squizo

Thanks for the answer. I am not a master in nothing. I am a stupid. Now i know. Always scan the files for virus before install with nod 32. This time was a false alarm. I make a restore point and try install daemontools to see what happen. This time the solution is easy: when install daemon tools unmark two options and goodbye spyware. Sorry for your spend time. And 1000 thanks for help me.

Hello, first sorry for my "tarzan-english". I am spanish from Madrid, España. I download daemons lite 4121. As you say nod 32 detect spyware in SRSAI.exe. I unpack with universal extractor. I delete SRSAI.exe. I see and read [NSIS].nsi archive. search into archive [NSIS].nsi and see only one reference to SRSAI in this part: SetOutPath $INSTDIR File SRSAI.exe Execute 49043 0 0 StrCpy $[43] "1" Return SetFlag 13 47631 StrCpy $[41] "1" Return SetFlag 13 162 UpdateSatusText Installing Desktop Shortcut... 0 SetFlag 13 47631 SetOutPath $INSTDIR I suspect that say to the installer -copy this archive (SRSAI) in install directory. This part start in "SetOutPath $INSTDIR" and ending in "SetFlag 13 47631" The next "instruction" is a new "SetOutPath $INSTDIR" i think. The question is: if i erase this part SetOutPath $INSTDIR File SRSAI.exe Execute 49043 0 0 StrCpy $[43] "1" Return SetFlag 13 47631 StrCpy $[41] "1" Return SetFlag 13 162 UpdateSatusText Installing Desktop Shortcut... 0 SetFlag 13 47631 and repack all without SRSAI.exe daemon tools work corrctly? Another question is : what program must use to repack it? HM NIS Edit for example' The last question Radix - How execute your last script in an active windows ? Is php code? must i create an archive with .php extension and execute it? when execute it? before install daemons tools? Can i create a registry entry for to avoid the install or execution of SRSAI? Is most easy install daemons complete and after remove the spyware? I hope you understand me. Sorry for my english again. Thanks.