Here you go:
ComboFix 08-11-13.01 - Jordan 2008-11-15 13:17:07.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.176 [GMT -6:00]
Running from: c:\documents and settings\Jordan\Desktop\ComboFix.exe
Command switches used :: f:\tammy\CFScript.txt
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\All Users\Application Data\bepimobaz.dll
c:\documents and settings\All Users\Application Data\pobysamu.bat
c:\documents and settings\All Users\Application Data\ytew.dll
c:\documents and settings\All Users\Application Data\zofaqeqa.bat
c:\documents and settings\Jordan\Application Data\faniga.exe
c:\documents and settings\Jordan\Application Data\GetModule
c:\documents and settings\Jordan\Application Data\GetModule\dicik.gz
c:\documents and settings\Jordan\Application Data\GetModule\ofadik.gz
c:\documents and settings\Jordan\Application Data\medabolevo.exe
c:\documents and settings\Jordan\Application Data\ribe.reg
c:\documents and settings\Jordan\Application Data\yjuxako.scr
c:\program files\Common Files\ifuze.dll
c:\program files\Common Files\inohiha.reg
c:\program files\Common Files\vidygubale.bin
c:\program files\Common Files\vofyluhixo.reg
c:\program files\Common Files\yfycag.exe
c:\windows\arek.dat
c:\windows\cibivaka.bat
c:\windows\gyjyxa._dl
c:\windows\icekyro.pif
c:\windows\junugaj.bat
c:\windows\mqkm
c:\windows\mqkm\mqkm.dat
c:\windows\mqkm\wu
c:\windows\pyjypilut.dll
c:\windows\qidubo.vbs
c:\windows\Sm9yZGFuIE1vbnRnb21lcnk
c:\windows\synevu.db
c:\windows\system32\TDSSriqp.dll
c:\windows\system32\voqylyqati.pif
c:\windows\ykila.sys
.
((((((((((((((((((((((((( Files Created from 2008-10-15 to 2008-11-15 )))))))))))))))))))))))))))))))
.
2008-11-15 10:18 . 2008-11-15 10:18 <DIR> d-------- c:\windows\LastGood
2008-11-13 09:57 . 2008-11-13 09:57 <DIR> d-------- C:\_OTMoveIt
2008-11-12 22:02 . 2008-11-12 22:16 <DIR> d-------- C:\Lop SD
2008-11-12 17:05 . 2008-11-12 17:05 664 --a------ c:\windows\system32\d3d9caps.dat
2008-11-11 18:18 . 2008-11-11 18:20 <DIR> d-------- c:\program files\SuperAdBlocker.com
2008-11-11 18:18 . 2008-11-11 18:18 <DIR> d-------- c:\documents and settings\Jordan\Application Data\SuperAdBlocker.com
2008-11-11 18:11 . 2008-11-11 18:11 <DIR> d-------- c:\documents and settings\All Users\Application Data\Yahoo! Companion
2008-11-11 18:10 . 2008-11-11 18:15 <DIR> d-------- c:\program files\CCleaner
2008-11-11 18:00 . 2008-11-11 18:00 <DIR> dr-h----- C:\$VAULT$.AVG
2008-11-11 13:23 . 2008-11-11 13:23 <DIR> d-------- c:\documents and settings\LocalService\Application Data\AVG7
2008-11-11 13:23 . 2008-11-15 09:51 <DIR> d-------- c:\documents and settings\Jordan\Application Data\AVG7
2008-11-11 13:23 . 2008-11-11 13:23 <DIR> d-------- c:\documents and settings\All Users\Application Data\Grisoft
2008-11-11 13:23 . 2008-11-11 13:24 <DIR> d-------- c:\documents and settings\All Users\Application Data\avg7
2008-11-11 13:07 . 2008-11-11 13:07 <DIR> d-------- c:\documents and settings\Administrator\Application Data\Lavasoft
2008-11-11 12:23 . 2008-11-11 12:49 <DIR> d-------- c:\documents and settings\Administrator\Application Data\U3
2008-11-11 12:03 . 2008-11-11 13:23 <DIR> d-------- c:\documents and settings\Administrator
2008-11-10 22:33 . 2008-11-10 22:33 <DIR> d-------- c:\program files\TeaTimer (Spybot - Search & Destroy)
2008-11-10 22:33 . 2008-11-10 22:33 <DIR> d-------- c:\program files\SDHelper (Spybot - Search & Destroy)
2008-11-10 22:33 . 2008-11-10 22:33 <DIR> d-------- c:\program files\Misc. Support Library (Spybot - Search & Destroy)
2008-11-10 22:33 . 2008-11-10 22:33 <DIR> d-------- c:\program files\File Scanner Library (Spybot - Search & Destroy)
2008-11-10 20:14 . 2008-11-10 20:14 <DIR> d-------- c:\documents and settings\Jordan\Application Data\Malwarebytes
2008-11-10 20:13 . 2008-11-10 20:13 <DIR> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes
2008-10-24 06:29 . 2008-10-15 10:34 337,408 --------- c:\windows\system32\dllcache\netapi32.dll
2008-10-15 23:19 . 2008-09-08 04:41 333,824 --------- c:\windows\system32\dllcache\srv.sys
2008-10-15 23:18 . 2008-08-14 04:11 2,189,184 --------- c:\windows\system32\dllcache\ntoskrnl.exe
2008-10-15 23:18 . 2008-08-14 04:09 2,145,280 --------- c:\windows\system32\dllcache\ntkrnlmp.exe
2008-10-15 23:18 . 2008-08-14 03:33 2,066,048 --------- c:\windows\system32\dllcache\ntkrnlpa.exe
2008-10-15 23:18 . 2008-08-14 03:33 2,023,936 --------- c:\windows\system32\dllcache\ntkrpamp.exe
2008-10-15 23:18 . 2008-09-15 06:12 1,846,400 --------- c:\windows\system32\dllcache\win32k.sys
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-12 18:02 --------- d-----w c:\documents and settings\Jordan\Application Data\U3
2008-11-12 00:17 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
2008-11-12 00:10 --------- d-----w c:\program files\Yahoo!
2008-11-11 14:48 --------- d-----w c:\program files\Spybot - Search & Destroy
2008-11-11 14:48 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2008-11-07 02:58 --------- d-----w c:\program files\DivX
2008-11-06 03:32 19,936 ----a-w c:\program files\Common Files\povof.ban
2008-10-12 20:00 --------- d-----w c:\program files\Photo Toolkit
2008-10-07 20:49 --------- d-----w c:\program files\Java
2008-10-03 17:41 6,066,176 ------w c:\windows\system32\dllcache\ieframe.dll
2008-09-15 12:12 1,846,400 ----a-w c:\windows\system32\win32k.sys
2008-08-27 08:24 3,593,216 ------w c:\windows\system32\dllcache\mshtml.dll
2008-08-25 08:38 13,824 ------w c:\windows\system32\dllcache\ieudinit.exe
2008-08-25 08:37 70,656 ------w c:\windows\system32\dllcache\ie4uinit.exe
2008-08-23 05:56 635,848 ------w c:\windows\system32\dllcache\iexplore.exe
2008-08-23 05:54 161,792 ------w c:\windows\system32\dllcache\ieakui.dll
2008-05-26 01:44 0 ----a-w c:\documents and settings\Jordan\Application Data\internaldb6334.dat
2007-08-07 19:09 18,432 ----a-w c:\documents and settings\Jordan\Application Data\internaldb41.dat
2007-08-07 18:42 556 ----a-w c:\documents and settings\Jordan\Application Data\internaldb8467.dat
2006-12-24 17:28 24,192 ----a-w c:\documents and settings\Jordan\usbsermptxp.sys
2006-12-24 17:28 22,768 ----a-w c:\documents and settings\Jordan\usbsermpt.sys
2006-06-15 21:03 56 --sh--r c:\windows\system32\3F8AEB7D4E.sys
2007-12-18 03:29 168 --sh--r c:\windows\system32\4E7DEB8A3F.sys
2007-12-18 03:29 9,188 --sha-w c:\windows\system32\KGyGaAvL.sys
.
((((((((((((((((((((((((((((( snapshot@2008-11-15_10.21.01.28 )))))))))))))))))))))))))))))))))))))))))
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-13 1695232]
"Aim6"="c:\program files\AIM6\aim6.exe" [2008-03-25 50528]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"DellSupport"="c:\program files\DellSupport\DSAgnt.exe" [2007-03-15 460784]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-09-14 1576176]
"I&F Viewer toolbar"="c:\program files\Photo Toolkit\ivbar\phototoolkitmem.exe" [2006-10-27 65536]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2008-08-13 206064]
"SuperAdBlocker"="c:\program files\SuperAdBlocker.com\Super Ad Blocker\SAdBlock.exe" [2007-08-01 1564672]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2004-10-14 1404928]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"RealTray"="c:\program files\Real\RealPlayer\RealPlay.exe" [2005-12-19 26112]
"ISUSPM Startup"="c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe" [2005-06-10 249856]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2005-06-10 81920]
"DMXLauncher"="c:\program files\Dell\Media Experience\DMXLauncher.exe" [2005-01-27 86016]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-09-20 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-09-20 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-09-20 114688]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-06-29 286720]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2007-07-10 270648]
"Zune Launcher"="c:\program files\Zune\ZuneLauncher.exe" [2008-04-29 158624]
"dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-11-15 16384]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2008-08-13 206064]
"AVG7_CC"="c:\progra~1\Grisoft\AVG7\avgcc.exe" [2008-11-11 579072]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG7_Run"="c:\progra~1\Grisoft\AVG7\avgw.exe" [2008-11-11 219136]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2005-12-19 24576]
Kodak EasyShare software.lnk - c:\program files\Kodak\Kodak EasyShare software\bin\EasyShare.exe [2007-06-21 282624]
KODAK Software Updater.lnk - c:\program files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe [2004-02-13 16423]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-02-17 65588]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-07-10 77824]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000D7}"= "c:\program files\SuperAdBlocker.com\Super Ad Blocker\SABSEHB.DLL" [2006-11-07 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SABWinLogon]
2007-08-01 09:28 176128 c:\program files\SuperAdBlocker.com\Super Ad Blocker\SABWINLO.DLL
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-09-14 17:11 352256 c:\program files\SUPERAntiSpyware\SASWINLO.DLL
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\Common Files\\AOL\\1135549269\\ee\\aolsoftware.exe"=
"c:\\Program Files\\Common Files\\AOL\\1135549269\\ee\\aim6.exe"=
"c:\\Program Files\\Infogrames\\Tactical Ops\\System\\TacticalOps.exe"=
"c:\\StubInstaller.exe"=
"c:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"=
"c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Grisoft\\AVG7\\avginet.exe"=
"c:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"=
"c:\\Program Files\\Grisoft\\AVG7\\avgcc.exe"=
"c:\\Program Files\\Grisoft\\AVG7\\avgemc.exe"=
R1 SABKUTIL;SABKUTIL;c:\program files\SuperAdBlocker.com\Super Ad Blocker\SABKUTIL.sys [2007-02-20 32256]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [2007-01-04 24652]
R2 zumbus;Zune Bus Enumerator Driver;c:\windows\system32\DRIVERS\zumbus.sys [2008-04-29 40704]
S1 SABDIFSV;SABDIFSV;c:\program files\SuperAdBlocker.com\Super Ad Blocker\SABDIFSV.SYS [2005-09-21 5632]
.
Contents of the 'Scheduled Tasks' folder
2008-11-14 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-01-10 14:42]
2008-10-24 c:\windows\Tasks\EasyShare Registration Task.job
- c:\windows\system32\rundll32.exe [2008-04-13 18:12]
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2008-11-15 13:20:07
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
**************************************************************************
.
Completion time: 2008-11-15 13:25:41
ComboFix-quarantined-files.txt 2008-11-15 19:24:37
ComboFix2.txt 2008-11-15 16:21:52
Pre-Run: 53,361,868,800 bytes free
Post-Run: 53,336,608,768 bytes free
196 --- E O F --- 2008-10-24 13:47:50