well, i have the result of hijackthis here at last!!!! if you do get something out of it then may pls do the needful. am highly desperate with the irretatating proble.
also i have loaded Avast! antivirus home edition. is it that am safe now???
----------------
Logfile of HijackThis v1.99.1
Scan saved at 1:57:40 PM, on 04/13/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\Mapi32.exe
C:\PROGRA~1\INTELL~1\ISMART.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\WINDOWS\System32\winmon.exe
C:\windows\system32\lsasssss.exe
C:\WINDOWS\System32\winmplayd.exe
C:\WINDOWS\System32\winmedplay.exe
C:\WINDOWS\System32\java.exe
C:\WINDOWS\System32\cUpdate.exe
C:\WINDOWS\msexploren.exe
C:\WINDOWS\System32\smsss.exe
C:\WINDOWS\nerocheck.exe
C:\WINDOWS\twpqtm.exe
C:\WINDOWS\nrchk.exe
C:\WINDOWS\relsd.exe
C:\Program Files\Windows ControlAd\WinCtlAd.exe
C:\WINDOWS\System32\gah95on6.exe
C:\Program Files\ISTsvc\istsvc.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Windows ControlAd\WinCtlAdAlt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\smsse.exe
C:\program files\Oemji\Toolbar\PopupBlocker\OemjiPopupBlocker .exe
C:\Malu\Messenger\ymsgr_tray.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\HijackThisFolder\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.oemji.com/side_search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://red.clientapps.yahoo.com/cust...ch/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://www.oemji.com/side_search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://www.oemji.com/side_search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about
:blank
F2 - REG:system.ini: Shell=Explorer.exe smsse.exe
O2 - BHO: PBlockadeHelper Class - {4115122B-85FF-4DD3-9515-F075BEDE5EB5} - C:\program files\Oemji\Toolbar\PopupBlocker\PBHelper.dll
O2 - BHO: CDllBho Object - {5A5B6916-ED71-4531-8018-E792DD44156E} - C:\WINDOWS\svchost.dll
O2 - BHO: OemjiSearchPlus - {D240DC29-C093-4388-B71F-A7103C796B0C} - C:\program files\Oemji\OemjiSearchPlus\OemjiPls.dll
O2 - BHO: (no name) - {ED103D9F-3070-4580-AB1E-E5C179C1AE41} - (no file)
O3 - Toolbar: Oemji - {804DB5C7-31E6-4885-850A-F1941B58A4C7} - C:\program files\Oemji\Toolbar\OemjiSrc.dll
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [REGRUN] C:\arsetup.exe
O4 - HKLM\..\Run: [vjpxmtgep] C:\WINDOWS\System32\qtvzold.exe
O4 - HKLM\..\Run: [Windows Monitoring Service] winmon.exe
O4 - HKLM\..\Run: [Spool] C:\windows\system32\lsasssss.exe
O4 - HKLM\..\Run: [Microsofts media] winmplayd.exe
O4 - HKLM\..\Run: [Microsofts MediaScope] winmedplay.exe
O4 - HKLM\..\Run: [Microsofts Legacy Support] java.exe
O4 - HKLM\..\Run: [Norton Update] cUpdate.exe
O4 - HKLM\..\Run: [Preview AdService] C:\Program Files\Preview AdService\PrevAdServ.exe
O4 - HKLM\..\Run: [WinAmpAgent] C:\WINDOWS\msexploren.exe /i
O4 - HKLM\..\Run: [start uploading] smsss.exe
O4 - HKLM\..\Run: [SheduIer] C:\WINDOWS\nerocheck.exe /i
O4 - HKLM\..\Run: [sepmBs] C:\WINDOWS\twpqtm.exe
O4 - HKLM\..\Run: [etbrun] C:\windows\system32\eliteggo32.exe
O4 - HKLM\..\Run: [ScheduIe] C:\WINDOWS\nrchk.exe /i
O4 - HKLM\..\Run: [TBllEe] C:\WINDOWS\relsd.exe
O4 - HKLM\..\Run: [UZWkENoL] C:\WINDOWS\twpqtm.exe
O4 - HKLM\..\Run: [Windows ControlAd] C:\Program Files\Windows ControlAd\WinCtlAd.exe
O4 - HKLM\..\Run: [gah95on6] C:\WINDOWS\System32\gah95on6.exe
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Registry Server] regsrv32.exe
O4 - HKLM\..\RunServices: [Windows Monitoring Service] winmon.exe
O4 - HKLM\..\RunServices: [Microsofts media] winmplayd.exe
O4 - HKLM\..\RunServices: [Microsofts MediaScope] winmedplay.exe
O4 - HKLM\..\RunServices: [Microsofts Legacy Support] java.exe
O4 - HKLM\..\RunServices: [Norton Update] cUpdate.exe
O4 - HKLM\..\RunServices: [start uploading] smsss.exe
O4 - HKLM\..\RunServices: [Registry Server] regsrv32.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Malu\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [start uploading] smsss.exe
O4 - HKCU\..\Run: [Registry Server] regsrv32.exe
O4 - HKCU\..\RunServices: [start uploading] smsss.exe
O4 - HKCU\..\RunServices: [Registry Server] regsrv32.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Companion) -
http://us.dl1.yimg.com/download.comp...bio5_1_6_0.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: Handling the loading of the MAPI API. (Extended MAPI Function Handler) - Unknown owner - C:\WINDOWS\System32\Mapi32.exe
O23 - Service: hpdj - Unknown owner - C:\DOCUME~1\ADMINI~1.WIP\LOCALS~1\Temp\hpdj.exe (file missing)
O23 - Service: Intelli-SMART (tm) 2.0 Demo (ISMART) - Learning Curve Inc. - C:\PROGRA~1\INTELL~1\ISMART.EXE