Hello, I have a couple problems with my HP Pavillion dv1000 laptop.

Right after startup, the Windows Installer launches automatically and
tries to install an application I have no idea where it came from called
"AiOSoftware". I've searched files with that name but nothing shows up.


Then, whenever I try to download a free antivirus or antispyware
application the laptop restarts in the middle of the download.

All I know is I have some virus which I don't remember the exact name
but goes something like rostokop.

Thanks in advance.

Isn't that software an installation package creator?

If so, there are 2 different types of AIO.exe as far as I remember. One is legitimate &
the other picked up by the virus checkers

As for running on startup:

The registry will hold the key to where the installer is running from. Example:

START | RUN | Type 'regedit' (without quotes) & press ENTER
Navigate to the following RUN keys:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify (for
trojans...)

One of the top two keys will probably be pointing to a file in your TEMP folder. Clean
that out like so:

START | RUN | Type '%temp%' (without quotes but with %) & press ENTER
CTRL + A (select all) | DEL (delete) | ENTER

Maybe some of the files in your TEMP directory won't be able to be deleted but the
majority of them will & are safe to be so

Post back please

--
Newbie Coder
(It's just a name)

"gerardosmi" <gerardosmi.35h9io@no.email.invalid> wrote in message
news:gerardosmi.35h9io@no.email.invalid...
>
> Hello, I have a couple problems with my HP Pavillion dv1000 laptop.
>
> Right after startup, the Windows Installer launches automatically and
> tries to install an application I have no idea where it came from called
> "AiOSoftware". I've searched files with that name but nothing shows up.
>
>
> Then, whenever I try to download a free antivirus or antispyware
> application the laptop restarts in the middle of the download.
>
> All I know is I have some virus which I don't remember the exact name
> but goes something like rostokop.
>
> Thanks in advance.
>
>

gerardosmi wrote:
> Hello, I have a couple problems with my HP Pavillion dv1000 laptop.
>
> Right after startup, the Windows Installer launches automatically and
> tries to install an application I have no idea where it came from called
> "AiOSoftware". I've searched files with that name but nothing shows up.
>
>
> Then, whenever I try to download a free antivirus or antispyware
> application the laptop restarts in the middle of the download.
>
> All I know is I have some virus which I don't remember the exact name
> but goes something like rostokop.
>
> Thanks in advance.

Download one of these a working machine, place on a thumb drive, insert
in the infected machine and run.

Avast! One tool for any current virus
http://www.avast.com/eng/avast-virus-cleaner.html

Symantec Virus Removal Tools
http://www.symantec.com/business/sec...movaltools.jsp

F-Secure Virus Removal Tools
http://www.f-secure.com/download-purchase/tools.shtml

Kaspersky Virus Removal Tools
http://www.kaspersky.com/removaltools

--
Joe =o)

> Hello, I have a couple problems with my HP Pavillion dv1000 laptop.
>
> Right after startup, the Windows Installer launches automatically and
> tries to install an application I have no idea where it came from
> called "AiOSoftware". I've searched files with that name but nothing
> shows up.
>
>
> Then, whenever I try to download a free antivirus or antispyware
> application the laptop restarts in the middle of the download.
>
> All I know is I have some virus which I don't remember the exact name
> but goes something like rostokop.
>
> Thanks in advance.

You can go to Symantec.com and look up that virus. It will have
automatic and/or manual removal tools you can use to kill the thing off
and remove it. Search for "aiosoftware" to start and if no joy, use at
least part of the virus name.

--
--
Regards,

Twayne

Open Office isn't just for wimps anymore;
OOo is a GREAT MS Office replacement
www.openoffice.org

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_R...:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

gerardosmi wrote:
> Hello, I have a couple problems with my HP Pavillion dv1000 laptop.
>
> Right after startup, the Windows Installer launches automatically and
> tries to install an application I have no idea where it came from called
> "AiOSoftware". I've searched files with that name but nothing shows up.
>
>
> Then, whenever I try to download a free antivirus or antispyware
> application the laptop restarts in the middle of the download.
>
> All I know is I have some virus which I don't remember the exact name
> but goes something like rostokop.
>
> Thanks in advance.

Bear,

AIO.exe is an official application that records macros so you can burn to CD... to
automate simple tasks. There is also a rogue file of the same/similar name which most
virus scanners will pick up with the exception of McCrappy/Kapersky/AVG/NOD32 as they are
poor excuses for virus software

===================

The same old message copied/pasted almost everytime you reply to a post

Why don't you ever point the user to the developers site to get the HiJackThis file?

What happened to the rootkit links that programs like HiJackThis miss or cannot find?

Plus, if you're using HiJackThis then you are looking for adware, malware or spyware so
why does your list miss applications like Spybot S & D?

Why are you advertising blogspot.com? Are you the mysterious spammer that keeps creating
ads in this newsgroup?

Why the 'auhma' site always at the top instead of genuine sites of all the adware programs
you point people to? Answer: self advertising. Then the MVP site and we all know that most
MVP's cannot code a site to save their lives - good advertising, isn't it?

--
Newbie Coder
(It's just a name)




"PA Bear [MS MVP]" <PABearMVP******.com> wrote in message
news:umFYmjkeIHA.1188@TK2MSFTNGP04.phx.gbl...
> Unexplained computer behavior may be caused by deceptive software
> http://support.microsoft.com/kb/827315
>
> Run a /thorough/ check for hijackware, including posting your hijackthis log
> to an appropriate forum.
>
> Checking for/Help with Hijackware
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://aumha.net/viewtopic.php?t=5878
> http://wiki.castlecops.com/Malware_R...:_Introduction
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://defendingyourmachine2.blogspot.com/
> http://www.elephantboycomputers.com/...moving_Malware
>
> When all else fails, HijackThis v2.0.2
> (http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
> It will help you to both identify and remove any hijackware/spyware with
> assistance from an expert. **Post your log to
> http://forums.spybot.info/forumdisplay.php?f=22,
> http://castlecops.com/forum67.html,
> http://forums.subratam.org/index.php?showforum=7,
> http://aumha.net/viewforum.php?f=30, or other appropriate forums for review
> by an expert in such matters, not here.**
>
> If the procedures look too complex - and there is no shame in admitting this
> isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA) computer repair shop.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
> gerardosmi wrote:
> > Hello, I have a couple problems with my HP Pavillion dv1000 laptop.
> >
> > Right after startup, the Windows Installer launches automatically and
> > tries to install an application I have no idea where it came from called
> > "AiOSoftware". I've searched files with that name but nothing shows up.
> >
> >
> > Then, whenever I try to download a free antivirus or antispyware
> > application the laptop restarts in the middle of the download.
> >
> > All I know is I have some virus which I don't remember the exact name
> > but goes something like rostokop.
> >
> > Thanks in advance.
>

Newbie Coder;555690 Wrote:
> Isn't that software an installation package creator?
>
> If so, there are 2 different types of AIO.exe as far as I remember. One
> is legitimate &
> the other picked up by the virus checkers
>
> As for running on startup:
>
> The registry will hold the key to where the installer is running from.
> Example:
>
> START | RUN | Type 'regedit' (without quotes) & press ENTER
> Navigate to the following RUN keys:
>
> HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run
> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run
>
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
> NT\CurrentVersion\Winlogon\Notify (for
> trojans...)
>
> One of the top two keys will probably be pointing to a file in your
> TEMP folder. Clean
> that out like so:
>
> START | RUN | Type '%temp%' (without quotes but with %) & press ENTER
> CTRL + A (select all) | DEL (delete) | ENTER
>
> Maybe some of the files in your TEMP directory won't be able to be
> deleted but the
> majority of them will & are safe to be so
>
> Post back please
>
> --
> Newbie Coder
> (It's just a name)
>
>

Newbiecoder:

Thanks for your reply.

When I try to follow your directions, a message appears saying the
following:

"The administrator has disabled the registry modification"

How do I change that first?

Thanks.

There are also AIO files connected with HP all in one, printer copier, scanner.

"Newbie Coder" <newbiecoder@spammeplease.com> wrote in message news:ebbKuAleIHA.5280@TK2MSFTNGP02.phx.gbl...
> Bear,
>
> AIO.exe is an official application that records macros so you can burn to CD... to
> automate simple tasks. There is also a rogue file of the same/similar name which most
> virus scanners will pick up with the exception of McCrappy/Kapersky/AVG/NOD32 as they are
> poor excuses for virus software
>
> ===================
>
> The same old message copied/pasted almost everytime you reply to a post
>
> Why don't you ever point the user to the developers site to get the HiJackThis file?
>
> What happened to the rootkit links that programs like HiJackThis miss or cannot find?
>
> Plus, if you're using HiJackThis then you are looking for adware, malware or spyware so
> why does your list miss applications like Spybot S & D?
>
> Why are you advertising blogspot.com? Are you the mysterious spammer that keeps creating
> ads in this newsgroup?
>
> Why the 'auhma' site always at the top instead of genuine sites of all the adware programs
> you point people to? Answer: self advertising. Then the MVP site and we all know that most
> MVP's cannot code a site to save their lives - good advertising, isn't it?
>
> --
> Newbie Coder
> (It's just a name)
>
>
>
>
> "PA Bear [MS MVP]" <PABearMVP******.com> wrote in message
> news:umFYmjkeIHA.1188@TK2MSFTNGP04.phx.gbl...
>> Unexplained computer behavior may be caused by deceptive software
>> http://support.microsoft.com/kb/827315
>>
>> Run a /thorough/ check for hijackware, including posting your hijackthis log
>> to an appropriate forum.
>>
>> Checking for/Help with Hijackware
>> http://aumha.org/a/parasite.htm
>> http://aumha.org/a/quickfix.htm
>> http://aumha.net/viewtopic.php?t=5878
>> http://wiki.castlecops.com/Malware_R...:_Introduction
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://defendingyourmachine2.blogspot.com/
>> http://www.elephantboycomputers.com/...moving_Malware
>>
>> When all else fails, HijackThis v2.0.2
>> (http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
>> It will help you to both identify and remove any hijackware/spyware with
>> assistance from an expert. **Post your log to
>> http://forums.spybot.info/forumdisplay.php?f=22,
>> http://castlecops.com/forum67.html,
>> http://forums.subratam.org/index.php?showforum=7,
>> http://aumha.net/viewforum.php?f=30, or other appropriate forums for review
>> by an expert in such matters, not here.**
>>
>> If the procedures look too complex - and there is no shame in admitting this
>> isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>> AumHa VSOP & Admin http://aumha.net
>> DTS-L http://dts-l.net/
>>
>> gerardosmi wrote:
>> > Hello, I have a couple problems with my HP Pavillion dv1000 laptop.
>> >
>> > Right after startup, the Windows Installer launches automatically and
>> > tries to install an application I have no idea where it came from called
>> > "AiOSoftware". I've searched files with that name but nothing shows up.
>> >
>> >
>> > Then, whenever I try to download a free antivirus or antispyware
>> > application the laptop restarts in the middle of the download.
>> >
>> > All I know is I have some virus which I don't remember the exact name
>> > but goes something like rostokop.
>> >
>> > Thanks in advance.
>>
>