|
Posted by ryan weihl on October 9, 2005, 11:27 am
If you were Registered and logged in, you could reply and use other advanced thread options
>
> > A friend is infected with this program. Can not uninstall
> > since it is running in the background and I can not see
> > any option to stop it to be able to un-install.
> > The program installed itself without him asking for it,
> > he says. Is this a legit program?
> > Thanks for any info
> > rw
>
> Download the following tool which removes the SmitFraud Trojan and
> SpySheriff, http://www.ik-cs.com/programs/virtools/SmitFraud.exe
>
> On the infected PC...
>
> Execute; SmitFraud.exe { Note: You must accept the default of
> C:\McAfee } Choose; Unzip
> Choose; Close
>
> NOTE: You may have to disable your software FireWall or allow FTP.EXE
> to go through your FireWall to enable FTP.EXE to download the needed
> McAfee related files.
>
> Execute; c:\mcafee\clean.bat
> { or Double-click on 'Clean Link' in c:\mcafee }
>
> A final report in HTML format called C:\mcafee\ScanReport.HTML will
> be generated. At the end of the scan, it will be displayed in your
> browser (Opera, FireFox or Internet Explorer). It is suggested that
> you move the report out of c:\mcafee before performing another scan.
> It would be a good idea to scan in Safe Mode and in Normal Mode and
> save a copy of the HTML report for each session.
thank you David
I had used SpyBot used in the meantime. It showed Smitfraud and
Spysheriff. It wend thru the delete procedure and shows no more entries
found. Biut on the last restart spysheriff was back again and SPYbot
shows both of them again and also a MZS spoolserver32 shows up.
So i will try your procedure now, but there is no McAfee on that laptop
Thank you
rw
| 
XML site map