Logfile of HijackThis v1.98.2
Scan saved at 9:16:07 PM, on 9/7/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton Personal Firewall\NISUM.EXE
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\ewinmklx.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Documents and Settings\Vanessa\Application Data\eare.exe
C:\WINDOWS\System32\rjerm.exe
C:\Palm\HOTSYNC.EXE
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\winlgn.exe
C:\Documents and Settings\Vanessa\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\atievxx.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\ScsiAccess.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe

Ok, first, follow this link and follow instructions so you can See hidden files and folders. Better print this out, as you won't be able to view this site once in Safe Mode. Next, follow these instructions to Reboot your computer in Safe Mode.

Now, run HijackThis! and fix these entries :

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mypoiskovik.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://mypoiskovik.com/index.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mypoiskovik.com/index.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\tqivu.dll/sp.html#29126
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://mypoiskovik.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://mypoiskovik.com/index.htm

R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {50838896-9654-6D5F-8DD1-DC592611A0D7} - C:\WINDOWS\system32\apihm.dll (file missing)

O4 - HKLM\..\Run: [pwbzzejtuwun] C:\WINDOWS\System32\ewinmklx.exe

O4 - HKCU\..\Run: [Diow] C:\Documents and Settings\Vanessa\Application Data\eare.exe
O4 - HKCU\..\Run: [Fwevj] C:\WINDOWS\System32\rjerm.exe

O4 - Global Startup: winlgn.exe

O15 - Trusted Zone: *.05p.com
O15 - Trusted Zone: *.mt-download.com
O15 - Trusted Zone: *.my-internet.info
O15 - Trusted Zone: *.scoobidoo.com
O15 - Trusted Zone: *.searchmiracle.com

Still in Safe Mode, locate and delete these files (if found) :

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\winlgn.exe <<< this file (make sure the spelling is correct on this one, as "winlogon.exe" is legit..)

C:\WINDOWS\System32\ewinmklx.exe <<< this file

C:\Documents and Settings\Vanessa\Application Data\eare.exe <<< this file

C:\WINDOWS\System32\rjerm.exe <<< this file