Do you have a question? Post it now! No Registration Necessary. Now with pictures!
- Posted on
- totour.exe & friends
- Jim Watt
May 21, 2007, 10:47 pm
rate this thread
AVG Free removes it, but it comes back.
AVG root kit remover found something once, and removed it
but the problem persists.
Looking at Google its a persistent pain in the arse.
There are various superantiwonderproducts that claim a
solution but without researching them they might be more
trouble than the virus. It creates something called
CPL1041.NLS which tries to set up connections on the
Internet with a variety of sites. checking with netstat.
It also buggers up IE.
Suggestions welcome, apart from flatten and rebuild which
is not really an option as they have some expensive software
that requires activation and the company wants to be be
paid the licence fee for each activation. I think that sucks
but its not my choice.
Re: totour.exe & friends
What are its 'friends'? The version of totour I saw dropped
msnetax.dll in <win>\system32 and installed a bunch of layered
service provider (LSP) registry keys under
They can be removed safely with Sysinternals' Autoruns (look under
the 'Winsock providers' tab). You might want to back up that portion
of the registry first.
Could be other malware.
Watch out for rogues.
The version I have didn't. Once again, could be other malware or a