XPost: alt.comp.anti-virus, alt.os.windowsxp, alt.os.windows-xp   
      
   From: "james"    
      
   | I am running windows xp pro sp2 with all the updates. I am running   
   | antivir.com antivirus.  Every few seconds a window pops up C:\windows   
   | \system32\hgaawv.dll is the trojan horse TR/Spy.CptHooki.2 I get no info   
   | on this virus, any ideas on how I would clean my system?   
      
   First, it is NOT a virus it is a Trojan.   
      
   Chances are it is a Conhook type Trojan.   
   Look in the below area of the Registry...   
   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify   
      
   Look for a a key theat loads;  hgaawv.dll  and see if you can delete that key.   
      
   If not (it is a protected key) then boot into the Recovery Console.   
   Logon as administrator   
   Delete;  C:\windows\system32\hgaawv.dll   
   Reboot into Normal Mode then delete the key under the Winlogon\Notify   
      
   --   
   Dave   
   http://www.claymania.com/removal-trojan-adware.html   
   http://www.ik-cs.com/got-a-virus.htm   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)