|
Posted by rubyjack on June 17, 2007, 12:28 pm
If you were Registered and logged in, you could reply and use other advanced thread options Thanks to David, Milo, and Leythos.
I was finally able to eradicate the "mal-ware," the way it kept
reinstalling itself sure looked "virusy." The key was deleting a file in
the c:\windows\system folder -- xpuupdate.exe. This little .exe was the
culprit that kept downloading Contravirus. With it gone, Spybot was able to
take care of the rest.
Again thanks for the help,
Dan Hacker
>
> | My brother-in-law just got infested with the Contravirus.com. I've
tried
> | using Spybot S&D and Avast to remove it--unsuccessfully.
> |
> | Going to Google and searching the groups helped, but they were still a
> | little confusing. The recommendations there seemed to revolve around
> | manually deleting a list of files and using the program
SmitFraudFix.exe.
> |
> | Since this is such a nasty little virus that just keeps coming back and
> | back, I could use some feedback on the best way to remove it.
> |
> | Thanks,
> | Dan
> |
>
> Dan:
>
> ContraVirus is NOT a virus. It is non--viral malware masquerading as anti
virus.
>
>
>
> Two part reply..
>
> Perform Part 1 then perform Part 2.
>
> It is suggested that you execute each tool in Normal Mode then in Safe
Mode.
>
>
>
> Part 1
> -----------
>
> Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool --
SmitRem.exe
> http://noahdfear.geekstogo.com/click%20counter/click.php?id=1
>
> http://www.bleepingcomputer.com/forums/topic43659.html
>
>
> Part 2
> -----------
>
> S!ri's SmitfraudFix
> http://siri.urz.free.fr/Fix/SmitfraudFix_En.php
>
>
>
>
> * * * Please report back your results * * *
>
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
|