very, very strange problem with my computer

[pabulos]

Right now I'm another computer, mainly because my own computer is acting up. I don't even know where to start explaining it. I'm running XP and when I get to the log-on screen everything is fine. But when I type in my password and press enter to log on, it says "loading personal settings" and freezes. I then tried running in safe mode .. It let me log on, but at the desktop I cannot click anything. When the mouse goes over the start menu at the bottom it becomes the 'wait' icon thingy. I can't right click anywhere, and I can't run programs. I tried CTRL+ALT+DEL and I tried deleting some of the processes, but that didn't do much. I noticed that the computer is at 100% CPU usage until I end one of the "SVCHOST" processes and explorer. Another thing, once I've done that, I've tried to run a program through the task manager but my computer is being really picky on what it actually wants to run. Sometimes the task manager will even freeze once I've clicked "Browse". HijackThis runs fine most of the time.. Heres the startup list it generated, I don't know how much help it'll be:

--------------------------------

StartupList report, 8/19/2005, 1:34:53 PM
StartupList version: 1.52.2
Detected: Windows XP SP1 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\taskmgr.exe
C:\Documents and Settings\cody bay\Desktop\crap\Copy of HijackThis.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

NvCplDaemon = RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
CTSysVol = C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
CTDVDDet = C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
VirusScan Online = c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
LogonStudio = "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
soundcontrl = soundcontrl.exe
DeadAIM = rundll32.exe "C:\Program Files\AIM\\DeadAIM.ocm",ExportedCheckODLs
NvMediaCenter = RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
TkBellExe = "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
MCUpdateExe = C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
WinampAgent = C:\Program Files\Winamp5\winampa.exe
QuickTime Task = "C:\Program Files\QuickTime\qttask.exe" -atboottime

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run Services

soundcontrl = soundcontrl.exe

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

CursorXP = C:\Program Files\CursorXP\CursorXP.exe
AIM = C:\Program Files\AIM\aim.exe -cnetwait.odl

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=explorer.exe
SCRNSAVE.EXE=C:\WINDOWS\MATRIX~1.SCR
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry value not found*
HKLM\..\Policies: Shell=*Registry key not found*

--------------------------------------------------


Enumerating Task Scheduler jobs:

McAfee.com Update Check (DJWC0J31-cody bay).job
McAfee.com Update Check (DJWC0J31-Owner).job

--------------------------------------------------

Enumerating Download Program Files:

[HeartbeatCtl Class]
InProcServer32 = C:\WINDOWS\DOWNLO~1\hrtbeat.ocx
CODEBASE = http://fdl.msn.com/zone/datafiles/heartbeat.cab

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\System32\macromed\flash\Flash.ocx
CODEBASE = http://download.macromedia.com/pub/s...sh/swflash.cab

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\System32\webcheck.dll
SysTray: C:\WINDOWS\System32\stobject.dll

--------------------------------------------------
Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\pol icies\Explorer\Run

nzbnkqg = C:\WINDOWS\System32\nzbnkqg.exe
notepad.exe = msmsgs.exe
winlogon.exe = msole32.exe
notepad2.exe = popuper.exe
paint.exe = shnlog.exe

--------------------------------------------------

End of report, 4,883 bytes
Report generated in 0.062 seconds

--------------------------------


I really wish that this is some easy problem to fix, but it doesn't seem like it will be.. lol.. Someone please help??

[technobeast]

C:\WINDOWS\System32\nzbnkqg.exe -.... What the... is this? Looks very non-Windows to me.

p.s. Welcome to PCTT

[the hunter]

after doing some snooping for popuper.exe, I came upon this.

http://forum.hijackthis.de/showthread.php?t=4306