Blizzard Sector - Diablo 3 » General Community » Tech Forum » Help Im infected with spyware

Tech Forum Discuss anything comp related like hosting & programming. Or request help for your computer, website, anything?

Vote on the Diablo 2 Top 200
Diablo 2 Top 200 - Items, Cheats, Bots, Editors, Hacks Free
This Forum is Sponsored by
Vote on the Diablo 2 Top 200
Diablo 2 Top 200 - Items, Cheats, Bots, Editors, Hacks Free

Reply
Old 02-21-2008, 05:43 PM   #1 (permalink)
 
Jammer74's Avatar
 
Status: Veteran
Join Date: Jun 2005
Location: Toronto,Ontario
Posts: 106

Tournaments Joined: 0
Tournament Wins: 0
Credits: 47
Spent time on board: 1 Day and 1:19:04 Hours
Rep Power: 4 Jammer74 is on a distinguished road



I have a problem,my computer is infected with smitfraud-c,and I can't remove it.
Ive used (in this order)windows defender(bites major ass,lol),Norton 360,spybot s&d,adaware(free version),atf cleaner(an awesome utility,btw,cleans all temp folders automatically).
What happens,is that randomly ie windows pop up,even when I'm disconnected from the internet(via disconnecting my wireless router).When I am connected to the internet,these windows actually try to download spyware and malware scanners,lol.
This all started from an innocent browsing search for action replay max codes.One site said I had to download active-x controller to view content,and when I clicked the run button,two things happened.The first thing was to get kicked outta the site,and the second was a windows command prop-mpt screen that said downloading,and then it disappeared.
When it first happened,my computer was almost unusable,but by using said software above,I have most of the problem licked,except for smitfraud-c.I've even tried rebooting to windows safe mode and using spybot,atf cleaner,and adaware,to no avail.
One last thing,my TEATIMER,from spybot s&d keeps telling me that something is trying to change the registry,Ive set it to always block,but I am still randomly getiing the popups,and eveytime I scan with spybot,smitfraud-c,smifraud.msvp,and zlob-downloader are still there and cannot be fixed,according to spybot,because they are residing in system memory.
Any help or ideas would be much appreciated,and there may be details I've forgotten,because I'm at work and the problem is at home.
__________________
I'm on your case,I'm in your face,kick you and your father back in place.Step up suckah,understand,don't you know,I'M THE MAN.
Jammer74 is offline   Reply With Quote
Sponsored Links
Vote on the Diablo 2 Top 200Diablo 2 Top 200 - Items, Cheats, Bots, Editors, Hacks Free Vote on the Diablo 2 Top 200Diablo 2 Top 200 - Items, Cheats, Bots, Editors, Hacks Free

Old 02-21-2008, 11:59 PM   #2 (permalink)
 
slashbomb's Avatar
 
Status: Average user.
Join Date: Sep 2005
Location: Somewhere in the World
Posts: 830

Tournaments Joined: 0
Tournament Wins: 0
Credits: 57
Spent time on board: 2 Days and 11:17:15 Hours
Rep Power: 5 slashbomb will become famous soon enough

Send a message via AIM to slashbomb Send a message via MSN to slashbomb


first advice is to not use ie because of activex and recommend using mozilla firefox instead. its much safer and faster.

second, boot in safe mode and i would recommend having a anti-virus/firewall combination. i use avg free and windows firewall and np so far

in safemode, run ad-aware full scan and it should work properly
__________________

I like to thank Frogman for making my awesome sig!
slashbomb is offline   Reply With Quote
Old 02-22-2008, 03:19 AM   #3 (permalink)
 
The Mob's Avatar
 
Status: Tech Elder
Join Date: Oct 2004
Posts: 1,460

Tournaments Joined: 0
Tournament Wins: 0
Credits: 201
Spent time on board: 4 Days and 2:40:08 Hours
Rep Power: 7 The Mob will become famous soon enough

Send a message via AIM to The Mob


this doesnt sound like spyware anymore.. holy shit.. thats why you NEVER click on the active x commands..

ya, use a virus scanner in safe mode to scan.
after that run hijackthis and post the results to one of the many sites that will look it over for you. only after you follow the people's advices can your computer be really "clean"
__________________
US West SC/L-arowws5 BANNED
US East SC/NL-arowws4 (rarely on) BANNED
The Mob is offline   Reply With Quote
Old 02-22-2008, 09:42 PM   #4 (permalink)
 
Jammer74's Avatar
 
Status: Veteran
Join Date: Jun 2005
Location: Toronto,Ontario
Posts: 106

Tournaments Joined: 0
Tournament Wins: 0
Credits: 47
Spent time on board: 1 Day and 1:19:04 Hours
Rep Power: 4 Jammer74 is on a distinguished road



Thats pretty much what I thought,mob.Its malware now,I'll try adaware in safemode,and then i'll try hijack this.When I'm finished this weekend I'll post results.Thanks for the replies.btw,I run spybot s&d and norton 360 all the time(now,lol).Though even a scan from symantics website said my computer had no problems,and the problem persists.
__________________
I'm on your case,I'm in your face,kick you and your father back in place.Step up suckah,understand,don't you know,I'M THE MAN.
Jammer74 is offline   Reply With Quote
Old 02-23-2008, 01:41 AM   #5 (permalink)
 
The Mob's Avatar
 
Status: Tech Elder
Join Date: Oct 2004
Posts: 1,460

Tournaments Joined: 0
Tournament Wins: 0
Credits: 201
Spent time on board: 4 Days and 2:40:08 Hours
Rep Power: 7 The Mob will become famous soon enough

Send a message via AIM to The Mob


try to schedule a boot time scan as well. that may help in getting rid of it.
you may have to use multiple scanners to get rid of the malware.
dont install the scanners on your computer though, the malware could disable it. instead install them to a flash drive, (from a different computer) and scan that way.
__________________
US West SC/L-arowws5 BANNED
US East SC/NL-arowws4 (rarely on) BANNED
The Mob is offline   Reply With Quote

Reply

Thread Tools
Display Modes Rate This Thread
Rate This Thread:




Starcraft 2 Sector | Diablo 2 Sector