?
Solved

Windows XP parasite?

Posted on 2014-01-05
9
Medium Priority
?
221 Views
Last Modified: 2014-01-25
When I go to install any program another program pops up and in essence blocks the installation.    It is called Softex Weblink.  It is preventing me from doing anything with the computer.

Norton looked at it and said it was a link direction from the installer native to XP.

I ran Malware and Norton and SPybot they don't find anything.

Anyone have any experience with this and or know how to get rid of it?
0
Comment
Question by:Malibucompany
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
  • +1
9 Comments
 
LVL 11

Assisted Solution

by:Miftaul
Miftaul earned 572 total points
ID: 39757535
So you dont see softex weblink in add/remove programs.
0
 
LVL 29

Assisted Solution

by:chilternPC
chilternPC earned 1144 total points
ID: 39757538
Have you tried un-installing the program?  (control panel - uninstall program)
if its not in the un-install program list

look here:

C:\Program Files\Softex\Weblink\.

retry renaming the folder.  if that fails it will be in the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
and you can delete it from there.  (only if you are comfortable editing the registry)

then restart

more discussion here:
http://www.file.net/process/weblink.exe.html
0
 

Author Comment

by:Malibucompany
ID: 39757540
Sorry for got to mention that.


Yes do see it listed as a program.  I uninstall it .   It just reinstalls itself.  I have used removal tools which remove it and look for any registry traces.    It still reinstalls itself which I go to install any progtam that I need.
0
Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

 
LVL 11

Assisted Solution

by:Miftaul
Miftaul earned 572 total points
ID: 39757543
Here is the details on it -www.file.net/process/weblink.exe.html

You can delete the registry keys and also the files to get rid of it.
0
 
LVL 29

Accepted Solution

by:
chilternPC earned 1144 total points
ID: 39757551
the other option might be to do a 'restore'   - i.e tell the computer to reset the system files to a date in the past, no docs or email or files are lost only the system files are reset.

so use the details below and choose a date before the problem.

full details here:

http://support.microsoft.com/kb/306084

(although sometimes it can't but its worth a try)  can take a while
0
 
LVL 29

Assisted Solution

by:chilternPC
chilternPC earned 1144 total points
ID: 39757555
the other option is to restart the computer in safe mode  (press <F8> while thje black screen is on when booting) - enter safe mode.
then un-install the program and remove it all and delete the folder etc..
then still in safe mode...
install Malwarebytes from here:
http://www.malwarebytes.org/lp/lp4/?gclid=CPnn8vfD57sCFZLKtAodsg4AFw
and run malwarebytes see what it finds.
0
 
LVL 29

Assisted Solution

by:chilternPC
chilternPC earned 1144 total points
ID: 39757564
another option is to run the system file Checker (sfc) from Microsoft.
in a command (old dos) window
 
If sfc discovers that a protected file has been overwritten, it retrieves the correct version of the file from the %systemroot%\system32\dllcache folder, and then replaces the incorrect file.
 (You must be logged on as a member of the Administrators group to run sfc.)

details here:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/system_file_checker.mspx?mfr=true
0
 
LVL 92

Assisted Solution

by:nobus
nobus earned 284 total points
ID: 39758655
try running this : http://majorgeeks.com/RogueKiller_d6983.html
or scan from a bootable cd :
http://majorgeeks.com/Kaspersky_Rescue_Disk_d6501.html            KASPERSKY   CD      
http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline     OFFLINE DEFENDER
0
 

Author Comment

by:Malibucompany
ID: 39808848
I've requested that this question be closed as follows:

Accepted answer: 72 points for chilternPC's comment #a39757555
Assisted answer: 72 points for Miftaul's comment #a39757535
Assisted answer: 72 points for chilternPC's comment #a39757538
Assisted answer: 0 points for Malibucompany's comment #a39757540
Assisted answer: 71 points for Miftaul's comment #a39757543
Assisted answer: 71 points for chilternPC's comment #a39757551
Assisted answer: 71 points for chilternPC's comment #a39757564
Assisted answer: 71 points for nobus's comment #a39758655

for the following reason:

.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You cannot be 100% sure that you can protect your organization against crypto ransomware but you can lower down the risk and impact of the infection.
If you thought ransomware was bad, think again! Doxware has the potential to be even more damaging.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
Suggested Courses

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question