Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Aurora, nail.exe, betterinternet trojan [RESOLVED]


  • This topic is locked This topic is locked

#46
calsof

calsof

    Member

  • Topic Starter
  • Member
  • PipPip
  • 53 posts
It is telling me "Parameter format not correct".

When the window first opened I got "C:\Documents and Settings\calsof>" and had to type after that. Do I have to change the directory first? Could it be that I have to type "cd c:\" and press enter before I continue?
  • 0

Advertisements


#47
tampabelle

tampabelle

    Member 5k

  • Retired Staff
  • 6,363 posts
Because we are giving the entire path, it should work anyways!!

Let me check and revert
  • 0

#48
tampabelle

tampabelle

    Member 5k

  • Retired Staff
  • 6,363 posts
Hi Calsof,

I have a strong feeling that you are clean but lets flush the system restore points again.

A. Turn off System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

B. Restart your computer

C. Turn ON System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
UN-Check Turn off System Restore.
Click Apply, and then click OK.

Can you check if you can see the cas folder in C:\Program files??
  • 0

#49
calsof

calsof

    Member

  • Topic Starter
  • Member
  • PipPip
  • 53 posts
The cas file is gone. ;)
There's a CasStub file :tazz:
Also, a search of "cas" gives me the following entries:
Cas Recycle Bin
Cas.zip C:\Documents and Settings\calsof\Recent
casclient.zip C:\Documents and Settings\calsof\Recent
cas1fix.exe C:\Documents and Settings\calsof\Local Settings\Temp
cas1fix.exe C:\Documents and Settings\calsof\Local Settings\Temp
Cas.zip My Computer
casclient.zip My Computer
Cas.zip C:\Program Files
CasStup C:\Program Files
gcASCleaner.exe C:\ProgramFiles\Microsoft AntiSpyware
gcasDtServ.exe C:\ProgramFiles\Microsoft AntiSpyware
gcasInstallHelper.exe C:\ProgramFiles\Microsoft AntiSpyware
gcASNotice.exe C:\ProgramFiles\Microsoft AntiSpyware
gcASPrivacy.exe C:\ProgramFiles\Microsoft AntiSpyware
gcasServ.exe C:\ProgramFiles\Microsoft AntiSpyware
gcASSoapLib.dll C:\ProgramFiles\Microsoft AntiSpyware
gcasSwUpdater.exe C:\ProgramFiles\Microsoft AntiSpyware
gcASThreatAudit.dll C:\ProgramFiles\Microsoft AntiSpyware
Cas C:\Program Files\Cas.zip
casclient.exe Cas/Client
casclient.zip Cas/Client
casmf.dll Cas/Client

Just to name a few.

Thanks again.
  • 0

#50
Atribune

Atribune

    HijackThis Expert

  • Visiting Consultant
  • 956 posts
  • MVP
The cas file or folder is gone?
  • 0

#51
calsof

calsof

    Member

  • Topic Starter
  • Member
  • PipPip
  • 53 posts
Hello again Atribune :tazz:

The cas folder in C:\Program files is gone. But there are other instances of Cas folders and files. I just don't know if it is normal for them to still be there. I just named a few.

I appreciate both your efforts. Thanks again.
  • 0

#52
Atribune

Atribune

    HijackThis Expert

  • Visiting Consultant
  • 956 posts
  • MVP
These ones are fine they are microsoft antispyware

gcASCleaner.exe C:\ProgramFiles\Microsoft AntiSpyware
gcasDtServ.exe C:\ProgramFiles\Microsoft AntiSpyware
gcasInstallHelper.exe C:\ProgramFiles\Microsoft AntiSpyware
gcASNotice.exe C:\ProgramFiles\Microsoft AntiSpyware
gcASPrivacy.exe C:\ProgramFiles\Microsoft AntiSpyware
gcasServ.exe C:\ProgramFiles\Microsoft AntiSpyware
gcASSoapLib.dll C:\ProgramFiles\Microsoft AntiSpyware
gcasSwUpdater.exe C:\ProgramFiles\Microsoft AntiSpyware
gcASThreatAudit.dll C:\ProgramFiles\Microsoft AntiSpyware

The others should be removed.
  • 0

#53
calsof

calsof

    Member

  • Topic Starter
  • Member
  • PipPip
  • 53 posts
Should I delete them manually in Normal Mode?
  • 0

#54
Atribune

Atribune

    HijackThis Expert

  • Visiting Consultant
  • 956 posts
  • MVP
yes please try that first if it doesnt work ill make a file to do it
  • 0

#55
calsof

calsof

    Member

  • Topic Starter
  • Member
  • PipPip
  • 53 posts
Ok, here goes:

I flushed the recycle bin and got rid of everything including:
Cas Recycle Bin

I looked for C:\Documents and Settings\calsof\Recent but couldn't find it to delete Cas.zip or casclient.zip. I went to Search and deleted them from there.

I went to C:\Documents and Settings\calsof\Local Settings\Temp and deleted one instance of cas1fix.exe. I went to Search and deleted another instance of it from there.

I could not find Cas.zip or casclient.zip in My Computer. I went to Search and deleted them from there.

I found and deleted Cas.zip and CasStub in C:\Program Files

I couldn't find Cas/Client, or any of the files casclient.exe, casclient.zip, Cas/Client and casmf.dll.

I did find a file called casstub.exe in C:\Program Files\CasStub but did not delete it yet.

Please tell me what else to do.
Thanks again.
  • 0

Advertisements


#56
calsof

calsof

    Member

  • Topic Starter
  • Member
  • PipPip
  • 53 posts
Oh, yes. And there is a cas_pb.exe in data.
  • 0

#57
Atribune

Atribune

    HijackThis Expert

  • Visiting Consultant
  • 956 posts
  • MVP
email me the casstub folder and cas_pb.exe please.
  • 0

#58
calsof

calsof

    Member

  • Topic Starter
  • Member
  • PipPip
  • 53 posts
I'm so sorry for the delay.

I've sent another file to Atribune, and feedback to both Atribune and Tampabelle.

Thanks again.
calsof.
  • 0

#59
calsof

calsof

    Member

  • Topic Starter
  • Member
  • PipPip
  • 53 posts
Hello again Tampabelle and Attribune,

Just updating here as well as the personal message sent.

The file was called cas_pb.exe in data and I traced it to c:\Documents and Setings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Fizzlebar.zip\data\cas_pb.exe

Now I wonder where it came from, but I definitely did not zip it myself and I don't have a password for it.

I just bought the full version of McAfee Internet Security Suite (the cd version) and I am thinking of getting rid of Norton Virus Protection offline and installing McAfee. Is this a wise thing to do now, or should I leave it until after I have been cleaned up?

Thanks again to both of you.
Regards,
calsof.
  • 0

#60
calsof

calsof

    Member

  • Topic Starter
  • Member
  • PipPip
  • 53 posts
Just correcting the path. It was:

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Fizzlebar.zip\data\cas_pb.exe
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP