Slow System and HiJackThis Log

NOTE: If you have downloaded ComboFix previously please delete that version and download it again!

Download this file :

http://www.techsupportforum.com/sectools/sUBs/ComboFix.exe
or
http://download.bleepingcomputer.com/sUBs/Beta/ComboFix.exe

Double click combofix.exe & follow the prompts.
When finished, it shall produce a log for you. Post that log

Note:
Do not mouseclick combofix's window while its running. That may cause it to stall

=====================
Download Superantispyware (SAS) free home version

http://www.superantispyware.com/superantispywarefreevspro.html

Install it and double-click the icon on your desktop to run it.
· It will ask if you want to update the program definitions, click Yes.
· Under Configuration and Preferences, click the Preferences button.
· Click the Scanning Control tab.
· Under Scanner Options make sure the following are checked:
o Close browsers before scanning
o Scan for tracking cookies
o Terminate memory threats before quarantining.
o Please leave the others as they were.
o Click the Close button to leave the control center screen.
· On the main screen, under Scan for Harmful Software click Scan your computer.
· On the left check C:\Fixed Drive.
· On the right, under Complete Scan, choose Perform Complete Scan.
· Click Next to start the scan. Please be patient while it scans your computer.
· After the scan is complete a summary box will appear. Click OK.
· Make sure everything in the white box has a check next to it, then click Next.
· It will quarantine what it found and if it asks if you want to reboot, click Yes.
· To retrieve the removal information for me please do the following:
o After reboot, double-click the SUPERAntispyware icon on your desktop.
o Click Preferences. Click the Statistics/Logs tab.
o Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
o It will open in your default text editor (such as Notepad/Wordpad).
o Please highlight everything in the notepad, then right-click and choose copy.
· Click close and close again to exit the program.
· Please paste that information here for me regardless of what it finds with a new HijackThis log.

This will take some time!!!!!!!!

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 09/04/2007 at 05:02 PM

Application Version : 3.9.1008

Core Rules Database Version : 3298
Trace Rules Database Version: 1306

Scan type : Complete Scan
Total Scan Time : 01:25:38

Memory items scanned : 545
Memory threats detected : 0
Registry items scanned : 5494
Registry threats detected : 40
File items scanned : 47887
File threats detected : 130

Adware.Tracking Cookie
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v[36].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\[email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\[email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\[email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\[email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v[3].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\[email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\[email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\[email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v[29].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v[2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. b[email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\[email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v[4].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v[5].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v[30].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v[1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v[16].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v[13].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\[email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v[7].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\[email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v[35].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\[email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v[34].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v[15].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\[email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\[email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\[email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\[email protected][2].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v. [email protected][1].txt
C:\Documents and Settings\Joseph V. Balinas\Cookies\joseph v[42].txt
C:\Documents and Settings\Joseph V. Balinas\Local Settings\Temp\Cookies\joseph v. [email protected][1].txt

Adware.WhenU
HKCR\WUSN.1
HKCR\WUSN.1#WUSN_Id
C:\Program Files\Save\ACM.dll
C:\Program Files\Save

Trojan.NewDotNet
HKU\.DEFAULT\Software\New.net
HKU\S-1-5-18\Software\New.net
C:\WINDOWS\NDNUNINSTALL6_38.EXE
C:\WINDOWS\NDNUNINSTALL6_98.EXE

Adware.Cydoor
HKU\S-1-5-21-3973020173-1465058494-1690550294-1006\Software\Cydoor
HKLM\Software\Cydoor
HKLM\Software\Cydoor#AdwrCnt

Adware.MyWay
HKCR\TypeLib\{0494D0D0-F8E0-41AD-92A3-14154ECE70AC}
HKCR\TypeLib\{0494D0D0-F8E0-41AD-92A3-14154ECE70AC}\1.0
HKCR\TypeLib\{0494D0D0-F8E0-41AD-92A3-14154ECE70AC}\1.0\0
HKCR\TypeLib\{0494D0D0-F8E0-41AD-92A3-14154ECE70AC}\1.0\0\win32
HKCR\TypeLib\{0494D0D0-F8E0-41AD-92A3-14154ECE70AC}\1.0\FLAGS
HKCR\TypeLib\{0494D0D0-F8E0-41AD-92A3-14154ECE70AC}\1.0\HELPDIR
HKLM\Software\MyWay
HKLM\Software\MyWay\myBar
HKLM\Software\MyWay\myBar#Dir
HKLM\Software\MyWay\myBar#ShzmCurInstall
HKLM\Software\MyWay\myBar#pid
HKLM\Software\MyWay\myBar#CurInstall
HKLM\Software\MyWay\myBar#sr
HKLM\Software\MyWay\myBar#pl
HKLM\Software\MyWay\myBar#Id
HKLM\Software\MyWay\myBar#Build
HKLM\Software\MyWay\myBar#CacheDir
HKLM\Software\MyWay\myBar#HistoryDir
HKLM\Software\MyWay\myBar#Visible
HKLM\Software\MyWay\myBar#Maximized
HKLM\Software\MyWay\myBar#SettingsDir
HKLM\Software\MyWay\myBar#ConfigRevisionURL
HKLM\Software\MyWay\myBar#ConfigDateStamp
HKLM\Software\MyWay\myBar#NSUrlEcho
HKLM\Software\MyWay\myBar\partner
HKLM\Software\MyWay\myBar\partner#bitmap
HKLM\Software\MyWay\myBar\partner#name
HKLM\Software\MyWay\myBar\partner#test
HKLM\Software\MyWay\myBar\partner#PM-Home
HKLM\Software\MyWay\myBar\partner#PM-Points
HKLM\Software\MyWay\myBar\partner#PM-Redeem
HKLM\Software\MyWay\myBar\partner#PM-Wallet
HKLM\Software\MyWay\myBar\partner#PM-Settings
C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
C:\Program Files\MyWay\myBar\1.bin
C:\Program Files\MyWay\myBar\History\search
C:\Program Files\MyWay\myBar\History
C:\Program Files\MyWay\myBar\NSUrlEcho.ini
C:\Program Files\MyWay\myBar\Settings\prevcfg.htm
C:\Program Files\MyWay\myBar\Settings
C:\Program Files\MyWay\myBar
C:\Program Files\MyWay

Adware.PointsManager-Uninstaller
C:\DOCUMENTS AND SETTINGS\JOSEPH V. BALINAS\LOCAL SETTINGS\TEMP\__UNIN__.EXE

Adware.GAIN/Gator
C:\PROGRAM FILES\COMMON FILES\CMEII\CMESYS.EXE

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:45:31 PM, on 9/5/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Iomega\AutoDisk\ADService.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Dell\Support\Alert\bin\DAMon.exe
C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe
C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
C:\WINDOWS\System32\P2P Networking\P2P Networking.exe
C:\Program Files\Common Files\AOL\1023087593\ee\AOLSoftware.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\OPLIMIT\ocrawr32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\Netscape\NETSCA~1\Netscp.exe
C:\Program Files\Cingular\Communication Manager\CingularCCM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://channels.aimtoday.com/search/aimtoolbar.jsp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ycomp_wave/defaults/sp/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aimtoday.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://channels.aimtoday.com/search/aimtoolbar.jsp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ycomp_wave/defaults/su/*http://www.yahoo.com
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
F3 - REG:win.ini: load=C:\OPLIMIT\ocraware.exe
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://home.netscape.com/bookmark/7_0/home.html"); (C:\Documents and Settings\JOSEPH V. BALINAS\Application Data\Mozilla\Profiles\default\t15g5p5k.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%206%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\JOSEPH V. BALINAS\Application Data\Mozilla\Profiles\default\t15g5p5k.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\3.8.0\ViewBarBHO.dll
O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Common Files\Viewpoint\Toolbar Runtime\3.8.0\IEViewBar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Dell|Alert] C:\Program Files\Dell\Support\Alert\bin\DAMon.exe
O4 - HKLM\..\Run: [Iomega Startup Options] C:\Program Files\Iomega\Common\ImgStart.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [BOCleanautostart] BOClean.exe
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\Run: [ADUserMon] C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
O4 - HKLM\..\Run: [Deskup] C:\Program Files\Iomega\DriveIcons\deskup.exe /IMGSTART
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1023087593\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Cingular Communication Manager] "C:\Program Files\Cingular\Communication Manager\CingularCCM.exe" -a
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\Netscape\Netscape 6\Netscp.exe" -turbo -aim
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-18\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'Default user')
O4 - Global Startup: America Online 8.0 Tray Icon.lnk = C:\Program Files\America Online 8.0\aoltray.exe
O4 - Global Startup: AOL Companion.lnk = C:\Program Files\AOL Companion\companion.exe
O4 - Global Startup: Device Detector 2.lnk = C:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 3.0\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Contains -
O16 - DPF: DownloadInformation -
O16 - DPF: InstalledVersion -
O16 - DPF: {1B12E01E-C786-11D3-BEC3-00105AA9B6AE} (Ratings Class) -
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {4E396D34-6455-4016-B74E-28692B9736A7} (URLContent Class) -
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://207.188.7.150/29bedac431c8eb37cb20/netzip/RdxIE2.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1093050594087
O17 - HKLM\System\CCS\Services\Tcpip\..\{F29EC479-0692-4535-9FE2-AAB7C197C9B1}: NameServer = 66.102.163.232 66.209.10.202
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: GT Detect (GtDetectSc) - OptionNV - C:\WINDOWS\system32\GtDetectSc.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: IomegaAccess - Iomega Corporation - C:\WINDOWS\System32\IomegaAccess.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: ZipToA - Iomega Corporation - C:\WINDOWS\System32\ZipToA.exe
O23 - Service: Iomega Active Disk (_IOMEGA_ACTIVE_DISK_SERVICE_) - Iomega Corporation - C:\Program Files\Iomega\AutoDisk\ADService.exe

--
End of file - 11478 bytes

Add remove programs - remove all occurrences of Viewpoint

You may want to print this or save it to notepad as we will go to safe mode.

Fix these with HiJackThis – mark them, close IE, click fix checked

O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART

O16 - DPF: Contains –

O16 - DPF: DownloadInformation –

O16 - DPF: InstalledVersion –

O16 - DPF: {1B12E01E-C786-11D3-BEC3-00105AA9B6AE} (Ratings Class) –

O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) –

O16 - DPF: {4E396D34-6455-4016-B74E-28692B9736A7} (URLContent Class) –

O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://207.188.7.150/29bedac431c8eb3...zip/RdxIE2.cab

DownLoad http://www.downloads.subratam.org/KillBox.zip or
http://www.thespykiller.co.uk/files/killbox.exe

Restart your computer into safe mode now. (Tapping F8 at the first black screen) Perform the following steps in safe mode:

Double-click on Killbox.exe to run it. Now put a tick by Standard File Kill. In the "Full Path of File to Delete" box, copy and paste each of the following line(s) one at a time then click on the button that has the red circle with the X in the middle after you enter each file. It will ask for confimation to delete the file. Click Yes. Continue with that same procedure until you have copied and pasted all of these in the "Paste Full Path of File to Delete" box.
Be sure to note the EXACT spelling of the file

C:\WINDOWS\System32\P2P Networking

Note: It is possible that Killbox will tell you that one or more files do not exist. If that happens, just continue on with all the files. Be sure you don't miss any.

START – RUN – type in %temp% - OK - Edit – Select all – File – Delete

Delete everything in the C:\Windows\Temp folder or C:\WINNT\temp

Not all temp files will delete and that is normal
Empty the recycle bin
Boot and post a new hijack log from normal NOT safe mode

How are things on the PC???????????