Skip to main content
Inspiring
December 21, 2011
Question

FP_AX_CAB_INSTALLER.EXE TROJAN

  • December 21, 2011
  • 1 reply
  • 3949 views

Hi,

Firefox 8.0.1

Flash 11,1,102,55 installed

Windows XP sp3, 32 bit

A week ago, a update window for Adobe Flash Player 11.1 Installer popped-up, while I was on the net.  Normally, I have these type of updates set for me to go check and see if one is available, when I want to do that. I thought it was strange, but since it was adobe flash, I figured it should be ok.  After I clicked and downloaded this update, a few .exe's loaded onto my taskmanager after it finished downloading.  Bud.exe, ping.exe, FP_AX_CAB_INSTALLER.exe, InstallFlashPlayer.exe.

Bud.exe started openning up extra windows on the interenet, to random ad's and sites, which each seemed unrelated. When I would type in this name and any of the other strange new exe's on my google search, it would redirect me to an ad's site.  When I tried to go directly to microsoft to see if updates or fixes for this on XP, the microsoft page would show as unreachable.  I tried reaching microsoft through other webpages, google, yahoo, but each time it would block access to microsoft.com. If I tried to enter the names of the exe's in a search, they would block any of the sites I clicked on or shut firefox or iexporer down.

I tried downloading malware programs to help check my computer, as adware, avg, but that too would cause firefox or iexplore to shut down.I did have hijackthis, but that did not deteched anything on my computer. I was finally able to download spybot from download.com and that was able to remove the bud.exe from my computer, but had not affect on ping.exe or the flash .exe's. 

Ping.exe is running my cpu at 100% and I can't seem to get it to stop.  I use taskmanager to stop it, in order to have a program to start; ping.exe restarts itself which slows down anyother program I am running and I have to do the taskmanager thing again.  With the bud.exe program gone, I was able to download all the other malware programs as malwarebytes, adaware, avg, microsoft safe screen, and a few other microsoft scanners and updates, but to no help of stopping this ping.exe or removing it.

Also, very annoying is this FP_AX_CAB_INSTALLER.EXE, that popped up the first time and had me download these updates for flash.  I removed all flash products and then reloaded flash again, but still this FP'.exe keeps trying to install itself again, along with InstallFlashPlayer.exe; which I stop, since I already have the most recent flash loaded on my computer, why does this keep trying to reinstall this program?  IT WILL NOT STOP, ABOUT EVERY FIVE MINUTES, IT RELOADS A NEW ONE OF ITSELF AND IF I LET IT GO, IT WILL DO THIS HUNDREDS OF TIMES UNTIL THE COMPUTER FREEZES.

I start up computer, the FP_AX_CAB_INSTALLER.EXE automatically starts in taskmanger, freezing everything until it loads InstallFlashPlayer.exe which also freezes everything for a moment, then sits on the screen until I either move it or close it. I found If I leave it open and not click for it to go away, it will leave me alone for about 20 minutes until a new one pops up, which will keep going on until the computer freezes or I shut everything down.

Ahki of the Emerald City, WA

    This topic has been closed for replies.

    1 reply

    December 21, 2011

    Ping.exe is a valid Windows system file provided it's installed in both these locations only:

    • C:\WINDOWS\ServicePackFiles\i386
    • C:\WINDOWS\System32

    Anywhere else and it could be something undesirable.

    You sound like you've landed yourself with a heap of trouble though and in the circumstances, I'd advise you to post this on http://www.bleepingcomputer.com/ They have experts who can help you rid your system of malware.