Malware Removal Forums

HJT Log and "PC Angel"

FilthyWalrus · 2006-08-23T08:07:34+00:00

Logfile of HijackThis v1.99.1 Scan saved at 12:54:08 AM, on 8/23/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\WINDOWS\system32\CTsvcCDA.EXE C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Alias\Maya7.0\docs\wrapper.exe C:

40 min read

Trogan

September 6, 2006, 4:47 AM UTC

Hi again FilthyWalrus! Lets try something else...

1. Launch Notepad, and copy/paste the contents of the quote box below into a new Notepad file. Save it with file name options.txt and save as file type: all files to your desktop.

RegSearch Options File

[Search]

PC Angel

2. Download Registry Search to your desktop.

Right click on the compressed RegSearch folder, and choose "Extract All". In the box that pops open, click "Next", then "Next" again, and then "Finish". You now have another RegSearch folder on your desktop.
Open the new folder, and double click on regsearch.exe
Click "Import" in the lower left corner and browse to the options.txt file that you just saved on your desktop. Do not choose the one in the RegSearch folder itself.
Click OK and Registry Search will scan your registry for the file(s), and a Notepad box will open with a report.
Please reply here with the entire contents of the Notepad file from RegSearch.

Also, could you tell me how you tried to remove PC Angel please? It would help to get things resolved quicker if I knew.

FilthyWalrus

September 7, 2006, 11:35 PM UTC

I never tried to remove PC Angel. I couldn't even find it. The computer came this way (to my knowledge).

FilthyWalrus

September 8, 2006, 12:22 AM UTC

REGEDIT4

; Registry Search 2.0 by Bobbi Flekman Â© 2005
; Version: 2.0.1.0

; Results at 9/7/2006 4:34:39 PM for strings:
; 'pc angel'
; Strings excluded from search:
; (None)
; Search in:
; Registry Keys Registry Values Registry Data
; HKEY_LOCAL_MACHINE HKEY_USERS

; End Of The Log...

Trogan

September 8, 2006, 2:25 PM UTC

Hi FilthyWalrus,

Can I ask what the D: drive is used for please?

Also, it is not uncommon for System Restore to fail, so there is no reason to worry.

Nellie2

September 21, 2006, 9:28 PM UTC

This topic is now closed due to inactivity. If you wish it reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.