Norton Antivirus Pro 2003 doesn't remove adware

[Jimbob1989]

I have just done a full system scan using Norton Antivirus Pro 2003 and I couldn't remove the following:

-{ Quote: ",Threat category: AdwareSource: C:/WINDOWS/system32/msexreg.exe,Description: The compressed file C:/WINDOWS/system32/msexreg.exe within C:\WINDOWS\system32\netut80ex.vxd is a Adware threat.

,Threat category: AdwareSource: C:/WINDOWS/system32/javexulm.vxd,Description: The compressed file C:/WINDOWS/system32/javexulm.vxd within C:\WINDOWS\system32\netut80ex.vxd is a Adware threat.

,Threat category: AdwareSource: C:/WINDOWS/system32/exul.exe,Description: The compressed file C:/WINDOWS/system32/exul.exe within C:\WINDOWS\system32\netut80ex.vxd is a Adware threat.

,Threat category: AdwareSource: C:/WINDOWS/system32/mqexdlm.srg,Description: The compressed file C:/WINDOWS/system32/mqexdlm.srg within C:\WINDOWS\system32\netut80ex.vxd is a Adware threat.

,Threat category: AdwareSource: C:/WINDOWS/system32/exdl.exe,Description: The compressed file C:/WINDOWS/system32/exdl.exe within C:\WINDOWS\system32\netut80ex.vxd is a Adware threat.

,Threat category: AdwareSource: C:/Program Files/BullsEye Network/bin/adx.exe,Description: The compressed file C:/Program Files/BullsEye Network/bin/adx.exe within C:\WINDOWS\system32\mac80ex.idf is a Adware threat.

,Threat category: AdwareSource: C:/WINDOWS/system32/msbe.dll,Description: The compressed file C:/WINDOWS/system32/msbe.dll within C:\WINDOWS\system32\mac80ex.idf is a Adware threat.

,Threat category: AdwareSource: C:/Program Files/BullsEye Network/bin/adv.exe,Description: The compressed file C:/Program Files/BullsEye Network/bin/adv.exe within C:\WINDOWS\system32\mac80ex.idf is a Adware threat.

,Threat category: AdwareSource: C:/Program Files/BullsEye Network/bin/bargains.exe,Description: The compressed file C:/Program Files/BullsEye Network/bin/bargains.exe within C:\WINDOWS\system32\mac80ex.idf is a Adware threat.
" }-

Any advice?

Jimbob

[puff-m-d]

It looks like you have the BargainBuddy parasite. See HERE (http://www.doxdesk.com/parasite/BargainBuddy.html) for more information...

[bigbuck]

Just googled a bit and someone here with a similar infection http://forums.thatcomputerguy.us/lofiversion/index.php/t8933.html and that links to some cleaning instructions here http://forums.thatcomputerguy.us/index.php?showtopic=1190

[Jimbob1989]

-{ Quote: "It looks like you have the BargainBuddy parasite. See HERE (http://www.doxdesk.com/parasite/BargainBuddy.html) for more information..." }-

If I do a search for 'Bargain' it displays copyies of it zipped up in the recovery folder of Spybot. Will delete them and do another scan.

Jimbob

[gamegeek2]

I can recognise

-{ Quote: " ,Threat category: AdwareSource: C:/Program Files/BullsEye Network/bin/bargains.exe,Description: The compressed file C:/Program Files/BullsEye Network/bin/bargains.exe within C:\WINDOWS\system32\mac80ex.idf is a Adware threat. " }-

since I once had it on my computer. What I did was I opened the task manager (CTRL+ALT+DELETE) and searched for 'Bargains' on it. It then quit that file and no other problems, but sometimes, like when my brother got it (seems that he went on my computer and downloaded something on it aswell) I tried the same thing I did on mine, but the computer crashed when it was exitting the process, so I restarted it.

I then went to the 'Start' menu, then 'Settings' then 'Control Panel', and then I opened up the 'Add/Remove Programs', and I located 'Bullseye Networks' or something similar to that (it was ages ago), and then I clicked on the 'Add/Remove' button. It then directed me towards an uninstallization page of Bullseyes where it asked you if you're really sure you want to uninstall that crap it gave you, so say yes to whatever of that type comes up. Eventually, it will give you a question on why 'do you want to uninstall our product?'. Type whatever 'comment' you wish to in there. :d

[Jimbob1989]

Spybot has moved it to try and stop it however I cannot delete it so I believe the process is still running, I will try process watch in ad-aware 6 pro.

Jimbob

[Jimbob1989]

I have got it sorted now. Spybot had removed the uninstall so I recovered it, uninstalled bargain bucket and am about to do a spybot search again.

Jimbob