Your computer is infected!

Patrick5000 · Sep 10, 2006

Hi

I would be really grateful if you could help me. I have a message popping up from a toolbar icon which looks like a red circle with a white X in the middle. The message says “Your computer is infected! Windows has detected spyware infection! It is recommended to use special antispyware tools to prevent data loss. Windows will now download and install the most up-to-date antispyware for you. Click here to protect you computer from spyware!”

I followed the advice about protecting my computer from malware a few months back and as far as I know have managed to stay clean until now. I’ve worked through the READ AND RUN ME FIRST thread but the problem just comes back when I reboot. Attached are the results of the scans.

Many thanks.

Patrick5000 · Sep 10, 2006

And the newfiles log:

Patrick5000 · Sep 10, 2006

I have done the runkey one but it won't upload. There is nothing written in the text file though anyway - not sure if this means I've done something wrong. Cheers

chaslang · Sep 11, 2006

Patrick5000 said:

I have done the runkey one but it won't upload. There is nothing written in the text file though anyway - not sure if this means I've done something wrong. Cheers
Click to expand...

Yes it means you did something wrong! You MUST extract ALL files from the GetRunKey.zip and ShowNew.zip files before you try to run the .bat files. Extract them into the same folder as suggested. Follow the directions in the links exactly. Also please download the current versions of bothe GetRunKey and ShowNew and use them to get new logs.

Now Download SmitfraudFix (by S!Ri) to your Desktop.

Extract all the files to your Destop. A folder named SmitfraudFix will be created on your Desktop.

Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press Enter
This program will scan large amounts of files on your computer for known patterns so please be patient while it works. When it is done, the results of the scan will be displayed and it will create a log named rapport.txt in the root of your drive, eg: Local Disk C: or partition where your operating system is installed. Please attach that log in your next reply.

Note:process.exe ( which is used my SmitFraudFIx ) is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user. The below is a link to what process.exe is.

http://www.beyondlogic.org/consulting/proc...processutil.htm

IMPORTANT: Do NOT run any other options until you are asked to do so!

Log in or Sign up

Your computer is infected!

Patrick5000 Private E-2

Attached Files:

bdscan.txt

Activescan.txt

hijackthis.log

Patrick5000 Private E-2

Attached Files:

newfiles.txt

Patrick5000 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member