Removing Downloader-UI from MS-IE cache

[Stung By Downloader-UI]

McAfee found Downloader-UI as

c:\Documents and Settings\MyUserName\Local Settings\
Temporary Internet Files\Content.IE5\8V9JIYND\a577a1[1].js

It cannot be cleaned, so the message says to restore the file from disk.
Since it's in MS-IE's temporary files area, can I just delete it without
restoring? I want to avoid the problem of MS-IE possibly keeping a
table of the files it expects somewhere. If that's how it works, then
deleting the file could cause inconsistencies. I am running MS-IE 6
on Win2K/SP4. Thanks.

Stung

 

[Sandi - Microsoft MVP]

Yes you can delete without 'restoring'. With such deceptive/incorrect
advice as you have described below being offered by McAfee, I'd recommend
that you drop McAfee and go for something more reliable.

 

[David H. Lipman]

Dump the contents of the IE Temporary Internet Folder cache (TIF)

start --> settings --> control panel --> internet options --> delete files

1) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
2) Reboot your PC into Safe Mode and shutdown as many applications as possible
3) Using your McAfee software, perform a Full Scan of your platform and clean/delete any
infectors found
4) Restart your PC and perform a "final" Full Scan of your platform
5) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 200 ~ 400MB),
6) Reboot your PC.
7) If you are using WinME or WinXP, create a new Restore point


* * * Please report back your results * * *

--
Dave
http://www.claymania.com/removal-trojan-adware.html




| McAfee found Downloader-UI as
|
| c:\Documents and Settings\MyUserName\Local Settings\
| Temporary Internet Files\Content.IE5\8V9JIYND\a577a1[1].js
|
| It cannot be cleaned, so the message says to restore the file from disk.
| Since it's in MS-IE's temporary files area, can I just delete it without
| restoring? I want to avoid the problem of MS-IE possibly keeping a
| table of the files it expects somewhere. If that's how it works, then
| deleting the file could cause inconsistencies. I am running MS-IE 6
| on Win2K/SP4. Thanks.
|
| Stung
|

 

[Stung By Downloader-UI]

Yes you can delete without 'restoring'. With such deceptive/incorrect
advice as you have described below being offered by McAfee, I'd recommend
that you drop McAfee and go for something more reliable.

I've been thinking of Avast and AVG. When I shorten my to-do list.

Thanks.

Stung.

McAfee found Downloader-UI as

c:\Documents and Settings\MyUserName\Local Settings\
Temporary Internet Files\Content.IE5\8V9JIYND\a577a1[1].js

It cannot be cleaned, so the message says to restore the file from disk.
Since it's in MS-IE's temporary files area, can I just delete it without
restoring? I want to avoid the problem of MS-IE possibly keeping a
table of the files it expects somewhere. If that's how it works, then
deleting the file could cause inconsistencies. I am running MS-IE 6
on Win2K/SP4. Thanks.

Stung

 

[Stung By Downloader-UI]

Dump the contents of the IE Temporary Internet Folder cache (TIF)

start --> settings --> control panel --> internet options --> delete files

1) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
2) Reboot your PC into Safe Mode and shutdown as many applications as possible
3) Using your McAfee software, perform a Full Scan of your platform and clean/delete any
infectors found
4) Restart your PC and perform a "final" Full Scan of your platform
5) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 200 ~ 400MB),
6) Reboot your PC.
7) If you are using WinME or WinXP, create a new Restore point

* * * Please report back your results * * *

Hi, David,

Sorry, too late. I got impatient and used cygwin to delete the file (no trash bin
recycling on that delete). Some time shortly after I posted. I was reasonably
confident that it wouldn't cause any inconsistencies in MS-IE's view of the
cache, but wasn't entirely sure. That was the crux of my post.

Is it really necessary to scan in safe mode? That would really make it
inconvenient.

Stung

| McAfee found Downloader-UI as
|
| c:\Documents and Settings\MyUserName\Local Settings\
| Temporary Internet Files\Content.IE5\8V9JIYND\a577a1[1].js
|
| It cannot be cleaned, so the message says to restore the file from disk.
| Since it's in MS-IE's temporary files area, can I just delete it without
| restoring? I want to avoid the problem of MS-IE possibly keeping a
| table of the files it expects somewhere. If that's how it works, then
| deleting the file could cause inconsistencies. I am running MS-IE 6
| on Win2K/SP4. Thanks.
|
| Stung
|

 

[David H. Lipman]

It is when you "think" you are infected because there is less of a chance that the infector
will be loaded and running and thus easier to remove.

--
Dave




|
|
| "David H. Lipman" wrote:
|
| > Dump the contents of the IE Temporary Internet Folder cache (TIF)
| >
| > start --> settings --> control panel --> internet options --> delete files
| >
| > 1) If you are using WinME or WinXP, disable System Restore
| > http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
| > 2) Reboot your PC into Safe Mode and shutdown as many applications as possible
| > 3) Using your McAfee software, perform a Full Scan of your platform and clean/delete
any
| > infectors found
| > 4) Restart your PC and perform a "final" Full Scan of your platform
| > 5) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
| > System Restore preferences, (e.g. HD space to use suggested 200 ~ 400MB),
| > 6) Reboot your PC.
| > 7) If you are using WinME or WinXP, create a new Restore point
| >
| > * * * Please report back your results * * *
|
| Hi, David,
|
| Sorry, too late. I got impatient and used cygwin to delete the file (no trash bin
| recycling on that delete). Some time shortly after I posted. I was reasonably
| confident that it wouldn't cause any inconsistencies in MS-IE's view of the
| cache, but wasn't entirely sure. That was the crux of my post.
|
| Is it really necessary to scan in safe mode? That would really make it
| inconvenient.
|
| Stung
|
|
| > | > | McAfee found Downloader-UI as
| > |
| > | c:\Documents and Settings\MyUserName\Local Settings\
| > | Temporary Internet Files\Content.IE5\8V9JIYND\a577a1[1].js
| > |
| > | It cannot be cleaned, so the message says to restore the file from disk.
| > | Since it's in MS-IE's temporary files area, can I just delete it without
| > | restoring? I want to avoid the problem of MS-IE possibly keeping a
| > | table of the files it expects somewhere. If that's how it works, then
| > | deleting the file could cause inconsistencies. I am running MS-IE 6
| > | on Win2K/SP4. Thanks.
| > |
| > | Stung
| > |
|

 

[David H. Lipman]

If you are using a retail version of McAfee, I can't blame you on switching. If you are
using a corp./enterprise version of McAfee -- Don't , keep it.

Otherwise here are freebies. Note that CA eTrust has extended their "free for 1 year
offer" till Aug '05.

Of the following, CA eTrust is the best choice.

ClamWin -
http://prdownloads.sourceforge.net/clamwin/clamwin-0.37.3-setup.exe?download - FREE

AVAST -
http://www.avast.com/i_idt_1016.html - FREE

AntiVir -
http://www.free-av.com/ - FREE

AVG -
http://free.grisoft.com/freeweb.php/doc/2/lng/us/tpl/v5 - FREE

CA eTrust -
http://www.my-etrust.com/microsoft/index.cfm - FREE for one year.
{ Free offer ends 8/1/05 }


--
Dave




|
|
| I've been thinking of Avast and AVG. When I shorten my to-do list.
|
| Thanks.
|
| Stung.
|

 

[Stung By Downloader-UI]

If you are using a retail version of McAfee, I can't blame you on switching. If you are
using a corp./enterprise version of McAfee -- Don't , keep it.

Otherwise here are freebies. Note that CA eTrust has extended their "free for 1 year
offer" till Aug '05.

Of the following, CA eTrust is the best choice.

ClamWin -
http://prdownloads.sourceforge.net/clamwin/clamwin-0.37.3-setup.exe?download - FREE

AVAST -
http://www.avast.com/i_idt_1016.html - FREE

AntiVir -
http://www.free-av.com/ - FREE

AVG -
http://free.grisoft.com/freeweb.php/doc/2/lng/us/tpl/v5 - FREE

CA eTrust -
http://www.my-etrust.com/microsoft/index.cfm - FREE for one year.
{ Free offer ends 8/1/05 }

Thanks, Dave.

S.

 

[Stung By Downloader-UI]

| Is it really necessary to scan in safe mode? That would really make it
| inconvenient.

It is when you "think" you are infected because there is less of a chance that the infector
will be loaded and running and thus easier to remove.

Thanks again, Dave.

S.