgn.exe" [2007-09-06 10:45 45056]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-24 00:05:26 29696]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\KASPER~1\KASPER~1.0FO\adialhk.dll

[HKLM\~\startupfolder\C:^Documents and Settings^welcome^Start Menu^Programs^Startup^Microsoft Office OneNote 2003 Quick Launch.lnk]
path=C:\Documents and Settings\welcome\Start Menu\Programs\Startup\Microsoft Office OneNote 2003 Quick Launch.lnk
backup=C:\WINDOWS\pss\Microsoft Office OneNote 2003 Quick Launch.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IEUpdate]
C:\WINDOWS\system32\acledite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Windows Installer]
C:\Documents and Settings\welcome\Application Data\Microsoft\dtsc\12815.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Swupdtmr"=2 (0x2)
"MsSecurity1.209.4"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\TOSHIBA\\ivp\\NetInt\\Netint.exe"=
"C:\\TOSHIBA\\Ivp\\ISM\\pinger.exe"= C:\\TOSHIBA\\IVP\\ISM\\pinger.exe
"C:\\Program Files\\Common Files\\AOL\\TopSpeed\\2.0\\aoltsmon.exe"=
"C:\\Program Files\\Common Files\\AOL\\TopSpeed\\2.0\\aoltpspd.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Novell\\GroupWise\\GrpWise.exe"=
"C:\\Novell\\GroupWise\\Notify.exe"=
"C:\\Program Files\\Microsoft Office\\OFFICE11\\OUTLOOK.EXE"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

R0 KR10N;KR10N;C:\WINDOWS\system32\drivers\KR10N.sys [2005-01-12 02:05]
R1 nipplpt2;Novell iCapture Lpt Redirector 2;C:\WINDOWS\system32\drivers\nipplpt.sys [2007-09-06 10:35]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys [2007-05-30 17:49]
S3 tosrfec;Bluetooth ACPI from TOSHIBA;C:\WINDOWS\system32\DRIVERS\tosrfec.sys [2005-09-09 16:47]

.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-16 09:08:01
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-06-16 9:08:34
ComboFix-quarantined-files.txt 2008-06-16 15:08:31
ComboFix2.txt 2008-06-13 21:35:30
ComboFix3.txt 2008-06-12 15:21:34
ComboFix4.txt 2008-06-10 21:20:31

Pre-Run: 83,213,791,232 bytes free
Post-Run: 83,202,441,216 bytes free

177 --- E O F --- 2008-06-11 15:25:32