Help SpywareQuake Removal

Discussion in 'Malware Help (A Specialist Will Reply)' started by radelow, Apr 15, 2006.

  1. radelow

    radelow Private E-2

    So I have followed the instructions several times to the tee. I don't have SpywareQuake listed anywhere, nor do I have stickrep.dll anywhere (It seems). But I still have that *bleeping* flashing green/red icon by my clock (along with the occasional pop-up box that says my computer is infected). Can someone help me? Here is my HijackThis log:


    Edit by chaslang: Inline log removed. Standard cleaning steps not followed.
     
    Last edited by a moderator: Apr 15, 2006
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    No where in the SpywareQuake Removal procedure does it ask you to post a HijackThis log, but it does ask for you to ATTACH the smitfiles.txt log. Please attach this log as requested.

    Before we accept HijackThis log standard cleaning procedures must be followed and HJT logs (like ALL logs) must be attachments to messages.

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.
    • Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
    • Make sure you check version numbers and get all updates.
    • Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.
    • After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:
    • When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)
      • Bitdefender
      • Panda Scan
      • HijackThis
    .
     
  3. radelow

    radelow Private E-2

    Sorry. Attached is the appropriate smitRem log.
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I believe a new form or SpywareQuake (or maybe it will be a new name soon) is out. And you are the second person to have it. Try the below revise procedure ASAP and let me know the results! Note: It is different than the previous steps so make sure you follow below exactly. If you do not find certain components, that's okay! Just continue thru ALL steps.

    copy the contents of the below Quote Box to Notepad. Then click File and then Save As. Change the Save as Type to All Files. Name the file fixquake.reg and then click save. it to your Desktop. We will use it later after a reboot into safe mode.


    • Now download smitRem.exe written by noahdfear and save the file to your Desktop.
    • Double click on the smitRem.exe file and click the Start button to extract it to its own folder named SmitRem on the desktop. (this should be the default selection). Do not run anything else related to the program yet!
    • Now you will need to print or save these instructions locally (to a text file on your Desktop) for later reference. This is necessary because you must not have any browers open and must not connect to the internet while following the below steps.
    • Now disconnect your cable to the internet (physically unplug it).
    • After saving the instructions, reboot into Safe mode
    • Now once in safe mode, goto Add/Remove programs and uninstall Spyware Quake.
    • Now double-click on the fixquake.reg file on your desktop (or locate it with Windows Explorer and double click on it if not saved to the Desktop) and when it prompts to Add in to the registry, say yes.
    • Run Windows Explorer by right clicking Start & Select Explore
    • Navigate to C:\Windows\system32 )or C:\Winnt\system32 depending on how/which OS you have installed.)
    • Look for the following file C:\WINDOWS\system32\stickrep.dll and also C:\WINDOWS\system32\suprox.dll (or based on how you install your OS C:\Winnt\system32\stickrep.dll or C:\Winnt\system32\suprox.dll ) and right click on it and select Delete. If it will not delete now, dont't worry about it. Just continue. We will retry again later.
    • Now open the smitRem folder on your Deskop, double click on it to access the folder, then double click the RunThis.bat file to start the tool. Follow the prompts on screen. Wait for the tool to complete and disk cleanup to finish.
    • The tool will create a log named smitfiles.txt in the root of the drive that you ran the batch file on, eg; Local Disk C: or partition where your operating system is installed. Upload this file later after reboot.
    • Now reboot your system into normal mode.
    • If you had any problems deleting the stickrep.dll or suprox.dll previously, try it again now. If you still have a problem, try rebooting one more time into safe mode and attempt another deletion. If it still does not delete, make sure you tell us later.
    • Also delete the below files and folders if found:
      • C:\Program Files\Spyware Quake
      • C:\Windows\System\1024
      • C:\Windows\System32\1024 (or C:\Winnt\System32\1024 )
      • C:\Documents and Settings\[Current User Account]\Start Menu\Programs\SpywareQuake <---- where [Current User Account] is the actual user account name you are logged into.
    • Reconnect your cable to the internet.
    • Now attach your smitfiles.txt log to a message and provide information about the steps above and what your current status is with Spyware Quake . If you need help attaching files see: HOW TO: Attach Items To Your Post
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds