Bigbruin.com
Home :: Reviews & Articles ::
Forum :: Info :: :: Facebook :: Youtube :: RSS Feed
Search  :: Register :: Log in
adware, spyware, viruses, and trojans
Go To Page Previous  1, 2
Post new topic   Reply to topic    Bigbruin.com Forum Index -> Software
View previous topic :: View next topic  
Author Message
BeerLotus
Rated XXX


Joined: 20 Apr 2005
Posts: 245
Location: California

PostPosted: Fri, 10 Nov 2006 20:20:47    Post Subject: Reply with quote View Single Post

Modulok wrote:
I really hope you didn't install that MS OneCare without removing Norton AV first...if you did, you might be doing a reinstall unless the almighty Cheeze has a solution.


The programs tried to block eachother... it was rather annoying
Back to top
View user's profile Send private message
Little Bruin
Boo Boo

Joined: 07 Apr 2003
Posts: 667
Location: Pic-A-Nic Basket
BeerCheeze
*hick*


Joined: 14 Jun 2003
Posts: 9285
Location: At the Bar

PostPosted: Fri, 10 Nov 2006 21:03:36    Post Subject: Reply with quote View Single Post

Sorry... I thought you had removed Norton's... Thought you had tried a demo copy or something.
Back to top
View user's profile Send private message
BeerLotus
Rated XXX


Joined: 20 Apr 2005
Posts: 245
Location: California

PostPosted: Fri, 10 Nov 2006 21:31:33    Post Subject: Reply with quote View Single Post

SmitFraudFix v2.120

Scan done at 17:30:10.87, Fri 11/10/2006
Run from C:\Documents and Settings\Anonymous\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

C:\WINDOWS\system32\issearch.exe FOUND !
C:\WINDOWS\system32\ixt?.dll FOUND !
C:\WINDOWS\system32\ixt??.dll FOUND !
C:\WINDOWS\system32\ot.ico FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Anonymous


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Anonymous\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu

C:\DOCUME~1\ALLUSE~2.WIN\STARTM~1\Online Security Guide.url FOUND !
C:\DOCUME~1\ALLUSE~2.WIN\STARTM~1\Security Troubleshooting.url FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ANONYM~1\FAVORI~1

C:\DOCUME~1\ANONYM~1\FAVORI~1\Antivirus Test Online.url FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\\PROGRA~1\\Google\\GOOGLE~1\\GOEC62~1.DLL"


»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32


»»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End



took a while, was kinda busy
Back to top
View user's profile Send private message
Big B
Rated NC-17


Joined: 30 Apr 2006
Posts: 194

PostPosted: Fri, 10 Nov 2006 22:07:09    Post Subject: Reply with quote View Single Post

You should print out these instructions, or copy them to a NotePad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.

reboot your computer in Safe Mode by doing the following :

Once in Safe Mode, open the SmitfraudFix folder again and double-click smitfraudfix.cmd
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".

The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.
A text file will appear on screen, with results from the cleaning process; please copy/paste the content of that report into your next reply.
The report can also be found at the root of the system drive, usually at C:\rapport.txt

After all that post rapport.txt and hijackthis if you would Smile
Back to top
View user's profile Send private message
vileguy
Rated PG-13


Joined: 25 Aug 2006
Posts: 39
Location: San Jose, Ca

PostPosted: Sat, 11 Nov 2006 14:09:13    Post Subject: Reply with quote View Single Post

I haven't had much success with any cleaning programs. I've deleted a trojan on my own once but most of the time I don't have success. Best advice I'd give is be careful: watch the porn sites and don't use crap like Kazaa. I also end up formatting my hard drive every year or 2 just cuz it makes things run fast again.
_________________
65 66 67...easy as 1 10 11
Back to top
View user's profile Send private message
Modulok
Rated XXX


Joined: 19 Oct 2005
Posts: 2120
Location: New Jersey

PostPosted: Sat, 11 Nov 2006 19:42:16    Post Subject: Reply with quote View Single Post

a note for safe mode, before you see the windows xp loading animation press F8 and you will get a menu...you CAN go into safemode with networking to access this site. the crap shouldnt load with safe mode so you should be able to remove it.

did you try ewido? install that if you havent and do a full scan in safe mode.
Back to top
View user's profile Send private message
Big B
Rated NC-17


Joined: 30 Apr 2006
Posts: 194

PostPosted: Thu, 23 Nov 2006 21:27:13    Post Subject: BeerLotus Reply with quote View Single Post

Have you been able to remove your spyware?
Thanks
Back to top
View user's profile Send private message
Little Bruin
Boo Boo

Joined: 07 Apr 2003
Posts: 667
Location: Pic-A-Nic Basket
Modulok
Rated XXX


Joined: 19 Oct 2005
Posts: 2120
Location: New Jersey

PostPosted: Thu, 23 Nov 2006 21:31:15    Post Subject: Reply with quote View Single Post

well not my spyware....but I have cleaned up many computers with a ton of it.

any luck yet?
Back to top
View user's profile Send private message
BeerLotus
Rated XXX


Joined: 20 Apr 2005
Posts: 245
Location: California

PostPosted: Sun, 26 Nov 2006 15:33:38    Post Subject: Reply with quote View Single Post

Its been quite a while since I started this thread but here is the final update, I tried using the programs suggested to get rid of the trojan, my computer was forced to restart after one cleaning and when it turned back on I was told I was missing critical windows files, I was eventually forced to use another hard drive as my main to pull everything I needed off of it and had to reformat.
Back to top
View user's profile Send private message
Modulok
Rated XXX


Joined: 19 Oct 2005
Posts: 2120
Location: New Jersey

PostPosted: Sun, 26 Nov 2006 15:44:50    Post Subject: Reply with quote View Single Post

that sux you had to reinstall...viri/trojans can really create some headaches.

I hope you get a good AV installed. I recommend Kaspersky.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Bigbruin.com Forum Index -> Software All times are GMT - 4 Hours
Go To Page Previous  1, 2
Page 2 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum
Contact Us :: On Facebook :: On Youtube :: Newsletter :: RSS Feed :: FAQ :: Links :: Sponsors :: Privacy Policy
Copyright © 2000 - 2023 Bigbruin.com - All rights reserved