@orgazmatron
C:\WINDOWS\system32\csrcs.exe
C:\WINDOWS\system32\net.exe
F2 - REG:system.ini: Shell=Explorer.exe csrcs.exe
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [Aqetu] rundll32.exe "C:\WINDOWS\Sgabak.dll",e
O4 - HKLM\..\Policies\Explorer\Run: [csrcs] C:\WINDOWS\system32\csrcs.exe
O8 - Extra context menu item: &Sample Toolband Serach - res://bla/MENUSEARCH.HTM
O17 - HKLM\System\CCS\Services\Tcpip\..\{BB0DDA92-A365-4B30-A346-7D0C1992BDA2}: NameServer = 85.114.32.8,85.114.32.7
O20 - Winlogon Notify: crypt - C:\WINDOWS\SYSTEM32\crypts.dll
O23 - Service: HP ProtectTools Device Locking / Auditing (FLCDLOCK) - Hewlett-Packard Ltd - c:\WINDOWS\system32\flcdlock.exe