Malware Removal Forums

Re: Help with HJT log

Matthew · 2005-12-30T22:16:40+00:00

Hello. I recently removed a malware infection from my computer...SpyAxe. Following is the latest HJT log. Would someone be so kind to help me decipher these results. What do I still need to do to be clean? Logfile of HijackThis v1.99.1 Scan saved at 11:52:38 PM, on 12/30/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\S24EvMon.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\Program Files\Compaq\Compaq Management Agents\cpqalert.exe C:\PROGRA~1\Compaq\COMPAQ~1\CPQWEB~1\WebDmi.exe C:\Program Files\Symantec AntiVirus

7 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

Linkmaster MRU Honors Grad Emeritus

January 8, 2006, 5:24 PM UTC

I would Disable the real time protection one at a time till you find the culprit.

Try disabling the Sunbelt Kerio Personal Firewall
and checking your settings for it first !!

How is your system running now ??

NonSuch Administrator

January 20, 2006, 10:35 PM UTC

Whilst we appreciate that you may be busy, it has been 10 days or more since we heard from you.

Infections can change and fresh instructions will now need to be given. This topic is now closed, if you still require assistance then please start a new topic in the Malware Removal Forum.

If you wish this topic reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Do not bother contacting us if you are not the topic starter. A valid,
working link to the closed topic is required along with the user name used.
If the user name does not match the one in the thread linked, the email will be deleted.

ChrisRLG Administrator Emeritus

January 23, 2006, 11:28 AM UTC

re-opened by email request by Matthew.

Matthew

January 23, 2006, 2:06 PM UTC

Dear Linkmaster,

Thought you and perhaps others would be interested to learn that I have stand-by and hibernate enabled now.

I started by disabling all recently installed programs one by one, including Kerio firewall. After that did not work, I disabled all of them at once...still no result. I pretty much had given up at that point until I noticed a newer version of Kerio firewall...so I uninstalled my older version and reinstalled the new version, tried standby and it worked! Hibernation too! It must have been something with the older version of Kerio that was hindering this whether the firewall was enabled or not!

Thanks for your help!

Nick-YF19 Admin/Teacher Emeritus

February 7, 2006, 2:47 PM UTC

Glad we could be of assistance.

This topic is now closed. If you wish it
reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Do not bother contacting us if you are not the topic starter. A valid,
working link to the closed topic is required along with the user name used.
If the user name does not match the one in the thread linked, the email will be deleted.

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.