Page 1 of 2 12 LastLast
Results 1 to 10 of 17

Thread: dropper.ragger

  1. #1
    Junior Member
    Join Date
    Dec 2006
    Posts
    1

    Default dropper.ragger

    this is a thread or not?? because spybot 1.4 show it like a threat but when i have repaired it appears again and i donīt know if is malicious. Thanks for your help

  2. #2
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    It would probably be helpful if you posted the actual log of the scan results you are questioning.

    To produce and post the log:
    • Run another scan.
    • When the scan completes, right click on the results list, select "Copy results to clipboard".
    • Then paste those results (Ctrl+V) to a new post in this thread.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz IntelŪ PentiumŪ 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  3. #3
    Junior Member
    Join Date
    Dec 2006
    Posts
    1

    Default Same problem

    Quote Originally Posted by md usa spybot fan View Post
    It would probably be helpful if you posted the actual log of the scan results you are questioning.

    To produce and post the log:
    • Run another scan.
    • When the scan completes, right click on the results list, select "Copy results to clipboard".
    • Then paste those results (Ctrl+V) to a new post in this thread.
    Microsoft.WindowsSecurityCenter.UpdateDisableNotify: Settings (Registry change, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify!=dword:0

    Dropper.ragger: <$DIR_TEMP> (Directory, nothing done)
    C:\Documents and Settings\Matthew\Local Settings\Temp\IXP000.TMP\

    Microsoft.WindowsSecurityCenter.FirewallDisableNotify: Settings (Registry change, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify!=dword:0


    --- Spybot - Search && Destroy version: 1.3 ---
    2004-05-12 Includes\Cookies.sbi
    2006-12-08 Includes\Dialer.sbi
    2006-11-24 Includes\Hijackers.sbi
    2006-10-27 Includes\Keyloggers.sbi
    2004-05-12 Includes\LSP.sbi
    2006-12-08 Includes\Malware.sbi
    2006-10-20 Includes\PUPS.sbi
    2004-05-12 Includes\Revision.sbi
    2006-12-08 Includes\Security.sbi
    2006-10-13 Includes\Spybots.sbi
    2004-05-12 Includes\Tracks.uti
    2006-12-08 Includes\Trojans.sbi

    Dropper.Ragger will not remove from my computer as well. I can't find anything referencing it in the registry and I have tried removing it manually but no luck. Its definatly reinstalling itself from somewhere else but I can't find it. Please Help.

    EDIT: Also I forgot to mention that I run my anti-virus and anti-spyware in safe mode. :EDIT
    Last edited by Stryf; 2006-12-12 at 00:38. Reason: Adding more information

  4. #4
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    hi,

    in your case the "Dropper.ragger" appears to be a false positive, please install Spybot S&D 1.4. And when updating detections please also install the sbis with C, like spybotsC.sbi , malwareC.sbi and so on, these include the most recent detection updates.

    these 2 entries,
    Microsoft.WindowsSecurityCenter.UpdateDisableNotify
    Microsoft.WindowsSecurityCenter.FirewallDisableNotify
    only inform you that the named notifications are disabled, this is usually done by other security software, for instance if you have installed a personal firewall.

    If "Windows Security Center.UpdateDisableNotify" , if this is found, the Security Center does not notify about updates.

    In most cases you can set these 2 can be set to be ignored from further searches.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

  5. #5
    Junior Member
    Join Date
    Dec 2006
    Posts
    1

    Default This dropper.ragger make me realy angry!!

    Is there any way to remove the dropper.ragger from my system????
    I have instaled every updates, every files, but the f.....g dropper.ragger always come back!!

  6. #6
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,955

    Default

    Hello.

    It would be helpful if we saw the top of the log as md usa spybot fan posted above:
    • Run another scan.
    • When the scan completes, right click on the results list, select "Copy results to clipboard".
    • Then paste those results (Ctrl+V) to a new post in this thread.

    However if your computer is showing signs of actual infection, then do the following.

    Run the Spybot-S&D and on-line anti virus scan (separately) as shown here:
    "BEFORE you POST" -Preliminary Steps

    Start your own thread in the Malware Removal Forum

    Once you have posted a helper would advise you as soon as available.

    Cheers.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  7. #7
    Junior Member
    Join Date
    Jan 2007
    Location
    Atlanta, GA
    Posts
    1

    Default dropper.ragger removal



    I just acquired this spyware last Friday while visiting wifelovers.com. Spybot Tea Timer alerted me to the Registry change, but failed to block it. Running spybot did not remove it.

    I have found through past experience that the quickest and surest way to remove spyware is to boot up in Safe Mode; search the Registry for the name of the spyware and then delete it manually. Sometimes the spyware "hides" in some other file and is not easily identified via a Registry search, in which case I use the Search function (in Safe Mode) to find files modified / created on or about the date the infection was acquired and manually delete it. Sometimes it will take several tries to finally get it right.

    Spybot is a great tool and provides excellent protection, but sometimes the hackers will slip one past the goalie.

  8. #8
    Junior Member
    Join Date
    Aug 2007
    Posts
    14

    Default

    Having the same problem.I have spybot 1.5 and i have done all the available updates.Please help me.Is this a real threat or a false alarm?Any help would be greatly appreciated.Here are my spybot scan results

    Dropper.ragger: [SBI $67C2C795] Settings (Registry value, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0


    --- Spybot - Search & Destroy version: 1.5 (build: 20070830) ---

    2007-08-31 blindman.exe (1.0.0.6)
    2007-08-31 SDMain.exe (1.0.0.4)
    2007-08-31 SDUpdate.exe (1.0.6.4)
    2007-08-31 SDWinSec.exe (1.0.0.8)
    2007-08-31 SpybotSD.exe (1.5.1.15)
    2007-08-31 TeaTimer.exe (1.5.0.9)
    2007-09-12 unins000.exe (51.46.0.0)
    2007-08-31 Update.exe (1.4.0.5)
    2007-08-31 advcheck.dll (1.5.3.0)
    2007-04-02 aports.dll (2.1.0.0)
    2007-04-02 DelZip179.dll (1.79.5.3)
    2007-08-31 SDHelper.dll (1.5.0.8)
    2007-08-31 Tools.dll (2.1.2.0)
    2007-09-12 Includes\Cookies.sbi (*)
    2007-07-25 Includes\Dialer.sbi (*)
    2007-09-12 Includes\DialerC.sbi (*)
    2007-08-29 Includes\Hijackers.sbi (*)
    2007-09-12 Includes\HijackersC.sbi (*)
    2007-07-25 Includes\Keyloggers.sbi (*)
    2007-09-12 Includes\KeyloggersC.sbi (*)
    2004-11-29 Includes\LSP.sbi (*)
    2007-09-12 Includes\Malware.sbi (*)
    2007-09-12 Includes\MalwareC.sbi (*)
    2007-09-05 Includes\PUPS.sbi (*)
    2007-09-12 Includes\PUPSC.sbi (*)
    2007-09-12 Includes\Revision.sbi (*)
    2007-05-30 Includes\Security.sbi (*)
    2007-09-12 Includes\SecurityC.sbi (*)
    2007-09-12 Includes\Spybots.sbi (*)
    2007-09-12 Includes\SpybotsC.sbi (*)
    2007-08-21 Includes\Tracks.uti
    2007-09-12 Includes\Trojans.sbi (*)
    2007-09-12 Includes\TrojansC.sbi (*)
    2008-12-24 Plugins\TCPIPAddress.dll

  9. #9
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello,

    Please run a scan in safe mode:
    http://www.computerhope.com/issues/chsafe.htm
    That should fix it.

    Best regards
    Sandra
    Team Spybot

  10. #10
    Junior Member
    Join Date
    Aug 2007
    Posts
    14

    Default

    Quote Originally Posted by spybotsandra View Post
    Hello,

    Please run a scan in safe mode:
    http://www.computerhope.com/issues/chsafe.htm
    That should fix it.

    Best regards
    Sandra
    Team Spybot
    I ran a scan with spybot in safe mode,it found the problem and i fixed it.Unfortunately,after the reboot it still informs me that a registry entry has been denied.
    So,my problem wasn't solved.What should I do next?

    ps:thanks for the quick reply

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •