URGENT: N-case spyware releasing dropper.defl.trojan

  • Thread starter Thread starter Karl Shaw
  • Start date Start date
K

Karl Shaw

Hi all,

This is an important issue for me as I hav promised a friend that I would
have his system cleaned by tomorrow. He has Spybot and AVG6. I ran AVG and
it found the dropper.defl.trojan (I think that is the correct name, I am not
sure.). There is also spyware on his system call "n-case". I believe these
two are related as I have removed this trojan once before, but have not been
able to remove the spyware, resulting, I think, in the trojan re-appearing.
Anyone know of any way to remove this spyware?

Cheers,

Karl
 
1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Adaware SE
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download sysclean.com and place it in that directory.
Dowload the signature files (pattern files) by obtaining the ZIP file.
For example; lpt186.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point
10) Please report back your results

Dave






| Hi all,
|
| This is an important issue for me as I hav promised a friend that I would
| have his system cleaned by tomorrow. He has Spybot and AVG6. I ran AVG and
| it found the dropper.defl.trojan (I think that is the correct name, I am not
| sure.). There is also spyware on his system call "n-case". I believe these
| two are related as I have removed this trojan once before, but have not been
| able to remove the spyware, resulting, I think, in the trojan re-appearing.
| Anyone know of any way to remove this spyware?
|
| Cheers,
|
| Karl
|
|
| ---
| Outgoing mail is certified Virus Free.
| Checked by AVG anti-virus system (http://www.grisoft.com).
| Version: 6.0.775 / Virus Database: 522 - Release Date: 08/10/2004
|
|
 
Hi all,

This is an important issue for me as I hav promised a
friend that I would have his system cleaned by tomorrow.
He has Spybot and AVG6. I ran AVG and it found the
dropper.defl.trojan (I think that is the correct name, I am
not sure.). There is also spyware on his system call
"n-case". I believe these two are related as I have
removed this trojan once before, but have not been able to
remove the spyware, resulting, I think, in the trojan
re-appearing. Anyone know of any way to remove this
spyware?

Cheers,

Karl
Click to expand...

Have a look at
http://www.kephyr.com/spywarescanner/library/ncase/index.phtml

BTW, please, remove the "Outgoing mail is certified Virus Free"
crap. ;)
J
 
Back
Top