Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

ADLSoft Uncompressor Software Installed Without My Knowledge. Wondering if I'm infected.


  • Please log in to reply
7 replies to this topic

#1 Starfox

Starfox

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:04 AM

Posted 29 May 2012 - 07:22 AM

Hi,

I recently discovered a program installed on my computer without my knowledge. I'm running Windows 7 Home Premium, 64-bit, SP1. I'm using Bitdefender Total Security AV. The program appears in a folder on the start menu called "AdlSoft Uncompressor", with an uninstall icon, but does not appear on the list of programs to be uninstalled in the control panel. When I examine the properties of the file, it appears that the file is actually named "FileUncompresser.exe"; the spelling here is as it appears in the file name. Some time ago, my wife had one of those oops moments while exploring the Internet, and accidentally clicked on a pop-up. I couldn't find any infections on my computer afterward, but I'm wondering if I do have an infection. AV is up to date with regular scans; I scanned this file with Bitdefender, but it appears clean. I'm not currently noticing any unusual behavior. Before I realized that the program shouldn't be there, I made the mistake of running it because I couldn't remember what it was. It opened and closed without any issues, but once I saw it I knew that I hadn't installed the program. After looking at the website for the company and reading some information about them elsewhere, it sounds a little shady. Any help or advice would be greatly appreciated. :wink:

Thank you,

SF

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,331 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:04 AM

Posted 29 May 2012 - 09:09 PM

Hello, plrse go here and remove incribar search

http://support.google.com/chrome/bin/answer.py?hl=en&answer=95653
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 Starfox

Starfox
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:04 AM

Posted 30 May 2012 - 01:27 AM

Hello, plrse go here and remove incribar search

http://support.google.com/chrome/bin/answer.py?hl=en&answer=95653


Thank you for your response. I'm not sure if I'm in the right spot, but I followed the link. I'm not seeing that listed among the search engines. I would attach a screenshot, but I'm not sure where to upload it. Is it safe to just click uninstall and remove the ADL Soft software from the Search menu?

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,331 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:04 AM

Posted 30 May 2012 - 03:11 PM

Yes thats it .. First create a new Restore point so you can go back if needed,
Create a New Restore Point in Vista or Windows 7
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 Starfox

Starfox
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:04 AM

Posted 30 May 2012 - 08:32 PM

I created a restore point; should I now use the uninstall button in Start? I just don't want to do something incorrectly and cause more problems later. :blink:

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,331 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:04 AM

Posted 30 May 2012 - 08:39 PM

OK, yes now do the Uninstall.. Thats why we made a new point. Just in case as there are no promises that malware removal always goes smoothly..

Edited by boopme, 30 May 2012 - 08:39 PM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 Starfox

Starfox
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:04 AM

Posted 30 May 2012 - 09:23 PM

Thank you. Okay, did the uninstall. It no longer appears on the Start menu, but is there any way to know of my system is clean? <_<

#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,331 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:04 AM

Posted 31 May 2012 - 09:06 AM

You're welcoe! Let's run these now..

Please download MiniToolBox, save it to your desktop and run it.

Checkmark the following checkboxes:
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size.
Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using "Reset FF Proxy Settings" option Firefox should be closed.



Next run MBAM (MalwareBytes):

Please download Malwarebytes Anti-Malware Posted Image and save it to your desktop.
  • Important!! When you save the mbam-setup file, rename it to something random (such as 123abc.exe) before beginning the download.
Malwarebytes may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.

  • Make sure you are connected to the Internet and double-click on the renamed file to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • Malwarebytes will automatically start and you will be asked to update the program before performing a scan.
  • If an update is found, the program will automatically update itself. Press the OK button and continue.
  • If you cannot update Malwarebytes or use the Internet to download any files to the infected computer, manually update the database by following the instructions in FAQ Section A: 4. Issues.
  • Under the Scanner tab, make sure the "Perform Quick Scan" option is selected.
  • Click on the Scan button.
  • When finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box, then click the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked and then click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab.
  • Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows the database version and your operating system.
  • Exit Malwarebytes when done.
Note: If Malwarebytes encounters a file that is difficult to remove, you will be asked to reboot your computer so it can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally will prevent Malwarebytes from removing all the malware.

-- Some types of malware will target Malwarebytes and other security tools to keep them from running properly. If that's the case, go to Start > All Programs > Malwarebytes Anti-Malware folder > Tools > click on Malwarebytes Chameleon and follow the onscreen instructions. The Chameleon folder can be accessed by opening the program folder for Malwarebytes Anti-Malware (normally C:\Program Files\Malwarebytes' Anti-Malware or C:\Program Files (x86)\Malwarebytes' Anti-Malw




Please download aswMBR ( 511KB ) to your desktop.
  • Double click the aswMBR.exe icon to run it
  • Click the Scan button to start the scan
  • On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users