Logfile of HijackThis v1.99.0 Scan saved at 15:08:18, on 2005-06-08 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\logonui.exe D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\system32\cisvc.exe D:\WINDOWS\system32\ZoneLabs\vsmon.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\rundll32.exe D:\WINDOWS\system32\rdpclip.exe D:\WINDOWS\Explorer.EXE D:\Program\Zone Labs\ZoneAlarm\zlclient.exe D:\WINDOWS\system32\cidaemon.exe D:\WINDOWS\system32\logon.scr D:\Program\Windows Media Components\Encoder\wmenc.exe D:\WINDOWS\System32\svchost.exe D:\Program\Windows Media Components\Encoder\WMEncAgt.exe D:\WINDOWS\System32\taskmgr.exe D:\WINDOWS\system32\rundll32.exe D:\WINDOWS\System32\thin-23-1-x-x.exe D:\Documents and Settings\radmin\Skrivbord\HijackThis.exe D:\Program\Internet Explorer\iexplore.exe D:\WINDOWS\explorer.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.fasterhomepage.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {04079856-5845-4dea-848C-3ECD647AA554} - D:\Program\MySearch\SrchAstt\2.bin\MYSRCHAS.DLL O2 - BHO: CeresObj Class - {00000049-8F91-4D9C-9573-F016E7626484} - D:\WINDOWS\ceres.dll O2 - BHO: My Search BHO - {014DA6C1-189F-421a-88CD-07CFE51CFF10} - D:\Program\MySearch\bar\2.bin\S4BAR.DLL O2 - BHO: MySearch Search Assistant BHO - {04079851-5845-4dea-848C-3ECD647AA554} - D:\Program\MySearch\SrchAstt\2.bin\MYSRCHAS.DLL O3 - Toolbar: My Search Bar - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - D:\Program\MySearch\bar\2.bin\S4BAR.DLL O4 - HKLM\..\Run: [Zone Labs Client] "D:\Program\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [seaWDurlIE] D:\WINDOWS\System32\seaWDurlIE.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program\Java\jre1.5.0_01\bin\npjpi150_01.dll O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program\Java\jre1.5.0_01\bin\npjpi150_01.dll O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1103268881821 O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab O23 - Service: TrueVector Internet Monitor - Zone Labs Inc. - D:\WINDOWS\system32\ZoneLabs\vsmon.exe