Found stuff on my computer

Erm, well, as everyone else has suggested, the best course of action is:

Backup your important data files.
Format
re-install from fresh

Then and only then, change all your online passwords. No point doing it before, as any keyloggers will report what you changed them to!

You could spend hours researching what you have acquired, and this would probably be a good way to gain the knowledge you need. If you're stuck for time, however, the backup, reformat, re-install, change online passwords, is the best route.

I would strongly recommend you make use of the search function on AntiOnline and checkout the links in the postings above mine.

Good luck!

not having the time to research this whole hack ill give you a guess. you were infected by a worm, either threw netbios/filesharing or a rpc/dcom exploit. your sytem was then checked for any antivirus processes running and they were stopped (kill), more than likely the kill command was issued for every av process name in the database wether it was installed on your machine or not. wget downloaded all the tools you see form a server somewhere then your computer was used to scan for other vulnerable computers and pass the 'infector' on to them. an ftp server was setup (serv-U) and NetCat (nc.exe) was probable set to listen for incomming connections and start a command shell. all set to run as services using firedeamon. if you look in task manager you'll see it but not the processes its running as services. finally a notice was sent via IRC (mirc) to the owner of the worm telling of your machines compromise.

the precence of cygwin.dll says that the perps couldnt write their own tools so an exploit written for *nix was compiled in the cygwin environment so it would work under windows if cygwin.dll was present.

the sender may or may not have entered your machine and installed alternate backdoors depending on how long this worm was circulating / if the irc server was shut down before s/he got your address and knew you were compromised. this is a real 'hack' of hacking tools and a better hacker could easily steal it from them. so not knowing the finer points, like who was in your machine and what they did if they were there, follow the good advice given you already and re-format.

if you'd like to find out more on how it worked read the .bat, .txt and .log files