[help!] NSIS Media Extension

[Camarilla Forlì]

Greetings

I accidentally got this damn NSIS spyware/adware. Whenever I browse, it pops
up some stupid ad window.
Spybot Search & Destroy finds it, removes it, but after a reboot the pesy
thin is still there, having recreated its folder and registry entries: it
seems SS&D can't eradicate it

It creates a folder named NSIS in c:\programs\common files containing two
files:

ns82.dll
uninst.exe

I obviously don't dare to run the .exe. Manually deleting these does nothing
better than using SS&D.
There is also an entry in the Control Panel / Installation list, among the
other programs, called NSIS Media Extension. Clicking on "uninstall" does
nothing of course. It just asks if I want to remove it from the list.

Anyone could help? I can't find a way to permanently delete it...
Thanks,

--

--

Cronaca Live Vampiri: la Masquerade
Città di Forlì
http://www.forumfree.net/?c=50914

[Lil' Abner]

"Camarilla Forlì" <zack_it@NOSPAMyahoo.com> wrote in
news:Ls55h.958$mZ5.219@tornado.fastwebnet.it:

>
> Greetings
>
> I accidentally got this damn NSIS spyware/adware. Whenever I browse,
> it pops up some stupid ad window.
> Spybot Search & Destroy finds it, removes it, but after a reboot the
> pesy thin is still there, having recreated its folder and registry
> entries: it seems SS&D can't eradicate it
>
> It creates a folder named NSIS in c:\programs\common files containing
> two files:
>
> ns82.dll
> uninst.exe
>
> I obviously don't dare to run the .exe. Manually deleting these does
> nothing better than using SS&D.
> There is also an entry in the Control Panel / Installation list, among
> the other programs, called NSIS Media Extension. Clicking on
> "uninstall" does nothing of course. It just asks if I want to remove
> it from the list.
>
> Anyone could help? I can't find a way to permanently delete it...

Try SuperAntispyware Free Edition.
http://www.superantispyware.com
It's worked miracles for me... :-)

--
--- A dyslexic man walks into a bra ---

[Ze Muffinman]

<snip>
Try SuperAntispyware Free Edition.
<snip>

Damn! You beat me to it. xD

[Camarilla Forlì]

Ze Muffinman wrote:
> <snip>
> Try SuperAntispyware Free Edition.
> <snip>
>
> Damn! You beat me to it. xD

Thanks but it does no better than SS&D
It's still there after a reboot.


--

--

Cronaca Live Vampiri: la Masquerade
Città di Forlì
http://digilander.libero.it/lacrimosidiesilli/
forum:
http://www.forumfree.net/?c=50914

[David H. Lipman]

From: "Camarilla Forlì" <zack_it@NOSPAMyahoo.com>

| Ze Muffinman wrote:
>> <snip>
>> Try SuperAntispyware Free Edition.
>> <snip>
>>
>> Damn! You beat me to it. xD
|
| Thanks but it does no better than SS&D
| It's still there after a reboot.
|
| --
|

Does SuperAntiSpyware find it to begin with ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[Ze Muffinman]

Have you tried running it in safe mode?

[Camarilla Forlì]

David H. Lipman wrote:

>
> Does SuperAntiSpyware find it to begin with ?


In fact, Superantispyware seems cool but does not detect NSIS properly.
When I scan the Common Files folder, it just finds some tracking
cookies..but says nothing about that NSIS folder.
And no I didn't try SAS in safe mode, but since it doesn't detect it..
What could I do?


--

--

Cronaca Live Vampiri: la Masquerade
Città di Forlì
http://digilander.libero.it/lacrimosidiesilli/
forum:
http://www.forumfree.net/?c=50914

[cmsix]

Since you know where the files are and can delete them, after you
have, try creating two text files in the folder and then changing
their names to the names of the files you just deleted, them change
their properties to read only and see what happens after a reboot.

It may or may not work, but it's worth a shot and easier than
downloading scanner after scanner.

You should also probably submit the files to somebody who might
include them in their next update.

cmsix

"Camarilla Forll" <zack_it@NOSPAMyahoo.com> wrote in message
news:v536h.4888$mZ5.2895@tornado.fastwebnet.it...
> David H. Lipman wrote:
>
>>
>> Does SuperAntiSpyware find it to begin with ?
>
>
> In fact, Superantispyware seems cool but does not detect NSIS
> properly.
> When I scan the Common Files folder, it just finds some tracking
> cookies..but says nothing about that NSIS folder.
> And no I didn't try SAS in safe mode, but since it doesn't detect
> it..
> What could I do?
>
>
> --
>
> --
>
> Cronaca Live Vampiri: la Masquerade
> Citt` di Forll
> http://digilander.libero.it/lacrimosidiesilli/
> forum:
> http://www.forumfree.net/?c=50914
>
>

[David H. Lipman]

From: "Camarilla Forlì" <zack_it@NOSPAMyahoo.com>

| David H. Lipman wrote:
|
>> Does SuperAntiSpyware find it to begin with ?
|
| In fact, Superantispyware seems cool but does not detect NSIS properly.
| When I scan the Common Files folder, it just finds some tracking
| cookies..but says nothing about that NSIS folder.
| And no I didn't try SAS in safe mode, but since it doesn't detect it..
| What could I do?
|
| --
|

That was important. ASA didn't detect it in the first place so Safe Mode won't help remove
something that was never detected.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[Nick Skrepetos]

Camarilla Forlì wrote:
> David H. Lipman wrote:
>
> >
> > Does SuperAntiSpyware find it to begin with ?
>
>
> In fact, Superantispyware seems cool but does not detect NSIS properly.
> When I scan the Common Files folder, it just finds some tracking
> cookies..but says nothing about that NSIS folder.
> And no I didn't try SAS in safe mode, but since it doesn't detect it..
> What could I do?
>
>
> --
>

Did you try a Complete Scan? If you would like to send me the files to
samples AT superantispyware.com I can update our definitions right away
to detect and remove the items.

Nick Skrepetos
SUPERAntiSpyware.com
http://www.superantispyware.com