Please relocate your hijackthis.exe file to a new folder (preferably HJT) you create in the first level of the C: drive:

FAQ's 2,3,4  http://www.russelltexas.com/spywareinfo/faqhijackthis.htm

In new folder run hijackthis.exe and scan. Check the box left of these entries:

C:\windows\msbb.exe
Comments: nCase parasite

O2 - BHO: (no name) - { 000006B1-19B5-414A-849F-2A3C64AE6939} - C:\WINDOWS\bi.dll
Comments: VX2.aBetterInternet

O2 - BHO: (no name) - {01F44A8A-8C97-4325-A378-76E68DC4AB2E} - C:\WINDOWS\systb.dll
Comments: Imiserv virus

O2 - BHO: (no name) - { 71ED4FBA-4024-4bbe-91DC-9704C93F453E} - (no file)
Comments: dead link for Blazefind IESearchbar

O2 - BHO: (no name) - {83DE62E0-5805-11D8-9B25-00E04C60FAF2} - C:\WINDOWS\2_0_1browserhelper2.dll
Comments: BlazeFind hijacker variant

O2 - BHO: (no name) - {EFF80427-F837-4B74-8834-BAF18E0553FD} - c:\PROGRA~1\System\Misc\kabh3.dll
Comments: Random-named trojan
O3 - Toolbar: (no name) - {2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} - (no file)
O4 - HKLM\..\Run: [qvuzsnwl] C:\WINDOWS\qvuzsnwl.exe
O4 - HKLM\..\Run: [luf] C:\WINDOWS\luf.exe
O4 - HKLM\..\Run: [websx] C:\Program Files\websx\int114844.exe -auto
O4 - HKLM\..\Run: [jebgzch] C:\WINDOWS\jebgzch.exe
O4 - HKLM\..\Run: [xot] C:\WINDOWS\xot.exe
O4 - HKLM\..\Run: [jyhkbej] C:\WINDOWS\jyhkbej.exe
O4 - HKLM\..\Run: [pkd] C:\WINDOWS\pkd.exe
Comments: Random-named trojans

O4 - HKLM\..\Run: [Win Server Updt] C:\WINDOWS\wupdt.exe
Comments: Imiserv virus

O4 - HKLM\..\Run: [msbb] c:\windows\msbb.exe
Comments: nCase parasite

O4 - HKLM\..\Run: [hqd] C:\WINDOWS\hqd.exe
Comments: Random-named trojan

O4 - Global Startup: LimeWire 4.0.2.lnk = C:\Program Files\LimeWire\LimeWire 4.0.2\LimeWire.exe

O16 - DPF: {11111111-1111-1111-1111-111111111123} - file://c:\Recycled\1.exe
Comments: DialerPlatform Dialer
O16 - DPF: {7589EEE6-E336-11D4-8A7E-EE1D971D9B47} (AcontiX Control) - http://secure.aconti.net/acontix/goodthinxx.cab
Comments: Aconti Dialer
O16 - DPF: {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} (brdg Class) - http://www2.flingstone.com/cab/2000XP/CDTInc/bridge.cab
Comments: IEPlugin
O16 - DPF: {E0B795B4-FD95-4ABD-A375-27962EFCE8CF} (StarInstall Control) - http://install.stardialer.de/StarInstall.ocx
Comments: StarDialer

With all other windows and programs closed except for Hijackthis, click on fix checked button.

Reboot to SAFE MODE and Show HIDDEN FILES and folders

FAQ 8 and 9 on this page: http://www.russelltexas.com/spywareinfo/faqhijackthis.htm

Open Windows Explorer: type the word explorer at Start/Run box and click OK:

Drill on down and delete the following files and/or folders:

C:\windows\msbb.exe                                   file
C:\WINDOWS\bi.dll                                       file
C:\WINDOWS\2_0_1browserhelper2.dll    file
C:\WINDOWS\qvuzsnwl.exe                       file
C:\WINDOWS\luf.exe                                   file
C:\WINDOWS\jebgzch.exe                          file
C:\WINDOWS\xot.exe                                   file
C:\WINDOWS\jyhkbej.exe                             file
C:\WINDOWS\pkd.exe                                   file

C:\Program Files\websx                                folder and all subcontents
C:\Program Files\System\Misc                      folder and all subcontents
C:\Program Files\LimeWire                           folder and all subcontents

Exit Explorer.

Run Disk Cleaner: type cleanmgr at Start/Run. Scan all hard drives and check all categories at the end and click OK.

Reboot to normal mode, update your AVG 6 and run a full system scan, If it finds anything delete the files and then after it completes, reboot and run again in Safe Mode to be double sure.

Browse a bit in normal mode, run a fresh Hijackthis log, and then post it here in this thread. Report any comments.

After the final all clear is given by us you should flush your Restore Points for XP and MIllennium. That means disabling the Restore Point, rebooting to flush it, then re-enabling a new Restore Point. The reason why we need to do this is to purge the bad Trojan files hidden in System Restore which can't be cleaned by your antivirus programs.

See FAQ 12 here: http://www.russelltexas.com/spywareinfo/faqhijackthis.htm

HTH,  (sorry it took a while to get to you, but the enemy is legion and we are few).

Texruss