DrCR1
2009-01-15, 05:06
Recently when my family ran Firefox from their user-level WinXP account, they consistently got a Run As user prompt, which made me immediately think virus. After a no detection scan, I traced the prompt to something like a "getplus for adobe" file. I removed the Program Files\NOS directory and a right-click, properties before hand on the exe showed NOS Microsystems.
I deleted anything found with a getplus search, including via a HijackThis scan. I noticed it still in my Firefox Plugins though, and I traced this down to np_gp.dll in my Firefox plugins directory, which I promptly deleted.
No clue how I got this app. Maybe it was from a recent Foxit Reader installation. :mad:
Just wanted to make sure you guys know about this one. I would love to see it included in the Spybot bot-check scan and purge. At the very least it's a pain to remove.
Best regards,
DrCR
I deleted anything found with a getplus search, including via a HijackThis scan. I noticed it still in my Firefox Plugins though, and I traced this down to np_gp.dll in my Firefox plugins directory, which I promptly deleted.
No clue how I got this app. Maybe it was from a recent Foxit Reader installation. :mad:
Just wanted to make sure you guys know about this one. I would love to see it included in the Spybot bot-check scan and purge. At the very least it's a pain to remove.
Best regards,
DrCR