BraveSentry,SearchCentrix,SpySheriff

burgh1973 · Oct 18, 2006

Please help. I cannot stop my computer from turning on and off by itself without running in Safe Mode. Obviously, I'm on a different computer to post this thread. I read another thread about removing Brave Sentry but I cannot get on the Internet to download the removal software. I have HijackThis, CWShredder, and Spybot - Search and Destroy. When I run Spybot it detects BraveSentry, Search Centrix, Smitfraud-C, SpySheriff, and Tibs.vq. I click fix the problem and before the problems are fixed my computer shuts down and turns on and off over and over again. Also, my mouse pointer shows that my computer is continually running (i.e. hourglass). Is there anyway to remove these viruses without posting the HijackThis log? Please help. Thanks.

DavidGP · Oct 19, 2006

Hi

Try running all the steps from the guide apart from Hijackthis in safe mode with networking, once you get to the Hijackthis step, your PC may boot ok in normal mode ( hopefully ). As you are on another PC, you could download all the software needed to run the steps on that PC them brun to CD/USB pen etc and run from safe mode.

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:

CounterSpy - ONLY IF you were not able to run Windows Defender

Bitdefender - from step 6

Panda Scan - from step 6

runkeys.txt - the log from GetRunKey.bat

newfiles.txt - the log from ShowNew.bat

HijackThis

NOTE: You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!

burgh1973 · Oct 27, 2006

Halo,

Thanks for getting back to me. I downloaded the smitRem.exe program and all its files, but I could not find an instruction file as mentioned in the removal instructions. Did I miss a step?

Thanks.

chaslang · Oct 29, 2006

Halo did not ask you to run SmitRem and gave you no instructions about using it so exactly what are you referring too. He did however give you explicit instructions on running the READ & RUN ME and attaching the logs requested. Are you trying to tell us that you cannot run any of the READ ME?

burgh1973 · Oct 31, 2006

Chaslang,

The fifth step under ***IMPORTANT NOTES - READ THESE*** states to read Special Removal before going any further. I read the instructions and tried to remove a virus which is included on the list. I thought this may be the cause of my computer not being able to run in normal mode. The instructions to remove Smitfraud stated to read the instructions, but I couldn't find any. Should I skip this and proceed directly to Preliminary House Cleanup?

Thanks.

chaslang · Nov 2, 2006

burgh1973 said:

The fifth step under ***IMPORTANT NOTES - READ THESE*** states to read Special Removal before going any further. I read the instructions and tried to remove a virus which is included on the list. I thought this may be the cause of my computer not being able to run in normal mode. The instructions to remove Smitfraud stated to read the instructions, but I couldn't find any.
Click to expand...

Which special removal procedure are you referring too? Everything you should need is right in the special removal procedure. If you were referring to the below:

http://forums.majorgeeks.com/showthread.php?t=74265

Then the instructions are the steps given in right on that page.

You could also run this: SpywareQuake & SpyFalcon Removal Procedure

Again all the instructions are in right there in the link.

burgh1973 · Nov 7, 2006

chaslang,

I'm using the SmitRem tool and an error message appeared. I've attached the error message to my reply. Do I not have a certain piece of software to run SmitRem?

chaslang · Nov 13, 2006

Please follow the procedure documented by Microsoft to fix this problem.

http://support.microsoft.com/kb/254914

Then re-run the SpywareQuake Removal procedure.

Log in or Sign up

BraveSentry,SearchCentrix,SpySheriff

burgh1973 Private E-2

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

burgh1973 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

burgh1973 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

burgh1973 Private E-2

Attached Files:

~WRD0001.doc

chaslang MajorGeeks Admin - Master Malware Expert Staff Member