What are these files?

[JP]

I found these folders in my program folder and I don't
remember ever downloading or installing them. They don't
show up in the remove program list. I have been
experiencing websites popping up automatically and
removed some Trojan viruses through Norton. When I try to
delete these folders, I get the access denied message.
What the hell are these files and how do I get rid of
them? HELP!

AproposPlugin.dll (in SysAI folder)
ProxyStub.dll (in SysAI folder)
IncFindBHO150.dll (in BHO folder within IncredFind folder)
AutoUpdate (in AutoUpdate folder)
libexpat.dll (in AutoUpdate folder)
CSIE.DLL (in ClearSearch folder along with some .DAT
files)
CSIEINST.DLL (in ClearSearch folder along with some .DAT
files)

 

[Chuck]

I found these folders in my program folder and I don't
remember ever downloading or installing them. They don't
show up in the remove program list. I have been
experiencing websites popping up automatically and
removed some Trojan viruses through Norton. When I try to
delete these folders, I get the access denied message.
What the hell are these files and how do I get rid of
them? HELP!

AproposPlugin.dll (in SysAI folder)
ProxyStub.dll (in SysAI folder)
IncFindBHO150.dll (in BHO folder within IncredFind folder)
AutoUpdate (in AutoUpdate folder)
libexpat.dll (in AutoUpdate folder)
CSIE.DLL (in ClearSearch folder along with some .DAT
files)
CSIEINST.DLL (in ClearSearch folder along with some .DAT
files)

JP,

What you're describing sounds like more spyware. You would be well advised to
do a thorough spyware scan. Norton is trying to add spyware protection to their
package, but they're not there yet. Use known and trusted spyware detection
tools please.

First, download LSP-Fix and WinsockXPFIx from <http://www.cexx.org/lspfix.htm>,
and CWShredder from <http://www.majorgeeks.com/download4086.html>. All are
free.

Next, close all Internet Explorer and Outlook windows, then run CWShredder.
Have it fix all variants.

Now check for, and remove, spyware. Get HijackThis
<http://www.majorgeeks.com/download.php?det=3155> and Spybot S&D
<http://www.safer-networking.org/index.php?page=download>. Both free.
1) Install and run Spybot. First update it ("Search for updates"), then run a
scan ("Check for problems"). Trust Spybot, and make all recommended deletions.
2) Install and run HijackThis. Do NOT make any changes immediately. Save the
HJT Log. <http://forums.spywareinfo.com/index.php?showtopic=227>
3) Have your HJT log interpreted by experts at one or more of the following
forums (and post it, or a link to your forum post, here):
<http://forums.net-integration.net/>
<http://forums.spywareinfo.com/>
<http://forums.tomcoyote.org/>
<http://www.wilderssecurity.com/>

If removal of any spyware affects your ability to access the internet (some
spyware builds itself into the network software, and its removal may damage your
network), run LSP-Fix and / or WinsockXPFIx.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.