Please help with HJT for pm-proc1.exe

[majorgeek1]

Hi there,

This is my very first post after using this site for about 4 years.
I have been trying to remove the following files from my pc: pm_proc1 and pm_proc2.exe. Usually have found instructions here for previous malware but it appears this one only sufaced "22 March" anywhere in the world says the prevx site.

I wonder if you would have any information about this, how to remove it manually and what files to look for?

Thank you so much for your help.

cheers

[jholland1964]

I don't see anything in the log which notes either file. Where did you see this on your computer? Why do you feel you have it on the computer?

I am going to recommend that you run ~TL's AnalyzerXP which can be found Free WindowsXP Utilities!
In the explanation of the program there is an attached printscreen. Please look at that so that you will know what to expect.
Scroll down to the bottom of that first thread there and you will see AnalyzeXP. Click on that and choose Save and save it to your desktop.
The first screen tells you to click any key to run the program. Please do so and the scan will begin. When that preliminary scan has completed you will see the second screen. Choose 2 and then you will get the screen where you will type in the date. Type in 03-20-2008, hit enter.
Once the scan is complete you will find a text file on your desktop.
Please attach that file to your next post.
Judy

[majorgeek1]

Hi,

Thank you so much for replying/
It is on the 10th line starting from RO-HKCU etc pretty far down...
It says it is in c:...\system32\pmproc...

I have deleted it from there and other locations many times but it just wont go away. That computer doesnt work now, it hangs while booting up.

O4 - HKLM\..\Run: [plsi] C:\WINDOWS\system32\pm_proc1.exe

really appreciate some advice.
cheers

[jholland1964]

I have deleted it from there and other locations many times but it just wont go away.

If you tried the fix via HJT this is one reason you could be having a problem now. HJT is basically a scanner program NOT a fixer program. It should be used only after basic clean up...using the steps and programs noted in THIS STICKY
Manual deletions are generally the LAST recommendation since incorrect files can be removed by mistake.
Now in looking for information on your file today...I find absolutely NOTHING, not even on the Prevx site.
You say the computer hangs while booting up...can you get to boot to Safe Mode by tapping F8 when the boot process begins?