HDPlugin1019.dll

[Marcus]

Hi again,

Here's what I've done so far
_______________________________________________________-

C:\WINDOWS\Desktop>cd "%windir%\Downloaded Program Files"

C:\WINDOWS\Downloaded Program Files> attrib *.* -r -h -s

Sharing violation reading drive C
Abort, Retry, Fail?

 

[David H. Lipman]

From: "Marcus" <[email protected]>

| Hi again,
|
| Here's what I've done so far
| _______________________________________________________-
|
| C:\WINDOWS\Desktop>cd "%windir%\Downloaded Program Files"
|
| C:\WINDOWS\Downloaded Program Files> attrib *.* -r -h -s
|
| Sharing violation reading drive C
| Abort, Retry, Fail?
|
|
That's what I needed

Thanx for the clarification.

See if you can still copy the file in the DOS prompt.

If not...

You need to shutdown as many running applications as possible because the file is being used
nad it will not allow it to be copied or change its attrib under that condition.

 

[Marcus]

Here's the latest:


C:\WINDOWS\Desktop>cd %windir%\Downloaded Program Files"
Too many parameters - Program

C:\WINDOWS\Desktop> attrib *.* -r-h-s
Parameter format not correct - -r-h-s

C:\WINDOWS\Desktop> copy "HDPlugin1019.dll c:\
File not found - HDPlugin1019.dll c
0 file(s) copied

C:\WINDOWS\Desktop>

 

[David H. Lipman]

From: "Marcus" <[email protected]>

| Here's the latest:
|
| C:\WINDOWS\Desktop>cd %windir%\Downloaded Program Files"
| Too many parameters - Program
|
| C:\WINDOWS\Desktop> attrib *.* -r-h-s
| Parameter format not correct - -r-h-s
|
| C:\WINDOWS\Desktop> copy "HDPlugin1019.dll c:\
| File not found - HDPlugin1019.dll c
| 0 file(s) copied
|
| C:\WINDOWS\Desktop>

BAD SYNTAX --> cd %windir%\Downloaded Program Files"
^^^

cd "%windir%\Downloaded Program Files"

Since it is a "long file name" folder it *must* be enclosed in quotes and they must match.
You only had one quote, at the end.

BAD SYNTAX --> attrib *.* -r-h-s
^^^^

attrib *.* -r -h -s

Switch parameters *must* be separated by a spce " ".

Try again !

 

[Marcus]

Dave,

OKAY! Seems to have copied the file and I've sent it on to:
http://www.virustotal.com/flash/index_en.html

I'm wondering why this thing keeps showing up in the Symantec scan. I even
used Norton's FIX GATOR.EXE...since it is described as an Adware.Gator
virus. That came up with zilch as well.

How long does it usually take to hear from Virustotal?

Anyway, thanks very much for your help. I'll keep you posted.

Marcus

 

[David H. Lipman]

From: "Marcus" <[email protected]>

| Dave,
|
| OKAY! Seems to have copied the file and I've sent it on to:
| http://www.virustotal.com/flash/index_en.html
|
| I'm wondering why this thing keeps showing up in the Symantec scan. I even
| used Norton's FIX GATOR.EXE...since it is described as an Adware.Gator
| virus. That came up with zilch as well.
|
| How long does it usually take to hear from Virustotal?
|
| Anyway, thanks very much for your help. I'll keep you posted.
|
| Marcus


Submitting it via the web site takes a minute or so. Email is much, much, slower.

 

[Marcus]

That didn't take long.....Here are the results. What do you think? Is this
removable?


Virus Total
Scan results
File: HDPlugin1019.dll
Date: 04/03/2005 01:16:52 (CET)
----
AntiVir 6.30.0.7/20050401 found nothing
AVG 718/20050401 found nothing
BitDefender 7.0/20050403 found nothing
ClamAV devel-20050307/20050402 found nothing
DrWeb 4.32b/20050402 found nothing
eTrust-Iris 7.1.194.0/20050402 found nothing
eTrust-Vet 11.7.0.0/20050401 found nothing
Fortinet 2.51/20050402 found [Adware/Gator]
F-Prot 3.16a/20050331 found nothing
Ikarus 2.32/20050401 found nothing
Kaspersky 4.0.2.24/20050403 found
[not-a-virus:AdWare.Gator.1019]
McAfee 4460/20050401 found nothing
NOD32v2 1.1044/20050402 found [Win32/Adware.DashBar.A]
Norman 5.70.10/20050331 found nothing
Panda 8.02.00/20050402 found [Adware/Gator]
Sybari 7.5.1314/20050403 found nothing
Symantec 8.0/20050402 found nothing

 

[David H. Lipman]

From: "Marcus" <[email protected]>

| That didn't take long.....Here are the results. What do you think? Is this
| removable?
|
| Virus Total
| Scan results
| File: HDPlugin1019.dll
| Date: 04/03/2005 01:16:52 (CET)
| ----
| AntiVir 6.30.0.7/20050401 found nothing
| AVG 718/20050401 found nothing
| BitDefender 7.0/20050403 found nothing
| ClamAV devel-20050307/20050402 found nothing
| DrWeb 4.32b/20050402 found nothing
| eTrust-Iris 7.1.194.0/20050402 found nothing
| eTrust-Vet 11.7.0.0/20050401 found nothing
| Fortinet 2.51/20050402 found [Adware/Gator]
| F-Prot 3.16a/20050331 found nothing
| Ikarus 2.32/20050401 found nothing
| Kaspersky 4.0.2.24/20050403 found
| [not-a-virus:AdWare.Gator.1019]
| McAfee 4460/20050401 found nothing
| NOD32v2 1.1044/20050402 found [Win32/Adware.DashBar.A]
| Norman 5.70.10/20050331 found nothing
| Panda 8.02.00/20050402 found [Adware/Gator]
| Sybari 7.5.1314/20050403 found nothing
| Symantec 8.0/20050402 found nothing
|

Interesting results. Your Symantec flag it as Gator but this version doesn't. However;
Fortinet, Kaspersky and Panda do but Nod32 doesn't call it Gator.

Boot from a Win98 Emergency Boot Disk (Win98 EBD).

When you get to the DOS prompt type...

c:
hit the enter key;

cd "%windir%\Downloaded Program Files"
hit the enter key;

rename "HDPlugin1019.dll" "HDPlugin1019.bak"

Reboot the PC then perform the following in Windows...


Dump the contents of the IE Temporary Internet Folder cache (TIF)

start --> settings --> control panel --> internet options --> delete files

1) Download the Sysclean Front End utility ( SYSCLEAN_FE ) in "Procedure 1"
at the following URL, SYSCLEAN_FE automates the download and
execution process of the Trend Sysclean Package.
http://www.ik-cs.com/got-a-virus.htm

Direct URL:
http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe

Execute; SYSCLEAN_FE.EXE
Choose; Unzip
Choose; Close

Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
When you get to the Sysclean Front End menu, hit 'e' or '3' to exit.

2) Download and install Ad-aware SE (free personal version v1.05)
http://www.lavasoftusa.com/
3) Update Adaware with the latest definitions then exit the software.
4) Reboot your PC into Safe Mode and shutdown as many applications as possible
5) Using the Trend Sysclean and Ad-aware SE utilities, perform a Full Scan of your
platform and clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform using both Trend
Sysclean and Ad-aware SE


* * Please report back your results * *

 

[Marcus]

Hi Dave,

Well that's a bit too much for an aspiring luddite like myself. So I bit the
bullet and purchased XSOFT ($40).
What do ya' know. That friggin' HDPLUGIN1019.DLL has VANISHED from scene!
XSOFT does pick up on a lot of problems that SpyBot and AdwareSE miss.
Thanks again........it's been a bruising couple of days on the frontlines.

Marcus

From: "Marcus" <[email protected]>

| That didn't take long.....Here are the results. What do you think? Is this
| removable?
|
| Virus Total
| Scan results
| File: HDPlugin1019.dll
| Date: 04/03/2005 01:16:52 (CET)
| ----
| AntiVir 6.30.0.7/20050401 found nothing
| AVG 718/20050401 found nothing
| BitDefender 7.0/20050403 found nothing
| ClamAV devel-20050307/20050402 found nothing
| DrWeb 4.32b/20050402 found nothing
| eTrust-Iris 7.1.194.0/20050402 found nothing
| eTrust-Vet 11.7.0.0/20050401 found nothing
| Fortinet 2.51/20050402 found [Adware/Gator]
| F-Prot 3.16a/20050331 found nothing
| Ikarus 2.32/20050401 found nothing
| Kaspersky 4.0.2.24/20050403 found
| [not-a-virus:AdWare.Gator.1019]
| McAfee 4460/20050401 found nothing
| NOD32v2 1.1044/20050402 found [Win32/Adware.DashBar.A]
| Norman 5.70.10/20050331 found nothing
| Panda 8.02.00/20050402 found [Adware/Gator]
| Sybari 7.5.1314/20050403 found nothing
| Symantec 8.0/20050402 found nothing
|

Interesting results. Your Symantec flag it as Gator but this version doesn't. However;
Fortinet, Kaspersky and Panda do but Nod32 doesn't call it Gator.

Boot from a Win98 Emergency Boot Disk (Win98 EBD).

When you get to the DOS prompt type...

c:
hit the enter key;

cd "%windir%\Downloaded Program Files"
hit the enter key;

rename "HDPlugin1019.dll" "HDPlugin1019.bak"

Reboot the PC then perform the following in Windows...


Dump the contents of the IE Temporary Internet Folder cache (TIF)

start --> settings --> control panel --> internet options --> delete files

1) Download the Sysclean Front End utility ( SYSCLEAN_FE ) in "Procedure 1"
at the following URL, SYSCLEAN_FE automates the download and
execution process of the Trend Sysclean Package.
http://www.ik-cs.com/got-a-virus.htm

Direct URL:
http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe

Execute; SYSCLEAN_FE.EXE
Choose; Unzip
Choose; Close

Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
When you get to the Sysclean Front End menu, hit 'e' or '3' to exit.

2) Download and install Ad-aware SE (free personal version v1.05)
http://www.lavasoftusa.com/
3) Update Adaware with the latest definitions then exit the software.
4) Reboot your PC into Safe Mode and shutdown as many applications as possible
5) Using the Trend Sysclean and Ad-aware SE utilities, perform a Full Scan of your
platform and clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform using both Trend
Sysclean and Ad-aware SE


* * Please report back your results * *

 

[David H. Lipman]

From: "Marcus" <[email protected]>

| Hi Dave,
|
| Well that's a bit too much for an aspiring luddite like myself. So I bit the
| bullet and purchased XSOFT ($40).
| What do ya' know. That friggin' HDPLUGIN1019.DLL has VANISHED from scene!
| XSOFT does pick up on a lot of problems that SpyBot and AdwareSE miss.
| Thanks again........it's been a bruising couple of days on the frontlines.
|
| Marcus

Well I guess I'm done with YOU !

Because if you had ASKED first you would have found out thatXoftSpy is JUNK and should not
be used !
http://www.spywarewarrior.com/rogue_anti-spyware.htm#xos_note

But it is your money to waste if you want.
Just don't come back for help about spyware because you bought crapware.

 

[Marcus]

Dave,

This is from the web page YOU directed me to!

"Over the past few months, XoftSpy has taken aggressive steps to reign in
its affiliates (who were primarily responsible for the unsavory
advertising), revised its license text, and released a new version of
XoftSpy (version 4.0) that addresses our concerns with false positves. Given
these changes we can no longer regard XoftSpy as "rogue/suspect"
anti-spyware."

Marcus

 

[David H. Lipman]

From: "Marcus" <[email protected]>

| Dave,
|
| This is from the web page YOU directed me to!
|
| "Over the past few months, XoftSpy has taken aggressive steps to reign in
| its affiliates (who were primarily responsible for the unsavory
| advertising), revised its license text, and released a new version of
| XoftSpy (version 4.0) that addresses our concerns with false positves. Given
| these changes we can no longer regard XoftSpy as "rogue/suspect"
| anti-spyware."
|
| Marcus

But befotre that it states -- "XoftSpy was listed on this page because of concerns with
false positives (1, 2, 3, 4), "

That is still a concern as seen from posters who use the software and get a False Positive
declaration and come to the various Spware, Security and anti Virus News Groups. The
important thing to note is there is free software or free for personal software that is
*better*.