You've deifnitely got a few unwanted guests; please do the following:
1. C:\DOCUME~1\SHAWNA~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe
The log entry above indicates that you have not yet unzipped the hijackthis.exe program file from within the downloaded hijackthis.zip archive file. You are also running HijackThis from within a Temp/Temporary folder, which you should not do. To remedy this, follow these steps before running HijackThis again:
* Create a separate, new folder for HJT outside of any Temp/Temporary folders. A folder such such as C:\HijackThis or C:\Spyware Tools\HijackThis will do.
* Right-click on the HijackThis.zip folder that you downloadd and choose "Extract All.." from the resulting context menu. This will open the file extraction wizard.
* When the wizard presents you with the option of choosing the location into which the extracted hijackthis.exe file will be placed, browse to and select the new folder you created.
* When the extraction is complete, an Explorer window will appear showing the newly-extracted HijackThis.exe file; double-click on that file to run the program.
2. C:\Program Files\Internet Explorer\iexplore.exe
The log entry above indicates that you had at least 1 instance of Internet Explorer running when you ran HijackThis.
Before fixing problems with HijackThis, you must make sure to close/quit ALL instances of your web browser! HijackThis cannot fully perform its fixes while browsers are running.
-------------------------------------------------------------------------------------------------------------------
Once you have remedied the two issues above:
You will need to close/quit all web browser programs and disconnect from the Internet for much of the following, so you should print out these instructions or save them into a text file with Notepad.
Download and install ewido Anti-malware - http://www.ewido.net/en/download/
* When installing ewido, under "Additional Options" uncheck..Install background guard
Install scan via context menu
Launch ewido, there should be an icon on your desktop, double-click it.
The program will now open to the main screen.
When you run ewido for the first time, you may get a warning "Database could not be found!". Click OK. We will fix this in a moment.
You will need to update ewido to the latest definition files.On the left hand side of the main screen click update.
Then click on Start Update.
The update will start and a progress bar will show the updates being installed.
(the status bar at the bottom will display ("Update successful" )
If you are having problems with the updater, you can use this link to manually update ewido.
ewido manual updates
Don't run a scan with ewido yet; just close the program once the updates are installed.
* Open your antivirus program and check for/install the most current updates. Again- don't run a scan with it; just close the program once the updates are installed.
* Reboot into safe mode (you get to the safe mode boot option by hitting the F8 key as your computer is starting up).
* Run full system scans with your antivirus program and ewido; have the programs fix all malicious items they find.
When ewido finds the first malicious object on your system, it will ask you if it should clean it. When it asks this, put a checkmark in the lower left corner of the box that says "Perform action on all infections", then choose clean and click OK.
Save the log file that ewido will create after it finishes scanning; you'll be including that log in your next post here.
* Empty your Recycle Bin and reboot normally.
* Download SmitfraudFix (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.
Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.
* Run HijackThis again and post the new log. Also post the log that ewido generated.
