TechSpot

Little Help with HJT log.

By Devil-Within
Mar 5, 2007
  1. Hello, yesterday my friend got a virus on his computer. His Anti Virus picked nothing up, so I suggested AVG but of course, AVG wouldn't work, saying there was somthing wrong with Windows, and same said every other Anti Virus I suggested. So, I had to talk him through his computer, and find the source by myself. After finding the source of many objects such as pmmnt.exe and so much more following a long that, we had to go into safe mode to actualy delete it, I got him to download HiJackThis and he did so, I found a few more things and got them deleted. He did have the virus that caused him to get Security Alert Popup following a long with many pornography ads which has all been removed.

    Now the only problem is, he is still having trouble with people trying to connect to his PC. I have obtained another copy of HiJackThis which I hoping yall can find what is causing this issue with his computer. All seems to be fine other then that.

    here is the HiJackThis
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    Your friend needs to do the following.

    Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.

    Post fresh HJT and AVG Antispyware logs as attachments into this thread, only after doing the above.

    Regards Howard :wave: :wave:

    This thread is for the use of Devil-Within only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  3. Devil-Within

    Devil-Within TS Rookie Topic Starter

    Yeah but he can't download AVG it wont let him, his computer is that messed up. I went through all the steps, everything is gone, and none of that can help if he can't download anything to get rid of the stuff...

    I just need someone to look through that and tell me what is causing his computer to be a target from other hackers.
     
  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Ok, no problem.

    Go HERE and read the instructions for posting a renamed HJT log as an attachment.

    Regards Howard :)

    This thread is for the use of Devil-Within only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  5. Devil-Within

    Devil-Within TS Rookie Topic Starter

    Check Up!

    Hi, I am just here for a check up to see if my computer is healthy or not. :) I put a HiJackThis attachment on here, I hope it worked because last time I didn't.

    Take your time on looking through it, I am in no rush.

    Thanks,

    Devil-Within
     
  6. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    I have merged your new thread into this one.

    Run HJT with no other programmes open. Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

    O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Documents and Settings\Owner.YOUR-A846B26098\Desktop\My stuff\BitComet\BitComet.exe/AddLink.htm

    O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Documents and Settings\Owner.YOUR-A846B26098\Desktop\My stuff\BitComet\BitComet.exe/AddVideo.htm

    O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Documents and Settings\Owner.YOUR-A846B26098\Desktop\My stuff\BitComet\BitComet.exe/AddAllLink.htm

    Click on the fix checked button.

    Close HJT.

    Locate and delete the following bold files and/or directories(if there).

    C:\windows\ALCMTR.EXE

    Reboot your system.

    Other than the above, your HJT log is clean.

    If you have any further virus/spyware problems, please post in this thread.

    Regards Howard :)

    This thread is for the use of Devil-Within only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  7. Devil-Within

    Devil-Within TS Rookie Topic Starter

    I try to keep it clean, but what is the ALCMTR.EXE?
     
  8. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    ALCMTR.EXE=Realtek AC97 Audio - Event Monitor. "Sypware" file used surreptitiously to monitor one's actions. It is not a sinister one, like remote control programs, but it is being used by Realtek to gather data about customers

    Regards Howard :)

    This thread is for the use of Devil-Within only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  9. Devil-Within

    Devil-Within TS Rookie Topic Starter

    Oh, okay, cool thanks a lot for the help, I will be posting my friends HJL Soon so I can finally get his computer healthy again.
     
  10. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Ok, no problem mate.

    Seeing as it`s a friends pc, it would be better to start a new thread for that. This thread is for your pc`s malware problems.

    Regards Howard :)

    This thread is for the use of Devil-Within only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...