Logfile of HijackThis v1.98.2
Scan saved at 9:26:40 PM, on 8/31/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP4 (5.00.2920.0000)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\CTHELPER.EXE
C:\Program Files\The Cleaner\tca.exe
C:\Program Files\The Cleaner\tcm.exe
C:\Games\Steam\Steam.exe
C:\Program Files\UltraMon\UltraMon.exe
C:\Program Files\Trillian\trillian.exe
C:\Program Files\UltraMon\UltraMonTaskbar.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINNT\system32\NOTEPAD.EXE
C:\WINNT\system32\NOTEPAD.EXE
C:\Program Files\WinAce\WinAce.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~AceTemp\hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://www.worldnetsearch.org/
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.worldnetsearch.org/
R1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://www.worldnetsearch.org/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.worldnetsearch.org/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.worldnetsearch.org/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.worldnetsearch.org/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.worldnetsearch.org/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.worldnets...h.org/start.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.worldnetsearch.org/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.worldnetsearch.org/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.worldnets...h.org/start.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.worldnetsearch.org/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.worldnetsearch.org/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.worldnetsearch.org/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.worldnetsearch.org/
O1 - Hosts: auto.search.msn.com 127.0.0.1
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [tcactive] C:\Program Files\The Cleaner\tca.exe
O4 - HKLM\..\Run: [tcmonitor] C:\Program Files\The Cleaner\tcm.exe
O4 - HKCU\..\Run: [Steam] C:\Games\Steam\Steam.exe -silent
O4 - Startup: trillian.lnk = C:\Program Files\Trillian\trillian.exe
O4 - Global Startup: UltraMon.lnk = C:\Program Files\UltraMon\UltraMon.exe
O13 - DefaultPrefix: http://www.worldnets...search.php?url=
O13 - WWW Prefix: http://www.worldnets...search.php?url=
O13 - Home Prefix: http://www.worldnets...search.php?url=
O13 - Mosaic Prefix: http://www.worldnets...search.php?url=