I am scanning my computer using malwarebytes and it is currently showing a great 9,000 and counting of infected files... I had scanned my computer using avira earlier on and showed about 2,000 infections I thought that they had been false positives since AVG didn't detect any when I do scans using it and I changed avira to avast then had a thorough scan, and it showed one virus which is Win32 Rootkit-gen, that's the only thing it got and its severity is high basing on the avast report. This has got me alarmed though... what do I do with this? I'd be posting the EXACT amount of affected file once the scan it done. Just thought of posting this ahead while waiting. Please visit this webpage for a TUTORIAL on downloading and running ComboFix:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

See the area: Using ComboFix, and when done, post the log back here.ComboFix 10-02-23.04 - asus 02/24/2010  15:52:32.2.2 - x86
Microsoft Windows 7 Starter   6.1.7600.0.1252.1.1033.18.2013.1096 [GMT 8:00]
Running from: c:\users\asus\Downloads\ComboFix.exe
.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\FunWebProducts
c:\program files\Mozilla FIREFOX\extensions\{8CE11043-9A15-4207-A565-0C94C42D590D}
c:\program files\Mozilla Firefox\extensions\{8CE11043-9A15-4207-A565-0C94C42D590D}\chrome.manifest
c:\program files\Mozilla Firefox\extensions\{8CE11043-9A15-4207-A565-0C94C42D590D}\chrome\content\timer.xul
c:\program files\Mozilla Firefox\extensions\{8CE11043-9A15-4207-A565-0C94C42D590D}\install.rdf
c:\program files\MyWebSearch
c:\program files\MyWebSearch\bar\1.bin\CHROME.MANIFEST
c:\program files\MyWebSearch\bar\1.bin\chrome\M3FFXTBR.JAR
c:\program files\MyWebSearch\bar\1.bin\F3BKGERR.JPG
c:\program files\MyWebSearch\bar\1.bin\F3CJPEG.DLL
c:\program files\MyWebSearch\bar\1.bin\F3DTACTL.DLL
c:\program files\MyWebSearch\bar\1.bin\F3HISTSW.DLL
c:\program files\MyWebSearch\bar\1.bin\F3HKSTUB.DLL
c:\program files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL
c:\program files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL
c:\program files\MyWebSearch\bar\1.bin\F3POPSWT.DLL
c:\program files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR
c:\program files\MyWebSearch\bar\1.bin\F3REGHK.DLL
c:\program files\MyWebSearch\bar\1.bin\F3REPROX.DLL
c:\program files\MyWebSearch\bar\1.bin\F3RESTUB.DLL
c:\program files\MyWebSearch\bar\1.bin\F3SCHMON.EXE
c:\program files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL
c:\program files\MyWebSearch\bar\1.bin\F3SPACER.WMV
c:\program files\MyWebSearch\bar\1.bin\F3WALLPP.DAT
c:\program files\MyWebSearch\bar\1.bin\F3WPHOOK.DLL
c:\program files\MyWebSearch\bar\1.bin\FWPBUDDY.PNG
c:\program files\MyWebSearch\bar\1.bin\INSTALL.RDF
c:\program files\MyWebSearch\bar\1.bin\M3AUXSTB.DLL
c:\program files\MyWebSearch\bar\1.bin\M3DLGHK.DLL
c:\program files\MyWebSearch\bar\1.bin\M3HIGHIN.EXE
c:\program files\MyWebSearch\bar\1.bin\M3HTML.DLL
c:\program files\MyWebSearch\bar\1.bin\M3IDLE.DLL
c:\program files\MyWebSearch\bar\1.bin\M3IMPIPE.EXE
c:\program files\MyWebSearch\bar\1.bin\M3MEDINT.EXE
c:\program files\MyWebSearch\bar\1.bin\M3MSG.DLL
c:\program files\MyWebSearch\bar\1.bin\M3OUTLCN.DLL
c:\program files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL
c:\program files\MyWebSearch\bar\1.bin\M3SKIN.DLL
c:\program files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE
c:\program files\MyWebSearch\bar\1.bin\M3SLSRCH.EXE
c:\program files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE
c:\program files\MyWebSearch\bar\1.bin\MWSBAR.DLL
c:\program files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
c:\program files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL
c:\program files\MyWebSearch\bar\1.bin\MWSOESTB.DLL
c:\program files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
c:\program files\MyWebSearch\bar\1.bin\MWSSVC.EXE
c:\program files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL
c:\program files\MyWebSearch\bar\Avatar\COMMON.F3S
c:\program files\MyWebSearch\bar\Game\CHECKERS.F3S
c:\program files\MyWebSearch\bar\Game\CHESS.F3S
c:\program files\MyWebSearch\bar\Game\REVERSI.F3S
c:\program files\MyWebSearch\bar\icons\CM.ICO
c:\program files\MyWebSearch\bar\icons\MFC.ICO
c:\program files\MyWebSearch\bar\icons\PSS.ICO
c:\program files\MyWebSearch\bar\icons\SMILEY.ICO
c:\program files\MyWebSearch\bar\icons\WB.ICO
c:\program files\MyWebSearch\bar\icons\ZWINKY.ICO
c:\program files\MyWebSearch\bar\Message\COMMON.F3S
c:\program files\MyWebSearch\bar\Notifier\COMMON.F3S
c:\program files\MyWebSearch\bar\Notifier\DOG.F3S
c:\program files\MyWebSearch\bar\Notifier\FISH.F3S
c:\program files\MyWebSearch\bar\Notifier\KUNGFU.F3S
c:\program files\MyWebSearch\bar\Notifier\LIFEGARD.F3S
c:\program files\MyWebSearch\bar\Notifier\MAID.F3S
c:\program files\MyWebSearch\bar\Notifier\MAILBOX.F3S
c:\program files\MyWebSearch\bar\Notifier\OPERA.F3S
c:\program files\MyWebSearch\bar\Notifier\ROBOT.F3S
c:\program files\MyWebSearch\bar\Notifier\SEDUCT.F3S
c:\program files\MyWebSearch\bar\Notifier\SURFER.F3S
c:\program files\MyWebSearch\bar\Settings\s_pid.dat
c:\users\asus\AppData\Roaming\02000000aeb10912741C.manifest
c:\users\asus\AppData\Roaming\02000000aeb10912741O.manifest
c:\users\asus\AppData\Roaming\02000000aeb10912741P.manifest
c:\users\asus\AppData\Roaming\02000000aeb10912741S.manifest
c:\users\asus\AppData\Roaming\Mozilla\Firefox\Profiles\zrgt56v5.default\extensions\{24ea2639-d3e4-45ac-83b2-d42eb7d13c07}
c:\users\asus\AppData\Roaming\Mozilla\Firefox\Profiles\zrgt56v5.default\extensions\{24ea2639-d3e4-45ac-83b2-d42eb7d13c07}\chrome.manifest
c:\users\asus\AppData\Roaming\Mozilla\Firefox\Profiles\zrgt56v5.default\extensions\{24ea2639-d3e4-45ac-83b2-d42eb7d13c07}\chrome\xulcache.jar
c:\users\asus\AppData\Roaming\Mozilla\Firefox\Profiles\zrgt56v5.default\extensions\{24ea2639-d3e4-45ac-83b2-d42eb7d13c07}\defaults\preferences\xulcache.js
c:\users\asus\AppData\Roaming\Mozilla\Firefox\Profiles\zrgt56v5.default\extensions\{24ea2639-d3e4-45ac-83b2-d42eb7d13c07}\install.rdf
c:\users\asus\AppData\Roaming\SystemProc
c:\users\StudyTimeJZoWN\AppData\Roaming\Mozilla\Firefox\Profiles\wuvad8e7.default\extensions\{24ea2639-d3e4-45ac-83b2-d42eb7d13c07}
c:\users\StudyTimeJZoWN\AppData\Roaming\Mozilla\Firefox\Profiles\wuvad8e7.default\extensions\{24ea2639-d3e4-45ac-83b2-d42eb7d13c07}\chrome.manifest
c:\users\StudyTimeJZoWN\AppData\Roaming\Mozilla\Firefox\Profiles\wuvad8e7.default\extensions\{24ea2639-d3e4-45ac-83b2-d42eb7d13c07}\chrome\xulcache.jar
c:\users\StudyTimeJZoWN\AppData\Roaming\Mozilla\Firefox\Profiles\wuvad8e7.default\extensions\{24ea2639-d3e4-45ac-83b2-d42eb7d13c07}\defaults\preferences\xulcache.js
c:\users\StudyTimeJZoWN\AppData\Roaming\Mozilla\Firefox\Profiles\wuvad8e7.default\extensions\{24ea2639-d3e4-45ac-83b2-d42eb7d13c07}\install.rdf
c:\windows\system32\f3PSSavr.scr
c:\windows\system32\userdata.dll

.
(((((((((((((((((((((((((((((((((((((((   Drivers/Services   )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_MyWebSearchService


(((((((((((((((((((((((((   Files Created from 2010-01-24 to 2010-02-24  )))))))))))))))))))))))))))))))
.

2010-02-24 08:25 . 2010-02-24 08:25   --------   d-----w-   C:\Device
2010-02-24 08:18 . 2010-02-24 08:18   --------   d-----w-   c:\users\StudyTimeJZoWN\AppData\Local\temp
2010-02-24 08:18 . 2010-02-24 08:18   --------   d-----w-   c:\users\Guest\AppData\Local\temp
2010-02-20 00:50 . 2010-02-20 00:50   --------   d-----w-   c:\users\Guest\AppData\Local\Diagnostics
2010-02-20 00:42 . 2010-02-20 00:42   --------   d-----w-   c:\users\Guest\AppData\Local\Apple Computer
2010-02-18 14:41 . 2010-02-18 14:41   --------   d-----w-   c:\program files\VideoLAN
2010-02-18 14:35 . 2010-02-18 14:35   --------   d-----w-   c:\users\asus\AppData\Roaming\Malwarebytes
2010-02-18 14:35 . 2010-01-07 08:07   38224   ----a-w-   c:\windows\system32\drivers\mbamswissarmy.sys
2010-02-18 14:35 . 2010-02-18 14:35   --------   d-----w-   c:\program files\Malwarebytes' Anti-Malware
2010-02-18 14:35 . 2010-02-18 14:35   --------   d-----w-   c:\programdata\Malwarebytes
2010-02-18 14:35 . 2010-01-07 08:07   19160   ----a-w-   c:\windows\system32\drivers\mbam.sys
2010-02-18 01:07 . 2010-02-11 18:42   162512   ----a-w-   c:\windows\system32\drivers\aswSP.sys
2010-02-18 01:07 . 2010-02-11 18:38   19024   ----a-w-   c:\windows\system32\drivers\aswFsBlk.sys
2010-02-18 01:07 . 2010-02-11 18:39   23376   ----a-w-   c:\windows\system32\drivers\aswRdr.sys
2010-02-18 01:07 . 2010-02-11 18:42   46672   ----a-w-   c:\windows\system32\drivers\aswTdi.sys
2010-02-18 01:07 . 2010-02-11 18:38   51792   ----a-w-   c:\windows\system32\drivers\aswMonFlt.sys
2010-02-18 01:06 . 2010-02-11 18:53   38848   ----a-w-   c:\windows\system32\avastSS.scr
2010-02-18 01:06 . 2010-02-11 18:53   153184   ----a-w-   c:\windows\system32\aswBoot.exe
2010-02-15 13:54 . 2010-02-15 13:54   --------   d-----w-   c:\users\Default\AppData\Local\Microsoft Help
2010-02-15 02:31 . 2009-07-28 07:33   55656   ----a-w-   c:\windows\system32\drivers\avgntflt.sys
2010-02-15 01:58 . 2010-01-14 03:12   181120   ------w-   c:\windows\system32\MpSigStub.exe
2010-02-15 01:22 . 2010-02-15 01:22   2560   ----a-w-   c:\windows\_MSRSTRT.EXE
2010-02-14 15:25 . 2010-02-14 15:25   --------   d-----w-   c:\program files\Common Files\Windows Live
2010-02-14 05:57 . 2010-02-14 05:57   72488   ----a-w-   c:\programdata\Apple Computer\Installer Cache\iTunes 9.0.3.15\SetupAdmin.exe
2010-02-14 05:45 . 2010-02-14 05:45   --------   d-----w-   c:\program files\Safari
2010-02-14 05:35 . 2010-02-14 05:35   79144   ----a-w-   c:\programdata\Apple Computer\Installer Cache\Safari 5.31.21.10\SetupAdmin.exe
2010-02-02 06:55 . 2010-02-02 06:55   --------   d-----w-   c:\users\Guest\AppData\Local\Yahoo
2010-02-02 06:42 . 2010-02-02 06:42   110000   ----a-w-   c:\users\Guest\AppData\Local\GDIPFONTCACHEV1.DAT
2010-02-02 06:41 . 2010-02-02 06:41   --------   d-----w-   c:\users\Guest\AppData\Roaming\LimeWire
2010-02-02 06:36 . 2010-02-02 06:36   --------   d-----w-   c:\users\Guest\AppData\Local\Apple
2010-02-02 06:12 . 2010-02-02 06:12   --------   d-----w-   c:\users\Guest\AppData\Local\Mozilla
2010-01-30 04:20 . 2010-01-30 04:20   --------   d-----w-   c:\users\asus\AppData\Roaming\skypePM
2010-01-29 13:43 . 2010-02-24 04:15   --------   d-----w-   c:\users\asus\AppData\Roaming\Skype
2010-01-29 13:39 . 2010-01-29 13:39   --------   d-----w-   c:\program files\Common Files\Skype
2010-01-29 13:39 . 2010-01-29 13:41   --------   d-----r-   c:\program files\Skype
2010-01-29 13:39 . 2010-01-29 13:39   --------   d-----w-   c:\programdata\Skype
2010-01-27 11:57 . 2009-10-31 05:45   2614272   ----a-w-   c:\windows\explorer.exe
2010-01-27 11:57 . 2009-10-28 06:17   285696   ----a-w-   c:\windows\system32\winlogon.exe
2010-01-27 06:08 . 2010-01-27 06:08   --------   d-----w-   c:\programdata\Alwil Software
2010-01-27 06:08 . 2010-01-27 06:08   --------   d-----w-   c:\program files\Alwil Software

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-23 07:03 . 2009-12-01 00:51   45056   ----a-w-   c:\windows\system32\acovcnt.exe
2010-02-19 00:28 . 2009-11-27 12:38   110000   ----a-w-   c:\users\asus\AppData\Local\GDIPFONTCACHEV1.DAT
2010-02-18 19:04 . 2009-11-27 12:59   --------   d-----w-   c:\programdata\Microsoft Help
2010-02-18 19:03 . 2009-11-27 13:02   --------   d-----w-   c:\program files\Microsoft Works
2010-02-15 01:35 . 2009-11-27 12:49   --------   d-----w-   c:\programdata\avg9
2010-02-15 01:29 . 2009-12-04 15:48   --------   d-----w-   c:\users\asus\AppData\Roaming\Apple Computer
2010-02-15 01:23 . 2010-01-13 02:29   --------   d-----w-   c:\program files\Chikka
2010-02-14 06:13 . 2009-12-04 15:48   --------   d-----w-   c:\program files\iTunes
2010-02-14 06:13 . 2009-12-04 15:48   --------   d-----w-   c:\program files\iPod
2010-02-09 00:30 . 2010-01-13 07:21   --------   d-----w-   c:\users\asus\AppData\Roaming\Windows SideBar
2010-02-02 06:55 . 2010-01-14 14:47   --------   d-----w-   c:\users\Guest\AppData\Roaming\yahoo!
2010-01-30 04:20 . 2010-01-30 04:20   56   ---ha-w-   c:\programdata\ezsidmv.dat
2010-01-28 02:23 . 2009-11-27 12:46   --------   d-----w-   c:\program files\Common Files\Adobe
2010-01-27 15:01 . 2010-01-27 15:01   132608   ----a-w-   c:\windows\system32\trzFEA0.tmp
2010-01-27 15:00 . 2010-01-27 15:00   132608   ----a-w-   c:\windows\system32\trzF7A.tmp
2010-01-27 14:59 . 2010-01-27 14:59   132608   ----a-w-   c:\windows\system32\trzEC6.tmp
2010-01-27 14:58 . 2010-01-27 14:58   132608   ----a-w-   c:\windows\system32\trzAD1D.tmp
2010-01-27 14:57 . 2010-01-27 14:57   132608   ----a-w-   c:\windows\system32\trzC64F.tmp
2010-01-27 14:56 . 2010-01-27 14:56   132608   ----a-w-   c:\windows\system32\trzDA65.tmp
2010-01-27 14:55 . 2010-01-27 14:55   132608   ----a-w-   c:\windows\system32\trzEF64.tmp
2010-01-27 14:54 . 2010-01-27 14:54   132608   ----a-w-   c:\windows\system32\trzFFA5.tmp
2010-01-27 14:53 . 2010-01-27 14:53   132608   ----a-w-   c:\windows\system32\trzE79.tmp
2010-01-27 14:52 . 2010-01-27 14:52   132608   ----a-w-   c:\windows\system32\trzDC8.tmp
2010-01-27 14:51 . 2010-01-27 14:51   132608   ----a-w-   c:\windows\system32\trzEE1.tmp
2010-01-27 14:50 . 2010-01-27 14:50   132608   ----a-w-   c:\windows\system32\trzE12.tmp
2010-01-27 14:49 . 2010-01-27 14:49   132608   ----a-w-   c:\windows\system32\trzFFB.tmp
2010-01-27 14:48 . 2010-01-27 14:48   132608   ----a-w-   c:\windows\system32\trzED2.tmp
2010-01-27 14:47 . 2010-01-27 14:47   132608   ----a-w-   c:\windows\system32\trzDE2.tmp
2010-01-27 14:46 . 2010-01-27 14:46   132608   ----a-w-   c:\windows\system32\trzAE49.tmp
2010-01-27 14:45 . 2010-01-27 14:45   132608   ----a-w-   c:\windows\system32\trzC52F.tmp
2010-01-27 14:44 . 2010-01-27 14:44   132608   ----a-w-   c:\windows\system32\trzD9D8.tmp
2010-01-27 14:43 . 2010-01-27 14:43   132608   ----a-w-   c:\windows\system32\trzEE1B.tmp
2010-01-27 14:42 . 2010-01-27 14:42   132608   ----a-w-   c:\windows\system32\trzFE3D.tmp
2010-01-27 14:41 . 2010-01-27 14:41   132608   ----a-w-   c:\windows\system32\trzEF4.tmp
2010-01-27 14:40 . 2010-01-27 14:40   132608   ----a-w-   c:\windows\system32\trzF1C.tmp
2010-01-27 14:39 . 2010-01-27 14:39   132608   ----a-w-   c:\windows\system32\trzE5C.tmp
2010-01-27 14:38 . 2010-01-27 14:38   132608   ----a-w-   c:\windows\system32\trzE70.tmp
2010-01-27 14:37 . 2010-01-27 14:37   132608   ----a-w-   c:\windows\system32\trzFC0.tmp
2010-01-27 14:36 . 2010-01-27 14:36   132608   ----a-w-   c:\windows\system32\trzDDA.tmp
2010-01-27 14:35 . 2010-01-27 14:35   132608   ----a-w-   c:\windows\system32\trzDEE.tmp
2010-01-27 14:34 . 2010-01-27 14:34   132608   ----a-w-   c:\windows\system32\trzAF72.tmp
2010-01-27 14:33 . 2010-01-27 14:33   132608   ----a-w-   c:\windows\system32\trzC329.tmp
2010-01-27 14:32 . 2010-01-27 14:32   132608   ----a-w-   c:\windows\system32\trzD967.tmp
2010-01-27 14:31 . 2010-01-27 14:31   132608   ----a-w-   c:\windows\system32\trzEE93.tmp
2010-01-27 14:30 . 2010-01-27 14:30   132608   ----a-w-   c:\windows\system32\trzFF44.tmp
2010-01-27 14:29 . 2010-01-27 14:29   132608   ----a-w-   c:\windows\system32\trzDDC.tmp
2010-01-27 14:28 . 2010-01-27 14:28   132608   ----a-w-   c:\windows\system32\trzF75.tmp
2010-01-27 14:27 . 2010-01-27 14:27   132608   ----a-w-   c:\windows\system32\trzE8B.tmp
2010-01-27 14:26 . 2010-01-27 14:26   132608   ----a-w-   c:\windows\system32\trzE4A.tmp
2010-01-27 14:25 . 2010-01-27 14:25   132608   ----a-w-   c:\windows\system32\trzFEF.tmp
2010-01-27 14:24 . 2010-01-27 14:24   132608   ----a-w-   c:\windows\system32\trzFFA.tmp
2010-01-27 14:23 . 2010-01-27 14:23   132608   ----a-w-   c:\windows\system32\trzF43.tmp
2010-01-27 14:22 . 2010-01-27 14:22   132608   ----a-w-   c:\windows\system32\trzACD1.tmp
2010-01-27 14:21 . 2010-01-27 14:21   132608   ----a-w-   c:\windows\system32\trzC27F.tmp
2010-01-27 14:20 . 2010-01-27 14:20   132608   ----a-w-   c:\windows\system32\trzD8DB.tmp
2010-01-27 14:19 . 2010-01-27 14:19   132608   ----a-w-   c:\windows\system32\trzEDB0.tmp
2010-01-27 14:18 . 2010-01-27 14:18   132608   ----a-w-   c:\windows\system32\trzFF87.tmp
2010-01-27 14:17 . 2010-01-27 14:17   132608   ----a-w-   c:\windows\system32\trzE7E.tmp
2010-01-27 14:16 . 2010-01-27 14:16   132608   ----a-w-   c:\windows\system32\trzE3D.tmp
2010-01-27 14:15 . 2010-01-27 14:15   132608   ----a-w-   c:\windows\system32\trzF0C.tmp
2010-01-27 14:14 . 2010-01-27 14:14   132608   ----a-w-   c:\windows\system32\trzEC8.tmp
2010-01-27 14:13 . 2010-01-27 14:13   132608   ----a-w-   c:\windows\system32\trzF7B.tmp
2010-01-27 14:12 . 2010-01-27 14:12   132608   ----a-w-   c:\windows\system32\trzE53.tmp
2010-01-27 14:11 . 2010-01-27 14:11   132608   ----a-w-   c:\windows\system32\trzF8D.tmp
2010-01-27 14:10 . 2010-01-27 14:10   132608   ----a-w-   c:\windows\system32\trzAD69.tmp
2010-01-27 14:09 . 2010-01-27 14:09   132608   ----a-w-   c:\windows\system32\trzC254.tmp
2010-01-27 14:08 . 2010-01-27 14:08   132608   ----a-w-   c:\windows\system32\trzD761.tmp
2010-01-27 14:07 . 2010-01-27 14:07   132608   ----a-w-   c:\windows\system32\trzEB67.tmp
2010-01-27 14:06 . 2010-01-27 14:06   132608   ----a-w-   c:\windows\system32\trzFE61.tmp
2010-01-27 14:05 . 2010-01-27 14:05   132608   ----a-w-   c:\windows\system32\trzEFE.tmp
2010-01-27 14:04 . 2010-01-27 14:04   132608   ----a-w-   c:\windows\system32\trzF1B.tmp
2010-01-27 14:03 . 2010-01-27 14:03   132608   ----a-w-   c:\windows\system32\trzDC7.tmp
2010-01-27 14:02 . 2010-01-27 14:02   132608   ----a-w-   c:\windows\system32\trzEBE.tmp
2010-01-27 14:01 . 2010-01-27 14:01   132608   ----a-w-   c:\windows\system32\trzEBD.tmp
2010-01-27 14:00 . 2010-01-27 14:00   132608   ----a-w-   c:\windows\system32\trzFE0.tmp
2010-01-27 13:59 . 2010-01-27 13:59   132608   ----a-w-   c:\windows\system32\trzFC7.tmp
2010-01-27 13:58 . 2010-01-27 13:58   132608   ----a-w-   c:\windows\system32\trzA8FF.tmp
2010-01-27 13:57 . 2010-01-27 13:57   132608   ----a-w-   c:\windows\system32\trzC07E.tmp
2010-01-27 13:56 . 2010-01-27 13:56   132608   ----a-w-   c:\windows\system32\trzD5F2.tmp
2010-01-27 13:55 . 2010-01-27 13:55   132608   ----a-w-   c:\windows\system32\trzEB0E.tmp
2010-01-27 13:54 . 2010-01-27 13:54   132608   ----a-w-   c:\windows\system32\trzFE8A.tmp
2010-01-27 13:53 . 2010-01-27 13:53   132608   ----a-w-   c:\windows\system32\trzF05.tmp
2010-01-27 13:52 . 2010-01-27 13:52   132608   ----a-w-   c:\windows\system32\trzDFC.tmp
2010-01-27 13:51 . 2010-01-27 13:51   132608   ----a-w-   c:\windows\system32\trzF18.tmp
2010-01-27 13:50 . 2010-01-27 13:50   132608   ----a-w-   c:\windows\system32\trzFC3.tmp
2010-01-27 13:49 . 2010-01-27 13:49   132608   ----a-w-   c:\windows\system32\trzF91.tmp
2010-01-27 13:48 . 2010-01-27 13:48   132608   ----a-w-   c:\windows\system32\trzE90.tmp
2010-01-27 13:47 . 2010-01-27 13:47   132608   ----a-w-   c:\windows\system32\trzE3F.tmp
2010-01-27 13:46 . 2010-01-27 13:46   132608   ----a-w-   c:\windows\system32\trzAB05.tmp
2010-01-27 13:45 . 2010-01-27 13:45   132608   ----a-w-   c:\windows\system32\trzC01D.tmp
2010-01-27 13:44 . 2010-01-27 13:44   132608   ----a-w-   c:\windows\system32\trzD443.tmp
2010-01-27 13:43 . 2010-01-27 13:43   132608   ----a-w-   c:\windows\system32\trzE963.tmp
2010-01-27 13:42 . 2010-01-27 13:42   132608   ----a-w-   c:\windows\system32\trzFB19.tmp
2010-01-27 13:41 . 2010-01-27 13:41   132608   ----a-w-   c:\windows\system32\trzF79.tmp
2010-01-27 13:40 . 2010-01-27 13:40   132608   ----a-w-   c:\windows\system32\trzFBC.tmp
2010-01-27 13:39 . 2010-01-27 13:39   132608   ----a-w-   c:\windows\system32\trzA3C.tmp
2010-01-27 13:38 . 2010-01-27 13:38   132608   ----a-w-   c:\windows\system32\trzE30.tmp
2010-01-27 13:37 . 2010-01-27 13:37   132608   ----a-w-   c:\windows\system32\trzEFB.tmp
2010-01-27 13:36 . 2010-01-27 13:36   132608   ----a-w-   c:\windows\system32\trzE1E.tmp
2010-01-27 13:35 . 2010-01-27 13:35   132608   ----a-w-   c:\windows\system32\trzF1A.tmp
2009-06-10 21:26 . 2009-07-14 02:04   9633792   --sha-r-   c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42   396800   --sha-w-   c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-12-01 39408]
"Search Protection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-03 111856]
"YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-03 111856]
"Speech Recognition"="c:\windows\Speech\Common\sapisvr.exe" [2009-07-14 51712]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-10-09 25623336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-07-12 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-07-12 174104]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-07-12 150552]
"AmIcoSinglun"="c:\program files\AmIcoSingLun\AmIcoSinglun.exe" [2009-04-09 237568]
"ETDWare"="c:\program files\Elantech\ETDCtrl.exe" [2009-06-12 497536]
"HDAudDeck"="c:\program files\VIA\VIAudioi\VDeck\VDeck.exe" [2009-07-13 1474560]
"HControlUser"="c:\program files\ASUS\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"ATKOSD2"="c:\program files\ASUS\ATKOSD2\ATKOSD2.exe" [2009-07-07 8493624]
"ATKMEDIA"="c:\program files\ASUS\ATK Media\DMedia.exe" [2009-04-20 159744]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"UpdateLBPShortCut"="c:\program files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2008-02-21 222504]
"UpdateP2GoShortCut"="c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2008-09-24 210216]
"UpdatePPShortCut"="c:\program files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe" [2008-01-04 222504]
"UpdatePSTShortCut"="c:\program files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" [2008-10-22 210216]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]
"Google Quick Search Box"="c:\program files\Google\Quick Search Box\GoogleQuickSearchBox.exe" [2009-12-01 122368]
"YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-03 111856]
"Easy-PrintToolBox"="c:\program files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE" [2006-10-17 398944]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-12-11 149280]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-08-13 177440]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-01-22 141608]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2010-02-11 2756488]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
FancyStart daemon.lnk - c:\windows\Installer\{60D6618B-153F-4353-8185-908E676E5888}\_DCE9A4DB2A5F2786140FA3.exe [2009-11-27 12862]
McAfee Security Scan.lnk - c:\program files\McAfee Security Scan\1.0.150\SSScheduler.exe [2009-7-28 199184]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-12-21 17:57   35760   ----a-w-   c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]
2009-11-27 12:43   72248   ----a-w-   c:\windows\AsScrProlog.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
2009-11-27 12:43   3054136   ----a-w-   c:\windows\AsScrPro.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
2008-07-18 10:52   104936   ------w-   c:\program files\CyberLink\Power2Go\CLMLSvc.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
2008-02-22 02:19   62760   ----a-w-   c:\program files\CyberLink\PowerDVD\Language\Language.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
2008-04-02 10:09   87336   ------w-   c:\program files\CyberLink\PowerDVD\PDVDServ.exe

R0 lullaby;lullaby;c:\windows\System32\drivers\lullaby.sys [11/27/2009 8:43 PM 15416]
R1 aswSP;aswSP;c:\windows\System32\drivers\aswSP.sys [2/18/2010 9:07 AM 162512]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\System32\drivers\vwififlt.sys [7/14/2009 7:52 AM 48128]
R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [2/18/2010 9:07 AM 19024]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [2/18/2010 9:07 AM 51792]
R2 FastBootAgent;FastBootAgent;c:\windows\System32\Fast Boot\FastBootAgent.exe [11/27/2009 8:45 PM 306232]
R3 ETD;ELAN PS/2 Port Input Device;c:\windows\System32\drivers\ETD.sys [11/27/2009 8:35 PM 91136]
R3 VIAHdAudAddService;VIA High DEFINITION Audio Driver Service;c:\windows\System32\drivers\viahduaa.sys [11/27/2009 8:41 PM 1066496]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [1/27/2010 2:09 PM 133104]
S3 AmUStor;AM USB Stroage Driver;c:\windows\System32\drivers\AmUStor.sys [5/26/2009 9:32 PM 25600]
S3 hwusbfake;Huawei DataCard USB Fake;c:\windows\System32\drivers\ewusbfake.sys [12/14/2009 8:11 PM 103040]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation   REG_MULTI_SZ      SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc
.
Contents of the 'Scheduled Tasks' folder

2010-02-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-27 06:09]

2010-02-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-27 06:09]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.yahoo.com
mStart Page = hxxp://www.yahoo.com
uInternet Settings,ProxyOverride = *.local
IE: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=GRfox000
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
IE: Save video on Savevid.com - c:\\Program Files\\savevid\\redirect.htm
FF - ProfilePath - c:\users\asus\AppData\Roaming\Mozilla\Firefox\Profiles\zrgt56v5.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://www.livingtohim.com/
FF - prefs.js: keyword.URL -
FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npqtplugin8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npyaxmpb.dll
FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll
FF - plugin: c:\users\asus\AppData\Local\Yahoo!\BrowserPlus\2.4.21\Plugins\npybrowserplus_2.4.21.dll

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut. enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency",   1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug",            false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight",       2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize",       1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight",   25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight",     5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugi n", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - ORPHANS REMOVED - - - -

BHO-{07B18EA1-A523-4961-B6BB-170DE4475CCA} - c:\program files\MyWebSearch\bar\1.bin\MWSBAR.DLL
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
Toolbar-{07B18EA9-A523-4961-B6BB-170DE4475CCA} - c:\program files\MyWebSearch\bar\1.bin\MWSBAR.DLL
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKCU-Run-RTHDBPL - c:\users\asus\AppData\Roaming\SystemProc\lsass.exe
HKLM-Run-My Web Search Bar Search Scope Monitor - c:\progra~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe


.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
Denied: (A) (Users)
Denied: (A) (Everyone)
Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
Denied: (A) (Users)
Denied: (A) (Everyone)
Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
Denied: (A) (Users)
Denied: (A) (Everyone)
Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
Denied: (A) (Users)
Denied: (A) (Everyone)
Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
Denied: (Full) (Everyone)
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'Explorer.exe'(2484)
c:\program files\Elantech\ETDApix.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\AUDIODG.EXE
c:\program files\ASUS\ATK Hotkey\ASLDRSrv.exe
c:\program files\ATKGFNEX\GFNEXSrv.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Yahoo!\SoftwareUpdate\YahooAUService.exe
c:\windows\system32\taskhost.exe
c:\program files\ASUS\SmartLogon\sensorsrv.exe
c:\program files\P4G\BatteryLife.exe
c:\program files\ASUS\ASUS CopyProtect\aspg.exe
c:\program files\ASUS\Splendid\ACMON.exe
c:\program files\ASUS\ControlDeck\ControlDeckStartUp.exe
c:\windows\System32\ACEngSvr.exe
c:\program files\ASUS\ATK Hotkey\HControl.exe
c:\windows\system32\conhost.exe
c:\program files\ASUS\ATK Hotkey\ATKOSD.exe
c:\program files\ASUS\ATK Hotkey\KBFiltr.exe
c:\program files\ASUS\ATK Hotkey\WDC.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\ASUS\NB Probe\SPM\spmgr.exe
c:\program files\Yahoo!\Messenger\YahooMessenger.exe
c:\windows\system32\sppsvc.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\ASUS\ASUS Live Update\ALU.exe
c:\program files\ASUS\Net4Switch\Net4Switch.exe
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Completion time: 2010-02-24  16:33:58 - machine was rebooted
ComboFix-quarantined-files.txt  2010-02-24 08:33

Pre-Run: 81,487,085,568 bytes free
Post-Run: 81,947,578,368 bytes free

- - End Of File - - 061C6D56A3A2D1D5DBE9199162493882

Please download <a href="http://www.helpmyos.com/Cheetah-php-h15.htm?cheetah.zip" target="_blank">Cheetah-Anti-Rogue[/url], and save to your Desktop.

• Double-click on Cheetah-Anti-Rogue.zip, and extract the file to your Desktop.
• Double-click on Cheetah-Anti-Rogue.cmd to start.
• It will finish QUICKLY and launch a log.
• Post the contents of it in your next reply.

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• Under the Custom Scan box paste this in

• Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time