180solutions

Category: Adware and PUAsProtection available since:28 Oct 2005 00:00:00 (GMT)
Type: AdwareLast Updated:30 Jul 2014 02:12:01 (GMT)

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

180solutions is an adware application which displays advertisements when the browser is active.

180solutions includes functionality to silently download, install and run new software, including updates of its software.

180solutions may be dropped during the installation of other software, such as adware-supported shareware or freeware applications downloaded from the internet, especially certain P2P file-sharing applications, and known applications include "Search Assistant", "Easy Messenger" and "Zango".

The following files and folders may be created as part of the installation of applications supported by 180solutions advertising software:

<Start Menu\Programs>\180search Assistant\
<Start Menu\Programs>\Easy Messenger\
<Start Menu\Programs>\Zango\
<Program Files>\180searchassistant\
<Program Files>\180searchassistant\sac.exe
<Program Files>\180Solutions\
<Program Files>\nCASE\
<Program Files>\n-CASE\
<Program Files>\Easy Messenger\
<Program Files>\Easy Messenger\em2.exe
<Program Files>\Easy Messenger\idle.dll
<Program Files>\Zango\
<Windows>\180Solutions\
<Windows>\didduid.ini
<Downloaded Program Files>\ClientAX.dll
<Downloaded Program Files>\clientax.inf
<System>\180SALib.dll
<System>\log0.txt
<System>\msbb.exe
<System>\msbb.dll
<System>\msbb.log
<System>\msbb_kyf.dat
<System>\msbe.exe
<System>\msbe.dll
<System>\msbe.log
<System>\msbe_kyf.dat
<System>\ncase.ini
<System>\saap.exe
<System>\saap.log
<System>\saap_kyf.dat
<System>\saie.exe
<System>\saie.log
<System>\saie_kyf.dat
<System>\sais.exe
<System>\sais.log
<System>\sais_kyf.dat
<System>\salm.exe
<System>\salm.log
<System>\salm_kyf.dat
<System>\zangolib.dll

Note: some of these files may be created with the hidden attributes set.

The following registry entries may be created to run 180solutions executables on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
zango
<Program Files>\zango\zango.exe

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
EasyMessage
<Program Files>\Easy Messenger\em2.exe" -wait

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
sac
<Program Files>\180searchassistant\sac.exe

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
<filename>
<installation folder path>\<filename>.exe

where <filename>.exe is the name of the main 180solutions executable (filenames include: msbb.exe, msbe.exe, saap.exe, saie.exe, sais.exe and salm.exe). Examples:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
msbb
<System>\msbb.exe

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
saie
<System>\saie.exe

180solutions dlls are registered as COM objects, creating registry entries under:

HKCR\CLSID\(F4E04583-354E-4076-BE7D-ED6A80FD66DA)
HKCR\CLSID\(0AC49246-419B-4EE0-8917-8818DAAD6A4E)
HKCR\CLSID\(99410CDE-6F16-42ce-9D49-3807F78F0287)
HKCR\TypeLib\(4EB7BBE8-2E15-424B-9DDB-2CDB9516B2C3)
HKCR\TypeLib\(5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA)
HKCR\TypeLib\(FF0312E0-F60C-4109-94B8-0A564A58E43B)
HKCR\ADP.UrlCatcher
HKCR\ADP.UrlCatcher.1
HKCR\ClientAX.ClientInstaller\
HKCR\ClientAX.ClientInstaller.1\
HKCR\ClientAX.RequiredComponent\
HKCR\ClientAX.RequiredComponent.1\
HKCR\ZangoInstaller.ZangoInstaller\
HKCR\ZangoInstaller.ZangoInstaller.1\

A 180solutions dll may be registered as a Browser Helper Object for Microsoft Internet Explorer, creating registry entries under:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\
Browser Helper Objects\(F4E04583-354E-4076-BE7D-ED6A80FD66DA)

Registry entries may be created under:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Easy Messenger\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\msbb\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\nCASE\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sac\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\saie\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sais\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\zango\
HKCU\Software\180solutions\
HKLM\SOFTWARE\180solutions\
HKCU\Software\Easy Messenger\
HKCU\Software\msbb\
HKLM\SOFTWARE\msbb\
HKCU\Software\saie\
HKLM\SOFTWARE\saie\
HKCU\Software\sais\
HKLM\SOFTWARE\sais\
HKCU\Software\zango\
HKLM\SOFTWARE\zango\
HKCR\180SAInstaller.180SAInstaller\
HKCR\180SAInstaller.180SAInstaller.1\

180solutions provides an uninstall option which can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software may be listed as one of the following: "Uninstall 180search Assistant", "PAD Lookups by 180 Search Assistant", "Interstitial Ad Delivery by 180 Search Assistant", "Easy Messenger" or "Zango".

Note: removing 180solutions may disable the software that installed it.

download Try Sophos products for free
Download now