W ad

20:38 . 2010-01-15 20:38 -------- d-----w- C:\VundoFix Backups2010-01-15 20:33 . 2010-01-15 20:33 388096 ----a-r- c:\documents and settings\Steve Cooper\Application Data\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe2010-01-15 20:33 . 2010-01-15 20:33 -------- d-----w- c:\program files\TrendMicro2010-01-15 19:27 . 2009-11-21 15:51 471552 ------w- c:\windows\system32\dllcache\aclayers.dll2010-01-15 19:17 . 2009-06-21 21:44 153088 ------w- c:\windows\system32\dllcache\triedit.dll2010-01-15 04:46 . 2009-12-02 13:19 15880 ----a-w- c:\windows\system32\lsdelete.exe2010-01-15 04:39 . 2009-12-02 13:19 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys2010-01-15 04:39 . 2010-01-15 04:39 -------- dc----w- c:\windows\system32\DRVSTORE2010-01-15 04:39 . 2010-01-27 10:47 862040 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\threatwork.exe2010-01-15 04:39 . 2010-01-27 10:46 206944 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\lavamessage.dll2010-01-15 04:39 . 2010-01-27 10:46 390288 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\lavalicense.dll2010-01-15 04:39 . 2010-01-27 10:46 537576 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aawapi.dll2010-01-15 04:39 . 2010-01-27 10:45 389272 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\UpdateManager.dll2010-01-15 04:39 . 2010-01-27 10:45 8 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Savapibridge.dll2010-01-15 04:38 . 2010-01-27 10:45 6296864 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Resources.dll2010-01-15 04:38 . 2010-01-27 10:43 933120 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\CEAPI.dll2010-01-15 04:38 . 2010-01-27 10:42 816784 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-AwareCommand.exe2010-01-15 04:38 . 2010-01-27 10:41 823928 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-AwareAdmin.exe2010-01-15 04:38 . 2010-01-27 10:40 1643272 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-Aware.exe2010-01-15 04:38 . 2010-01-27 10:39 788880 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AAWTray.exe2010-01-15 04:38 . 2010-01-28 10:37 1181328 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AAWService.exe2010-01-15 04:36 . 2010-01-15 04:37 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}2010-01-15 04:36 . 2009-12-07 14:10 2953352 -c--a-w- c:\documents and settings\All Users\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}\Ad-AwareInstallation.exe2010-01-15 04:36 . 2010-01-15 04:37 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft2010-01-15 04:36 . 2010-01-15 04:36 -------- d-----w- c:\program files\Lavasoft2010-01-15 02:32 . 2010-01-15 02:32

Fort Lewis Travel Camp Washington National Guard - Camp Murray Beach Fairchild AFB - Clear Lake Recreation Area NAS Whidbey Island - Cliffside RV Park McChord AFB - Holiday Park FAM Camp NS Everett - Pacific Beach Resort Grays Harbor CGS - Westport Recreation Park Fairchild AFB - FAM Camp Jim Cheek Naval Ration Station (T) - Jim Creek Wilderness Recreation Area Eligibility: AD, NG, Res, Ret, DoD Civ.Telephone: (253) 967-8282/7744Season: All yearAddress: Nco Beach Road, Fort Lewis, Joint Base Lewis-McChord, WA 98433Reservations: Accepted 60 days in advance Type of Site Spaces Hook-Ups RV Sites 48 W/E/S RV Sites 10 W/E Tent 5 N/A Cabins 10 Full Notes: N/AReturn to State Map Eligibility: AD, NG, Res, Ret, DoD Civ.Telephone: (253) 554-5411Season: All yearAddress: Camp Murray Beach, Tillicum, WA 98492-5004Reservations: Accepted 30 days in advance. Type of Site Spaces Hook-Ups RV Sites 28 W/E/S Tent 7 N/A Overflow Unlimited N/A Notes: N/AReturn to State Map Eligibility: AD, NG, Res, Ret, DoD Civ.Telephone: (509) 299-5129 or (509) 247-5920Season: Mid Apr - Mid Sep.Address: S 14824 Clear Lake Road, Cheney, WA 99004-5000 Reservations: Accepted Type of Site Spaces Hook-Ups RV Sites 24 W/E/S Overflow 6 W/E Tent 20 W Dry Camp Many N/A Yurt 1 N/A Cabins 7 Full Notes: N/ANAS Whidbey Island - Cliffside RV ParkCliffside Campground Eligibility: AD, NG, Res, Ret, DoD Civ.Telephone: (360) 257-2649 Season: All yearAddress: 1175 W Midway St, Bldg. #973, Oak Harbor, WA 98278 Reservations: Accepted Type of Site Spaces Hook-Ups RV Sites 57 W/E/S Tent 10 N/A Yurt 6 E Notes: Rocky Point Camp is nearby, does not accept reservations but will always have space.Return to State Map Eligibility: AD, NG, Res, Ret, DoD Civ.Telephone: (253) 984-5488Season: All yearAddress: Holiday Dr., JBLM, McChord AFB, WA, 98438Reservations: Call for availability Type of Site Spaces Hook-Ups RV Sites 37 W/E/S Tent 12 N/A Notes: N/AReturn to State Map Eligibility: AD, NG, Res, Ret, DoD Civ.Telephone: (360) 276-4414 or (888) 463-6697Season: All yearAddress: 108 1st St N, Pacific Beach, WA 98571Reservations: Recommended Type of Site Spaces Hook-Ups RV Sites 43 W/E/S Camper/Tent 19 N/A Lodging 60 Full Eligibility: AD, NG, Res, Ret, DoD Civ.Telephone: (206) 217-6129/6357/6359Season: 1 Mar - 31 OctAddress: 1519 Alaskan Way South, Seattle, WA 98134Reservations: Required Type of Site Spaces Hook-Ups RV Sites 5 W/E Tent 7 N/A Notes: N/AReturn to State Map Eligibility: AD, NG, Res, Ret, DoD Civ.Telephone: (509) 247-5920 / 244-3247Season: All yearAddress: 610 N Depot, Fairchild AFB, WA 99011 Reservations: Call for availability Type of Site Spaces Hook-Ups RV Sites 32 W/E/S Overflow Unlimited N/A Notes: Stay limited to 14 days on full hookups during peak season. Total use not to exceed 90 consecutive days. $2.00 charge for Air Conditioning.Return to State Map Eligibility: AD, NG, Res, Ret, DoD Civ.Telephone: (425) 304-5315/5363Season: All yearAddress: 21027 Jim Creek Road, Arlington, WA 98223-8599 Reservations: Accepted Type of Site Spaces Hook-Ups RV Sites 2 W/E/S Telephone RV Sites 12 W/E Camper/Tent 20 N/A Remote-Walk In 3 N/A Group Sites 25 W/E Lodge/Apt 13 Full Notes:

When I went to disable windows firewall, the security center reported that McAfee personal firewall plus was on. I uninstalled this program with McAfee antivirus. I was unable to find it to turn it off or remove it, so I ran combofix with it on. Also, combofix detected the McAfee antivirus, which I couldn't turn off. Are these just remnants or are the programs still running in the background?Here is the combofix log:ComboFix 10-01-27.06 - Steve Cooper 01/28/2010 8:21.3.2 - x86Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1195 [GMT -6:00]Running from: c:\documents and settings\Steve Cooper\Desktop\ComboFix.exeAV: Kaspersky Anti-Virus *On-access scanning disabled* (Outdated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}AV: Symantec AntiVirus Corporate Edition *On-access scanning disabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}FW: McAfee Personal Firewall Plus *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).c:\documents and settings\All Users\Start Menu\Programs\Startup\Bluetooth.lnkc:\windows\system32\351631c:\windows\system32\dumphive.exec:\windows\system32\Process.exec:\windows\system32\SrchSTS.exec:\windows\system32\tmp.regc:\windows\system32\VCCLSID.exec:\windows\system32\win.inic:\windows\system32\WS2Fix.exe.((((((((((((((((((((((((( Files Created from 2009-12-28 to 2010-01-28 ))))))))))))))))))))))))))))))).2010-01-27 10:46 . 2010-01-27 10:46 15880 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\lsdelete.exe2010-01-27 10:45 . 2010-01-27 10:45 163728 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\ShellExt.dll2010-01-27 10:43 . 2010-01-27 10:43 327000 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\RPAPI.dll2010-01-27 10:43 . 2010-01-27 10:43 87496 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\PrivacyClean.dll2010-01-21 04:37 . 2010-01-27 10:42 3803208 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AutoLaunch.exe2010-01-20 01:46 . 2010-01-20 01:46 -------- d-----w- c:\documents and settings\All Users\Application Data\Office Genuine Advantage2010-01-20 01:46 . 2010-01-20 01:46 -------- d-----w- c:\documents and settings\Steve Cooper\Application Data\Office Genuine Advantage2010-01-18 03:27 . 2010-01-18 03:27 -------- d-----w- c:\documents and settings\Steve Cooper\Application Data\ACD Systems2010-01-16 04:27 . 2010-01-16 04:27 152576 ----a-w- c:\documents and settings\Steve Cooper\Application Data\Sun\Java\jre1.6.0_17\lzma.dll2010-01-16 04:27 . 2010-01-16 04:27 79488 ----a-w- c:\documents and settings\Steve Cooper\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll2010-01-15