Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)
Hi, everyone.
I've been hit with a particularly intrusive and obnoxious piece
of spyware called ABetterInternet. Throughout the day, I have
numerous firewall dialogs popping up saying that a particular
upload/download application is trying to access the Internet, and
identifying the application with www.abetterinternet.com. I deny
the action and check the box to always do so, but it doesn't
help; they keep coming back. Various filenames are used:
meaningless or nonsensical ones such as thnall1ac.exe,
aurareco.exe, thin-94-1-x-x.exe, and ifslbqysnh.exe. (The last
one is actually identified as Buddy, which might possibly be a
separate piece of spyware; I don't know yet.) The files usually
run from a temp folder, and when I look for them there I don't
find them.
I did a search and found removal instructions at:
http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453076992
One of the steps involves unregistering a long list of DLLs using
regsvr32.exe; another involves removing a list of registry
entries using RegEdit.
Before proceeding with the cleanup, I have some questions I'd
like answered.
1. Can anyone give me a clear explanation of exactly what it
means to "register" or "unregister" a component? I've been
reading about this process for years, but have never really
understood it. I've read several knowledge base articles and
checked several books on XP and programming windows; most just
use the expressions without ever really defining them. Does
registering a control just create entries for it in the registry
(or is there more involved than that)? If so, what is the
difference between unregistering a dll and just deleting the
registry entries? (Why do the instructions include both?)
2. I did a search for regsvr32.exe on my XP Pro system, expecting
to find it in one of the standard Windows directories. Instead, I
found versions in various application directories (obviously
installed along with the applications): programs such as X-Setup,
Enfish, Visual Studio 6 (but not .NET, apparently), and Visual
Basic Runtime. Naturally, the files have various dates and sizes.
I'm concerned about the consequences of possibly running any
particular version. Is any one preferred, or should I download a
later version?
Thanks very much in advance for your help.
--
Keith
Hi, everyone.
I've been hit with a particularly intrusive and obnoxious piece
of spyware called ABetterInternet. Throughout the day, I have
numerous firewall dialogs popping up saying that a particular
upload/download application is trying to access the Internet, and
identifying the application with www.abetterinternet.com. I deny
the action and check the box to always do so, but it doesn't
help; they keep coming back. Various filenames are used:
meaningless or nonsensical ones such as thnall1ac.exe,
aurareco.exe, thin-94-1-x-x.exe, and ifslbqysnh.exe. (The last
one is actually identified as Buddy, which might possibly be a
separate piece of spyware; I don't know yet.) The files usually
run from a temp folder, and when I look for them there I don't
find them.
I did a search and found removal instructions at:
http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453076992
One of the steps involves unregistering a long list of DLLs using
regsvr32.exe; another involves removing a list of registry
entries using RegEdit.
Before proceeding with the cleanup, I have some questions I'd
like answered.
1. Can anyone give me a clear explanation of exactly what it
means to "register" or "unregister" a component? I've been
reading about this process for years, but have never really
understood it. I've read several knowledge base articles and
checked several books on XP and programming windows; most just
use the expressions without ever really defining them. Does
registering a control just create entries for it in the registry
(or is there more involved than that)? If so, what is the
difference between unregistering a dll and just deleting the
registry entries? (Why do the instructions include both?)
2. I did a search for regsvr32.exe on my XP Pro system, expecting
to find it in one of the standard Windows directories. Instead, I
found versions in various application directories (obviously
installed along with the applications): programs such as X-Setup,
Enfish, Visual Studio 6 (but not .NET, apparently), and Visual
Basic Runtime. Naturally, the files have various dates and sizes.
I'm concerned about the consequences of possibly running any
particular version. Is any one preferred, or should I download a
later version?
Thanks very much in advance for your help.
--
Keith
Facebook
Twitter
Instagram