Skip to main content
New Participant
April 20, 2011
Question

FP_AX_CAB_INSTALLER.exe Trojan?

  • April 20, 2011
  • 2 replies
  • 7800 views

Trying to access a college website, I was denied because they had detected my computer was infected, and I was "listed on the XBL."  My Norton gives me a clean bill of health, but a scan with "Stinger" says the FP_AX_CAB_INSTALLER.exe is infected with "FakeAlert!fakealert--REP trojan" and that it cannot fix it. What to do?  I'm a Windows Vista 64-bit user on Toshiba Satellite Laptop.

    This topic has been closed for replies.

    2 replies

    April 21, 2011

    Hi, just a bit of advice. Go to www.malwarebytes.org and Install it and SAVE it to your Desktop. From the Update feature, Update it.

    Then Disable all of Norton:

    Right Click and Open Norton. Turn off Smart Firewall and Auto Protect

    Under Miscellaneous Settings, Disable Norton Product Tamper Protection

    1- Open IE 8. Goto Tools -> Manage Add-ons.

    2- Disable the following:


    -Norton Toolbar

    -Symantec NCO BHO

    -Symantec Intrusion Prevention (IPS)

    Then close all browser windows and run a full scan with MBAM(malwarebytes) This may take 30-40 minutes or so depending on your system. If anything is found, follow the instructions for removing the selected items. When that is finished, run a Quick scan as sometimes it takes more than one scan to find additional malware.

    eidnolb

    pwillener
    Brainiac
    April 21, 2011

    What I would try if I encountered the situation:

    • upgrade to the latest Flash Player version
    • if that doesn't help, delete FP_AX_CAB_INSTALLER.exe from C:\Windows\Downloaded Program Files
    New Participant
    April 21, 2011

    Thanks for the suggestions.  I downloaded Flash Player and then uninstalled an old version that had ActiveX (whatever that is).  I can't find the subject file anywhere on my computer, though.  It's not in the directory you suggested and a search says there is no such file.  But I still get the message that I'm infected from the website I'm trying to access. I'll wait til morning and try again, as it may take a while for the "delisting" of my computer to take effect.

    pwillener
    Brainiac
    April 21, 2011

    The ActiveX version of Flash Player is for Internet Explorer, the plugin version for all other browsers.

    Maybe the file got removed when you uninstalled the ActiveX Flash Player?