Now I'm getting bugged, pardon the pun.
Ran Spyzooka, got three tracking cookies, and three registry items -- the same trojan horse and proxy MSIL entries, and now W32HackToolPwdump [hack tool]
I'm bugged, I thought Webroot and Spzooka were supposed to catch stuff as they happen. Guess not. Now I'll run Webroot.
Ru4Cookie [TrackingCookie] C:\Documents and Settings..
Bs.serving-sysCookie [TrackingCookie] C:\Documents and Settings...
PointrollCookie [TrackingCookie] C:\Documents and Settings...
Win32.Worm.AutoIt [TrojanHorse]
Registry: Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\DisableTaskMgr
Registry:
SOFTWARE\\Policies\\Microsoft\\Windows NT\\SystemRestore
Win32.Trojan-Proxy.MSIL [Trojan-Proxy]
Registry: SOFTWARE\\Microsoft\\Security Center\UacDisableNotify
Win32.HackTool.Pwdump [HackTool]
Registry: SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\UserFaultCheck
Registry: SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\UserFaultCheck