Re: inst.exe

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 10/10/04


Date: Sun, 10 Oct 2004 11:53:28 -0400

I don't know if your version of Adaware is current becuase Adaware SE is an imprived
version. If you don't have Adaware SE, remove the version you have and follow the
directions below. If you already have the personal SE version, don't download but still
follow the below directions.

1) Download the following three items...

         Trend Sysclean Package
         http://www.trendmicro.com/download/dcs.asp

         Latest Trend signature files.
         http://www.trendmicro.com/download/pattern.asp

         Adaware SE (personal free version)
         http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download sysclean.com and place it in that directory.
Dowload the signature files (pattern files) by obtaining the ZIP file.
For example; lpt192.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
            http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
        platform and clean/delete any infectors/parasites found.
6) Restart your PC and perform a "final" Full Scan of your platform using both the
        Trend Sysclean utility and Adaware
7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
            System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point
10) Please report back your results

Dave

"Pete-d" <Pete-d@discussions.microsoft.com> wrote in message
news:2FE21BBA-C444-47A4-8F54-B49BDD51E91E@microsoft.com...
| Hi,
| sorry if this is an old one for you guys but it's a recent problem for me. I
| have started getting a dialler download on my PC when i visit websites. When
| i visit some pages i get a window open momentarily that installs a file
| called "inst.exe". Along with it in the C: drive it loads "hooks.dll" and
| "124782.exe". Now Nortons 2005 will find this but fails to delete it !.
|
| I have Pestpatrol installed which finds this and shows it as TIB Browser and
| deletes it no problem and i can then go tothe C: drive and put all 3 files in
| the recycle bin. I also have ADAWARE installed but it doesn't seem to find
| these files. In addition i very recently installed SpywareBlaster to try and
| prevent this file from repeatedly installing. It appeared to work for a short
| time but the file keeps installing ?
|
| Now this is not a major problem and the dialler is NOT hijacking my modem
| and dialling out, but it is extremely annoying that i cant prevent the files
| from loading on to my PC in the first place.
|
| Does anyone have any ideas how i can prevent this occuring in the first
| place because i am a bit stumped ????
|
| Many thanks
|
| Pete



Relevant Pages

  • Re: System security scanner has detected...
    ... If you are using Adaware v6, ... Download sysclean.com and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ... You can also try some of the below online scanners. ...
    (microsoft.public.security.virus)
  • Re: ISTbar problem
    ... | freewares).i keep them updated.Whenever i use adaware for scanning my hard ... Trend Sysclean Method 1 ... Download SYSCLEAN.COM and place it in that directory. ... Re-enable System Restore and re-apply any System Restore preferences, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Delete item from Registry
    ... Adaware should handle it, but, I also suggest performing a TrendMicro Sysclean scan as well. ... Download Sysclean.com and place it in that directory. ... Re-enable System Restore and re-apply any System Restore preferences, ... | Attempted to remove "Wild Tangent" malware using Spybot S& D. ...
    (microsoft.public.windowsxp.general)
  • Re: File Associations GONE!
    ... (e.g., "c:\New Folder") ... Download SYSCLEAN.COM and place it in that directory. ... Update Adaware with the latest definitions. ... Re-enable System Restore and re-apply any System Restore preferences, ...
    (microsoft.public.security.virus)
  • Re: lsass.exe hits on HDD
    ... > Is it normal for lsass.exe to constantly write to the hard HDD? ... >> Download SYSCLEAN.COM and place it in that directory. ... Update Adaware with the latest definitions. ... Re-enable System Restore and re-apply any System Restore ...
    (microsoft.public.windowsxp.security_admin)