win32adware mediatickets

Discussion in 'NOD32 version 2 Forum' started by mEhE, Apr 17, 2006.

Thread Status:
Not open for further replies.
  1. mEhE

    mEhE Registered Member

    Joined:
    Apr 17, 2006
    Posts:
    4
    i cant get away win32adware mediatickets.. still coming back..
    i have unaktivate(sorry my english) systemrestore.
    and run lspfix and restored reg.keys..
    but i always com back.. nod32 2.50.25(1.1454 virus signature) can`t eiter get it away
    .i have also spyware doctor and X cleaner
    what can i do?
    C:\Programfiler\W?nSxS\?ti2evxx.exe is infected and c:\windows\system32\m?dtc.exe a variant of Win32/Adware.MediaTickets application
     
    mEhE, Apr 17, 2006
    #1
  2. fosius

    fosius Registered Member

    Joined:
    Oct 14, 2004
    Posts:
    479
    Location:
    Partizanske, Slovakia
    Have you tried cleaning in Safe mode?
     
    fosius, Apr 17, 2006
    #2
  3. mEhE

    mEhE Registered Member

    Joined:
    Apr 17, 2006
    Posts:
    4
    no..maybe i should try that first...thank you
     
    mEhE, Apr 17, 2006
    #3
  4. SSK

    SSK Registered Member

    Joined:
    Nov 28, 2004
    Posts:
    976
    Location:
    Amsterdam
    Please make sure you update NOD32 as well. Your defenitions are dated: v.1.1454 (20060321). Current defs are: v.1.1492 (20060416)
     
    SSK, Apr 17, 2006
    #4
  5. mEhE

    mEhE Registered Member

    Joined:
    Apr 17, 2006
    Posts:
    4
    damn!! ewido anti malware found 31 020 infections..all cleaned..but win32adware\mediatickets still popping up on nod32.
    but nod32 find no virus if i scan all drives and memoryes..
    what is wrong ?
    i have tryed nod32,spywaredoctor,ewido anti malware, spybot seek en destroy..
    all inn safe mode.. but nothing helps
     
    mEhE, Apr 17, 2006
    #5
  6. fosius

    fosius Registered Member

    Joined:
    Oct 14, 2004
    Posts:
    479
    Location:
    Partizanske, Slovakia
    Maybe you should try running HijackThis and upload a generated log here so that Eset mods or someone experienced could have a look at it..
     
    fosius, Apr 17, 2006
    #6
  7. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,938
    Location:
    Texas
    No logs to be posted here unless requested by an Eset moderator.
     
    ronjor, Apr 17, 2006
    #7
  8. fosius

    fosius Registered Member

    Joined:
    Oct 14, 2004
    Posts:
    479
    Location:
    Partizanske, Slovakia
    Sorry I didn't know it. Maybe he should send that log to support@eset.com with a link to this thread.
     
    fosius, Apr 17, 2006
    #8
  9. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,938
    Location:
    Texas
    It would probably be best to let Eset request a log.
     
    ronjor, Apr 17, 2006
    #9
  10. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,456
    I agree, do as Fossius suggested.

    I assume these were just tracking cookies, right?
     
    Marcos, Apr 17, 2006
    #10
  11. NOD32 user

    NOD32 user Registered Member

    Joined:
    Jan 23, 2005
    Posts:
    1,766
    Location:
    Australia
    Oh no :eek: cookies :eek: and even after you get rid of the cookies it takes ages to get rid of all the crumbs :D :p :D

    just a little cookie joke - couldn't resist the humor :)
     
    NOD32 user, Apr 17, 2006
    #11
  12. pykko

    pykko Registered Member

    Joined:
    Apr 27, 2005
    Posts:
    2,236
    Location:
    Romania...and walking to heaven
    cookies, cookies...yummi :D
     
    pykko, Apr 17, 2006
    #12
  13. mEhE

    mEhE Registered Member

    Joined:
    Apr 17, 2006
    Posts:
    4
    most of the infected was cookies yes..
     
    mEhE, Apr 17, 2006
    #13
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...