By: Mathenab

Mathenab — Fri, 30 Oct 2009 14:12:31 +0000

Stopzilla is crap.http://www.download.com/Stopzilla/3640-8…
Some removal tools give false positives to entice you to buy their product.
Toolbar 888 Removal Guidehttp://www.toolbar-888-removal.com.remov…
————————————–…
You may need to post a HijackThis log.
————————————–…
This is my cleaning list:
If you follow all the following steps it should get rid of your problem and prevent future problems. All programs listed are free.
————————————–…
Update your antivirus and run a full scan in safe mode
If you do not have virus protection install:
AVG Antivirus 7.5 Free Editionhttp://free.grisoft.com/freeweb.php/doc/…http://www.download.com/AVG-Anti-Virus-F…
or
Free antivirus – avast! 4 Home Editionhttp://www.avast.com/eng/avast_4_home.ht…
or
AOL Active Virus Shield http://www.activevirusshield.com/antivir…
————————————–…
Install Windows Defender (full time spyware protection)
Perform a full scan.http://www.microsoft.com/athome/security…
————————————–…
Install the following five programs and run weekly or at least monthly. You need all five. They will greatly increase your protection. They are not a substitute for full time spyware and virus protection.
Ad-Aware SE Personal (update + full scan) http://www.lavasoftusa.com/products/ad-a…
Spybot Search & Destroy (update + immunize + scan)
Do not enable Tea Timer and SDHelper
After installation: update + scan + immunizehttp://www.safer-networking.org/en/mirro…
SpywareBlaster: Update then open and click “enable all protection”. http://www.javacoolsoftware.com/spywareb…
SUPERAntiSpyware free version: (update + scan)http://www.superantispyware.com/
CCleaner: Do not install toolbar option
Removes tracking cookies, unneeded files, history
In options.
Set to run when computer starts.
Place cookies you want to keep in save listhttp://www.ccleaner.com/
————————————–…
Note if a scan detects a problem but is unable to remove, start the computer in safe mode with the internet line disconnected and run a full scan.
In severe cases your system restore files will also be infected. In these cases you will need to turn off system restore to prevent malware hiding in the system restore files and reinfecting the computer during removal or during a future system restore. Turning off system restore deletes the system restore files.
Right click on “my computer”> Properties > System Restore Tab > Check box turn of system restore
After the malware is removed turn on system restore.
————————————–…
Run this time only
CWShredder: runhttp://www.trendmicro.com/cwshredder/
Roguefix.bathttp://www.internetinspiration.co.uk/rog…
Shoot The Messengerhttp://www.grc.com/stm/shootthemessenger…
SmitFraudFix http://www.geekstogo.com/forum/How_to_us…
Vundo Fix and
VirtumundoBegone (if VundoFix does not work)http://www.bleepingcomputer.com/forums/t…
VX2 tool for Ad-Aware and run tool (Install and run)http://www.lavasoftusa.com/support/secur…
————————————–…
Additional run this time and monthly.
Microsoft Update “Custom Mode” install everythinghttp://update.microsoft.com/microsoftupd…
Microsoft OneCare Live, run “full service scan”
Updates windows, virus and spyware scan, disk cleanup, disk fragmentation (if needed), backs up registry and then cleans registry, and checks for open firewall portshttp://onecare.live.com/site/en-us/defau…
Malicious Software Removal Tool (run “full scan”)http://www.microsoft.com/security/malwar…
————————————–…
Rootkit Removal Guidehttp://safecomputing.umn.edu/guides/scan…
Rootkits Removers
Pick any 2 install and run one each month
AVG Anti-Rootkithttp://www.grisoft.com/doc/products-avg-…
F-Secure BlackLighthttp://www.f-secure.com/blacklight/
Sophos Anti-Rootkit http://www.sophos.com/products/free-tool…
————————————–…
————————————–…
Online Free Scanners:
Run Trend Micro, Kaspersky, and Panda Scan now.
Run a different one each month.
Trend Micro: HouseCall Free Scan (removes what it finds)http://housecall.trendmicro.com/
BitDefender Online Scanner http://www.bitdefender.com/scan8/ie.html
Kaspersky Labs Online Scanner http://www.kaspersky.com/virusscanner
McAfee http://us.mcafee.com/root/mfs/default.as…
Panda ActiveScan Free Online Scanner http://www.pandasoftware.com/products/ac…
Symantic Online Scanner http://security.symantec.com/sscv6/ssc_e…
————————————–…
Additional Information read: http://wiki.castlecops.com/Malware_Remov…http://wiki.castlecops.com/Malware_Preve…http://www.castlecops.com/f67-Hijackthis…http://aumha.org/a/quickfix.htmhttp://aumha.org/secure.htmhttp://aumha.org/a/parasite.phphttp://www.castlecops.com/t102301-Hijack…http://www.techsupportforum.com/security… http://forum.aumha.org/viewtopic.php?t=4…

By: sarah c

sarah c — Fri, 30 Oct 2009 13:38:51 +0000

Haven’t heard of STOPzilla, so I can’t comment.
I suggest:
Download ad-aware, Spybot S&D, Avira Antivir
Go to control panel, delete anything unknown

By: Dr Watson (UK)

Dr Watson (UK) — Fri, 30 Oct 2009 12:59:15 +0000

Switch off System Restore as back up files may be hiding in there, and it will just restore itself. Go to Start – programs – accessories – system tools – system restore. Click the link on the left, follow the instructions.
Run AVG anti spyware and Spybot S&D in Safe Mode. To get into Safe Mode repeatedly press the F8 key after the bios screen loads but before Windows loads. You’ll know if you made it because the screen will be at 800 x 600 and your pc will be slow.
You need all these anti spyware programs;http://free.grisoft.com/doc/20/lng/us/tp… – AVG anti spywarehttp://www.safer-networking.org – Spybot Search and Destroy anti spyware. Use the Teatimer settings to protect Internet Explorer, and the Immuniser to stop malware getting on your pc.
Spywareblaster works with Internet Explorer and Firefox. It won’t uninstall spyware that is already on your pc, but it will prevent hijacks and other malicious changes to your browser.http://www.javacoolsoftware.com
Plus;http://www.lavasoft.com – Ad-Aware SE Personal anti adware
And these are useful utilities;http://www.mozilla.com/ – Firefox web browser.https://addons.mozilla.org/search.php?q=… – Adblock Plushttp://www.ccleaner.com – Cr*pcleaner Registry cleaner and privacy tool
Winpatrol is a handy utility that will manage your startup programs and cookies.http://www.winpatrol.comhttp://www.siteadvisor.com -MacAffee Site Advisor warns about malware on sites you are about to visit.http://spywarewarrior.com/rogue_anti-spy… – The Spyware Warrior site identifies fake anti spyware programs.

Comments on: Smitfraud . . .?

By: Mathenab

By: sarah c

By: Dr Watson (UK)