[bayoab]

Originally Posted by gurillaman

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us8.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us8.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us8.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us8.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us8.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us8.hpwis.com/

All these can go... you might want to run cwshredder first. And now it gets interesting.

O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE

See: http://computercops.biz/startuplist-180.html

O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe

If you have a HP multimedia keyboard, this is okay. Otherwise, this is a virus that needs to be purged. http://www.liutilities.com/products/...sslibrary/ps2/ and
http://forums1.itrc.hp.com/service/f...hreadId=763278

Also, Backweb is a "spyware" program. It is similar to alcxmntr.exe. But not really worth removing unless you want it out.

But, otherwise, there is nothing really wrong here....