| NCase removal| Spyware NCase Information |
|---|
Name: NCase
Category: Hijacker
Date: 2005-04-11
Dangerous: Yes |
NCase is one of Hijacker spywares.
Loads at boot, & runs throughout your computing session, displaying advertising. May disable FlashTrack [a competing product] if it is found to be running. Finding it on your computer means that your computer is infected with Hijacker and crucial data could be endangered or even lost.
NCase description by publisher: 180Solutions has developed the largest Comparison Alternative Shopping Engine ever assembled. Our n-CASE software provides users with real-time comparison-shopping sources as they search for products & services online.180Solutions, Inc. was founded in June of 1999 with one mission: To create technologies that deliver the right marketing message to the right people at the right time. Targeted, contextual marketing. If we developed technologies that target marketing messages properly -- then marketing would become honed, applicable content. The end result is that the person would appreciate the targeted content, & the advertiser would´ve a significantly improved return on investment.
Over the past three yeahrs, we´ve worked hard developing technologies that fulfill our mission. n-CASE, & its supporting suite of technologies, is the result of that dedication. "Please be advised that all 180solutions programs are permission based installations requiring the person to explicitly accept the 180solutions End person License Agreement. 180solutions software does not collect or track any personally identifiable data. 180solutions´ software also does not transmit data to any 3rd parties. Our software is visible in the user´s desktop computing environment clearly identifying itself in the listing of installed applications. Therefore, our applicaiton fails to meet the commercial standard for spyware as described in the Code of Back Channel Conduct." - Keith Smith, CEO, 180solutions, personal communication.
This Hijacker is also known as: •Adware/nCase - named by Panda.
• n-CASE - named by a.
• Spyware/Dyfuca - named by Panda.
• TrojanDownloader.Win32.Dyfuca.g - named by Kaspersky.
• Trojan-Dropper.Win32.180Solutions.a - named by Kaspersky.
• Win32/Dyfuca.g!Trojan - named by Computer Associates.
>> Delete NCase automatically - Download Spyware Doctor
| NCase Removal Instructions |
|---|
Kill the following processes ncasepackage.exe, delmsbb.exe, elrubiovy.exe, ncaseadsuninstaller.exe, ncaseuninstaller.exe, op.exe, optimize.exe, password.exe, msbb.exe, msbb.exe, msbb[1].exe, msbb.exe, msbb.exe, hbinst.exe, hbsrv.exe, msbb.exe, msbb.exe, msbb.exe, msbb.exe, r3.exe, realmon.exe, rosoftlameencoderlimited.exe, rr.exe, s4setp.exe, samten.exe, aknqux.exe, cjq.exe, msbb.exe, fmtahovc.exe, ggbilw.exe, ghrxblvci.exe, ivdn.exe, neuobsiz.exe, qtw.exe, rym.exe, msbb.exe, msbb.exe, twxcd.exe, webassist.exe | Unregister the following DLLs and reboot ddmp.dll, efmcnfyu.dll, ncaselib.dll, svga.dll.
ncmyb.dll in Documents and Settings\UserName\
ncmyb.dll in Documents and Settings\UserName\application data\
ncmyb.dll in Program Files\blue haven media\kazoom\
hbcoresrv.dll, hbhostie.dll, hbhostoe.dll, hbhostol.dll, hbtoolbar.dll in Program Files\hotbar\bin\4.3.6.0\
a2ksertl.dll in Program Files\murasu systems\anjal2000\
msbbhook.dll, ncmyb.dll in Program Files\n-case\
ncmyb.dll in Program Files\ncase\
ncaseinstaller.dll in Windows\downloaded program files\
ncmyb.dll in Windows\system32\
| Delete these registry entries HKEY_CLASSES_ROOT\clsid\{6eb5b540-1e74-4d91-a7f0-5b758d333702}
HKEY_CLASSES_ROOT\ncaseinstaller.ncaseinstaller
HKEY_CLASSES_ROOT\typelib\{18dd1792-64fb-42db-acbe-435c598045f4}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{6eb5b540-1e74-4d91-a7f0-5b758d333702}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\aknqux
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\ghrxblvci
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\ivdn
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\rjw
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\rym
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\twxcd
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\zxlextmik
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls\c:\windows\downloaded program files\ncaseinstaller.dll
HKEY_LOCAL_MACHINE\typelib\{6eb5b540-1e74-4d91-a7f0-5b758d333702}
HKEY_USERS\.default\software\180solutions
| Remove the following files ddmp.dll, delmsbb.exe, efmcnfyu.dll, elrubiovy.exe, fiz1, gatorcontact.log, iconadd.log, inctrl.log, install.html, kyf.dat, license-rosoft-adware.txt, msbb.exe-1fca2923.pf, msbb.exe-2017b63e.pf, msbb_kyf.dat, ncaseadsuninstaller.exe, ncaselib.dll, ncaseuninstaller.exe, nt.bat, op.exe, optimize.exe, password.exe, popup.log, r3.exe, realmon.exe, riviera gold casino!.url, riviera gold casino.url, rosoftlameencoder.chm, rosoftlameencoderlimited.exe, rr.exe, s4setp.exe, samten.exe, spam.html, svga.dll, uninstall.log, webassist.exe.
ncasepackage.exe in c:\temp\
ncmyb.dll in Documents and Settings\UserName\
msbb.exe, ncmyb.dll in Documents and Settings\UserName\application data\
msbb.exe in Documents and Settings\UserName\fleok\
msbb[1].exe in Documents and Settings\UserName\local settings\temporary internet files\content.ie5\wv5ruyr9\
msbb.exe, ncmyb.dll in Program Files\blue haven media\kazoom\
msbb.exe in Program Files\blue haven media\kazoom\fleok\
n.class in Program Files\ebatesmoemoneymaker\system\code\
hbcoresrv.dll, hbhostie.dll, hbhostoe.dll, hbhostol.dll, hbinst.exe, hbsrv.exe, hbtoolbar.dll, install.scr in Program Files\hotbar\bin\4.3.6.0\
a2ksertl.dll in Program Files\murasu systems\anjal2000\
msbb.exe, msbbhook.dll, ncmyb.dll in Program Files\n-case\
msbb.exe in Program Files\n-case\fleok\
msbb.exe, ncmyb.dll in Program Files\ncase\
msbb.exe in Program Files\rosoft\audio tools\
aknqux.exe, cjq.exe, fmtahovc.exe, ggbilw.exe, ghrxblvci.exe, ivdn.exe, neuobsiz.exe, qtw.exe, rym.exe, twxcd.exe in Windows\
ncaseinstaller.dll, ncaseinstaller.inf in Windows\downloaded program files\
msbb.exe in Windows\fleok\
msbb.exe, ncmyb.dll in Windows\system32\
msbb.exe in Windows\system32\fleok\
| Remove the following directories Documents and Settings\UserName\fleok
Program Files\ncase
Program Files\n-case
Program Files\rosoft\audio tools
Windows\fleok
|
Bookmark NCase page
| Visitor Comments on NCase |
|---|
2006-11-30 00:39:21, Guest:
At the Windows says DLL File-A2KSERTL.DLL was not found. How to get the File? Windows 98 |
|