Forum Home
Press F1
 
Thread ID: 62450 2005-10-07 22:15:00 problem with computer jerseygirl64 (5394) Press F1
Post ID Timestamp Content User
394434 2005-10-11 20:29:00 I also have this virus and am not as sophisticated as Jersey Girl. I don't have nor know what HijackThis is. I have tried to delete registry entries related to polapoka75 but is seem to be self propropagating. I also tried a system restore, I do run Norton and have updated and ran it in the last few hours. I have loaded several suggested spyware program however my computer will not open or run them. Can anyone help, please? Strumble (9031)
394435 2005-10-11 21:08:00 I was interested in this scan and the results too, and went and parsed it myself .

First, there was a result that nobody seemed to notice, and by the time jerseygirl ran the second scan, the one thing that showed up in the scan I did had moved to a different location:

The first location was here:

C:\WINDOWS\ALCXMNTR . EXE Check with an antivirus scanner Nasty
Nasty running process . (ALCXMNTR . EXE)
Realtek AC97 Audio - Event Monitor . "Sypware" file used surreptitiously monitor one's actions . It is not a sinister one, like remote control programs, but it is being used by Realtek to gather data about customers
Visitor's assessment: 2 . 5 (Safe . ) This is a nasty process! You should fix it and try to delete it manually!

then here is where it went in the second scan she submitted:

O4 - HKLM\ . . \Run: [AlcxMonitor] ALCXMNTR . EXE Nasty
Nasty This entry was classified from our visitors as bad .
Visitor's assessment: 1 . 88 (Maybe nasty) Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way .



What I'm wondering is why did it move?
What scanners did the you guys use to get the results you did?
Why did the site I used ( . hijackthis . de/index . php#anl" target="_blank">www . hijackthis . de) get such different results?
Is there something wrong with the sites I used to check the results?

I went a little further and used this site ( . iamnotageek . com/parse . php" target="_blank">hjt . iamnotageek . com) to run a scan too . It had or made no reference to the results from the first site .

I re-ran the second scan from here at the last site and got no alarms, other than it recommended further investigation of that same item, and said the following:

Unknown Item - Investigate further

. . . but it did say that it was spyware via

Realtek AC97 AUDIO - EVENT MONITOR


. . . . . . . . . . just wondering . . . . . . . . . . . . . . . . :confused:
SurferJoe46 (51)
394436 2005-10-11 21:29:00 I also have this virus and am not as sophisticated as Jersey Girl . I don't have nor know what HijackThis is . I have tried to delete registry entries related to polapoka75 but is seem to be self propropagating . I also tried a system restore, I do run Norton and have updated and ran it in the last few hours . I have loaded several suggested spyware program however my computer will not open or run them . Can anyone help, please?

In my opinion, having System Restore running is one of the most dangerous things to do . It is a hide-y hole and haven for viruses and trojans that self-propagate . You only make it a safe place for a virus to live and when you "restore" your system, you reactivate the malevolence again and again .

If you want it, here's HighJackThis ( . com/hjt/" target="_blank">tomcoyote . com) for you, but please be sure to read all the info on the site .

This utility is very powerful, and you can destroy your Windows installation if you don't carefully follow instructions for using it .

Ask 1st!

Ask 2nd!

Ask Always until you get your training wheels off .


. . . . . . . . . . and I haven't even mentioned BIOS re-writing viruses yet!
SurferJoe46 (51)
1 2