Forum Home
Press F1
 
Thread ID: 74419 2006-11-22 01:06:00 Virus/trojan/malware problems"Win32/chisyne/generic" koseyboy (11501) Press F1
Post ID Timestamp Content User
501074 2006-11-22 06:22:00 Thats the link I posted earlier Joe. Its not that.

BUT, I would say its something nasty.
Speedy Gonzales (78)
501075 2006-11-22 06:37:00 My computer seems to be running fine now guys. Is there anything else I should do, or is it fixed? koseyboy (11501)
501076 2006-11-22 06:43:00 I would get and run Belarc Adviser (www.google.com ml&ei=gu9jRau9KI7igwPm-MneBw&usg=__Hs6RaJm3N1SHWroGz6KvNeSCcbA=&sig2=OSIU9q26Yxk2ZXrj3Cd2XQ), print out the results, leave System Restore off if you have a full-install disk and get all your updates and a good set of anti-stuff...

The Belarc print out will have all your keys and license numbers for future screw-ups...save it in a safe place.
SurferJoe46 (51)
501077 2006-11-22 06:47:00 Just as long as that cool.exe file and that entry C:\WINDOWS\SYSTEM32\winouw32.dll have been deleted and havent turned up again!

Good to hear its running a bit / lot better ! :)

Umm, I would install some kind of firewall as well. Just to be safe.
Speedy Gonzales (78)
501078 2006-11-22 06:52:00 I just checked on the files and cool.exe has reappeared in my windows/system32 folder. I'll have another go at removing it - damn...and I though I was home free... koseyboy (11501)
501079 2006-11-22 07:04:00 I deleted cool.exe and it hasn't shown up after a re-boot. I think maybe I deleted it the first time while system restore was still on.
Thanks for all your help today. I didn't end up getting much of my own work done, but at least my computer is running as it should be now.
Thanks heaps! :)

p.s. what software do you recommend for firewall protection? Thanks again.
koseyboy (11501)
501080 2006-11-22 07:22:00 You could try Zonealarm (www.zonelabs.com) altho I think if you're sharing a net connection, it has to be registered before u see the option. (Well used to, it may have changed).

Comodo (www.comodogroup.com) which is pretty recent.

Kerio (www.sunbelt-software.com) which maybe free. I dont know.

There are others, but some you'll have to pay for.

Forget about Nortons / Symantec software, it installs too much crap and can slow a system down.
Speedy Gonzales (78)
501081 2006-11-25 00:07:00 Hi. Just an extra point related to post 3 Speedy Gonzales said "Once these entries are ticked boot into safe mode, and delete ishost.exe and ismini.exe."

I had fun (not) getting rid of "ishost.exe". In the end I deleted an Autorun entry from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\pol icies\Explorer\Run
ishost.exe = ishost.exe

Worked for me anyway.
jrp (11192)
501082 2006-11-25 04:03:00 I deleted cool.exe and it hasn't shown up after a re-boot. I think maybe I deleted it the first time while system restore was still on.

I did tell you all this earlier, if you don't get the file that does the recreating it all just keeps reappearing.


And the idiot who told you you didn't need ZA is obviously a cowboy not a real tech.
pctek (84)
501083 2006-11-25 12:52:00 I previously had zone alarm but a computer guy came over and said I didn't need it - and now I have problems haha. What do you guys recommend?
Thanks for your help

Hi,

It all depends what sites you visit most often. Try not to visit porn/illegal websites at all or get another PC for that stuff:)

I have WinXP firewall ON, and use no Firewall, and that is all fine...

Spyware, adware and those bad objects most often are located on untrusted sites. For example, you won't find them on forums like this one, but on forums related to cracks, porn, hacking, game cheats and so on...

I suggest you caution when you surf.

Karl
smithkarl (11502)
1 2 3 4 5