Files keeps trying to install

djpritcha · 12-03-2004, 12:54 PM

I have SpySweeper installed on my PC, and have this file that continuously tries to install - the filename is 80j29a6.exe

Does anyone have any idea where this might be coming from, and allso where I can look to find where it keeps launching from - attempting to install it. I have to user RegCleaner to "Remove It" as SpySweeper won't - but at least SpySweeper is telling me it's trying to install. But it keeps popping back up with an alert in SpySweeper.

Thanks

Dave

Alphatronix · 12-03-2004, 02:25 PM

well, theres a few things you can do....

well its an exe file so basically, go to search and type in that file... if you find anything, delete it... if it comes back then go to START-> RUN-> msconfig
and check if there are any wierd files under the "Start Up" tag... This may be cuasing it to come back...

I recommend to DL Ad-Aware and run that first... if that doesnt help, then do msconfig.. Also, it could be a very smart program that installs a loader as a service in the system which brings that exe file back...

SO... go to MSCONFIG and check under "Services" tag and check the provider for every service.. IF you find a provider "Unknown" then you know it's a cuase... In that case, all you can do is disable that service...

Outline:
#1 Run Ad-Aware
#2 RUN->START->MSCONFIG
#3 Check "Services" and "Start Up" Tags for anything unusual

djpritcha · 12-03-2004, 11:15 PM

Alphatronix - I'm going to try what you said - but how do you "disable a Service"?

Thanks

Dave

aqsg72 · 12-03-2004, 11:23 PM

Quote:

but how do you "disable a Service"?

Do what he said here:

Quote:

#1 Run Ad-Aware
#2 RUN->START->MSCONFIG
#3 Check "Services" and "Start Up" Tags for anything unusual

Under services simply untick any 'unusual' running services and hit apply

djpritcha · 12-04-2004, 04:16 AM

I think I found it - but I can't get it deleted in RegEdit. It was ISEXENG, and was running as a service. It shows as LEGACY_ISEXENG - which is in HKEY_LOCAL_MACHINE/SYSTEM/ControlSet001/Enum/Root/LEGACY_ISEXENG

When I try to delete it, I get the following error:
Cannot delete LEGACY_ISEXENG: Error while deleting key.

Any ideas? This leads me to believe that it's still somehow running.

Thanks

Dave

aqsg72 · 12-04-2004, 11:52 AM

Quote:

Navigate to the key that you want to delete and choose Permissions from the Security menu.

For the keys you've mentioned you'll see entries for Everyone and SYSTEM, with the former having only read permission. Click on Everyone, check the box titled Allow Full Control, and click on OK. You can now delete the key. In Windows XP, use the normal REGEDIT program and select Permissions from the Edit menu.

Quoted from http://www.pcmag.com/article2/0,1759,1232491,00.asp

12-03-2004, 12:54 PM	#1 (permalink)
djpritcha New Member Join Date: Sep 2004 Posts: 4	Files keeps trying to install - HELP! I have SpySweeper installed on my PC, and have this file that continuously tries to install - the filename is 80j29a6.exe Does anyone have any idea where this might be coming from, and allso where I can look to find where it keeps launching from - attempting to install it. I have to user RegCleaner to "Remove It" as SpySweeper won't - but at least SpySweeper is telling me it's trying to install. But it keeps popping back up with an alert in SpySweeper. Thanks Dave

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

12-03-2004, 02:25 PM	#2 (permalink)
Alphatronix Silver Member Join Date: Nov 2004 Posts: 174	well, theres a few things you can do.... well its an exe file so basically, go to search and type in that file... if you find anything, delete it... if it comes back then go to START-> RUN-> msconfig and check if there are any wierd files under the "Start Up" tag... This may be cuasing it to come back... I recommend to DL Ad-Aware and run that first... if that doesnt help, then do msconfig.. Also, it could be a very smart program that installs a loader as a service in the system which brings that exe file back... SO... go to MSCONFIG and check under "Services" tag and check the provider for every service.. IF you find a provider "Unknown" then you know it's a cuase... In that case, all you can do is disable that service... Outline: #1 Run Ad-Aware #2 RUN->START->MSCONFIG #3 Check "Services" and "Start Up" Tags for anything unusual

12-03-2004, 11:15 PM	#3 (permalink)
djpritcha New Member Join Date: Sep 2004 Posts: 4	Alphatronix - I'm going to try what you said - but how do you "disable a Service"? Thanks Dave

12-04-2004, 04:16 AM	#5 (permalink)
djpritcha New Member Join Date: Sep 2004 Posts: 4	I think I found it - but I can't get it deleted in RegEdit. It was ISEXENG, and was running as a service. It shows as LEGACY_ISEXENG - which is in HKEY_LOCAL_MACHINE/SYSTEM/ControlSet001/Enum/Root/LEGACY_ISEXENG When I try to delete it, I get the following error: Cannot delete LEGACY_ISEXENG: Error while deleting key. Any ideas? This leads me to believe that it's still somehow running. Thanks Dave