Re: 124782.exe, inst.exe, hook.dll won't go away permanently

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 10/16/04


Date: Sat, 16 Oct 2004 11:31:29 -0400

Remember, a scan Yesterday does not equal a scan Tomorrow is new definition files have been
released and since your last post (not this thread) Adaware, McAfee and at least Trend have
released definitions.

Dave

"U-Bob" <rdbair@email.uncc.edu> wrote in message
news:8a4fd139.0410160624.738dcf7a@posting.google.com...
| Yes I have checked the registry run commands. Sorry I neglected to mention that.
| I've done the scans at symantec, panda, trend, mcafee. I'll look at the rest.
|
|
|
| "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:<utWPdcvsEHA.1468@TK2MSFTNGP12.phx.gbl>...
| > You have examined the Registry Run commands ?
| >
| > Please go to multiple of the below online scanners and perform a scan of your platform
| > then report back your results.
| >
| > Trend:
| > http://housecall.antivirus.com
| > http://housecall.trendmicro.com
| >
| > F-Secure:
| > http://support.f-secure.com/enu/home/ols.shtml
| >
| > McAfee:
| > http://www.mcafee.com/myapps/mfs/default.asp
| >
| > Panda:
| > http://www.pandasoftware.com/activescan/
| >
| > Kaspersky:
| > http://www.kaspersky.com/de/scanforvirus
| >
| > Symantec:
| > http://security.symantec.com/
| >
| > BitDefender
| > http://www.bitdefender.com/scan/license.php
| >
| > Freedom Online scanner
| > http://www.freedom.net/viruscenter/index.html
| >
| > Dave
| >
| >
| >
| >
| >
| >
| >
| >
| >
| > "U-Bob" <rdbair@email.uncc.edu> wrote in message
| > news:8a4fd139.0410151230.401f5c06@posting.google.com...
| > | OK guys. I certainly didn't mean to hijack another thread. Truth be
| > | it, I've never been chastized for that before. Oh well...
| > |
| > | OK, this little irritant has shown up on my PC because of an
| > | inadvertant click. Yeah, I know, heard that before, but I mean it.
| > | As you have seen before, 124782.exe, inst.exe and hook.dll get placed
| > | at the root of c:. Originally this also hijacked my homepage, but I
| > | repaired that. I have attempted to remove this pest by running
| > | Ad-Aware, SpyBot, Norton Anti-Virus 9 Corporate Edition, PestPatrol
| > | Corporate and of course Trend Sysclean, all from Safe-mode, all with
| > | restore off. I have done each and everyone of these first in safe,
| > | then again in a regular session. I then also have scanned my HD for
| > | any instances of 124782 and inst, and removed the prefetch references
| > | (8.pf) from the HD. It doesn't seem to appear right away after
| > | opening IE, and it doesn't seem to have any standard amount of time.
| > | In fact the day before yesterday it didn't pop up at all, though I
| > | didn't browse much, but this morning, while reading the news, boom,
| > | there's that inst.exe command prompt window! This is WinXP patched
| > | all the way up. Suggestions????
| > |
| > | Bob



Relevant Pages

  • Re: Forefront and SBS
    ... Though the lot In here would say Trend, Ive been using McAfee for 10 ... Im probably a minority user Of McAfee on SBS but my experiences are ... I have 3 SBS domains 1 2003 Std ...
    (microsoft.public.windows.server.sbs)
  • Re: SPR/Madtol.C program
    ... TREND: ... SOPHOS: ... error code " idicates that the FTP.EXE program was ... unable to access the McAfee FTP site and downnload the needed files. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Dialer got in through internet and cant get to remove it.. an
    ... Also one must realize while there is overlap in coverage between anti spyware and anti ... As for my Multi AV vendor scanner tool, it will always try to get the latest signature files ... and engines for the three respective AV vendors; McAfee, Sophos and Trend. ...
    (microsoft.public.win2000.general)
  • Re: Trend Pattern File Version: 2.207
    ... Nope Pattern File 2.212 fails to detect it! ... Trend is too slow to post a sig. ... file when you submit an infector to them. ... send you my McAfee info and script, ...
    (microsoft.public.security.virus)
  • Re: Net Controller Trojan 1.08 - system.exe
    ... Trend Sysclean. ... Did you try any of the online scanners I proposed? ... I can supply you with the McAfee Command Line Scanner instructions, ... |> 3) If you are using WinME or WinXP, disable System Restore ...
    (microsoft.public.windowsxp.security_admin)

Quantcast