i have spyware on my newly "cleaned" PC

I just got my computer back from a friend/IT coworker after getting a trojan virus this summer. Money was exchanged, network drivers not installed properly, more money exchanged, to have drivers downloaded. Went online (finally! after two months). Hotmail, msn.com, and ... a case of spyware and porn programs on my computer. ARGH! Friend/IT coworker had installed Hijack this. Pls examine log. Thank you.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:52:26 PM, on 9/20/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\svchost.exe
C:\WINDOWS\explorer.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NvMixerTray.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://prod.intranet.apps/ess/Welcome.asp
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [calc] rundll32.exe C:\WINDOWS\system32\calc.dll,_IWMPEvents@0
O4 - HKLM\..\Run: [tamuwiden] Rundll32.exe "c:\windows\system32\mifolole.dll",a
O4 - HKLM\..\Run: [14384534] C:\Documents and Settings\All Users\Application Data\14384534\14384534.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [calc] rundll32.exe C:\DOCUME~1\NETWOR~1\protect.dll,_IWMPEvents@0 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [calc] rundll32.exe C:\DOCUME~1\NETWOR~1\protect.dll,_IWMPEvents@0 (User 'Default user')
O4 - Startup: scandisk.dll
O4 - Startup: scandisk.lnk = ?
O20 - AppInit_DLLs: pohuzowo.dll c:\windows\system32\mifolole.dll
O21 - SSODL: ruritebuj - {9c07199c-f969-407f-a436-e7412b9569bc} - c:\windows\system32\mifolole.dll (file missing)
O22 - SharedTaskScheduler: kupuhivus - {9c07199c-f969-407f-a436-e7412b9569bc} - c:\windows\system32\mifolole.dll (file missing)
O23 - Service: Net Login (NetLogin) - Unknown owner - C:\WINDOWS\svchost.exe
O23 - Service: Net_Login - Unknown owner - C:\WINDOWS\svchust.exe
O23 - Service: sofatnet Service (sofatnet) - Sigma Designs In - C:\WINDOWS\system32\sofatnet.exe

--
End of file - 2299 bytes

[3days:3d15b0fg][/3days:3d15b0fg]

Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections.

If you think you have similar problems, please post a log in the HJT forum and wait for help.

Hi, Welcome to the Malware Removal.
My name is Francis, and I'll be helping you with your malware problems.
HijackThis logs can take a while to research, so please be patient.

Before we begin...please note the following important guidelines.

1. The instructions being given are for YOUR computer and system only!.
   Using these instructions on a different computer can cause damage to that computer and possibly render it inoperable!
2. Please, if you have questions about something...ASK, don't guess or assume.
3. Please -only- post your problem at one help site. Applying fixes from multiple help sites can cause problems.
4. Please -only- reply to this thread, do not start another!
5. Please do not run any other fix/removal tools unless instructed to do so!
6. Print each set of instructions...if possible...your Internet connection will not be available during some fix processes.
7. Please, continue responding, until I give you the "All Clean"

All my fixes are being supervised by my teacher and their approval is needed before i can post to you, therefore do expect some delay in replies.

No reply after 3 days in your thread will result in your topic being closed
Please notify me in advance if you are not able to reply me within 3 days

If you agree with the above terms and condition, we shall begin

Disclaimer: Given the nature of the infections that were present on the machine, I give no guarantees about the security of this computer and have to the best of my abilities tried to both identify and eradicate all malware.


1 - HJT Uninstall List
Please run HijackThis
If you are on the "scan & fix stuff" page... Press the "Main Menu"...button.

• From the Main Menu...Press the "Open the Misc Tools"...button.
• Press the "Open Uninstall Manager... button.
• Press only the Save List...button.
• Press the "Save" button.
  The file "uninstall_list.txt" will be saved in your HJT folder.
• Copy and Paste the contents of "uninstall_list.txt' in your next reply.

2 - Status Check
To post in next reply:

• Uninstall List

a lack of response,