HT Logs. Tips, FAQs, Analyze.

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: VAlarm
Filename: VAlarm.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Virus Alarm

Command: C:\Documents and Settings\All Users\Application Data\a023\VAlarm.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [Virus Alarm] “C:\Documents and Settings\All Users\Application Data\a023\VAlarm.exe” /s

Description: main file of Virus Alarm (rogue antispyware program)

How to remove: Use HijackThis or use the instructions How to remove Virus Alert (Uninstall instructions)

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: spbho
Filename: spbho.dll
Registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D032570A-5F63-4812-A094-87D007C23012}

Command: C:\Program Files\Privacy center\tools\sp\spbho.dll
CLSID: {D032570A-5F63-4812-A094-87D007C23012}
Startup Type: BHO
HijackThis Category: O2
HijackThis Line:

O2 – BHO: (no name) – {D032570A-5F63-4812-A094-87D007C23012} – C:\Program Files\Privacy center\tools\sp\spbho.dll

Description: Internet Explorer BHO module, component of Privacy center

How to remove: Use HijackThis or Use Malwarebytes Antimalware

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: agent
Filename: agent.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | agent.exe

Command: C:\Program Files\Privacy center\agent.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [agent.exe] C:\Program Files\Privacy center\agent.exe

Description: component of Privacy center

How to remove: Use HijackThis or Use Malwarebytes Antimalware

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: pcdefender
Filename: pcdefender.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | sysav

Command: %UserProfile%\Application Data\pcdefender.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [sysav] %UserProfile%\Application Data\pcdefender.exe

Description: main component of WinPC Defender

How to remove: use the instructions How to remove WinPC Defender

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: ieocx
Filename: ieocx.dll
Registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{96ad72e4-2e2b-4ffc-a5bb-279c2714af12}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{eedc4410-6b4d-4d68-a6bd-c386f0335c1b}

Command: C:\WINDOWS\ieocx.dll
CLSID:

{96ad72e4-2e2b-4ffc-a5bb-279c2714af12}
{eedc4410-6b4d-4d68-a6bd-c386f0335c1b}

Startup Type: BHO
HijackThis Category: O2
HijackThis Line:

O2 – BHO: IEocx Class – {96ad72e4-2e2b-4ffc-a5bb-279c2714af12} – C:\WINDOWS\ieocx.dll
O2 – BHO: WinHTTP Class – {eedc4410-6b4d-4d68-a6bd-c386f0335c1b} – C:\WINDOWS\ieocx.dll

Description: Internet Explorer BHO module, component of WinPC Defender

How to remove: use the instructions How to remove WinPC Defender

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: services
Filename: services.exe
Command: %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
Startup Type: Service
HijackThis Category: O23
HijackThis Line:

O23 – Service: Guard Service (ITGrdEngine) – Unknown owner – %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe

Description: trojan, component of Personal Antivirus

How to remove: use the instructions How to remove Personal Antivirus (Uninstall instructions)

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: iv
Filename: iv.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | iv

Command: C:\Documents and Settings\lab\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Policies\Explorer\Run: [iv] “C:\Documents and Settings\lab\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe”

Description: trojan, component of Personal Antivirus

How to remove: use the instructions How to remove Personal Antivirus (Uninstall instructions)

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: winlogon
Filename: winlogon.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Microsoft Windows logon process

Command: C:\Documents and Settings\lab\Application Data\Microsoft\Windows\winlogon.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [Microsoft Windows logon process] C:\Documents and Settings\lab\Application Data\Microsoft\Windows\winlogon.exe

Description: trojan, component of Personal Antivirus

How to remove: use the instructions How to remove Personal Antivirus (Uninstall instructions)

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: PerAvir
Filename: PerAvir.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Personal Antivirus

Command: C:\Program Files\Personal Antivirus\PerAvir.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [Personal Antivirus] “C:\Program Files\Personal Antivirus\PerAvir.exe” /s

Description: main component of Personal Antivirus (rogue antivirus/antispyware program)

How to remove: use the instructions How to remove Personal Antivirus (Uninstall instructions)

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: hdddriver
Filename: hdddriver.dll
Command: C:\Documents and Settings\All Users\Application Data\Microsoft\Media Index\Drivers\hdddriver.dll
CLSID: {8B2C743A-D44A-4A93-8233-ABEE8BF8ED62}
Startup Type: ShellServiceObjectDelayLoad
HijackThis Category: O21
HijackThis Line:

O21 – SSODL: HardwareDrivers – {8B2C743A-D44A-4A93-8233-ABEE8BF8ED62} – C:\Documents and Settings\All Users\Application Data\Microsoft\Media Index\Drivers\hdddriver.dll

Description: component of Malware Defender 2009

How to remove: use the instructions How to remove Malware Defender 2009 (Uninstall instructions)