[akohgadai]

I have done all that was asked of me to do before resorting to posting HijackThis log. I even ran Spy Sweeper many times and yet there are still problems present in my computer. Unless i run it in safe mode, my computer turns off randomly sometimes, IE homepage hijacked by aboutblank, and won't change back. Have tried everything, and nothing seems to work. Please help me someone here. There are ton of processes that run in my computer and i know that a lot of them are malware.. I was and am still running on safe mode right now, while i ran hijackthis, and so some of the processes (malware) that i see on regular mode won't show up, but sometimes some of them show up on themselves, other times i have a ton of IE pages opening uncontrolably, but it doesn't show it on the computer, only when i click ctrl+alt+delete do i see why my computer slowed down. Then i see that so many 'invisible' IE pages have opened on themselves.. this happens even in safe mode. here is my hijackthis log:

Your help will be greatly appreciated:

Logfile of HijackThis v1.99.1
Scan saved at 9:34:09 AM, on 5/5/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\rpcss_pl.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\taskmgr.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Netscape\Netscape Browser\netscape.exe
C:\Documents and Settings\ajmal\Desktop\hijackthis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.find-more.net/index.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = https://
F3 - REG:win.ini: run=C:\WINDOWS\System32\svhost.exe
O2 - BHO: (no name) - {0E234239-88FF-11D2-8446-D7234234421F} - C:\WINDOWS\System32\msasmsn7.dll
O2 - BHO: (no name) - {BBDBC4DD-4200-4F87-8C2A-002029E8160B} - C:\WINDOWS\System32\pelg.dll
O4 - HKLM\..\Run: [È:0+¿ÔÇè]mú*Â8éÁ‹ÏC:\Program Files\ISTsvc\istsvc.exe]
š…æP,Óí—#ÑÓøwþ@n­¨Y1»ì®�^ºÄ�ºþìîXB˜™>î]°J./9­œô唬TxòÁ#½ðIk™vÁž
“ô‡ïªYY+~�ÑÞéµ×&Š1eç3à�aÌškƒfexðÛ@AÆIîLJw
駓»ë¹Å¼9.dZÝêð�ËOPäŒw�ª¥Ý·—–JEk�:ã4]ÑR_y˜‰z‰Í”,ô‚ ˜ÕlÛ
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Windows Updates] RUISS.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [Security iGuard] C:\Program Files\Security iGuard\Security iGuard.exe
O4 - HKLM\..\Run: [SndPnpMix] C:\WINDOWS\System32\wauctlxp4.exe
O4 - HKLM\..\Run: [PerformCl] C:\WINDOWS\System32\idr_17b.exe
O4 - HKLM\..\RunServices: [Kerio Firewall Ex] keriowall.exe
O4 - HKCU\..\Run: [Rvqj] C:\WINDOWS\System32\l?[bleep].exe
O4 - HKCU\..\Run: [NetZero_uoltray] C:\Program Files\NetZero\exec.exe regrun
O4 - HKCU\..\Run: [mstask] C:\WINDOWS\System32\mstask.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: (no name) - {632561F4-9CFE-474C-8039-E61C38FE7B5E} - (no file)
O9 - Extra button: (no name) - {72E8A711-0729-4838-852B-84A51CEB8810} - (no file)
O9 - Extra button: (no name) - {A1DB1DA1-F005-468D-9205-FE13CDD3916A} - (no file)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Corel Network monitor worker - {BA2D6875-A3C3-4E35-840C-12F437ABAFC2} - C:\WINDOWS\System32\intlmain.dll
O9 - Extra 'Tools' menuitem: Corel Network monitor worker - {BA2D6875-A3C3-4E35-840C-12F437ABAFC2} - C:\WINDOWS\System32\intlmain.dll
O9 - Extra button: (no name) - {E064D3EC-4548-4962-A2E4-0F7E8D6898A9} - (no file)
O9 - Extra button: (no name) - {632561F4-9CFE-474C-8039-E61C38FE7B5E} - (no file) (HKCU)
O9 - Extra button: (no name) - {72E8A711-0729-4838-852B-84A51CEB8810} - (no file) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {9C122968-4674-48A0-8E75-655EC78C627B} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {9C122968-4674-48A0-8E75-655EC78C627B} - (no file) (HKCU)
O9 - Extra button: (no name) - {A1DB1DA1-F005-468D-9205-FE13CDD3916A} - (no file) (HKCU)
O9 - Extra button: Corel Network monitor worker - {BA2D6875-A3C3-4E35-840C-12F437ABAFC2} - C:\WINDOWS\System32\intlmain.dll (HKCU)
O9 - Extra 'Tools' menuitem: Corel Network monitor worker - {BA2D6875-A3C3-4E35-840C-12F437ABAFC2} - C:\WINDOWS\System32\intlmain.dll (HKCU)
O9 - Extra button: (no name) - {E064D3EC-4548-4962-A2E4-0F7E8D6898A9} - (no file) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {FC0F1DA2-F63A-45C6-AFC7-CCA61E7ABB82} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {FC0F1DA2-F63A-45C6-AFC7-CCA61E7ABB82} - (no file) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\fltmgr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\fltmgr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\fltmgr.dll
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windup...Bridge-c139.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} (Anonymizer Anti-Spyware Scanner) - http://download.zone...ctor/WebAAS.cab
O16 - DPF: {ADB880A6-D8FF-11CF-9377-00AA003B7A11} (HHCtrl Object) - http://67.15.94.29/~...1495/hhctrl.ocx
O17 - HKLM\System\CCS\Services\Tcpip\..\{160AACDD-2170-4DC1-90CB-81C79EA86F7D}: NameServer = 69.50.176.156,195.225.176.31
O17 - HKLM\System\CS1\Services\Tcpip\..\{160AACDD-2170-4DC1-90CB-81C79EA86F7D}: NameServer = 66.28.0.45,66.28.0.61
O17 - HKLM\System\CS2\Services\Tcpip\..\{160AACDD-2170-4DC1-90CB-81C79EA86F7D}: NameServer = 69.50.176.156,195.225.176.31
O17 - HKLM\System\CS3\Services\Tcpip\..\{160AACDD-2170-4DC1-90CB-81C79EA86F7D}: NameServer = 69.50.176.156,195.225.176.31
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O21 - SSODL: Web Event Logger - {7CFBACFF-EE01-1231-ABDD-416592E5D639} - C:\WINDOWS\System32\Ggadieno.dll
O21 - SSODL: NWIETHVY - {CC2884BF-6682-2E15-0930-62AEAFAA4531} - C:\WINDOWS\System32\chi.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Unknown owner - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe (file missing)
O23 - Service: RPC+ Service Provider (RPCSS+) - Unknown owner - C:\WINDOWS\System32\rpcss_pl.exe
O23 - Service: SCA (Service Control Application) - Unknown owner - C:\WINDOWS\System32\SYSTEM.EXE (file missing)