| | #1 (permalink) |
![]() Status: Veteran Join Date: Jun 2005 Location: Toronto,Ontario
Posts: 106 Tournaments Joined: 0 Tournament Wins: 0
Credits: 47 Spent time on board: 1 Day and 1:19:04 Hours Rep Power: 4 ![]() | I have a problem,my computer is infected with smitfraud-c,and I can't remove it. Ive used (in this order)windows defender(bites major ass,lol),Norton 360,spybot s&d,adaware(free version),atf cleaner(an awesome utility,btw,cleans all temp folders automatically). What happens,is that randomly ie windows pop up,even when I'm disconnected from the internet(via disconnecting my wireless router).When I am connected to the internet,these windows actually try to download spyware and malware scanners,lol. This all started from an innocent browsing search for action replay max codes.One site said I had to download active-x controller to view content,and when I clicked the run button,two things happened.The first thing was to get kicked outta the site,and the second was a windows command prop-mpt screen that said downloading,and then it disappeared. When it first happened,my computer was almost unusable,but by using said software above,I have most of the problem licked,except for smitfraud-c.I've even tried rebooting to windows safe mode and using spybot,atf cleaner,and adaware,to no avail. One last thing,my TEATIMER,from spybot s&d keeps telling me that something is trying to change the registry,Ive set it to always block,but I am still randomly getiing the popups,and eveytime I scan with spybot,smitfraud-c,smifraud.msvp,and zlob-downloader are still there and cannot be fixed,according to spybot,because they are residing in system memory. Any help or ideas would be much appreciated,and there may be details I've forgotten,because I'm at work and the problem is at home.
__________________ |
| | |
| | #2 (permalink) |
![]() Status: Average user. Join Date: Sep 2005 Location: Somewhere in the World
Posts: 830 Tournaments Joined: 0 Tournament Wins: 0
Credits: 57 Spent time on board: 2 Days and 11:17:15 Hours Rep Power: 5 ![]() | first advice is to not use ie because of activex and recommend using mozilla firefox instead. its much safer and faster. second, boot in safe mode and i would recommend having a anti-virus/firewall combination. i use avg free and windows firewall and np so far in safemode, run ad-aware full scan and it should work properly
__________________ ![]() I like to thank Frogman for making my awesome sig! |
| | |
| | #3 (permalink) |
![]() Status: Tech Elder Join Date: Oct 2004
Posts: 1,460 Tournaments Joined: 0 Tournament Wins: 0
Credits: 201 Spent time on board: 4 Days and 2:40:08 Hours Rep Power: 7 ![]() | this doesnt sound like spyware anymore.. holy shit.. thats why you NEVER click on the active x commands.. ya, use a virus scanner in safe mode to scan. after that run hijackthis and post the results to one of the many sites that will look it over for you. only after you follow the people's advices can your computer be really "clean"
__________________ US West SC/L-arowws5 BANNED US East SC/NL-arowws4 (rarely on) BANNED |
| | |
| | #4 (permalink) |
![]() Status: Veteran Join Date: Jun 2005 Location: Toronto,Ontario
Posts: 106 Tournaments Joined: 0 Tournament Wins: 0
Credits: 47 Spent time on board: 1 Day and 1:19:04 Hours Rep Power: 4 ![]() | Thats pretty much what I thought,mob.Its malware now,I'll try adaware in safemode,and then i'll try hijack this.When I'm finished this weekend I'll post results.Thanks for the replies.btw,I run spybot s&d and norton 360 all the time(now,lol).Though even a scan from symantics website said my computer had no problems,and the problem persists.
__________________ |
| | |
| | #5 (permalink) |
![]() Status: Tech Elder Join Date: Oct 2004
Posts: 1,460 Tournaments Joined: 0 Tournament Wins: 0
Credits: 201 Spent time on board: 4 Days and 2:40:08 Hours Rep Power: 7 ![]() | try to schedule a boot time scan as well. that may help in getting rid of it. you may have to use multiple scanners to get rid of the malware. dont install the scanners on your computer though, the malware could disable it. instead install them to a flash drive, (from a different computer) and scan that way.
__________________ US West SC/L-arowws5 BANNED US East SC/NL-arowws4 (rarely on) BANNED |
| | |
![]() |
| Thread Tools | |
| Display Modes | Rate This Thread |
| |