re: Question about 'Clear Unwanted Entries from Add/Remove Programs'
Monday, August 11, 2003 at 6:32 pm
Windows XP Annoyances Discussion Forum
Posted by dulhichand
(3 messages posted)
OK - I think I have a fix. The reason I am saying that "I think ..." is that I still
have not been able to isolate the root cause of the parasite but have been able to
contain it for last few hours (8 to be precise).
Do the following -
MAKE SURE YOU HAVE THE ADMINISTRATIVE ACCESS TO THE MACHINE. DISCONNECT FROM THE
NETWORK BEFORE DOING THE FOLLOWING
1. Uninstall the program LiveGirls from the Add/Remove programs
2. Delete the C:/BlankDialer folder
3. Run the following from the DOS command line (I did this for Win 2000)
regsvr32.exe /u "%WinDir%\System32\DialerOffline.dll
4. Right Click the following file - WINNT/System32/DialerOffline.dll
and select Properties. On the Security Tab, UNCHECK the box that says "Allow inheritable
permissions from parent...." Make sure that all the Read / Write / Execute privileges
are unchecked or in other words disabled.
5. Delete all the files in the following folders
C:\Documents and Settings\\Local Settings\Temporary Internet Files
6. Delete all the files in the following folder
C:\Documents and Settings\\Cookies
7. Empty the recycle bin
8. Reboot the computer
The above process unregisters the notorious dll file from the Windows registry (Step
3) and 'disables' (Step 4) the dll that is responsible for this annoying parasite.
The reason I don't sound overly optimistic is that there is some program that downloads
this dll from the Internet everytime it doesn't find this file (I presume that's
what's happening) and installs the LiveGirls program. With this file still existing
but completely disabled, it can not be operated, read or written to or deleted.
This way apparently the rogue program gets fooled that the dll exists and doesn't
download again. The downside of this fix is that you get rid of the problem (still
keeping fingers crossed) without getting rid of the problem program.
I hope that this fix works. Will keep you posted if nothing happens over next one
day or so.
On Monday, August 11, 2003 at 12:14 pm, Robin wrote:
>Our rapidblaster.exe was in the \WINNT\System32 directory. The rb process we killed
>was found under the processes tab in Task Manager. We also logged off the internet
>when we did all the maintenance to make sure the thing couldn't re-install itself
>while being scrapped.
>
>18 hours and counting.
>
>
|
All messages in this thread [show all]
 |  | | | | |  | re: Question about 'Clear Unwanted Entries from Add/Remove Programs' (dulhichand: Mon, Aug 11, 2003, 6:32 pm) |
| |
| |
| |
Return to the Windows XP Discussion Forum
|
|
