3

It only took two hours, but here is my HijackThis log. The only thing I can see that looks odd, other than the WinMgmt.exe is the SpyDoctor (Antivirus). I’m trying to run the ComboFix, but it will probably take a couple more hours at this rate. Do you think I should boot into a Dos prompt and delete the SpyDoctor program? I know I should have written down what I was deleting using Avast, but they weren’t system files, so I didn’t think to. They were just a couple of net meeting type programs.

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 5:34:17 PM, on 4/12/2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
Boot mode: Safe mode

Running processes:
F:\WINNT\System32\smss.exe
F:\WINNT\system32\csrss.exe
F:\WINNT\system32\winlogon.exe
F:\WINNT\system32\services.exe
F:\WINNT\system32\lsass.exe
F:\WINNT\system32\svchost.exe
F:\Program Files\Spyware Doctor\svcntaux.exe
F:\WINNT\System32\WBEM\WinMgmt.exe
F:\WINNT\System32\WBEM\WinMgmt.exe
F:\WINNT\Explorer.EXE
F:\Program Files\Spyware Doctor\swdsvc.exe
H:\HiJackThis_v2.exe
F:\Program Files\Spyware Doctor\update.exe

See attached and next post (wouldn’t all fit)