Jump to content

SYSWOW setup.exe infected

Recommended Posts

I downloaded the wrong files about a month ago.

The AV I used detected it as a threat and I immediately deleted the files, but since then an installshield wizard keeps popping up when I boot up my computer.

Since then my computer started freezing from time to time, display ads, and recently tried to connect to a mining pool which I have never used.

Malwarebytes doesn't recognize a threat when I scan the system, but it does pinpoint a specific file on the blocked website log.

It's apparently C:\Windows\SysWOW64\InstallShield\setup.exe that is causing the problems.

I tried killing the process manually, but it keeps coming back.

I would really appreciate your help on this matter.





Link to post
Share on other sites

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.

Remove this program in bold via the Control Panel > Programs > Programs and Features.
CPUID CPU-Z 1.76 (HKLM\...\CPUID CPU-Z_is1) (Version:  - ) <==== ATTENTION
Your copy is not signed and could be compromised.
If you need it please download the latest version from this site.

Please download the attached Fixlist.txt file to  the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The tool will create a log (Fixlog.txt) please post it to your reply.

Please post the Fixlog.txt and let me know what problem persists.


Link to post
Share on other sites

  • Root Admin

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.



Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.