|
Posted by Lisa Simpson on December 27, 2006, 7:57 am
If you were Registered and logged in, you could reply and use other advanced thread options
Anybody got a sure fire way to remove this pest? I've tried hijackthis,
ewido, superantispyware, panda antivirus, xoftspy, avg, & manual deletion
from the registry, and it just keeps coming back
|
|
Posted by Malke on December 27, 2006, 8:33 am
If you were Registered and logged in, you could reply and use other advanced thread options
Lisa Simpson wrote:
> Anybody got a sure fire way to remove this pest? I've tried hijackthis,
> ewido, superantispyware, panda antivirus, xoftspy, avg, & manual deletion
> from the registry, and it just keeps coming back
You may have one of the newer variants, such as Virus Burst/VirusBursters.
Run HijackThis and post your log on one of the following forums listed
below (in no particular order). Please do *not* post your log here in the
MS newsgroups; you will not get the help you require here.
http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Merijn
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42 - another
tutorial
http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/
Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
|
|
Posted by Falcon on December 27, 2006, 9:42 am
If you were Registered and logged in, you could reply and use other advanced thread options
Lisa Simpson wrote:
> Anybody got a sure fire way to remove this pest? I've tried hijackthis,
> ewido, superantispyware, panda antivirus, xoftspy, avg, & manual deletion
> from the registry, and it just keeps coming back
This might help; it did for me.
http://www.bleepingcomputer.com/files/smitfraudfix.php
See http://www.bleepingcomputer.com/forums/topic52345.html for instructions.
Would you let me know if it works for you?
--
Falcon:
fide, sed cui vide. (L)
|
|
Posted by Lisa Simpson on December 27, 2006, 9:10 pm
If you were Registered and logged in, you could reply and use other advanced thread options
>
> Lisa Simpson wrote:
>
> > Anybody got a sure fire way to remove this pest? I've tried hijackthis,
> > ewido, superantispyware, panda antivirus, xoftspy, avg, & manual
deletion
> > from the registry, and it just keeps coming back
>
> This might help; it did for me.
> http://www.bleepingcomputer.com/files/smitfraudfix.php
> See http://www.bleepingcomputer.com/forums/topic52345.html for
instructions.
>
> Would you let me know if it works for you?
>
> --
> Falcon:
> fide, sed cui vide. (L)
>
>
>
|
|
Posted by David H. Lipman on December 27, 2006, 3:51 pm
If you were Registered and logged in, you could reply and use other advanced thread options
| Anybody got a sure fire way to remove this pest? I've tried hijackthis,
| ewido, superantispyware, panda antivirus, xoftspy, avg, & manual deletion
| from the registry, and it just keeps coming back
Two part reply..
Perform Part 1 then perform Part 2.
If the first two parts don't work, perform the alternate section.
It is suggested that you execute each tool in Normal Mode then in Safe Mode.
Part 1
-----------
Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool --
SmitRem.exe
http://noahdfear.geekstogo.com/click%20counter/click.php?id=1
http://www.bleepingcomputer.com/forums/topic43659.html
Part 2
-----------
Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe
Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close
NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to enable WGET.EXE to download the needed McAfee related files.
Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }
A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it
will be
displayed in your browser (Opera, FireFox or Internet Explorer). However, if
you are using
WinXP, Win2K or Win2003 your system will be left in a state where you will have
to manually
shutdown/reboot the PC. On Win9x/ME platforms the report will not be shown in
your bowser
but your PC will automatically be shutdown. It is suggested that you move the
report out of
c:\mcafee before performing another scan.
It would be best to scan in both Safe Mode and in Normal Mode and save a copy of
the HTML
report for each session.
ALTERNATE:
S!ri's SmitfraudFix
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php
Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your reply.
* * * Please report back your results * * *
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
|
|
XML site map