Spyware Quake

Carlko · May 30, 2006

I've tried several methods to remove this, including the one on this web page, and still have the popup window.

Attached is the smitfiles.txt.

Thanks for any help.

Shadow_Puter_Dude · May 30, 2006

Welcome to MajorGeeks.com, this may be a new variant of SpywareQuake; please follow the steps below:

- Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.
Click to expand...

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis:

Downloading, Installing, and Running HijackThis

In addition to the above, follow the directions for:
Running WinPfind by OldTimer

Carlko · May 31, 2006

Thanks for the help. I did the Run and Read Me First procedures and after about 20 hours of scanning (I've got a lotta hard drive and files) Panda found the following file in System32:

imfdfcj.dll

I changed the extension, rebooted and the popup was gone. I then deleted the file and everything looks ok now.

chaslang · May 31, 2006

I just updated the SpywareQuake & SpyFalcon Removal Procedure procedure today for this form of the infection. You should download the registry patch from this procedure and add it to your registry to remove the associated bad registry values from the infection. You don't need to run the whole sticky procedure since you already deleted the file but the registry values need to be fixed.

Log in or Sign up

Spyware Quake

Carlko Private E-2

Attached Files:

smitfiles.txt

Shadow_Puter_Dude MG Authorized Malware Fighter

Carlko Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Members

Useful Searches