Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works

About to give up !


  • This topic is locked This topic is locked

#1
Guest_nickw_*

Guest_nickw_*
  • Guest
HI:

I need some real help here !

This one has really got me. I have wasted more time on trying to get rid of these files than anything I can think of.
I have spent several hours working on this.

So here it is:

I ran NAV and it came up with ( 1 at-risk file ) The file was found in C:\WINDOWS\Downloaded Programs Files

Filename - ( abasa5jrp_.exe ) Threat name - ( Adware.SAHAgent )

I tried to delete it and NAV could not delete it.

I have Spybot S&D and it finds nothing.

I have been on line for many hours trying the things I have found on forums and still cannot get rid of the files.
I cannot find the program itself. I think what has happened is, I downloaded a program with this Adware in it and then I
removed the program. I think I know what program it was. I'm guessing that these are left over files from that program.
I have done everything I can find on line and think of and they still are there according to NAV and Panda. I have run HJT, CWShredder, Panda, AboutBuster, and AD-Aware with no luck getting rid of them. Panda found two more files related
to what NAV found and they were also in C:\Windows\Downloaded Program Files. There is no trace of the programs, I can find in my Registry.

I have all the right things checked and unchecked to so hidden files and folders. When I go to the downloaded program files folder
and bring up Properties it says it has 12 files. When I open the folder there are 6 downloaded programs in there.

I have really don't want to do a Clean Install to get rid of this problem.

I'm here to see if someone can help me with this before I have to resort to a clean install.

Thank you for your time reading this I know it is lengthy but, this where I sand at this point and I'm looking for some help.
  • 0

Advertisements


#2
g2i2r4

g2i2r4

    retired HiJack Helper

  • Retired Staff
  • 5,080 posts
Please copy and paste the text in the box in an empty Notepad file.
%systemdrive%
cd C:\windows\Downlo~1
echo %CD% > c:\log.txt
dir >> C:\log.txt
attrib -r -s -h abasa5jrp_.exe
if Exist C:\windows\Downlo~1\abasa5jrp_.exe echo "File is present" >> c:\log.txt
del abasa5jrp_.exe
if Exist C:\windows\Downlo~1\abasa5jrp_.exe echo "File not deleted" >> c:\log.txt
start c:\log.txt
exit

Save it to your desktop
as clear.bat
save it type all files.

Close Notepad.

Doubleclick the file clear.bat. It will create a log called log.txt in the folder c:\.
Copy and paste the content here in your reply.
  • 0

#3
Guest_nickw_*

Guest_nickw_*
  • Guest
Here is what it came up with.

C:\WINDOWS\DOWNLO~1
Volume in drive C is DISK3_VOL1
Volume Serial Number is C891-147F

Directory of C:\WINDOWS\DOWNLO~1

02/23/2005 03:13 PM 199,168 abasa5jrp_.exe
02/08/2005 10:52 AM 110,592 asinst.dll
02/08/2005 10:54 AM 525 asinst.inf
12/07/2004 12:21 AM 752 jinstall-1_5_0_01.inf
02/10/2005 12:30 PM 73,728 lkir8l2gm_.dll
03/01/2005 04:57 PM 24,064 MediaPassX.dll
09/01/2003 11:10 AM 2,295 MSC3.inf
07/13/2004 11:41 AM 227 MsnMessengerSetupDownloader.inf
11/05/2004 03:58 PM 119,496 MsnMessengerSetupDownloader.ocx
02/25/2005 03:34 PM 56,320 u6f6uftuc_.exe
10 File(s) 587,167 bytes
0 Dir(s) 59,573,481,472 bytes free
"File is present"
  • 0

#4
g2i2r4

g2i2r4

    retired HiJack Helper

  • Retired Staff
  • 5,080 posts
Well done :tazz: . You just curred it!

Try scanning again, it's gone now.

However, there are 3 more to get rid of. I will post the cure next.
  • 0

#5
g2i2r4

g2i2r4

    retired HiJack Helper

  • Retired Staff
  • 5,080 posts
These three files are detected as Adware:Adware/SAHAgent. Let's get rid of them.

First of all. Delete the log.txt that was created earlier.

Please copy and paste the text in the box in an empty Notepad file.
%systemdrive%
cd C:\windows\Downlo~1
echo %CD% > c:\log.txt
dir >> C:\log.txt
attrib -r -s -h u6f6uftuc_.exe
if Exist C:\windows\Downlo~1\u6f6uftuc_.exe echo "File is present" >> c:\log.txt
del u6f6uftuc_.exe
if Exist C:\windows\Downlo~1\u6f6uftuc_.exe echo "File not deleted" >> c:\log.txt
start c:\log.txt
exit

Save it to your desktop
as clear1.bat
save it type all files.

Close Notepad.

Doubleclick the file clear1.bat. It will create a log called log.txt in the folder c:\. You can close and deleted that, I don't have to see it.

Next.
Please copy and paste the text in the box in an empty Notepad file.
%systemdrive%
cd C:\windows\Downlo~1
echo %CD% > c:\log.txt
dir >> C:\log.txt
attrib -r -s -h lkir8l2gm_.dll
if Exist C:\windows\Downlo~1\lkir8l2gm_.dll echo "File is present" >> c:\log.txt
del lkir8l2gm_.dll
if Exist C:\windows\Downlo~1\lkir8l2gm_.dll echo "File not deleted" >> c:\log.txt
start c:\log.txt
exit

Save it to your desktop
as clear2.bat
save it type all files.

Close Notepad.

Doubleclick the file clear2.bat. It will create a log called log.txt in the folder c:\. Again, you can close and delete that, I don't have to see it either.

Finally
Please copy and paste the text in the box in an empty Notepad file.
%systemdrive%
cd C:\windows\Downlo~1
echo %CD% > c:\log.txt
dir >> C:\log.txt
attrib -r -s -h abasa5jrp_.exe
if Exist C:\windows\Downlo~1\abasa5jrp_.exe echo "File is present" >> c:\log.txt
del abasa5jrp_.exe
if Exist C:\windows\Downlo~1\abasa5jrp_.exe echo "File not deleted" >> c:\log.txt
start c:\log.txt
exit

Save it to your desktop
as clear3.bat
save it type all files.

Close Notepad.

Doubleclick the file clear3.bat. It will create a log called log.txt in the folder c:\. I would like to see that one.

Also, let me know how AVG did during the scan.
  • 0

#6
Guest_nickw_*

Guest_nickw_*
  • Guest
I'm sorry I didn't get back to reply till now.
My hard drive died before I got the chance.
I didn't get a chance to try the last fix you told me to try.

I called the computer manufacture and the hard drive company
and they both said there wasn't anything I could do to fix it.

So I have got the problem fixed. I had to put in a new hard drive
and of course clean install the operating system.
I had all my important documents and pictures backed up to
CDs so, I did not loose anything like that.

Thank you for your time and effort. I will be checking back to
this forum from time to time to see what is new in adware,spyware
prevention.

Thanks again:
nickw
  • 0

#7
g2i2r4

g2i2r4

    retired HiJack Helper

  • Retired Staff
  • 5,080 posts
Thanks you for getting back to us, despite your misfortune.

Let me just give you some advice to keep your new drive and thus your computer clean and secure.
  • Use an AntiVirus Software - It is very important that your computer has an anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future.

    See this link for a listing of some online & their stand-alone antivirus programs:

    Virus, Spyware, and Malware Protection and Removal Resources

  • Update your AntiVirus Software - It is imperitive that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.

  • Use a Firewall - I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is succeptible to being hacked and taken over. I am very serious about this and see it happen almost every day with my clients. Simply using a Firewall in its default configuration can lower your risk greatly.

    For a tutorial on Firewalls and a listing of some available ones see the link below:

    Understanding and Using Firewalls

  • Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.

  • Install Spybot - Search and Destroy - Install and download Spybot - Search and Destroy with its TeaTimer option. This will provide realtime spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with program on a regular basis just as you would an antivirus software.

    A tutorial on installing & using this product can be found here:

    Using Spybot - Search & Destroy to remove Spyware , Malware, and Hijackers

  • Install Ad-Aware - Install and download Ad-Aware. ou should also scan your computer with program on a regular basis just as you would an antivirus software in conjunction with Spybot.

    A tutorial on installing & using this product can be found here:

    Using Ad-aware to remove Spyware, Malware, & Hijackers from Your Computer

  • Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.

    A tutorial on installing & using this product can be found here:

    Using SpywareBlaster to protect your computer from Spyware and Malware

  • Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.
Follow this list and your potential for being infected again will reduce dramatically.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP