HT Logs. Tips, FAQs, Analyze.

alggui.exe is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: alggui
Filename: alggui.exe
Registry key:

HKEY_CLASSES_ROOT\exefile\shell\open\command

Command: C:\Program Files\alggui.exe
Startup Type: File associations
DDS/Combofix/RSIT Line:

.exe – open – C:\Program Files\alggui.exe “%1” %*

Description: component of Your PC Protector. Your PC Protector is a rogue antispyware program.

How to remove: use these Your PC Protector removal instructions.

av.exe is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: av
Filename: av.exe
Registry key:

HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = “%UserProfile%\Local Settings\Application Data\av.exe” /START “%1” %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | @ = “%UserProfile%\Local Settings\Application Data\av.exe” /START “%1” %*
HKEY_CLASSES_ROOT\.exe\shell\open\command | @= “%UserProfile%\Local Settings\Application Data\av.exe” /START “%1” %*
HKEY_CLASSES_ROOT\secfile\shell\open\command | @ = “%UserProfile%\Local Settings\Application Data\av.exe” /START “%1” %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command | @ = “%UserProfile%\Local Settings\Application Data\av.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command | @ = “%UserProfile%\Local Settings\Application Data\av.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command | @ = “%UserProfile%\Local Settings\Application Data\av.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”

Command: %UserProfile%\Local Settings\Application Data\av.exe
Startup Type: File associations
Description: core component of Vista Guardian, Antivirus Vista 2010, Vista Antispyware 2010, Vista Antivirus Pro, Vista Internet Security 2010

How to remove: use these Vista Guardian, Antivirus Vista 2010, Vista Antispyware 2010, Vista Antivirus Pro, Vista Internet Security 2010 removal instructions.

av.exe is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: av
Filename: av.exe
Registry key:

HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\secfile

Command: %Appdata%\av.exe
Startup Type: File associations
Description: core component of XP Internet Security 2010. XP Internet Security 2010 also known as XP Guardian, Antivirus XP 2010 is a rogue antispyware program.

How to remove: use these XP Internet Security 2010, XP Guardian, Antivirus XP 2010 removal instructions.

This is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: desote
Filename: desote.exe
Registry key:

HKEY_CLASSES_ROOT\exefile\shell\open\command

Command: c:\windows\system32\desote.exe
Startup Type: File associations

.exe – open – C:\WINDOWS\system32\desote.exe “%1″ %*

Description: component of Windows Police Pro (rogue antispyware program) that blocks ability to run any programs.

How to remove: use these Windows Police Pro removal instructions.

This is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: desot
Filename: desot.exe
Registry key:

HKEY_CLASSES_ROOT\exefile\shell\open\command

Command: D:\WINDOWS\system32\desot.exe
Startup Type: File associations
Combofix/RSIT Line:

.exe – open – D:\WINDOWS\system32\desot.exe “%1” %*

Description: component of Windows Antivirus Pro (rogue antivirus program)

How to remove: use these Windows Antivirus Pro removal instructions.