Hi all.
Got a customer whom got infected with Adware. The log of Panda AV points to the installer folder in the windows directory.
The four infected files in question are .msi files.
Is it safe to delete these files?
Thanks.
Printable View
Hi all.
Got a customer whom got infected with Adware. The log of Panda AV points to the installer folder in the windows directory.
The four infected files in question are .msi files.
Is it safe to delete these files?
Thanks.
What are the files called?
The main question would be whether these are genuine files that have been infected or are they pure malware files that have been given a plausible name and hidden in a place that does not look suspicious.
I normally do a Google search on the filename. There are a number of sites that list files and will tell you if they are OK, pure malware, suspicious or whatever.
Tried google , found nothing. Here is the log.
Ah! it is Alexa.................
http://www.imilly.com/alexa.htm
It actually ships with Windows/IE :D
Spybot and AdAware will remove it, but I would be wary of deleting .msi files as they don't actually do anything during normal operation of your computer.
Ahh ok thanks Nihil.
Nihil the problem I have is that I cannot use 3rd party tools to remove these sort of things.
I am doing the tech support here in SA for Panda.
Its a whole process to scale an issue to our HQ and wait for a reply. That is why I post here alot :)
Thanks for the link though.
EDIT: Questions still stands, can i delete these files :)
there is no need to delete them
.msi is a MicroSoft Installer file
it is 'just' an application waiting to be installed by double clicking it
even when it has been installed it is not a bad idea to 'store' these somewhere - network share ? - so you can go and get them again if needed in case of PC rebuild etc
but please DO list the titles of each file
and NO google hits is generally a sign that it is benign [safe] as there are no people with those issues out there
Foxy - check the attachment.
I would not delete those files. As Foxy says, they are just installation files. It is not as if you have found them in the Registry, start up folder or whatever.
I doubt if spybot or adaware would even spot them. I only mentioned them because they also report Alexa as spyware :)
Ok.
However when this client does a scan with panda and sends me the report he says, "Look Tyron there is adware on my pc".
Should I just put the files back in there original place as I have placed them in the recycle bin :)
Yes I would put them back, they won't do anything.
I keep finding Alexa everytime I load MS updates :D. I just make sure that it doesn't run in the live system, having it in .msi files doesn't bother me.......... if I need to reinstall, and it gets reinstalled as well it will just get detected and deleted again.