http://pharm-search.com/
http://utruuh.globe-finder.cc/bayzm/
I already tried hitman pro, Ad-awere remover, hoster, kaspersky anti virus.
here is my log file from hijack this :
Logfile of HijackThis v1.99.0
Scan saved at 12:30:40, on 13-4-2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wuauclt.exe
D:\Norton Antivirus\navapsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
C:\Documents and Settings\Wim & Leentje\Local Settings\Temp\Tijdelijke map 4 voor hijackthis.zip\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://rl.webtracer.cc/-/?bayzm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://rl.webtracer.cc/-/?bayzm
O1 - Hosts: 1159680172 auto.search.msn.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{CC2AF466-9DFB-41B2-A6CF-C065C0EF523D}: NameServer = 195.238.2.21 195.238.2.22
O19 - User stylesheet: C:\WINDOWS\stsheets.dat
O23 - Service: Norton AntiVirus Auto-Protect - Symantec Corporation - D:\Norton Antivirus\navapsvc.exe
can someone please help me?
thx