Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

inst.exe found in c:\documents and settings\<username>\Application Data\


  • This topic is locked This topic is locked
4 replies to this topic

#1 spazz22

spazz22

  • Members
  • 91 posts
  • OFFLINE
  •  
  • Local time:11:58 PM

Posted 27 May 2009 - 05:44 PM

Hi,

First time posting.

I ran combofix.exe a few weeks ago before I knew of the help available via these forums. When I ran the program the following files were detected and deleted:

c:\documents and settings\<username>\Application Data\inst.exe
c:\windows\system32\Ijl11.dll

I do nightly scans using AVG Free 8.5 and Spybot Search and Destroy (both up-to-date). Nothing was detected in either scan last night.

I ran combofix.exe again tonight and the following was detected and deleted:

c:\documents and settings\<username>\Application Data\inst.exe

Now that I realized there is a lot of help available on these forums, I'm here looking for some guidance.

I do have a combofix log file that was produced after the second combofix scan and I'd be more than happy to post it here, but I will wait for further instruction first.

My main concern is why inst.exe is showing up a second time.

Thank-you for any help you can provide.

BC AdBot (Login to Remove)

 


m

#2 spazz22

spazz22
  • Topic Starter

  • Members
  • 91 posts
  • OFFLINE
  •  
  • Local time:11:58 PM

Posted 27 May 2009 - 09:54 PM

I also ran a Malwarebytes Anti-Malware Quick Scan after the combofix completed.

No infections were detected.

#3 spazz22

spazz22
  • Topic Starter

  • Members
  • 91 posts
  • OFFLINE
  •  
  • Local time:11:58 PM

Posted 28 May 2009 - 07:32 AM

I ran a MalwareBytes Anti-Malware full system scan last night and, again, no infections were found during this scan.

#4 spazz22

spazz22
  • Topic Starter

  • Members
  • 91 posts
  • OFFLINE
  •  
  • Local time:11:58 PM

Posted 28 May 2009 - 04:45 PM

Anyone?

#5 spazz22

spazz22
  • Topic Starter

  • Members
  • 91 posts
  • OFFLINE
  •  
  • Local time:11:58 PM

Posted 29 May 2009 - 05:15 PM

Could this possibly be related to a possible rootkit problem I have posted about here:

http://www.bleepingcomputer.com/forums/t/230142/possible-rootkit-problem/




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users