Trouble removing spyware

Discussion in 'Malware Help (A Specialist Will Reply)' started by Xopher, Dec 8, 2005.

  1. Xopher

    Xopher Private E-2

    I have had big problems with pc recently i had the spy axe 3.0 trojan i thought i had managed to remove it using Spybot S&D CCleaner and a few other methods/programs. But i still have somethnig left that im unsure if its to do with spy axe or from somethnig else.
    My pc is constantly getting 2 icons appear on the start menu and desktop. One is called online security guide other security troubleshooting. They appear maybe 6-12 hours later after i delete them im unsure but i am not doing it. They appear while im on my pc not after i reboot or take some special action, usually when im playing a game i alt tab to see them appeared again. Both are links to websites containing links to download spy axe and other untrusty software.
    I have been unable to search for a solution to this problem on google so i had to post here. I have attached my hijack this log. Also i think when i reboot my pc my homepage might constantly get reset to one of these pages.
     

    Attached Files:

  2. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Follow the directions for SpyAxe Removal.

    Your Hijack This log gives no indication that you have completed our standard cleaning procedure.

    Welcome to MajorGeeks.com, please follow the steps below:

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
    • Make sure you check version numbers and get all updates.
    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis:

    Downloading, Installing, and Running HijackThis
     
  3. Xopher

    Xopher Private E-2

    Hello after following all the steps i am still left with online security guide icons in start menu and desktop which i have manually deleted now. I am not sure wether they will come back, as it took a long time before. I have attached my new hijackthis log correctly and the log file left from smitrem.
     

    Attached Files:

  4. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    HijackThis is installed incorrectly; install HijackThis to C:\HJT.

    Scan with HijackTHis and fix teh following:
    Next follow the directions for Running Spy Sweeper.

    Post a fresh HijackThis log; along with the Spy Sweeper log.
     
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    That's because the sticky thread still was not followed:
    • only on online scan was ever run but that was there when first posting. Was is run recently and it is only a scanner not a remover. Also the sticky states "will not fix anything, but will detect. Save the log and attach later." Where is the log?
    • Spybot not install per the READ ME instructions
    • MS Antispyware not installed and run
     
  6. Xopher

    Xopher Private E-2

    When i first got spy axe on my pc i used the panda online virus scan and used spybot S&D neither fixed the problem. Spybot kept telling me that it needed to do a new scan when windows first starts up to remove one of the problems, It did this and during the scan it once again told me i had to restart and do the scan as soon as windows starts it kept doing this forever and couldnt fix the problem.

    I have now used spy sweeper and HJT again. I cannot remove those panda antivirus entries in Highjackthis when i tell it to fix them it says they are gone but when i scan again they are still there.
     

    Attached Files:

  7. Xopher

    Xopher Private E-2

    sorry i posted the wrong hijackthis log, i added the newer one now on this reply.
    also spybot is still showing Smitfraud-C which is the problem i described earlier that it can never fix.
     

    Attached Files:

  8. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Do you still have Panda Platinum 2005 installed?

    Otherwise your HijackThis log appears to be clean.

    How is your computer running?
     
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Note: The easiest way to fix the Spybot Smitfraud detection is:

    to download DelDomains and unzip it to your desktop and then follow the steps below!

    Find the file from deldomains.zip on your Desktop and RightClick on the deldomains.inf file and select Install.

    (Afterwards you will need to "Immunize" again using Spybot because deldomains will remove all of the sites Spybot sites added to the Restricted Zone.)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds