Results 1 to 14 of 14

Thread: Instant Access Dialer

  1. #1
    Platinum+ Member
    Join Date
    Nov 2004
    Location
    India
    Posts
    684

    Instant Access Dialer

    Instant Dialer and Instant Dialer C. are installed on my computer.
    Ad-aware does not* detect them, and spybot hangs or gives me update errors after install.
    Bazooka scanner gives me this and this which I follow (manual uninstall). Instant Access reinstalls itself (usually after 1 day).

    * edit - ad-aware works in smart scan mode only and detects them but they return
    Last edited by tarun; January 2nd, 2006 at 13:45 PM.

  2. #2
    Super Moderator Super Moderator Big Booger's Avatar
    Join Date
    Apr 2002
    Location
    JAPAN
    Posts
    10,660
    turn off system restore, perhaps it's being stored there and then reinstalls itself using system restore.

  3. #3
    Triple Platinum Member Curio's Avatar
    Join Date
    Nov 2004
    Location
    London
    Posts
    899
    You can download and run the updates for SpyBot manually from here http://www.spybotupdates.com/updates...d_includes.exe which is an exe file that installs the updates when you run it. These programs that keep re-installing themselves do so because they make changes to your system that are not obvious or they use an undetected dll or exe file to reload the software.

    If you use the manual update for SpyBot and it still does not remove the Dialler please post back and I will try to help you out evn if it means infecting one of my own machines and working out the removal method. I enjoy that stuff anyway.
    I'm using Windows 7 - you got a problem with that?

  4. #4
    Platinum+ Member
    Join Date
    Nov 2004
    Location
    India
    Posts
    684
    when i turned the computer on today, it just kept hanging after windows had loaded.
    so i was forced to start in safe mode and use system restore. if i have trouble again ill turn off system restore. thanks.
    curio - it downloads the updates and then waits for some more time before giving me a bad checksum error.

  5. #5
    Platinum+ Member
    Join Date
    Nov 2004
    Location
    India
    Posts
    684
    These weren't there before the system restore, but Mcafee would always start up.

    The computer starts up slower now. How come some of them say 'progra~1' and some say 'program files'?

  6. #6
    Triple Platinum Member Curio's Avatar
    Join Date
    Nov 2004
    Location
    London
    Posts
    899
    Progra~1 is 8.3 format directory listing which is used by some programs for backward compatibility (with DOS presumably). I see they are all the McAfee ones which I believe is normal although I don't use McAfee.

    Automatic startups are all over the place not just HKLM\software\windows\currentversion\run they are also in CurrentUser\...\..\run and DefaultUser\..\..\run for instance. To check them you really need to use something like AutoRuns.exe from Sysinternals which will also reveal all of the ShellObjectDelayLoad and AppInnitDlls other tricky entries.

    There is a filtering system built into AutoRuns and I suggest you set it to hide verified Microsoft entries and Empty locations - this greatly reduces the output you need to sift through.

    Any entries that you want to check out can be put into the startup list database over at CastleCops which will give you a reasonable idea as to their usefulness. This won't crack everything for you but will take you 90% of the way there for weeding out dodgy entries.
    I'm using Windows 7 - you got a problem with that?

  7. #7
    Platinum+ Member
    Join Date
    Nov 2004
    Location
    India
    Posts
    684
    I'll try it. thanks

  8. #8
    Super Moderator Super Moderator Big Booger's Avatar
    Join Date
    Apr 2002
    Location
    JAPAN
    Posts
    10,660
    Tarun did you ever get this sorted?

  9. #9
    Banned Aloone_Jonez's Avatar
    Join Date
    Dec 2005
    Posts
    58
    On no someone's been using your PC to visit dodgy porn sites.

    Have you tried searching the registry manually with Regedit for the filenames you posed in your link?

    Also you could try searching your hard drive and renaming them to filename.bak, for example EGDial.dll to EGDial.dll.bak.

    One way to help prevent this from happening again is to use a restricted account for Internet access (even more important if you let someone else use your machine) and by not using Microsoft Internet Explorer, although I doubt the latter is to blame in this case it sounds like someone clicked on an "access free porn with no credit card" link, however a restricted account should help prevent this sort of crap from installing.

  10. #10
    Triple Platinum Member
    Join Date
    Aug 2004
    Posts
    883
    Quote Originally Posted by Aloone_Jonez
    On no someone's been using your PC to visit dodgy porn sites.
    He got you too, Tarun.

  11. #11
    Platinum+ Member
    Join Date
    Nov 2004
    Location
    India
    Posts
    684
    Quote Originally Posted by Big Booger
    Tarun did you ever get this sorted?
    Removed it with the Bazooka Adware and Spyware Scanner manual instructions and then managed to detected and removed it completely with Ad-aware. Didn't have to disable System Restore.

    It just kept adding itself back to the registry startup items but never showed up in hijackthis! and msconfig.

    Spybot still gives me problems.

    On no someone's been using your PC to visit dodgy porn sites.
    Oh, you have discovered my secret. Now everytime I masturbate I will remember you.

  12. #12
    Banned Aloone_Jonez's Avatar
    Join Date
    Dec 2005
    Posts
    58
    Good, I'll just have to imagine you as a gorgeous sexy girl.

  13. #13
    Old and Cranky Super Moderator rik's Avatar
    Join Date
    Aug 2003
    Location
    Watching Your every move...
    Posts
    4,638
    Quote Originally Posted by tarun
    Oh, you have discovered my secret. Now everytime I masturbate I will remember you.


    You ain't right

  14. #14
    Platinum+ Member
    Join Date
    Nov 2004
    Location
    India
    Posts
    684
    Quote Originally Posted by Aloone_Jonez
    Good, I'll just have to imagine you as a gorgeous sexy girl.
    For $11000 you won't need to imagine.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •