N-Case problem

I have a user with Windows 98 that has error messages saying that msbb.exe could not be loaded. Another message comes up saying that portions of the program N-Case seem to be deleted - giving 3 options for response - (1)Re-install N-Case, (2)Remove any remaing associated files, or (3)remind me later. I've been to the N-Case (Solutions 180) website for advice as well as to McAfee, Symantec and a couple of other sites with descriptions of how to remove this "ad-ware" from her machine. I've done that (in the registry), but she still is getting the error message to re-install or remove or remind later. I can't find any other files named n-case or msbb. What else can I try? We are running McAfee ASAP for our virus scan and it keeps coming up clean.
Thanks!

Sorry, I don't know enough about n-case to help you there.

N-Case
Removal Instructions and Help


What is N-Case?
Ncase is a Comparison Alternative Shopping Engine developed by 180Solutions. It appears to be installed via an ActiveX drive-by download or bundled with several file sharing programs and a few others. It will cause pop-up advertisements, can add shortcut items to the Startup or Desktop, and update itself.

There are a couple variants of Ncase, the normal one as well as at least one installed by an Active X drive-by download.

How do I Remove NCase?

1) Because several files may be in use currently when NCase has infected your system, you should first start Windows in Safe Mode, generally by pressing F8 when the computer restarts and choosing Safe Mode for the list of choices.

2) Remove the Startup Entry in the Registry

Click on Start, Run, Type REGEDIT and Click OK

Click the pluses(+) next to the following items
HKEY_LOCAL_MACHINE
Software
Microsoft
Windows
CurrentVersion
Run

Right-Click on the file MSBB and click DELETE
Check for any randomly named entries pointing to an EXE file of the same name in the Windows directory
(this can be part of the NCASE infection as well)

Click the pluses(+) next to the following items
HKEY_LOCAL_MACHINE
Software
Microsoft
Windows
CurrentVersion
Uninstall
Right-click and Delete the following folders
nCase
msbb
Click the pluses(+) next to the following items
HKEY_Current_User
Software
Right-click and Delete the folder called 180solutions
3) Delete the NCASE folder and/or the MSBB.exe file

Open My Computer, Drive C, Program Files
Right-click on the NCASE folder (if it exists) and Delete it, you may also find a 180Solutions folder, delete this as well.
Look for and Delete MSBB.EXE in the System or System32 directory under Windows

4) Remove the Active X Control (if present)

Open My Computer, Drive C, Windows, Downloaded Program Files folder
Right-click on the nCaseInstaller Class entry (if present) and click Delete
Close back out to the Desktop
5) Reboot the computer in Normal Mode and test (ncase should be gone)


http://www.pchell.com/support/ncase.shtml

This might help Seeya :)

Thanks for the directions. I've done everything listed except the ActiveX portion. I'll try that and see what happens. :smile;

Hello i have sorted so many computers with the smae problem the answer is this.

1) got to the website computer cops locked at
http://computercops.biz/downloads-cat-14.html

There above is the direct link to the page where you will find a program called CWShredder ( download this ) then click on to the next page and at the top there is a program called Hijack This ( Downlaod this too ) both are FREE

You will need Winzip to open them http://www.winzip.com/ << go here is you dont have it and get the evaluation version

OK so now you got the two programa open and run them both and they wil fix everything ..

The CWShredder is quite simple you just run it and then it run down a list to fix all the problems and at the end you just click close.

But with Hijackthis you run the program and then is displays a list of things that are running on your computer tick the boxes that you can tell should not be there or click save log and post in in here so myself and others can advise you what to remove from the computer

I would suggest to everyone that you make a restore point or back you files before doing anything just in case.

hope this helps

FYI,

Readers should be aware that L7JJB's twice-posted, blanket recommendation to check and fix "ALL" items shown by HijackThis is highly unorthodox. I'm glad to know that it was successful on his computers but it will usually remove many desireable or necessary startup items as well as the spyware.

While this will result in a very "clean" reboot, you may find that some printers, audio systems or other devices or programs no longer function.

I also disagree with his blanket statement that "all the proper stuff will return".

Spyware removal is tricky at best and while we all wish for a fast, one-click solution to our problems, I recommend that troubleshooting and registry tweaking be done cautiously so as not to do more harm than good.

-ENO

Sure ENO removing virus or spyware and homepage hyjackers etc can be tricky, sometimes long procedure even with the best of people and for those who have little computer experience it can be a troublesome time.

By the way if your internet and pc starts getting slow try looking in the add and remove section from the control panel and if you find a search assistant thats probably the cause. This has happened to a number of computers ive fixed recently just thought i would whare that with you all.