HJT log again!

[TimeParadoX]

I recently updated to Windows XP SP2 ( I was on SP1 for quite awhile ), I had to reinstall some stuff like firewall and everything. I wanted to see if I had any extra trash lying around my computer, All my antivirus scans turned nothing but just want to make sure

 

[kitty500cat]

Place a check in the box next to the following HJT entry and click the Fix Checked button:

O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE

Then press ctrl+alt+del to bring up the Windows task manager. Click on the processes tab and end the process alcxmntr.exe (if there).

Search your system for the filename alcxmntr.exe and delete all instances found.

Other than that, the HJT log is clean.

Regards

 

[TimeParadoX]

Ok thanks kitty, I got a new log for your checking

 

[Daveskater]

hi, kitty, i'm learning hjt logs so can i ask why that entry needs fixing? when i look it up on processlibrary.com it says "alcxmntr.exe is installed alongside hardware drivers for the Realtek AC97 audio device"

i know that O4 is startup but i thought that an audio driver would be ok at startup?

teach me, for i am a n00b

 

[Gosugod]

It has a Status of X
Realtek AC97 Audio - Event Monitor. Slyware file used surreptitiously monitor one's actions. It's used by realtek to gather data about customers.


www.castlecops.com/startuplist-180.html

 

[kitty500cat]

I usually search the web for file names, since that returns more results than searching one site. For example:

http://www.castlecops.com/s180-Alcxmntr_exe.html
http://www.bleepingcomputer.com/startups/Alcxmntr.exe-245.html

I think that a few users may have reported that their audio stopped working after removing this file; however, the benefit does outweigh the risk.

Does this help?

Regards

 

[Daveskater]

thanks i'd to the face but it's not there any more

i forgot that companies did things like that, tisk tisk

 

[TimeParadoX]

I usually go here: http://www.hijackthis.de/

It gives details on ( mostly ) all HJT log entries, it's not 100% for sure, that's why I check here as well