[acedafunk]

Hi Folks,I have a world of troubles on my PC. On the top of the list is this ishost that I can't seem to get rid of. I tried just erasing it but it wont let me (duh). I've tried installing several anti spyware programes but none have worked for me. Now I get this Infection that ZA keeps treating called Win32.Darksma.H . I read that some people are getting help with hijack this. I installed the program, but I don't know what the hell I'm doing with it. Can some one please help?Specs:Windows XP ProSP2Zone Alarm antiV and FIrewallHJT log:Logfile of HijackThis v1.99.1Scan saved at 9:55:46 AM, on 10/14/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:WINDOWSSystem32smss.exeC:WINDOWSsystem32winlogon.exeC:WINDOWSsystem32services.exeC:WINDOWSsystem32lsass.exeC:WINDOWSsystem32svchost.exeC:WINDOWSSystem32svchost.exeC:WINDOWSsystem32spoolsv.exeC:WINDOWSExplorer.EXEC:WINDOWSsystem32ishost.exeC:WINDOWSSOUNDMAN.EXEC:Program FilesJavajre1.5.008binjusched.exeC:Program FilesCommon FilesRealUpdateOBrealsched.exeC:Program FilesZone LabsZoneAlarmzlclient.exeC:Program FilesATI TechnologiesATI Control Panelatiptaxx.exeC:WINDOWSsystem32rundll32.exeC:WINDOWSsystem32ismini.exeC:Program FilesAheadODD ToolkitDVDTray.exeC:Program FilesCommon Files{EC99B0FC-088A-1033-0816-040502240001}Update.exeC:WINDOWSsystem32ctfmon.exeC:WINDOWSsystem32ZoneLabsisafe.exeC:Program FilesCommon FilesLightScribeLSSrvc.exeC:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXEC:WINDOWSsystem32svchost.exeC:WINDOWSsystem32ZoneLabsvsmon.exeC:Program FilesWMP54GS Wireless Network MonitorWLService.exeC:Program FilesWMP54GS Wireless Network MonitorWMP54G.exeC:Program FilesHijackthisHijackThis.exeR0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page = R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page = R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = O3 - Toolbar: &VSToolBar - {821F87FF-8245-4972-9E28-732E92EC2F51} - (no file)O4 - HKLM..Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre1.5.008binjusched.exe"O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottimeO4 - HKLM..Run: [TkBellExe] "C:Program FilesCommon FilesRealUpdateOBrealsched.exe" -osbootO4 - HKLM..Run: [Zone Labs Client] "C:Program FilesZone LabsZoneAlarmzlclient.exe"O4 - HKLM..Run: [ATIPTA] atiptaxx.exeO4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -kO4 - HKLM..Run: [pggswb.dll] C:WINDOWSsystem32rundll32.exe C:WINDOWSsystem32pggswb.dll,hwbulnbO4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exeO4 - HKLM..Run: [DVDTray] C:Program FilesAheadODD ToolkitDVDTray.exeO4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exeO4 - Global Startup: Adobe Gamma Loader.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exeO4 - Global Startup: Adobe Reader Speed Launch.lnk = C:Program FilesAdobeAcrobat 7.0Readerreadersl.exeO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.008binssv.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_08binssv.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLLO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exeO21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:WINDOWSsystem32WPDShServiceObj.dllO23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:WINDOWSsystem32ZoneLabsisafe.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exeO23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:Program FilesCommon FilesLightScribeLSSrvc.exeO23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:WINDOWSsystem32ZoneLabsvsmon.exeO23 - Service: WMP54GSVC - Unknown owner - C:Program FilesWMP54GS Wireless Network MonitorWLService.exe" "WMP54G.exe (file missing)

[SpiritWind]

{size:18px}[/size]:D Hi "Ace" : First off you should know that, except for their firewall, Zone Alarm is known for NOT having very good security products; it is trying to "expand" their business into the antiVIRUS & antiSPYWARE fields were there are better products, some even FREE . As to your Hijackthis log, they are best reviewed by volunteer Experts that are on antiSPYWARE forums; it appears from your log that you are running ONLINE scanners of several antiSPYWARE programs, but you do NOT have ANY INSTALLED on your computer !? Bad idea; at a minimum you should have the "FREE" version of "SUPERantispyware" from www.superantispyware.com . For a forum with some volunteer antiSPYWARE Experts, I recommend you post your HijackThis log at www.landzdown.com ; they are good and the site is little known, so there is a "quicker" Response to those asking for help .

[AuroraDizon]

I always go to the www.iamnotageek.com forums for my hijackthis logs