| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 50831 | 2004-11-03 02:57:00 | adware- again | effie C (772) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 287319 | 2004-11-04 19:47:00 | Go to program files/ norton av / quarantine. Run this. See if its in there. If nothing finds it now. | Spacemannz (808) | ||
| 287320 | 2004-11-04 20:24:00 | The stopped pop-up means little, and is more likely to have been just a normal type attempt to give a pop-up over a range of IP addresses . Sounds like either there is a new version of this spyware, or Nortons is picking up on something "leftover" from a clean . My thoughts at this stage would be to turn off restore (if XP) , clean out the cache & temp files with Ccleaner , then run a registry cleaner such as [ url=http://www . majorgeeks . com/download . php?det=460]Regcleaner[/url] . Then turn restore back on, make a restore point, restart and scan Nortons again . This normally would clean out those "leftovers" which may be a cause . |
Pheonix (280) | ||
| 287321 | 2004-11-04 20:24:00 | Hi Spacemanzz, did as you suggested - in there are :- "incoming,portal,and four other files , one of which appears to Adobe 2001 ( don't know what that has to with Nortons anyway) and three others --"open with"--- nothing will open- says "not a valid quarantine NAVAPW32 operation"- and certainly no title/name in that quarantine list -quotes CDT etc.anyway, that I can see. Sorry to be a pain, Is it likely that CDT is not in the computer, or could Norton's state that there is a potential threat needlessly? effie c |
effie C (772) | ||
| 287322 | 2004-11-04 20:35:00 | Nice timing effie c :D Have to attend a job now, but will check when i return. |
Pheonix (280) | ||
| 287323 | 2004-11-04 20:35:00 | Hmm I would say Nortons is just being a PITA atm! If that cant find it now, or Trojan Remover (which SHOULD have) . I dont know what else will! Trojan remover SHOULD have picked it up (if Nortons did nothing), and removed all entries from the registry relating to it . Thats whats it for . And I dont think the author of Trojan remover would put Adware . CDT in its database, just to make it look pretty lol . You can try what Phoenix suggested, or get ccleaner from http://www . ccleaner . com/ which is free, and clean the temp files etc out . under the windows tab in Ccleaner . |
Spacemannz (808) | ||
| 287324 | 2004-11-04 21:17:00 | Hi Spacemannz ( got the name right this time- sorry, Yes I have ccleaner- and used it again,this morning, after updating it too- nothing ---updated Trojan Remover, and did the same- and as I commented in frustration, ealier, it MUST have picked up that CDT file---if it was there!!!--- my intrigue is more so, as I quoted, I was warned that a pop up was stopped this morning, something I have not experienced,which suggests that CDT is doing what it is designed for- namely to allow pop ups etc., Well thanks for your effort, I am no further ahead - I too am cynical as to whether Nortons is as you say, being APITA---- but why? ( I have paid for it's services :-) I am rather reluctant to do a fourth Norton's A V scan in five days-- if nothing else, it ties up my puta for nearly 5 hours with my 500Mhz CPU ( oh to be able to get a faster one :-( If you think of anything do suggest it effie c |
effie C (772) | ||
| 287325 | 2004-11-04 21:24:00 | Umm, are you running Windows Messenger 4.7 right now?? As that is a portal for spamming and popups I think. Unless you've disabled the spamming, or totally removed Windows messenger 4.7 from XP. Or do you actually use it?? |
Spacemannz (808) | ||
| 287326 | 2004-11-05 18:11:00 | Here is a good description of Adware.cdt and how to kill it sarc.com |
piva (3796) | ||
| 287327 | 2004-11-06 06:29:00 | HI piva, Well anything is worth a try - the infuriating thing is -even with a scan of hidden files-all 49800 of them - there is nothing about this file- I did a search and got seven, with adware.CDT in the name- and they are not this culprit file - but all of which were pertaining to my searches, previously online , like getting and installing Giant which had the adware.CDT in it's data base- but as always it could not find the file in the 'puter- the notification only comes after a Norton' s scan - which as I said, initially had found two adware virus' - one deleted perfectly but again tonight this CDT file is still supposedly in the puta, and will not delete, quarantine or anything to isolate it--- yet a specific search maintains there is no such file. Anyway I am at this moment downloading a Symantec file- apparently separate to my auto download of each day--- which, if nothing else sets my mind to"nothing ventured nothing gained"---this gained by double clicking on th eblue culprit listed in Nortons, and following things to the letter. Then I will download and try your suggestion Thank you for that effie c |
effie C (772) | ||
| 287328 | 2004-11-06 07:36:00 | effie C You will never find anything called "adware.CDT" in a search. Thats the generic "name" given to the trojan, its NOT the name of any file associated with it. A virus or trojan name often has no relationship to the actual files used by the trojan or virus (many create random names when they install, hence a generic name is usually assigned) The offending file is apparently "Mediatickets.exe" in your case according to the links that have already been posted. That file, when run, populates all the registry keys. Its all explained in the links above. |
godfather (25) | ||
| 1 2 3 | |||||