Author Topic: hgv?e.exe shows up as a virus in application settings...cannot remove with AVG  (Read 4520 times)

0 Members and 1 Guest are viewing this topic.

bmundtucf

  • Guest
When I run AVG, hgv?e.exe pops up as a virus in my documents and settings under application data.  AVG cannot remove this.  Can anyone please help?  Here is my Hijackthis log.



Logfile of HijackThis v1.98.2
Scan saved at 10:17:37 PM, on 9/28/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Grisoft\AVG6\avgcc32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\Bill\LOCALS~1\Temp\Temporary Directory 4 for hijackthis.zip\HijackThis.exe

O4 - HKLM\..\Run: [AVG_CC] C:\Program Files\Grisoft\AVG6\avgcc32.exe /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe


Thanks to anyone who can help me!!

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Please post the entire HijackThis log. Or click HERE and get/use my HJT log analyzer. Also analyze your log HERE.

bmundtucf

  • Guest
actually, that was the entire log...I thought it seemed very short

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
I can't believe this is the entire log. There are always lines like:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/

and more lines starting with O4 - HKLM\..\Run:

I also miss the dpf's.

Something isn't right here.
Did you create this log while in safe mode by change?
Did you changed anything in the config of HJT? (added exclusions?)

I suggest you click on the link in my signature and follow all steps on that page to clean your system.

Trust me, I've develloped the HJT log analyzer and seen hundreds of logs. But never saw one as short like this with so many things missing.

ps: almost forgot. the posted log is clean. But I don't trust it :o
« Last Edit: September 29, 2004, 05:31:56 AM by Eddy »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89064
  • No support PMs thanks
Quote
When I run AVG, hgv?e.exe pops up as a virus in my documents and settings under application data.  AVG cannot remove this.  Can anyone please help?

It will be a little difficult to help since you are running AVG, this is the forum for avast! anti-virus users (a service paid for by ALWIL, the owners of avast!). We know a little about AVG, many of us left AVG to use avast. Poor or total lack of support, clunky interface and detection (two viruses found when I changed to avast from AVG), etc.

I guess the AVG support forums or support can't help (as you don't get any with the free AVG), perhaps its time that you to jumped ship?
« Last Edit: September 29, 2004, 05:44:46 PM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security