System Securty 2009 - Mostly fixed, I think

Visited what must have been a bad site and ended up getting displays of System Security 2009 on my Win XP. Sadly, had put off updating IE to current, as I do not use it as my browser. Dumb mistake.

Went through the entire Read & Run Me First instructions for Win XP pretty much successfully:

Ran SAS, on first time at end of scan, before instructed reboot, another window said it was going to automatically restart Windows in 30 seconds. Being suspicious, I ran SAS again after startup and found another infection. So there are tow SAS logs attached.

Ran MBAM successfully with no errors.

Ran Combofix - When it needed to install the Microsoft Windows Recovery Console, it said it was installing the one for Win XP SP2, and I have SP3, is that a problem? Also, at end of the scan, Combofix did not prepare the log as described in the Bleepingcomputer instructions link. Instead it said it was going to reboot the machine and do not reboot it manually. After reboot, it started up automatically (continued) said it was preparing the log and not to run any programs until finished. Of course during this time, my Zone Alarm, AVG, and SuperAntiSpyware all autostarted on bootup during this message. Waited 3 min. and ZA alerted that a new program pev.cfexe was trying to access 71.243.0.12 DNS.

Successfully ran RootRepeal and MGTools.

Most things seem to be running OK, but an concerned about the pev.cfexe and anything else that may show up in the logs attached.

Thank you for your time in analyzing these.

 

NOT a bump. Second set of attachments.

While waiting for my first post to be validated so I could add the other log attachments now, I got another ZA alert that SupportSoft Agent sprtscv.exe was attempting to access the same address a pev.cfexe below, 71.243.0.12. But I think that may be connected to my Dell Support Center utility.

And while waiting, AVG Resiodent Shield Alert notified me of Win32/Cryptor detected in C:\Windows\system32\svchost.exe. It was successfully placed in the Virus Vault and other instances deleted.

I have attached the remaining logs along with the AVG Resident Shield Alert log. Am awaiting instructions.

Thanks.

 

Thank for your response, TimW.

Everything on your list is now done, and in order, except the above. Add and Remove Programs returned "An error occurred while trying to remove HijackThis 2.0.2. It may have been already uninstalled. Would you like to remove HijackThis 2.0.2 from the Add and Remove Programs list?"

Should I remove it from the list? I searched the computer and HijackThis.exe was not found, just the log file in the MGTools directory. Is there a chance that the preceding step of uninstalling Combofix uninstalled HijackThis?

My only remaining question was from my first post:

Can I find the SP3 version on Microsoft.com and install it over the SP2 version?

Or is it absolutely necessary now that I am clean. Can it be uninstalled?
Thanks again.