Files keeps trying to install - HELP!

djpritcha

New Member
I have SpySweeper installed on my PC, and have this file that continuously tries to install - the filename is 80j29a6.exe


Does anyone have any idea where this might be coming from, and allso where I can look to find where it keeps launching from - attempting to install it. I have to user RegCleaner to "Remove It" as SpySweeper won't - but at least SpySweeper is telling me it's trying to install. But it keeps popping back up with an alert in SpySweeper.

Thanks

Dave
 
well, theres a few things you can do....

well its an exe file so basically, go to search and type in that file... if you find anything, delete it... if it comes back then go to START-> RUN-> msconfig
and check if there are any wierd files under the "Start Up" tag... This may be cuasing it to come back...

I recommend to DL Ad-Aware and run that first... if that doesnt help, then do msconfig.. Also, it could be a very smart program that installs a loader as a service in the system which brings that exe file back...

SO... go to MSCONFIG and check under "Services" tag and check the provider for every service.. IF you find a provider "Unknown" then you know it's a cuase... In that case, all you can do is disable that service...

Outline:
#1 Run Ad-Aware
#2 RUN->START->MSCONFIG
#3 Check "Services" and "Start Up" Tags for anything unusual
 
I think I found it - but I can't get it deleted in RegEdit. It was ISEXENG, and was running as a service. It shows as LEGACY_ISEXENG - which is in HKEY_LOCAL_MACHINE/SYSTEM/ControlSet001/Enum/Root/LEGACY_ISEXENG

When I try to delete it, I get the following error:
Cannot delete LEGACY_ISEXENG: Error while deleting key.

Any ideas? This leads me to believe that it's still somehow running.

Thanks

Dave
 
Navigate to the key that you want to delete and choose Permissions from the Security menu.

For the keys you've mentioned you'll see entries for Everyone and SYSTEM, with the former having only read permission. Click on Everyone, check the box titled Allow Full Control, and click on OK. You can now delete the key. In Windows XP, use the normal REGEDIT program and select Permissions from the Edit menu.

Quoted from http://www.pcmag.com/article2/0,1759,1232491,00.asp
 
Back
Top