Spysheriff/SpywareNo Removal

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by StuNun, Feb 9, 2006.

  1. StuNun

    StuNun Private E-2

    I have recently been receiving indication from my Adaware scans that SpywareNo is installed on my computer. I have tried deleting in safe mode but the registry entry reappears again on reboot. I have also tried the SpySheriff Removal sticky but this has not helped the situation. Interestingly none of the registry entries or files you indicate in the sticky exist on my system. Can you please help?

    Please find attached my HijackThis and Adaware log files.

    StuNun
     

    Attached Files:

    StuNun, Feb 9, 2006
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

    First run this SpywareStrike, Smitfraud, SpySheriff, SpyAxe & PSGuard Removal and then attach the smitfiles.txt and PandaActive Scan logs to your next message.

    If the above does not completely resolve your malware problems, continue to the below steps.

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

    Downloading, Installing, and Running HijackThis

    .
     
    chaslang, Feb 9, 2006
    #2
  3. StuNun

    StuNun Private E-2

    Hi Chaslang

    Many thanks for your response of yesterday. I have now completed both the first and second run suggested in your reply albeit in reverse order but I am still receiving a SpywareNo indication thru Adaware SE - in fact 8 entries are now indicated. Strange thing is, none of the remedies run (HJT,Smitfraud Utility) seem to come up with anything and Active Panda Scan sees Smitfraud as problem program. Could it be a false positive and if so how do I get rid of it? Any help would be greatly appreciated. Attached is the Active Panda Scan and the Smitfraud logs.

    StuNun
     

    Attached Files:

    StuNun, Feb 10, 2006
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Attach your Ad-aware SE log here.

    Ignore Panda! It did not say there was a problem. It said Potentially unwanted tool: but it is not an unwanted tool. You install it on purpose.

    Note: HijackThis does not find problems. It just list running processes and a few registry locations and it does not do anything to point out whether they are bad or good. That is up to the person reading the log to determine. Smitfraud may have found something related to the problem. I'm not sure yet. Seems like a possible new infection type.

    Did you install IE7 before or after the problem occurred?
     
    chaslang, Feb 10, 2006
    #4
  5. StuNun

    StuNun Private E-2

    Hi Chaslang

    Many thanks for your response and apologies for the late response - have been smitten with another virus for the last few days - flu!!

    If memory serves correctly I installed IE7 BEFORE SpywareNo started appearing. Interestingly, I see a number of other people are experiencing similar problems with Adaware. I have previously run Ewido, Spybot S&D and MSAS all of which show nothing and my computer desktop etc do not appear to be suffering the ill effects I understand you can expect from this little critter. Anyway here is the very latest Adaware ScanLog.

    StuNun
     

    Attached Files:

    StuNun, Feb 13, 2006
    #5
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You do not have SpywareNo! Ad-Aware SE is wrong. This is a False Positive like everyone else recently reporting the that Ad-Aware is finding SpywareNo.
     
    chaslang, Feb 13, 2006
    #6
  7. StuNun

    StuNun Private E-2

    Hi Chaslang

    Many thanks for your efforts and advice. I think I now feel confident enough in adding the entries found to Adaware SE`s ignore list.

    StuNun
     
    StuNun, Feb 13, 2006
    #7
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Well you may not want to do that! A couple of those registry keys could be used by a real infection too, so you do not want to ignore them just in case you ever get a real infection. The problem right now is that they are not infected and Ad-Aware is detecting them. It may be best to wait for the next update and maybe they will fix the issue by then. I don't know how they could miss such an obvious oversight.
     
    chaslang, Feb 13, 2006
    #8
  9. StuNun

    StuNun Private E-2

    OK. Thanks for the `Heads Up` I`ll be keeping a close look on the situation to see what happens after the next def update and beyond.

    StuNun
     
    StuNun, Feb 14, 2006
    #9
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome! Right now, Lavasoft still seems to be denying there is a problem.
     
    chaslang, Feb 14, 2006
    #10

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds