Isobuster plague

L

Loonie

http://www.jlaforums.com/link.php?url=http://www.isobuster.com/help.php?help=70


"Uninstallation of the program:

You can easily uninstall the Software if you like. To uninstall click
on the Windows "Start" button, click "Smart Projects", click "IsoBuster"
and finally click "Uninstall IsoBuster"
Or, alternatively, via the regular Windows uninstall functionality by
clicking on the Windows "Start" button, then clicking on the "Settings"
button, then clicking on the "Control Panel" button, then clicking on
the "Add or Remove Programs" button, then selecting IsoBuster and
finally clicking on the "Change/Remove" button. Make sure the
application is closed before starting the uninstallation process. "

Has anyone using Win 7 succeeded in getting rid of this plague?

TIA
 
L

Loonie

Loonie said:
http://www.jlaforums.com/link.php?url=http://www.isobuster.com/help.php?help=70



"Uninstallation of the program:

You can easily uninstall the Software if you like. To uninstall click
on the Windows "Start" button, click "Smart Projects", click "IsoBuster"
and finally click "Uninstall IsoBuster"
Or, alternatively, via the regular Windows uninstall functionality by
clicking on the Windows "Start" button, then clicking on the "Settings"
button, then clicking on the "Control Panel" button, then clicking on
the "Add or Remove Programs" button, then selecting IsoBuster and
finally clicking on the "Change/Remove" button. Make sure the
application is closed before starting the uninstallation process. "

Has anyone with Win 7 succeeded in getting rid of this plague?

TIA

"VanguardLH" a écrit dans le message de groupe de discussion :
[email protected]...

Bum wrote:

Quote:
How to dump isobuster from a win 7 computer. It is not visible to
program removers like ZSoft Uninstaller. Isobuster is not listed in
Programs and Features.

- - - - - - - - - - - - - - - - - - -
Answer:
It should be listed under Windows Explorer. Isobuster contains an
uninstall folder which makes it very easy to delete.

What, what, what, and where????????????????????
 
P

Paul

Loonie said:
"VanguardLH" a écrit dans le message de groupe de discussion :
[email protected]...

Bum wrote:

Quote:
How to dump isobuster from a win 7 computer. It is not visible to
program removers like ZSoft Uninstaller. Isobuster is not listed in
Programs and Features.

- - - - - - - - - - - - - - - - - - -
Answer:
It should be listed under Windows Explorer. Isobuster contains an
uninstall folder which makes it very easy to delete.

What, what, what, and where????????????????????
Windows stores programs in places like C:\Program Files. That could be
what VanguardLH is suggesting. You want to look in the various Program Files,
for evidence of ISOBuster. You can start your search, with Windows Explorer,
and even type "ISOBuster" in the search box.

*******

If I run the isobuster installation in Wine under Ubuntu, I can find
this directory. Note that your results won't be exactly the same,
because Windows 7 has more than one Program Files folder.

The interesting things in this listing are:

C:\Program Files\Smart File Advisor\unins000.exe

C:\Program Files\Smart Projects\IsoBuster\Uninst\unins000.exe

If I look in the equivalent of "Add/Remove Programs" in WINE emulator,
I can see these new entries.

ISOBuster 2.8.5 Smart Projects 2.8.5

Smart File Advisor Filefacts.net 1.1.1

and I presume the above two uninstaller executables are what get called
when you uninstall those two things. You could try clicking on the unins000.exe
files, and see if the directories get deleted or not. An uninstaller may need
to clean up the registry, so it's *not* as simply as just deleting the
directory. As you can see in this listing, there is evidence of tampering
in other places, that'll need to be cleaned up. (The unrelated "SmartView"
changes, were caused by the ISOBuster installer starting Internet Explorer,
which triggered SmartView to run its updater. That's an unimportant side
effect of the ISOBuster install and can be ignored, as your setup won't
be the same. This is cruft, left over from another experiment.)

If I'd allowed the Toolbar to install, I'm sure there'd be an even bigger
mess to clean up. Maybe even an ActiveX (.ocx) file or the like.

********** Files installed by ISObuster _without_ the tool bar *************

6413a6415,6434
[drwxr-xr-x 4096 Oct 14 19:09] ./Program Files/Smart File Advisor
[-rwxr-xr-x 280824 Apr 4 2011] ./Program Files/Smart File Advisor/sfa.exe
[-rwxr-xr-x 585520 Apr 4 2011] ./Program Files/Smart File Advisor/sfa_inst.exe
[-rw-r--r-- 11347 Oct 14 19:09] ./Program Files/Smart File Advisor/unins000.dat
[-rwxr-xr-x 708344 Oct 14 19:09] ./Program Files/Smart File Advisor/unins000.exe
[-rw-r--r-- 10498 Oct 14 19:09] ./Program Files/Smart File Advisor/unins000.msg
[drwxr-xr-x 4096 Oct 14 19:09] ./Program Files/Smart Projects
[drwxr-xr-x 4096 Oct 14 19:09] ./Program Files/Smart Projects/IsoBuster
[drwxr-xr-x 4096 Oct 14 19:09] ./Program Files/Smart Projects/IsoBuster/Help
[-rw-r--r-- 1054212 Dec 18 2010] ./Program Files/Smart Projects/IsoBuster/Help/IsoBuster.chm
[-rwxr-xr-x 5446888 Jan 4 2011] ./Program Files/Smart Projects/IsoBuster/IsoBuster.exe
[drwxr-xr-x 4096 Oct 14 19:09] ./Program Files/Smart Projects/IsoBuster/Lang
[drwxr-xr-x 4096 Oct 14 19:09] ./Program Files/Smart Projects/IsoBuster/Online
[-rw-r--r-- 555 Dec 23 2005] ./Program Files/Smart Projects/IsoBuster/Online/IsoBuster Online.html
[-rw-r--r-- 578 Jul 3 2006] ./Program Files/Smart Projects/IsoBuster/Online/Order Now.html
[drwxr-xr-x 4096 Oct 14 19:09] ./Program Files/Smart Projects/IsoBuster/Plugins
[drwxr-xr-x 4096 Oct 14 19:09] ./Program Files/Smart Projects/IsoBuster/Uninst
[-rw-r--r-- 48409 Oct 14 19:09] ./Program Files/Smart Projects/IsoBuster/Uninst/unins000.dat
[-rwxr-xr-x 1283336 Oct 14 19:09] ./Program Files/Smart Projects/IsoBuster/Uninst/unins000.exe
[-rw-r--r-- 21031 Oct 14 19:09] ./Program Files/Smart Projects/IsoBuster/Uninst/unins000.msg
6455c6476
< [drwxr-xr-x 4096 Sep 29 20:54] ./users/paul/Local Settings/Temporary Internet Files/Content.IE5/6W4TT1T4
---
[drwxr-xr-x 4096 Oct 14 19:08] ./users/paul/Local Settings/Temporary Internet Files/Content.IE5/6W4TT1T4 6466a6488
[-rw-r--r-- 576 Oct 14 19:08] ./users/paul/Local Settings/Temporary Internet Files/Content.IE5/6W4TT1T4/SCDN_SN[16]
6475c6497
< [drwxr-xr-x 4096 Sep 29 20:54] ./users/paul/Local Settings/Temporary Internet Files/Content.IE5/A4I6WLOP
---
[drwxr-xr-x 4096 Oct 14 19:08] ./users/paul/Local Settings/Temporary Internet Files/Content.IE5/A4I6WLOP 6485a6508
[-rw-r--r-- 3861 Oct 14 19:08] ./users/paul/Local Settings/Temporary Internet Files/Content.IE5/A4I6WLOP/Packages[16]
6506c6529,6530
< [drwxr-xr-x 4096 Dec 5 2010] ./users/paul/SendTo
---
[drwxr-xr-x 4096 Oct 14 19:09] ./users/paul/SendTo
[-rw-r--r-- 818 Oct 14 19:09] ./users/paul/SendTo/IsoBuster.lnk
6514c6538
< [drwxr-xr-x 4096 Sep 29 20:54] ./users/paul/Temp
---
[drwxr-xr-x 4096 Oct 14 19:09] ./users/paul/Temp
8796,8797c8820,8821
< [drwxr-xr-x 4096 Sep 29 20:54] ./users/Public/Application Data/DeviceVM/SmartView Software Updater/Download
< [-rw-r--r-- 171 Sep 29 20:54] ./users/Public/Application Data/DeviceVM/SmartView Software Updater/Download/list.ini
---
[drwxr-xr-x 4096 Oct 14 19:08] ./users/Public/Application Data/DeviceVM/SmartView Software Updater/Download
[-rw-r--r-- 171 Oct 14 19:08] ./users/Public/Application Data/DeviceVM/SmartView Software Updater/Download/list.ini
8810c8834
< [drwxr-xr-x 4096 Jan 26 2011] ./users/Public/Start Menu/Programs
---
[drwxr-xr-x 4096 Oct 14 19:09] ./users/Public/Start Menu/Programs 8815a8840,8845
[drwxr-xr-x 4096 Oct 14 19:09] ./users/Public/Start Menu/Programs/IsoBuster
[-rw-r--r-- 885 Oct 14 19:09] ./users/Public/Start Menu/Programs/IsoBuster/Help.lnk
[-rw-r--r-- 818 Oct 14 19:09] ./users/Public/Start Menu/Programs/IsoBuster/IsoBuster.lnk
[-rw-r--r-- 929 Oct 14 19:09] ./users/Public/Start Menu/Programs/IsoBuster/IsoBuster Online.lnk
[-rw-r--r-- 902 Oct 14 19:09] ./users/Public/Start Menu/Programs/IsoBuster/Order Now.lnk
[-rw-r--r-- 894 Oct 14 19:09] ./users/Public/Start Menu/Programs/IsoBuster/Uninstall IsoBuster.lnk
9542c9572
< 1424 directories, 8115 files
---
1433 directories, 8136 files
********** End of: Files installed by ISObuster _without_ the tool bar *************

Using Ubuntu (in a VM), and installing the optional WINE package, does allow limited
software testing of installers. Many installers won't run to completion in
such an emulated environment, but it's what I use to prevent crap software
from ruining my "main computer" :) This is how I prevent getting stung by
ToolBars or the like :) Gum up the WINE directory instead...

Paul
 
L

Loonie

Paul said:
Windows stores programs in places like C:\Program Files. That could be
what VanguardLH is suggesting. You want to look in the various Program
Files,
for evidence of ISOBuster. You can start your search, with Windows
Explorer,
and even type "ISOBuster" in the search box.

*******
Thanks Paul :)

In 'C:\program files' there are none that start with iso..., etc
In 'Program and Features' there is no program beginning with iso.., etc.

This came up:

C:\New Volume J\Utilities\TrIDNet - File
Indentifier\Archive\cdimage-iso-generic.trid.xml

and this I found:

- <TrID ver="2.00">
- <Info>
<FileType>ISO CDImage - universal format e.g. WinISO or
IsoBuster</FileType>
<Ext>ISO</Ext>
- <ExtraInfo>
<Rem />
<RefURL />
</ExtraInfo>
<User>THE LoW</User>
<E-Mail>the(insert dot here)low (at) gmx.net</E-Mail>
<Home />
</Info>
- <General>
<FileNum>27</FileNum>
<Refine>1 by Your name for the credits! - 8 by Your name for the
credits!</Refine>
- <Date>
<Year>2004</Year>
<Month>02</Month>
<Day>05</Day>
</Date>
- <Time>
The above 12 lines were repeated over and over to the bottom of the page

I have dumped this file.
If I run the isobuster installation in Wine under Ubuntu, I can find
this directory. Note that your results won't be exactly the same,
because Windows 7 has more than one Program Files folder.

The interesting things in this listing are:

C:\Program Files\Smart File Advisor\unins000.exe

C:\Program Files\Smart Projects\IsoBuster\Uninst\unins000.exe

If I look in the equivalent of "Add/Remove Programs" in WINE emulator,
I can see these new entries.

ISOBuster 2.8.5 Smart Projects 2.8.5

Smart File Advisor Filefacts.net 1.1.1

and I presume the above two uninstaller executables are what get called
when you uninstall those two things. You could try clicking on the
unins000.exe
files, and see if the directories get deleted or not. An uninstaller may
need
to clean up the registry, so it's *not* as simply as just deleting the
directory. As you can see in this listing, there is evidence of tampering
in other places, that'll need to be cleaned up. (The unrelated "SmartView"
changes, were caused by the ISOBuster installer starting Internet Explorer,
which triggered SmartView to run its updater. That's an unimportant side
effect of the ISOBuster install and can be ignored, as your setup won't
be the same. This is cruft, left over from another experiment.)

If I'd allowed the Toolbar to install, I'm sure there'd be an even bigger
mess to clean up. Maybe even an ActiveX (.ocx) file or the like.

********** Files installed by ISObuster _without_ the tool bar
*************

6413a6415,6434
[drwxr-xr-x 4096 Oct 14 19:09] ./Program Files/Smart File Advisor
[-rwxr-xr-x 280824 Apr 4 2011] ./Program Files/Smart File Advisor/sfa.exe
[-rwxr-xr-x 585520 Apr 4 2011] ./Program Files/Smart File Advisor/sfa_inst.exe
[-rw-r--r-- 11347 Oct 14 19:09] ./Program Files/Smart File Advisor/unins000.dat
[-rwxr-xr-x 708344 Oct 14 19:09] ./Program Files/Smart File Advisor/unins000.exe
[-rw-r--r-- 10498 Oct 14 19:09] ./Program Files/Smart File Advisor/unins000.msg
[drwxr-xr-x 4096 Oct 14 19:09] ./Program Files/Smart Projects
[drwxr-xr-x 4096 Oct 14 19:09] ./Program Files/Smart Projects/IsoBuster
[drwxr-xr-x 4096 Oct 14 19:09] ./Program Files/Smart Projects/IsoBuster/Help
[-rw-r--r-- 1054212 Dec 18 2010] ./Program Files/Smart Projects/IsoBuster/Help/IsoBuster.chm
[-rwxr-xr-x 5446888 Jan 4 2011] ./Program Files/Smart Projects/IsoBuster/IsoBuster.exe
[drwxr-xr-x 4096 Oct 14 19:09] ./Program Files/Smart Projects/IsoBuster/Lang
[drwxr-xr-x 4096 Oct 14 19:09] ./Program Files/Smart Projects/IsoBuster/Online
[-rw-r--r-- 555 Dec 23 2005] ./Program Files/Smart
Projects/IsoBuster/Online/IsoBuster Online.html
[-rw-r--r-- 578 Jul 3 2006] ./Program Files/Smart
Projects/IsoBuster/Online/Order Now.html
[drwxr-xr-x 4096 Oct 14 19:09] ./Program Files/Smart Projects/IsoBuster/Plugins
[drwxr-xr-x 4096 Oct 14 19:09] ./Program Files/Smart Projects/IsoBuster/Uninst
[-rw-r--r-- 48409 Oct 14 19:09] ./Program Files/Smart Projects/IsoBuster/Uninst/unins000.dat
[-rwxr-xr-x 1283336 Oct 14 19:09] ./Program Files/Smart Projects/IsoBuster/Uninst/unins000.exe
[-rw-r--r-- 21031 Oct 14 19:09] ./Program Files/Smart
Projects/IsoBuster/Uninst/unins000.msg
6455c6476
< [drwxr-xr-x 4096 Sep 29 20:54] ./users/paul/Local
Settings/Temporary Internet Files/Content.IE5/6W4TT1T4
---
[drwxr-xr-x 4096 Oct 14 19:08] ./users/paul/Local
Settings/Temporary Internet Files/Content.IE5/6W4TT1T4
6466a6488
[-rw-r--r-- 576 Oct 14 19:08] ./users/paul/Local
Settings/Temporary Internet Files/Content.IE5/6W4TT1T4/SCDN_SN[16]
6475c6497
< [drwxr-xr-x 4096 Sep 29 20:54] ./users/paul/Local
Settings/Temporary Internet Files/Content.IE5/A4I6WLOP
---
[drwxr-xr-x 4096 Oct 14 19:08] ./users/paul/Local
Settings/Temporary Internet Files/Content.IE5/A4I6WLOP
6485a6508
[-rw-r--r-- 3861 Oct 14 19:08] ./users/paul/Local
Settings/Temporary Internet Files/Content.IE5/A4I6WLOP/Packages[16]
6506c6529,6530
< [drwxr-xr-x 4096 Dec 5 2010] ./users/paul/SendTo
---
[drwxr-xr-x 4096 Oct 14 19:09] ./users/paul/SendTo
[-rw-r--r-- 818 Oct 14 19:09] ./users/paul/SendTo/IsoBuster.lnk
6514c6538
< [drwxr-xr-x 4096 Sep 29 20:54] ./users/paul/Temp
---
[drwxr-xr-x 4096 Oct 14 19:09] ./users/paul/Temp
8796,8797c8820,8821
< [drwxr-xr-x 4096 Sep 29 20:54] ./users/Public/Application
Data/DeviceVM/SmartView Software Updater/Download
< [-rw-r--r-- 171 Sep 29 20:54] ./users/Public/Application
Data/DeviceVM/SmartView Software Updater/Download/list.ini
---
[drwxr-xr-x 4096 Oct 14 19:08] ./users/Public/Application
Data/DeviceVM/SmartView Software Updater/Download
[-rw-r--r-- 171 Oct 14 19:08] ./users/Public/Application
Data/DeviceVM/SmartView Software Updater/Download/list.ini
8810c8834
< [drwxr-xr-x 4096 Jan 26 2011] ./users/Public/Start Menu/Programs
---
[drwxr-xr-x 4096 Oct 14 19:09] ./users/Public/Start Menu/Programs
8815a8840,8845
[drwxr-xr-x 4096 Oct 14 19:09] ./users/Public/Start Menu/Programs/IsoBuster
[-rw-r--r-- 885 Oct 14 19:09] ./users/Public/Start Menu/Programs/IsoBuster/Help.lnk
[-rw-r--r-- 818 Oct 14 19:09] ./users/Public/Start Menu/Programs/IsoBuster/IsoBuster.lnk
[-rw-r--r-- 929 Oct 14 19:09] ./users/Public/Start
Menu/Programs/IsoBuster/IsoBuster Online.lnk
[-rw-r--r-- 902 Oct 14 19:09] ./users/Public/Start
Menu/Programs/IsoBuster/Order Now.lnk
[-rw-r--r-- 894 Oct 14 19:09] ./users/Public/Start
Menu/Programs/IsoBuster/Uninstall IsoBuster.lnk
9542c9572
< 1424 directories, 8115 files
---
1433 directories, 8136 files
********** End of: Files installed by ISObuster _without_ the tool bar
*************

Using Ubuntu (in a VM), and installing the optional WINE package, does
allow limited
software testing of installers. Many installers won't run to completion in
such an emulated environment, but it's what I use to prevent crap software
from ruining my "main computer" :) This is how I prevent getting stung by
ToolBars or the like :) Gum up the WINE directory instead...

Paul
I could find no "smart projects" in my Win 7 computer.

The only ISO.... I can find now is in Win Explorer. It seems to be
locked solid there. This is what it shows:
"Isobuster Customized Web Search (Default)"

Anyone have a grenade for that one?

Have a super weekend Paul :)
 
R

R. C. White

Hi, Loonie.

The most effective tool to find any file anywhere on your HDD is the current
version of the old DOS command Dir (from before Directories became Folders).
Open a Command Prompt window and then, at the C:> prompt, type:
Dir isobuster*.* /s/a

Then just wait. On a big drive with lots of files, this may take some time.
To see what the Dir command does, just type the command, followed by /? for
a mini-Help screen showing the parameters and switches available. The Dir
command itself simply lists all the files in the current directory, or those
that match the isobuster*.* included in the command line. The /s switch
lists matching files in subdirectories under the current directory. The /a
switch lists ALL files, including those with System, Hidden, or other
Attributes. In other words, if there is ANY file ANYWHERE on your Drive C:
that matches isobuster*.*, it will be listed.

To search another drive, either CD (Change Directory) to it (cd E:\, for
example) or include it in the command line:
Dir E:\isobuster*.*

I downloaded isobuster_eng.zip way back in 2006. I've used it only a few
times, but it worked fine for me. I haven't needed to uninstall it, partly
because I've reinstalled Windows a few times since then and didn't
re-install isobuster, so I don't know about any uninstall problems.

RC
--
R. C. White, CPA
San Marcos, TX
(e-mail address removed)
Microsoft Windows MVP (2002-2010)
Windows Live Mail 2011 (Build 15.4.3538.0513) in Win7 Ultimate x64 SP1


"Loonie" wrote in message
 
L

Loonie

R. C. White said:
Hi, Loonie.

The most effective tool to find any file anywhere on your HDD is the
current version of the old DOS command Dir (from before Directories
became Folders). Open a Command Prompt window and then, at the C:>
prompt, type:
Dir isobuster*.* /s/a

Then just wait. On a big drive with lots of files, this may take some
time.
Thanks RCW. It ran for me as you suggested and it took only a few
minutes. The complete list is below.

To see what the Dir command does, just type the command, followed
by /? for a mini-Help screen showing the parameters and switches
available. The Dir command itself simply lists all the files in the
current directory, or those that match the isobuster*.* included in the
command line. The /s switch lists matching files in subdirectories
under the current directory. The /a switch lists ALL files, including
those with System, Hidden, or other Attributes. In other words, if
there is ANY file ANYWHERE on your Drive C: that matches isobuster*.*,
it will be listed.

To search another drive, either CD (Change Directory) to it (cd E:\, for
example) or include it in the command line:
Dir E:\isobuster*.*

I downloaded isobuster_eng.zip way back in 2006. I've used it only a
few times, but it worked fine for me. I haven't needed to uninstall it,
partly because I've reinstalled Windows a few times since then and
didn't re-install isobuster, so I don't know about any uninstall problems.

RC
--
R. C. White, CPA
San Marcos, TX
(e-mail address removed)
Microsoft Windows MVP (2002-2010)
Windows Live Mail 2011 (Build 15.4.3538.0513) in Win7 Ultimate x64 SP1


"Loonie" wrote in message
Unfortunately, there is no "smart projects" in my computer. I use Win 7
Home Premium. I tried to search using "smart projects" and it came up
with nothing. I removes the commas and it came up with about 40 lines
and nothing useful for me.

Thank you RCW for your suggestions. I had a response and now all I need
is a brain to interpret the results:

The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application Data\Application
Data\Hist
ory\History.IE5\MSHist012011091920110926 is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application Data\Application
Data\Micr
osoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~ is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application Data\Application
Data\Micr
osoft\Media Player\Transcoded Files Cache is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application Data\Application
Data\Micr
osoft\OneNote\12.0\Backup\OneNote 2007 Guide is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application Data\Application
Data\Micr
osoft\OneNote\12.0\OneNoteOfflineCache_Files is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application Data\Application
Data\Micr
osoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28 is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application Data\Application
Data\Micr
osoft\Windows Mail\Microsoft Communities is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application Data\Application
Data\Micr
osoft\Windows Sidebar\Cache\168522d5-1082-4df2-b2f6-9185c31f9472 is too
long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application Data\Application
Data\Micr
osoft Corporation\Windows 7 Upgrade Advisor is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application Data\Application
Data\PC_D
rivers_Headquarters\DriversHQ.DriverDetective_Url_ljss1ytmefwoclnqrmuhmi2qtxzx42
ya is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application Data\Application
Data\Temp
\ct1682967CH\Media\icons\useful_components is too long.

Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Ap
plication Data\Application Data\Application Data\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Temp\CT17
00389\chrome

24/07/2011 15:34 723,495 isobuster.jar
1 File(s) 723,495 bytes
Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Ap
plication Data\Application Data\Application Data\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Temp\is-H
JGJB.tmp

FIRST TIME IT HIT IT!!!!!

22/03/2011 17:27 207,624 IsoBuster_toolbar.exe
1 File(s) 207,624 bytes
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application Data\Application
Data\Temp
\mia250D.tmp\data\MSIRUN\VldDrvIDEPlug.dll is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application Data\Application
Data\Temp
\{0F787841-B76F-497C-9AE3-DE048E91D8C1} is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application
Data\Google\Chrome\User Da
ta\Default\databases\http_download.cnet.com_0 is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application
Data\Google\Chrome\User Da
ta\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application
Data\Microsoft\Device Meta
data\dmrccache\en-us\992b12c1-c4a6-4c95-a62d-3b43768c6120 is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application
Data\Microsoft\Windows\His
tory\History.IE5\MSHist012011091920110926 is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application
Data\Microsoft\Windows\WER
\ReportArchive\AppCrash_Babylon.exe_addb7145b7d1b63afb561abe991c34393be385_0cc60
270 is too long.

THIS Babylon IS ANOTHER PIECE OF CRAP I WOULD LIKE KICKED OFF.

The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application
Data\Microsoft\Windows Sid
ebar\Cache\168522d5-1082-4df2-b2f6-9185c31f9472 is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Application
Data\PC_Drivers_Headquarte
rs\DriversHQ.DriverDetective_Url_ljss1ytmefwoclnqrmuhmi2qtxzx42ya is too
long.

Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Ap
plication Data\Application Data\Application Data\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Temp\CT1700389\chrome

24/07/2011 15:34 723,495 isobuster.jar
1 File(s) 723,495 bytes
Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Ap
plication Data\Application Data\Application Data\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Temp\is-HJGJB.tmp

ISO CRAP IS BACK AGAIN!!!!!

22/03/2011 17:27 207,624 IsoBuster_toolbar.exe
1 File(s) 207,624 bytes
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application Data\Microsoft\Device
Metadata\dmrccache\en
-us\992b12c1-c4a6-4c95-a62d-3b43768c6120 is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application
Data\Microsoft\Windows\WER\ReportArchive\Ap
pCrash_Babylon.exe_addb7145b7d1b63afb561abe991c34393be385_0cc60270 is
too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Application
Data\PC_Drivers_Headquarters\DriversHQ.Driv
erDetective_Url_ljss1ytmefwoclnqrmuhmi2qtxzx42ya is too long.

Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Ap
plication Data\Application Data\Application Data\Application
Data\Application Da
ta\Application Data\Application Data\Temp\CT1700389\chrome

24/07/2011 15:34 723,495 isobuster.jar
1 File(s) 723,495 bytes
Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Ap
plication Data\Application Data\Application Data\Application
Data\Application Da
ta\Application Data\Application Data\Temp\is-HJGJB.tmp

ISO CRAP IS BACK AGAIN!!!!!

22/03/2011 17:27 207,624 IsoBuster_toolbar.exe
1 File(s) 207,624 bytes
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Microsoft\Device
Metadata\dmrccache\en-us\992b12c1-c4a6
-4c95-a62d-3b43768c6120\DeviceInformation is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application Data\Microsoft\Device
Metadata\dmrccache\en-us\d798fcc8-56a8
-49d3-9613-f09e1c417466\DeviceInformation is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Application
Data\Microsoft\Windows\WER\ReportArchive\AppCrash_Babylon.ex
e_addb7145b7d1b63afb561abe991c34393be385_0cc60270 is too long.

Directory of C:\Users\loonie\Local Settings\Application Data\Application
Data\Ap
plication Data\Application Data\Application Data\Application
Data\Application Da
ta\Application Data\Temp\CT1700389\chrome
24/07/2011 15:34 723,495 isobuster.jar
1 File(s) 723,495 bytes
Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Ap
plication Data\Application Data\Application Data\Application
Data\Application Da
ta\Application Data\Temp\is-HJGJB.tmp

ISO CRAP IS BACK AGAIN!!!!!

22/03/2011 17:27 207,624 IsoBuster_toolbar.exe
1 File(s) 207,624 bytes
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Google\Chrome\User
Data\Default\Extensions\falghbhpllkffjlfaoighejgnkkjc
bgg\2.3.0.15_0\Media\base64\dyamincMenu is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Google\Chrome\User
Data\Default\Extensions\falghbhpllkffjlfaoighejgnkkjc
bgg\2.3.0.15_0\Media\icons\useful_components is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Microsoft\Device
Metadata\dmrccache\en-us\992b12c1-c4a6-4c95-a62d-3b4376
8c6120\DeviceStage\Task\{BB370261-19DA-4c9b-96DF-E732E47BDCE1} is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Microsoft\Device
Metadata\dmrccache\en-us\d798fcc8-56a8-49d3-9613-f09e1c
417466\DeviceStage\Task\{38639EAA-85CB-4925-BE28-2A0069AE0ECD} is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Applicati
on Data\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft
Corpor_1c6a976
803ab22b4f13e4867cac4067d0257d42_0d11009c is too long.

Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Ap
plication Data\Application Data\Application Data\Application
Data\Application Da
ta\Temp\CT1700389\chrome
24/07/2011 15:34 723,495 isobuster.jar
1 File(s) 723,495 bytes
Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Ap
plication Data\Application Data\Application Data\Application
Data\Application Da
ta\Temp\is-HJGJB.tmp

ISO CRAP IS BACK AGAIN!!!!!

22/03/2011 17:27 207,624 IsoBuster_toolbar.exe
1 File(s) 207,624 bytes
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Microsoft
\Device
Metadata\dmrccache\en-us\992b12c1-c4a6-4c95-a62d-3b43768c6120\DeviceStag
e\Task\{BB370261-19DA-4c9b-96DF-E732E47BDCE1} is too long.
The directory name C:\Users\loonie\Local Settings\Application
Data\Application Da
ta\Application Data\Application Data\Application Data\Application
Data\Microsoft
\Device
Metadata\dmrccache\en-us\d798fcc8-56a8-49d3-9613-f09e1c417466\DeviceStag
e\Task\{38639EAA-85CB-4925-BE28-2A0069AE0ECD} is too long.
Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Ap
plication Data\Application Data\Application Data\Application
Data\Temp\CT1700389
\chrome
24/07/2011 15:34 723,495 isobuster.jar
1 File(s) 723,495 bytes
Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Ap
plication Data\Application Data\Application Data\Application
Data\Temp\is-HJGJB.
tmp

ISO CRAP IS BACK AGAIN!!!!!

22/03/2011 17:27 207,624 IsoBuster_toolbar.exe
1 File(s) 207,624 bytes
Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Ap
plication Data\Application Data\Application Data\Temp\CT1700389\chrome
24/07/2011 15:34 723,495 isobuster.jar
1 File(s) 723,495 bytes
Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Ap
plication Data\Application Data\Application Data\Temp\is-HJGJB.tmp

ISO CRAP IS BACK AGAIN!!!!!

22/03/2011 17:27 207,624 IsoBuster_toolbar.exe
1 File(s) 207,624 bytes
Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Ap
plication Data\Application Data\Temp\CT1700389\chrome
24/07/2011 15:34 723,495 isobuster.jar
1 File(s) 723,495 bytes
Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Ap
plication Data\Application Data\Temp\is-HJGJB.tmp

ISO CRAP IS BACK AGAIN!!!!!

22/03/2011 17:27 207,624 IsoBuster_toolbar.exe
1 File(s) 207,624 bytes
Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Ap
plication Data\Temp\CT1700389\chrome

24/07/2011 15:34 723,495 isobuster.jar
1 File(s) 723,495 bytes
Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Ap
plication Data\Temp\is-HJGJB.tmp

ISO CRAP IS BACK AGAIN!!!!!

22/03/2011 17:27 207,624 IsoBuster_toolbar.exe
1 File(s) 207,624 bytes
Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Te
mp\CT1700389\chrome
24/07/2011 15:34 723,495 isobuster.jar
1 File(s) 723,495 bytes
Directory of C:\Users\loonie\Local Settings\Application
Data\Application Data\Te
mp\is-HJGJB.tmp

ISO CRAP IS BACK AGAIN!!!!!

22/03/2011 17:27 207,624 IsoBuster_toolbar.exe
1 File(s) 207,624 bytes
Directory of C:\Users\loonie\Local Settings\Application
Data\Temp\CT1700389\chrome

24/07/2011 15:34 723,495 isobuster.jar
1 File(s) 723,495 bytes
Directory of C:\Users\loonie\Local Settings\Application
Data\Temp\is-HJGJB.tmp

ISO CRAP IS BACK AGAIN!!!!!

22/03/2011 17:27 207,624 IsoBuster_toolbar.exe
1 File(s) 207,624 bytes
Directory of C:\Users\loonie\Local Settings\Temp\CT1700389\chrome
24/07/2011 15:34 723,495 isobuster.jar
1 File(s) 723,495 bytes
Directory of C:\Users\loonie\Local Settings\Temp\is-HJGJB.tmp

ISO CRAP IS BACK AGAIN!!!!!

22/03/2011 17:27 207,624 IsoBuster_toolbar.exe
1 File(s) 207,624 bytes

Directory of C:\Users\loonie\Recent
15/10/2011 11:04 11,772 isobuster.lnk
1 File(s) 11,772 bytes
Total Files Listed:
53 File(s) 22,449,294 bytes
0 Dir(s) 87,571,652,608 bytes free

C:\Users\loonie>
 
P

Paul

Loonie said:
I could find no "smart projects" in my Win 7 computer.

The only ISO.... I can find now is in Win Explorer. It seems to be
locked solid there. This is what it shows:
"Isobuster Customized Web Search (Default)"

Anyone have a grenade for that one?

Have a super weekend Paul :)
*******

I did another install run, this time including the toolbar. Part
of the new addition includes the word "Conduit".

C:\Program Files\ConduitEngine\ConduitEngineUninstall.exe

C:\Program Files\IsoBuster\uninstall.exe

C:\Program Files\Smart File Advisor\unins000.exe

C:\Program Files\Smart Projects\IsoBuster\Uninst\unins000.exe

There appears to be two component parts to the Toolbar. Isobuster has something,
presumably to put their branding on the Toolbar. But the engine that runs the
Toolbar is the Conduit thing. So you'd have to be careful when removing it.
I presume if the Conduit was uninstalled, the Isobuster part would end up
broken.

U see four entries in Add/Remove programs in my emulated environment.
The items marked with the arrows, are the Toolbar component parts.
So it doesn't look like a "Stealth Install". Things are pretty much
exposed, and you could attempt to remove them from Add/Remove.

Conduit Engine Conduit Ltd. --- <-----

ISOBuster 2.8.5 Smart Projects 2.8.5

IsoBuster Toolbar IsoBuster 6.3.3.3 <-----

Smart File Advisor Filefacts.net 1.1.1

What I can't figure out with this method, is how Conduit infects Internet Explorer.
I see the files alright, but don't see how they're linked to IE. Presumably
a registry entry ?

********** Files installed by ISObuster _with_ the tool bar *************

207a209,221
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Conduit
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Conduit/Community Alerts
[-rw-r--r-- 634976 Feb 15 2011] ./Program Files/Conduit/Community Alerts/Alert.dll
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/ConduitEngine
[-rw-r--r-- 6560 Mar 3 2011] ./Program Files/ConduitEngine/appContextMenu.xml
[-rw-r--r-- 4216104 Mar 14 2011] ./Program Files/ConduitEngine/ConduitEngine.dll
[-rwxr-xr-x 38496 Mar 25 2010] ./Program Files/ConduitEngine/ConduitEngineHelper.exe
[-rwxr-xr-x 23648 Mar 3 2011] ./Program Files/ConduitEngine/ConduitEngineUninstall.exe
[-rw-r--r-- 4013 Mar 3 2011] ./Program Files/ConduitEngine/engineContextMenu.xml
[-rw-r--r-- 2999 Mar 3 2011] ./Program Files/ConduitEngine/EngineSettings.json
[-rw-r--r-- 290 Oct 15 13:46] ./Program Files/ConduitEngine/INSTALL.LOG
[-rw-r--r-- 175912 Jan 17 2011] ./Program Files/ConduitEngine/prxConduitEngine.dll
[-rw-r--r-- 25 Mar 3 2011] ./Program Files/ConduitEngine/toolbar.cfg 512a527,536
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/IsoBuster
[-rw-r--r-- 7044 Mar 3 2011] ./Program Files/IsoBuster/GottenAppsContextMenu.xml
[-rwxr-xr-x 38496 Mar 25 2010] ./Program Files/IsoBuster/IsoBusterToolbarHelper.exe
[-rw-r--r-- 5738 Mar 3 2011] ./Program Files/IsoBuster/OtherAppsContextMenu.xml
[-rw-r--r-- 175912 Jan 17 2011] ./Program Files/IsoBuster/prxtbIsoB.dll
[-rw-r--r-- 6588 Mar 3 2011] ./Program Files/IsoBuster/SharedAppsContextMenu.xml
[-rw-r--r-- 4216104 Mar 14 2011] ./Program Files/IsoBuster/tbIsoB.dll
[-rw-r--r-- 21 Sep 21 11:00] ./Program Files/IsoBuster/toolbar.cfg
[-rw-r--r-- 5737 Mar 3 2011] ./Program Files/IsoBuster/ToolbarContextMenu.xml
[-rwxr-xr-x 93792 Nov 2 2010] ./Program Files/IsoBuster/uninstall.exe 6411a6436,6455
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Smart File Advisor
[-rwxr-xr-x 280824 Apr 4 2011] ./Program Files/Smart File Advisor/sfa.exe
[-rwxr-xr-x 585520 Apr 4 2011] ./Program Files/Smart File Advisor/sfa_inst.exe
[-rw-r--r-- 11347 Oct 15 13:46] ./Program Files/Smart File Advisor/unins000.dat
[-rwxr-xr-x 708344 Oct 15 13:46] ./Program Files/Smart File Advisor/unins000.exe
[-rw-r--r-- 10498 Oct 15 13:46] ./Program Files/Smart File Advisor/unins000.msg
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Smart Projects
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Smart Projects/IsoBuster
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Smart Projects/IsoBuster/Help
[-rw-r--r-- 1054212 Dec 18 2010] ./Program Files/Smart Projects/IsoBuster/Help/IsoBuster.chm
[-rwxr-xr-x 5446888 Jan 4 2011] ./Program Files/Smart Projects/IsoBuster/IsoBuster.exe
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Smart Projects/IsoBuster/Lang
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Smart Projects/IsoBuster/Online
[-rw-r--r-- 555 Dec 23 2005] ./Program Files/Smart Projects/IsoBuster/Online/IsoBuster Online.html
[-rw-r--r-- 578 Jul 3 2006] ./Program Files/Smart Projects/IsoBuster/Online/Order Now.html
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Smart Projects/IsoBuster/Plugins
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Smart Projects/IsoBuster/Uninst
[-rw-r--r-- 48409 Oct 15 13:46] ./Program Files/Smart Projects/IsoBuster/Uninst/unins000.dat
[-rwxr-xr-x 1283336 Oct 15 13:46] ./Program Files/Smart Projects/IsoBuster/Uninst/unins000.exe
[-rw-r--r-- 21031 Oct 15 13:46] ./Program Files/Smart Projects/IsoBuster/Uninst/unins000.msg
6449c6493,6510
< [drwxr-xr-x 4096 Dec 5 2010] ./users/paul/Local Settings/Application Data
---
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local Settings/Application Data
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local Settings/Application Data/Conduit
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local Settings/Application Data/Conduit/Community Alerts
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local Settings/Application Data/Conduit/Community Alerts/Log
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local Settings/Application Data/Conduit/CT1700389
[-rwxr-xr-x 38496 Mar 25 2010] ./users/paul/Local Settings/Application Data/Conduit/CT1700389/IsoBusterAutoUpdateHelper.exe
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local Settings/Application Data/ConduitEngine
[-rw-r--r-- 4216104 Mar 14 2011] ./users/paul/Local Settings/Application Data/ConduitEngine/ConduitEngine.dll
[-rw-r--r-- 2999 Mar 3 2011] ./users/paul/Local Settings/Application Data/ConduitEngine/EngineSettings.json
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local Settings/Application Data/ConduitEngine/Logs
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local Settings/Application Data/ConduitEngine/MyStuffApps
[-rw-r--r-- 25 Mar 3 2011] ./users/paul/Local Settings/Application Data/ConduitEngine/toolbar.cfg
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local Settings/Application Data/IsoBuster
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local Settings/Application Data/IsoBuster/Logs
[-rw-r--r-- 4216104 Mar 14 2011] ./users/paul/Local Settings/Application Data/IsoBuster/tbIsoB.dll
[-rw-r--r-- 21 Sep 21 11:00] ./users/paul/Local Settings/Application Data/IsoBuster/toolbar.cfg
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local Settings/Application Data/Temp
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local Settings/Application Data/Temp/Logs
6453,6454c6514,6519
< [drwxr-xr-x 4096 Oct 15 13:42] ./users/paul/Local Settings/Temporary Internet Files/Content.IE5/6W4TT1T4
< [drwxr-xr-x 4096 Oct 15 13:43] ./users/paul/Local Settings/Temporary Internet Files/Content.IE5/A4I6WLOP
---
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local Settings/Temporary Internet Files/Content.IE5/6W4TT1T4
[-rw-r--r-- 2747728 Oct 15 13:46] ./users/paul/Local Settings/Temporary Internet Files/Content.IE5/6W4TT1T4/IsoBuster[0]
[-rw-r--r-- 576 Oct 15 13:45] ./users/paul/Local Settings/Temporary Internet Files/Content.IE5/6W4TT1T4/SCDN_SN[0]
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local Settings/Temporary Internet Files/Content.IE5/A4I6WLOP
[-rw-r--r-- 3861 Oct 15 13:45] ./users/paul/Local Settings/Temporary Internet Files/Content.IE5/A4I6WLOP/Packages[0]
[-rw-r--r-- 4355 Oct 15 13:46] ./users/paul/Local Settings/Temporary Internet Files/Content.IE5/A4I6WLOP/Toolbar[0]
6465c6530,6531
< [drwxr-xr-x 4096 Oct 15 13:35] ./users/paul/SendTo
---
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/SendTo
[-rw-r--r-- 818 Oct 15 13:46] ./users/paul/SendTo/IsoBuster.lnk
6473c6539,6545
< [drwxr-xr-x 4096 Oct 15 13:40] ./users/paul/Temp
---
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Temp
[-rwxr-xr-x 158048 Mar 14 2011] ./users/paul/Temp/GLF712b.tmp.ConduitEngineSetup.exe
[-rw-r--r-- 4216104 Mar 14 2011] ./users/paul/Temp/GLF712b.tmp.tbIsoB.dll
[-rw-r--r-- 4216104 Mar 14 2011] ./users/paul/Temp/GLF7b75.tmp.ConduitEngine.dll
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Temp/is-850J1.tmp
[-rwxr-xr-x 282296 Aug 30 20:07] ./users/paul/Temp/is-850J1.tmp/IsoBuster_toolbar.exe
[-rw-r--r-- 175912 Jan 17 2011] ./users/paul/Temp/prxGLF712b.tmp.tbIsoB.dll
6484,6485c6556,6557
< [drwxr-xr-x 4096 Oct 15 13:34] ./users/Public/Application Data/DeviceVM/SmartView Software Updater/Download
< [-rw-r--r-- 171 Oct 15 13:34] ./users/Public/Application Data/DeviceVM/SmartView Software Updater/Download/list.ini
---
[drwxr-xr-x 4096 Oct 15 13:45] ./users/Public/Application Data/DeviceVM/SmartView Software Updater/Download
[-rw-r--r-- 171 Oct 15 13:45] ./users/Public/Application Data/DeviceVM/SmartView Software Updater/Download/list.ini
6498c6570
< [drwxr-xr-x 4096 Oct 15 13:35] ./users/Public/Start Menu/Programs
---
[drwxr-xr-x 4096 Oct 15 13:46] ./users/Public/Start Menu/Programs 6503a6576,6581
[drwxr-xr-x 4096 Oct 15 13:46] ./users/Public/Start Menu/Programs/IsoBuster
[-rw-r--r-- 885 Oct 15 13:46] ./users/Public/Start Menu/Programs/IsoBuster/Help.lnk
[-rw-r--r-- 818 Oct 15 13:46] ./users/Public/Start Menu/Programs/IsoBuster/IsoBuster.lnk
[-rw-r--r-- 929 Oct 15 13:46] ./users/Public/Start Menu/Programs/IsoBuster/IsoBuster Online.lnk
[-rw-r--r-- 902 Oct 15 13:46] ./users/Public/Start Menu/Programs/IsoBuster/Order Now.lnk
[-rw-r--r-- 894 Oct 15 13:46] ./users/Public/Start Menu/Programs/IsoBuster/Uninstall IsoBuster.lnk
********** End of: Files installed by ISObuster _with_ the tool bar *************

HTH,
Paul
 
L

Loonie

Hello Paul and thanks for your efforts.
*******

I did another install run, this time including the toolbar. Part
of the new addition includes the word "Conduit".
C:\Program Files\ConduitEngine\ConduitEngineUninstall.exe
I looked through my Program Files and made a search for Conduit Engine.
It came up with uninstall.exe. I guess that was an invitation. I made a
start on it and it came up with the message: Are you sure you want to
uninstall Xplorer2 Community Toolbar. This one does not bother me. It's
the isobuster I want to kill off.
C:\Program Files\IsoBuster\uninstall.exe
This came up with nothing.
C:\Program Files\Smart File Advisor\unins000.exe
Also came up with nothing.
C:\Program Files\Smart Projects\IsoBuster\Uninst\unins000.exe
Also came up with nothing.
There appears to be two component parts to the Toolbar. Isobuster has
something,
presumably to put their branding on the Toolbar. But the engine that
runs the
Toolbar is the Conduit thing. So you'd have to be careful when removing it.
I presume if the Conduit was uninstalled, the Isobuster part would end up
broken.

U see four entries in Add/Remove programs in my emulated environment.
The items marked with the arrows, are the Toolbar component parts.
So it doesn't look like a "Stealth Install". Things are pretty much
exposed, and you could attempt to remove them from Add/Remove.

Conduit Engine Conduit Ltd. --- <-----

ISOBuster 2.8.5 Smart Projects 2.8.5

IsoBuster Toolbar IsoBuster 6.3.3.3 <-----

Smart File Advisor Filefacts.net 1.1.1

What I can't figure out with this method, is how Conduit infects
Internet Explorer.
I see the files alright, but don't see how they're linked to IE. Presumably
a registry entry ?
When I look at Manage Addons in Internet Explorer, I notice that I can
click Bing, Google and Yahoo and all can be Set as default or Removed.
Isobuster cannot be removed or set as default. This is one piece of crap
that needs to be removed.

********** Files installed by ISObuster _with_ the tool bar *************

207a209,221
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Conduit
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Conduit/Community Alerts
[-rw-r--r-- 634976 Feb 15 2011] ./Program
Files/Conduit/Community Alerts/Alert.dll
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/ConduitEngine
[-rw-r--r-- 6560 Mar 3 2011] ./Program Files/ConduitEngine/appContextMenu.xml
[-rw-r--r-- 4216104 Mar 14 2011] ./Program Files/ConduitEngine/ConduitEngine.dll
[-rwxr-xr-x 38496 Mar 25 2010] ./Program Files/ConduitEngine/ConduitEngineHelper.exe
[-rwxr-xr-x 23648 Mar 3 2011] ./Program Files/ConduitEngine/ConduitEngineUninstall.exe
[-rw-r--r-- 4013 Mar 3 2011] ./Program Files/ConduitEngine/engineContextMenu.xml
[-rw-r--r-- 2999 Mar 3 2011] ./Program Files/ConduitEngine/EngineSettings.json
[-rw-r--r-- 290 Oct 15 13:46] ./Program Files/ConduitEngine/INSTALL.LOG
[-rw-r--r-- 175912 Jan 17 2011] ./Program Files/ConduitEngine/prxConduitEngine.dll
[-rw-r--r-- 25 Mar 3 2011] ./Program Files/ConduitEngine/toolbar.cfg
512a527,536
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/IsoBuster
[-rw-r--r-- 7044 Mar 3 2011] ./Program Files/IsoBuster/GottenAppsContextMenu.xml
[-rwxr-xr-x 38496 Mar 25 2010] ./Program Files/IsoBuster/IsoBusterToolbarHelper.exe
[-rw-r--r-- 5738 Mar 3 2011] ./Program Files/IsoBuster/OtherAppsContextMenu.xml
[-rw-r--r-- 175912 Jan 17 2011] ./Program Files/IsoBuster/prxtbIsoB.dll
[-rw-r--r-- 6588 Mar 3 2011] ./Program Files/IsoBuster/SharedAppsContextMenu.xml
[-rw-r--r-- 4216104 Mar 14 2011] ./Program Files/IsoBuster/tbIsoB.dll
[-rw-r--r-- 21 Sep 21 11:00] ./Program Files/IsoBuster/toolbar.cfg
[-rw-r--r-- 5737 Mar 3 2011] ./Program Files/IsoBuster/ToolbarContextMenu.xml
[-rwxr-xr-x 93792 Nov 2 2010] ./Program Files/IsoBuster/uninstall.exe
6411a6436,6455
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Smart File Advisor
[-rwxr-xr-x 280824 Apr 4 2011] ./Program Files/Smart File Advisor/sfa.exe
[-rwxr-xr-x 585520 Apr 4 2011] ./Program Files/Smart File Advisor/sfa_inst.exe
[-rw-r--r-- 11347 Oct 15 13:46] ./Program Files/Smart File Advisor/unins000.dat
[-rwxr-xr-x 708344 Oct 15 13:46] ./Program Files/Smart File Advisor/unins000.exe
[-rw-r--r-- 10498 Oct 15 13:46] ./Program Files/Smart File Advisor/unins000.msg
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Smart Projects
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Smart Projects/IsoBuster
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Smart Projects/IsoBuster/Help
[-rw-r--r-- 1054212 Dec 18 2010] ./Program Files/Smart Projects/IsoBuster/Help/IsoBuster.chm
[-rwxr-xr-x 5446888 Jan 4 2011] ./Program Files/Smart Projects/IsoBuster/IsoBuster.exe
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Smart Projects/IsoBuster/Lang
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Smart Projects/IsoBuster/Online
[-rw-r--r-- 555 Dec 23 2005] ./Program Files/Smart
Projects/IsoBuster/Online/IsoBuster Online.html
[-rw-r--r-- 578 Jul 3 2006] ./Program Files/Smart
Projects/IsoBuster/Online/Order Now.html
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Smart Projects/IsoBuster/Plugins
[drwxr-xr-x 4096 Oct 15 13:46] ./Program Files/Smart Projects/IsoBuster/Uninst
[-rw-r--r-- 48409 Oct 15 13:46] ./Program Files/Smart Projects/IsoBuster/Uninst/unins000.dat
[-rwxr-xr-x 1283336 Oct 15 13:46] ./Program Files/Smart Projects/IsoBuster/Uninst/unins000.exe
[-rw-r--r-- 21031 Oct 15 13:46] ./Program Files/Smart
Projects/IsoBuster/Uninst/unins000.msg
6449c6493,6510
< [drwxr-xr-x 4096 Dec 5 2010] ./users/paul/Local
Settings/Application Data
---
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local Settings/Application Data
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local
Settings/Application Data/Conduit
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local
Settings/Application Data/Conduit/Community Alerts
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local
Settings/Application Data/Conduit/Community Alerts/Log
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local
Settings/Application Data/Conduit/CT1700389
[-rwxr-xr-x 38496 Mar 25 2010] ./users/paul/Local
Settings/Application Data/Conduit/CT1700389/IsoBusterAutoUpdateHelper.exe
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local
Settings/Application Data/ConduitEngine
[-rw-r--r-- 4216104 Mar 14 2011] ./users/paul/Local
Settings/Application Data/ConduitEngine/ConduitEngine.dll
[-rw-r--r-- 2999 Mar 3 2011] ./users/paul/Local
Settings/Application Data/ConduitEngine/EngineSettings.json
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local
Settings/Application Data/ConduitEngine/Logs
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local
Settings/Application Data/ConduitEngine/MyStuffApps
[-rw-r--r-- 25 Mar 3 2011] ./users/paul/Local
Settings/Application Data/ConduitEngine/toolbar.cfg
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local
Settings/Application Data/IsoBuster
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local
Settings/Application Data/IsoBuster/Logs
[-rw-r--r-- 4216104 Mar 14 2011] ./users/paul/Local
Settings/Application Data/IsoBuster/tbIsoB.dll
[-rw-r--r-- 21 Sep 21 11:00] ./users/paul/Local
Settings/Application Data/IsoBuster/toolbar.cfg
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local Settings/Application Data/Temp
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local
Settings/Application Data/Temp/Logs
6453,6454c6514,6519
< [drwxr-xr-x 4096 Oct 15 13:42] ./users/paul/Local
Settings/Temporary Internet Files/Content.IE5/6W4TT1T4
< [drwxr-xr-x 4096 Oct 15 13:43] ./users/paul/Local
Settings/Temporary Internet Files/Content.IE5/A4I6WLOP
---
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local
Settings/Temporary Internet Files/Content.IE5/6W4TT1T4
[-rw-r--r-- 2747728 Oct 15 13:46] ./users/paul/Local
Settings/Temporary Internet Files/Content.IE5/6W4TT1T4/IsoBuster[0]
[-rw-r--r-- 576 Oct 15 13:45] ./users/paul/Local
Settings/Temporary Internet Files/Content.IE5/6W4TT1T4/SCDN_SN[0]
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Local
Settings/Temporary Internet Files/Content.IE5/A4I6WLOP
[-rw-r--r-- 3861 Oct 15 13:45] ./users/paul/Local
Settings/Temporary Internet Files/Content.IE5/A4I6WLOP/Packages[0]
[-rw-r--r-- 4355 Oct 15 13:46] ./users/paul/Local
Settings/Temporary Internet Files/Content.IE5/A4I6WLOP/Toolbar[0]
6465c6530,6531
< [drwxr-xr-x 4096 Oct 15 13:35] ./users/paul/SendTo
---
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/SendTo
[-rw-r--r-- 818 Oct 15 13:46] ./users/paul/SendTo/IsoBuster.lnk
6473c6539,6545
< [drwxr-xr-x 4096 Oct 15 13:40] ./users/paul/Temp
---
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Temp
[-rwxr-xr-x 158048 Mar 14 2011] ./users/paul/Temp/GLF712b.tmp.ConduitEngineSetup.exe
[-rw-r--r-- 4216104 Mar 14 2011] ./users/paul/Temp/GLF712b.tmp.tbIsoB.dll
[-rw-r--r-- 4216104 Mar 14 2011] ./users/paul/Temp/GLF7b75.tmp.ConduitEngine.dll
[drwxr-xr-x 4096 Oct 15 13:46] ./users/paul/Temp/is-850J1.tmp
[-rwxr-xr-x 282296 Aug 30 20:07] ./users/paul/Temp/is-850J1.tmp/IsoBuster_toolbar.exe
[-rw-r--r-- 175912 Jan 17 2011]
./users/paul/Temp/prxGLF712b.tmp.tbIsoB.dll
6484,6485c6556,6557
< [drwxr-xr-x 4096 Oct 15 13:34] ./users/Public/Application
Data/DeviceVM/SmartView Software Updater/Download
< [-rw-r--r-- 171 Oct 15 13:34] ./users/Public/Application
Data/DeviceVM/SmartView Software Updater/Download/list.ini
---
[drwxr-xr-x 4096 Oct 15 13:45] ./users/Public/Application
Data/DeviceVM/SmartView Software Updater/Download
[-rw-r--r-- 171 Oct 15 13:45] ./users/Public/Application
Data/DeviceVM/SmartView Software Updater/Download/list.ini
6498c6570
< [drwxr-xr-x 4096 Oct 15 13:35] ./users/Public/Start Menu/Programs
---
[drwxr-xr-x 4096 Oct 15 13:46] ./users/Public/Start Menu/Programs
6503a6576,6581
[drwxr-xr-x 4096 Oct 15 13:46] ./users/Public/Start Menu/Programs/IsoBuster
[-rw-r--r-- 885 Oct 15 13:46] ./users/Public/Start Menu/Programs/IsoBuster/Help.lnk
[-rw-r--r-- 818 Oct 15 13:46] ./users/Public/Start Menu/Programs/IsoBuster/IsoBuster.lnk
[-rw-r--r-- 929 Oct 15 13:46] ./users/Public/Start
Menu/Programs/IsoBuster/IsoBuster Online.lnk
[-rw-r--r-- 902 Oct 15 13:46] ./users/Public/Start
Menu/Programs/IsoBuster/Order Now.lnk
[-rw-r--r-- 894 Oct 15 13:46] ./users/Public/Start
Menu/Programs/IsoBuster/Uninstall IsoBuster.lnk

********** End of: Files installed by ISObuster _with_ the tool bar
*************

HTH,
Paul
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

How to dump isobuster 25

Top