Canbede is Computer Associates name for this new version of the Look2ME Adware Trojan. It is a DLL module that auto-loads, so there are no normal startup entries for it. It is one of the most advanced and stealth Adware Trojans. It hides itself very well and causes very few problems other than a few AD's now and then, and some Internet performance problems. However, it has the ability to tunnel under your firewall and download updates and anything its creators want to do with your system. It has been very "quite" for several months.

I suspect your problems might be because of conflicts between this Adware Trojan and your Firewall software.

I have sent copies of it to Lavasoft, Spybot, TrendMicro and several other AV houses several months ago, but they have not included detections for this new version yet. Computer Associates and Kaspersky AV seem to be the only ones detecting and removing it for the last three months.

After cleaning this off of your system, I would recommend doing the following search after rebooting. Do a Start - Search - Files and Folders... In first field leave it blank, and in the Containing text: NicTech and do a search of your C: drive. It would be normal to find the companies name (NicTech Networks) that made the ADware Trojan in your USER.DAT file (due to the search), but not in any program file on your disk drive.

Written in response to: re: shutdown hang and internet dropping out (RelaxedRed: Thursday, July 14, 2005 at 5:30 pm) Responses to this message: re: shutdown hang and internet dropping out (RelaxedRed: Thursday, July 14, 2005 at 6:40 pm)

• Reply or follow-up to this message

• Search this forum
• Start a new thread on a different subject

• Report abuse of the forum