HT Logs. Tips, FAQs, Analyze.

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: pcdefender
Filename: pcdefender.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | sysav

Command: %UserProfile%\Application Data\pcdefender.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [sysav] %UserProfile%\Application Data\pcdefender.exe

Description: main component of WinPC Defender

How to remove: use the instructions How to remove WinPC Defender

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: ieocx
Filename: ieocx.dll
Registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{96ad72e4-2e2b-4ffc-a5bb-279c2714af12}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{eedc4410-6b4d-4d68-a6bd-c386f0335c1b}

Command: C:\WINDOWS\ieocx.dll
CLSID:

{96ad72e4-2e2b-4ffc-a5bb-279c2714af12}
{eedc4410-6b4d-4d68-a6bd-c386f0335c1b}

Startup Type: BHO
HijackThis Category: O2
HijackThis Line:

O2 – BHO: IEocx Class – {96ad72e4-2e2b-4ffc-a5bb-279c2714af12} – C:\WINDOWS\ieocx.dll
O2 – BHO: WinHTTP Class – {eedc4410-6b4d-4d68-a6bd-c386f0335c1b} – C:\WINDOWS\ieocx.dll

Description: Internet Explorer BHO module, component of WinPC Defender

How to remove: use the instructions How to remove WinPC Defender

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: services
Filename: services.exe
Command: %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
Startup Type: Service
HijackThis Category: O23
HijackThis Line:

O23 – Service: Guard Service (ITGrdEngine) – Unknown owner – %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe

Description: trojan, component of Personal Antivirus

How to remove: use the instructions How to remove Personal Antivirus (Uninstall instructions)

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: iv
Filename: iv.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | iv

Command: C:\Documents and Settings\lab\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Policies\Explorer\Run: [iv] “C:\Documents and Settings\lab\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe”

Description: trojan, component of Personal Antivirus

How to remove: use the instructions How to remove Personal Antivirus (Uninstall instructions)

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: winlogon
Filename: winlogon.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Microsoft Windows logon process

Command: C:\Documents and Settings\lab\Application Data\Microsoft\Windows\winlogon.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [Microsoft Windows logon process] C:\Documents and Settings\lab\Application Data\Microsoft\Windows\winlogon.exe

Description: trojan, component of Personal Antivirus

How to remove: use the instructions How to remove Personal Antivirus (Uninstall instructions)

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: PerAvir
Filename: PerAvir.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Personal Antivirus

Command: C:\Program Files\Personal Antivirus\PerAvir.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [Personal Antivirus] “C:\Program Files\Personal Antivirus\PerAvir.exe” /s

Description: main component of Personal Antivirus (rogue antivirus/antispyware program)

How to remove: use the instructions How to remove Personal Antivirus (Uninstall instructions)

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: wmptray
Filename: wmptray.exe

Command: C:\Program Files\MediaSystem\wmptray.exe
Startup Type: HKLM->run
HijackThis Category: O4
HijackThis Line:

O4 – HKLM\..\Run: [WmpTray] C:\Program Files\MediaSystem\wmptray.exe

Description: component of WinCodecPro trojan

How to remove: use the instructions How to remove WinCodecPro trojan and wmptray.exe (fake media codec)

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: AutoPlay
Filename: AutoPlay.exe
Startup Type: Startup folder
HijackThis Category: O4
HijackThis Line:

O4 – S-1-5-18 Startup: AutoPlay.exe (User ‘SYSTEM’)
O4 – .DEFAULT Startup: AutoPlay.exe (User ‘Default user’)
O4 – .DEFAULT User Startup: AutoPlay.exe (User ‘Default user’)

Description: autorun.inf trojan component

How to remove: Use HijackThis + use the instructions How to remove trojans that uses autorun.inf file

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: diarprof
Filename: diarprof.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [bo0pRSZ3e] diarprof.exe

Description: Unknown malware component

How to remove: Use HijackThis

This is an harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: qtplugin
Filename: qtplugin.exe
Command: C:\WINDOWS\system32\qtplugin.exe
Startup Type: HKLM->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKLM\..\Run: [RegistryMonitor1] C:\WINDOWS\system32\qtplugin.exe

Description: Trojan-Downloader.Win32.Agent.hmz Trojan

How to remove: Use HijackThis