country.exe and hbinstie.dll

Hello, I am a new member. I ran Norton and it found these items.
country.exe and hbinstie.dll
I need help to remove them and am timid to try with out guidence.
Thank you
JoanMarie
PS I have compac presario laptop windows xp pro

 

Welcome to MajorGeeks! Please complete the following:

- Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis


When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)

• Bitdefender
• Panda Scan
• HijackThis

 

AbbySue,
I went through all the steps. Panda found 4 items that are not removed yet, so I did not "Disable and Enable System Restore" Should that be done now? I am getting ready for the next step #7.
Thank You
Joan Marie

 

Hi Joan Marie

Do not disable system restore yet. We prefer to leave that in place until your computer is successfully cleaned. Then it will be flushed. A bad restore point to return to is better than no restore point at all should something go wrong.

Go ahead and complete step 7 and attach the following:

• Bitdefender
• Panda Scan
• HijackThis

 

HI AbbySue
I am at the download HijackThis. Where do I put it? Instructions say not to run it from desk top, temp folder etc.
Thank You
JoanMarie

 

If you clicked the link in step 7 Downloading, Installing, and Running HijackThisthe instructions are in that thread telling you how to create the folder and where it should be.

Just to explain a little further why it is done this way. When entries are removed via HJT it automatically creates a backup of what it takes out. If, for example you are running the exe from a temporary location (a folder on your desktop, etc) it is likely that folder would get moved or deleted and you would be unable to restore the backup if needed.

 

Hello, I am carefully following instructions!

 

And you're getting there! I see by your HJT log you did run the online scans so please attach the results from Bitdefender and Panda Activescan.

 

Hello, I hope to see a light at the end of the tunnel!

 

I am having trouble sending bdscan1.txt. It is in documents and settings, but am not able to save it to send

 

Are you receiving a specific error message such as the file is to large?

 

Hello, the text was buried in a folder, I moved it under documents and settings. When I go to attach it in the browse field, it does not say " text file" it says "docs and settings" .

 

PS, If I send it as "Docs and Settings" will you get all my files or just the bdscan1.txt? I can't tell by looking at the browse field, its too short.
Thank you JoanMarie

 

O.K. This is where I am so far. I need to attach the bdscan1.txt. (bitdefender) Can I send it now?
Thank you JoanMarieRab

 

Yes! Go ahead and attach it.

 

This is a learning process!!

 

Dear AbbySue
Did my attachments go through?
Thank You
JoanMarieRab

 

chaslang
don't know where I went wrong, I printed the steps and followed them carefully. Is not the activescan.txt from panda correct? I truly thank you and AbbySue for all the help!! Is there anything more I should do? JoanMarie

 

Last week when I scanned with Norton the 2 items were reported. I googled country.exe, report is its a trojan:IBM.Shell.code. Bad, can gain access to information,reinstalls istself, can take over computer. Gave me a scare.
the hbinstIE.dll (from Norton definitions) says adware hotbar.

I did all the preliminary cleaning, steps 0 thru 5, no problems with downloads, although I did forget to work in safe mode. Ccleaner cleaned up, the other tools reported no malicious software detected, no threats found.

Ran the 2 online scans.
Today I ran Norton scan. Scan summary-No threats found
Is it possible all that cleaning and working with tools fixed my scary problem?

 

I have the last step to complete, the disable and enable, and then I believe we are finished, right?
Yes,I am going to work through the "protection link" next.
again my many thanks
JoanMarie