Ncase & WinFetch not detected

[driyer]

I have Symantec Internet security Professional &
Microsoft Antispyware installed. For several days Norton
antivirus has been detecting Adware.Ncase &
Adware.Winfetch on my system and stating that delet has
failed EVEN THOUGH Antispyware simultaneously decares my
system clean!!

The files reported by Norton are:

Source: C:\WINDOWS\SYSTEM32\msbb321.dll
Description: The file C:\WINDOWS\SYSTEM32\msbb321.dll is
a Adware threat.
Click for more information about this threat :
Adware.Ncase

Source: C:\Documents and Settings\riyer\Local
Settings\Temp\N4F77tt.exe
Description: The file C:\Documents and
Settings\riyer\Local Settings\Temp\N4F77tt.exe is a
Adware threat.
Click for more information about this threat :
Adware.WinFetch

I need this to be reported to the Spynet community.
Currently Microsoft Antispyware doesn't permit voluntary
reporting for detected spyware.

 

[Bill Sanderson]

Have you attempted to use Tools, Suspected spyware report? This does
function, some of the time, on some systems.

Additionally, have you restarted in safe mode and scanned with Symantec's
product (and Microsoft Antispyware, fwiw)

 

[Andre Da Costa]

Also, remember to disable system restore be restart into safe mode and
enable it back when you restart in normal mode.

Andre

 

[Steve Wechsler [MVP]]

Andre,

Unless the restore points are infested, there is no need to disable
System Restore at this point in time. The best time for disabling SR is
AFTER the malware has been cleaned and then creating a known malware
free restore point.

Disabling SR as the first step leaves the User with NO chance to roll
the system back in case of any mistaken steps.

Even an infested system is better than losing the OS and all data, is it
not ?


Steve Wechsler (akaMowGreen)
MVP Windows Server

AumHa VSOP Security Expert@CastleCops