TechSpot

Removing downloader213706.exe at startup

Inactive
By DLambie
Jan 26, 2013
  1. Every time I restart my computer it wants to run some downloader213706.exe file I always hit cancel as do not know what it is - what is this file anyway.

    --- adopted from http://windowsvc.com/bbs/board.php?bo_table=windowsvc&wr_id=50371 ---

    How do I remove this annoying dialog box at start-up as I read, below, and wanting to know wil this work?

    Startup type : Registry Startup, [HKLM..Run] or [HKCU..Run]
    Display Name : Softango Downloader213706.exe
    Path : C:\Users\Administrator\AppData\Local\Temp\Softango Downloader213706.exe /XML=C:\Users\Administrator\AppData\Local\Temp\E7DE.tmp /STP=0:1

    How to remove startup entry.
    Open a command prompt. (Run a command prompt as Administrator in Windows vista/7)
    Copy command line and Paste.

    echo Start
    echo #
    echo ######################## Default dirctory for x86 x64 ########################
    echo #
    echo this command is default system32 directory for x86 OS or x64 OS
    cd %windir% & cd system32
    reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Softango Downloader213706.exe" /f
    reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Softango Downloader213706.exe" /f
    echo #
    echo ######################## Change the dirctory for x64 ########################
    echo #
    echo this command is x86 application's registry for x64 OS
    cd %windir% & cd syswow64
    reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Softango Downloader213706.exe" /f
    reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Softango Downloader213706.exe" /f
    echo End


    Done.!
    Close the command prompt.
  2. Jay Pfoutz

    Jay Pfoutz Malware Helper Posts: 4,286   +49

    Hi!

    ComboFix scan

    Please download ComboFix[​IMG] by sUBs
    From TechSpot

    Direct Link (alternative)

    Please save the file to your Desktop.

    Important information about ComboFix


    After the download:
    • Close any open browsers.
    • Very Important: Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results". Please visit here if you don't know how.
    • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
    • Please do not attempt to re-connect your machine back to the Internet until ComboFix has completely finished.
    • If there is no Internet connection after running ComboFix, then restart your computer to restore back your connection.
    Running ComboFix:
    • Double click on ComboFix.exe & follow the prompts.
    • When ComboFix finishes, it will produce a report for you.
    • Please post the report, which will launch or be found at "C:\Combo-Fix.txt" in your next reply.
    Troubleshooting ComboFix

    Safe Mode:

    If you still cannot get ComboFix to run, try booting into Safe Mode, and run it there.

    (To boot into Safe Mode, tap F8 after BIOS, and just before the Windows
    logo appears. A list of options will appear, select "Safe Mode.")

    Re-downloading:

    If this doesn't work either, try the same method (above method), but try to download it again, except name
    ComboFix.exe to iexplore.exe, explorer.exe, or winlogon.exe.

    Malware is known for blocking all "user" processes, except for its whitelist of system important processes such as iexplore.exe, explorer.exe, winlogon.exe.

    NOTE: If you encounter a message "illegal operation attempted on registry key that has been marked for deletion" and no programs will run - please just reboot and that will resolve that error.
  3. Jay Pfoutz

    Jay Pfoutz Malware Helper Posts: 4,286   +49

    Is this going okay for you?
  4. Jay Pfoutz

    Jay Pfoutz Malware Helper Posts: 4,286   +49

    Hello, are you still with us? Please update us with the state of your situation, so we know how to continue from here.

    We'd still like to help. Topic marked inactive, until your return.
  5. DLambie

    DLambie TS Enthusiast Topic Starter Posts: 99

    Sorry just got back from holidays - will do this tomorrow as heading off to work and thnks for reply
  6. Jay Pfoutz

    Jay Pfoutz Malware Helper Posts: 4,286   +49

    Okie dokie. :p
  7. Jay Pfoutz

    Jay Pfoutz Malware Helper Posts: 4,286   +49

  8. Jay Pfoutz

    Jay Pfoutz Malware Helper Posts: 4,286   +49

    Hello, are you still with us? Please update us with the state of your situation, so we know how to continue from here.

    We'd still like to help. Topic marked inactive, until your return.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.