CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

TR/Drop.180Soluti.A

 
Post new topic   Reply to topic       All -> FavForums -> AntiVir Personal Edition Classic [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
benaround3

Sergeant
Sergeant
Premium Member

Joined: Jun 14, 2004
Posts: 99

Premium Team F@H

PostPosted: Wed Feb 23, 2005 7:34 pm    Post subject: TR/Drop.180Soluti.A
Reply with quote

AntVir continually detects this on every startup, and I have to delete it several times before it stops reappearing, I was going to go through the list of recommendations posted by Rockford on Jan 9 but thought I'd better get some advice first. BTW, have had a lot of trouble with Ad-aware freezing on deep scan, and the support has been quite poor in their forum, some of the forum contributors have sounded quite angry, don't know if you are aware of this, if I have to do an Adaware scan I have a feeling it won't work.
Best wishes, and Happy Birhday!

Back to top
View users profile Send private message Send email
Prince_Serendip

Site Moderator


Joined: Sep 07, 2002
Posts: 17542

1st Responders MIRT Moderators MVP Premium RootKit Detection Hosts Rootkit Experts Rootkit Responders

PostPosted: Sat Feb 26, 2005 1:48 pm    Post subject:
Reply with quote

Hi benaround3,

AVPE cannot eliminate this because it's not a virus. It contains trojans but is not a trojan itself. It's adware.

The "easiest" way to remove this is manually. Rolling Eyes

Description and instructions are here. http://www.doxdesk.com/parasite/nCase.html This product comes with uninstallers that keep downloading more uninstallers. Enough to make you cross-eyed.

Follow those instructions and you should be well rid of this thing. Wink

Btw, this adware is exactly why the Staff here urge people not to use filesharing applications.


Best regards


_________________
image
Microsoft MVP Consumer Security 2006, 2007 & 2008
Back to top
View users profile Send private message
benaround3

Sergeant
Sergeant
Premium Member

Joined: Jun 14, 2004
Posts: 99

Premium Team F@H

PostPosted: Sun Mar 06, 2005 3:51 pm    Post subject: TR/Drop180 etc
Reply with quote

Dear Prince Serendipity
Thanks for the advice, sorry not to have got back to you earlier, today I found time to follow instructions on the doxdesk site, and had an enjoyable nuking session.
May I ask you a couple of things here related to the doxdesk site?
In the same registry key (Local/Software/Microsoft/Windows/Run) I found
"Bulls eye network/bargains.exe" which keeps turning up on task manager as a running process, and also "Internet Optimizer/optimize.exe", both of which I associate with trouble. I was thinking of going through the same process to get rid of them, what do you think?
Also quick time player is there, what do you say about getting rid of that, too? I use Quick time player, but don't need it in my startup routine, which I associate this entry with.
Is this a good way to get rid of other adware such as "Backweb" which is also in the registry?
Best Wishes
Benaround

Back to top
View users profile Send private message Send email
swatkat

Security Expert


Joined: Mar 04, 2005
Posts: 2039

MVP RootKit Detection Hosts Rootkit Experts Security Experts

PostPosted: Tue Mar 08, 2005 11:36 am    Post subject:
Reply with quote

dont mind if i reply to ur quey Smile,
u first uninstall Internet Optimizer, BargainBuddy from the Add/Remove Programs in Control Panel....

and then scan computer using SpyBot SnD...
http://security.kolla.de/

after this download and run CleanUp!
http://cleanup.stevengould.org/

it's better that you post HijackThis log file in HijackThis section, just for making sure that all of them are removed...Smile

yes, you can remove the QuickTime, easier way is , open QuickTime and from Edit MEnu, choose "QuickTime Preferences" and then choose "Browser Plugin" from drop down list, here uncheck the "show quicktime in system tray" option...


_________________
Only two things are infinite, the universe and human stupidity, and I'm not sure about the former.
- Albert Einstein
Back to top
View users profile Send private message Visit posters website
benaround3

Sergeant
Sergeant
Premium Member

Joined: Jun 14, 2004
Posts: 99

Premium Team F@H

PostPosted: Tue Mar 08, 2005 5:49 pm    Post subject:
Reply with quote

Thank you swatkat, i've done spybot and cleanup. I have hijack this installed, now how do I go about posting the Hijack this scan in the Hijack this section? There doesn't seem to be anywhere to do that.

Back to top
View users profile Send private message Send email
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> AntiVir Personal Edition Classic All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer