gksui16 intrusion

[hugoboss]

Hello,

I have found a gkware package installed on one of my system. Apperenly it
was part of some intrusion, where can I find ifo conc this pb or rather ,
how to take it out?
TIA

[Dick Hazeleger]

hugoboss wrote:

> Hello,
>
> I have found a gkware package installed on one of my system.
> Apperenly it was part of some intrusion, where can I find ifo conc
> this pb or rather , how to take it out?
> TIA

A quick search on Google and a few clicks brought me to this page:

http://gkware.com/slbba.htm

Is it possible that this has happened to you? What "gkware package" was
installed on your system? Have you looked in your "Control Panel" >>
"Add/Remove Software" ??? Did the software uninstall properly?

Please give some more info!

Dick

[hugoboss]

Thanks a lot, I took it out.
It came in uncontrolled .. I wonder what it came with:-(
Hugo
"BoB" <rhoward30@myrealbox.com> a écrit dans le message de news:
4t2tkv8cvam1mfafo73s33nebvur0gncte@4ax.com...
> On Wed, 27 Aug 2003 15:46:44 +0200, "hugoboss" <meatwork@aspara.fr>
> wrote:
>
> >Hello,
> >
> >I have found a gkware package installed on one of my system. Apperenly it
> >was part of some intrusion, where can I find ifo conc this pb or rather ,
> >how to take it out?
> >TIA
>
> Here is some of the text from within Gksui16.exe:
> ____________________
>
> 0000A149 0040A149 0 WININIT.INI
> 0000A160 0040A160 0 SOFTWARE
> 0000A169 0040A169 0 Microsoft
> 0000A173 0040A173 0 Windows
> 0000A17B 0040A17B 0 CurrentVersion
> 0000A18A 0040A18A 0 Uninstall
> 0000A198 0040A198 0 Deleting Uninstall Key
> 0000A1B0 0040A1B0 0 Preparing SystemFile removal
> 0000A1D0 0040A1D0 0 Removing Registry Keys:
> 0000A1E8 0040A1E8 0 Removing Directory:
> 0000A1FC 0040A1FC 0 Removing File:
> 0000A20C 0040A20C 0 Unregistering DLL
> 0000A220 0040A220 0 Removing Progman Item
> 0000A238 0040A238 0 Removing System Registry Entrys
> 0000A258 0040A258 0 (Please wait)
> 0000A268 0040A268 0 Loading install-log
> 0000A27C 0040A27C 0 Invalid installation log.
> 0000A298 0040A298 0 RESTARTDLG
> 0000A2A4 0040A2A4 0 %s Uninstall
> ____________________________
>
> I'd say it is used to uninstall a program.
>
> I have had Gksui16 on another computer at one time and
> presently have Gksui18.exe which is the uninstaller for
> Midi Magician. I don't recall what Gksui16 was related to.
>
> It can be deleted if you want to, but if you still have
> the related program it will not uninstall properly.
>
> BoB
>