I think my computer has been hijacked

[vidapura]

SNDMon.exe

Hi Blade81,

I'm back to working on my system. Thanks for your previous post.

I think I have uninstalled "most of" Norton AntiVirus 2002.

I have dowloaded, installed and scanned with Avast! to use as my antivirus software instead of Norton.

The only item which still remains is SNDMon.exe in C:\Program Files\Sym Net Drv\ SNDMon.exe, should I delete it as well? In researching this file I have seen it stated that this file may be added in the autorun registry.

Now that I have an up to date antivirus program I wanted to continue to cleanup my system prior to installing my external HDD this weekend. Then I will backup my files so that I can download WindowsXP SP3. Should I do the hosts file procedure as per your instructions prior to SP3?

I feel guilty for asking your advice, I'm sure there are more important tasks you are assisting with. I am grateful for all your help and advice. I have learned many things about my system and it's security features. I can't wait to get back to life as I knew it prior to the "infection".

Best regards

 

[Blade81]

The only item which still remains is SNDMon.exe in C:\Program Files\Sym Net Drv\ SNDMon.exe, should I delete it as well? In researching this file I have seen it stated that this file may be added in the autorun registry.

Guess you mean C:\Program Files\SymNetDrv folder. Yes, it can be deleted.

Now that I have an up to date antivirus program I wanted to continue to cleanup my system prior to installing my external HDD this weekend. Then I will backup my files so that I can download WindowsXP SP3. Should I do the hosts file procedure as per your instructions prior to SP3?

Install hosts file after getting sp3.

I feel guilty for asking your advice, I'm sure there are more important tasks you are assisting with. I am grateful for all your help and advice.

No problem. It's been my pleasure to help

 

[Blade81]

Due to inactivity, this thread will now be closed.

Note:If it has been five days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.

If it has been less than five days since your last response and you need the thread re-opened, please send me or MOD a private message (pm). A valid, working link to the closed topic is required.