TheTechGuide Forum

General Category => Tech Clinic => Topic started by: berencam on August 02, 2006, 04:39:48 AM

Title: anyone heard of spywarequake
Post by: berencam on August 02, 2006, 04:39:48 AM

ok, so was watching vids online, and i came to one vid that needed a codec to play, so i downloaded the codec, and it was actually malware, its called spywarequake, basicly it bugs the sh!t out of you untill you buy there software, it does not apear in msconfig, nor does it appear in task manager, i ran spybot s & d, but it couldnt find it O_o any ideas?

Title: anyone heard of spywarequake
Post by: guestolo on August 02, 2006, 10:48:20 PM

yup, heard of it, but I need you to do a few things for me please
If you have disabled ANYTHING in msconfig
Go back and reenable all startup entries
Reboot the computer afterwards

Back in Windows
From my signature below, download and save too a permanent folder of it's own onto your harddrive
Hijackthis 1.99.1
Open Hijackthis.exe

Do a "SCAN and Save a Log file"
A log will open in Notepad
Copy and paste the WHOLE contents of the log  here... Don't try and fix anything yet----It is all important

ALSO,
Download [color=\"red\"]SmitfraudFix[/color] (http://\"http://siri.urz.free.fr/Fix/SmitfraudFix.zip\")[/url] (by S!Ri)
Extract the contents (a folder named SmitfraudFix) to your Desktop.

Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

[color=\"#3366FF\"]Note[/color] : [color=\"#FF0000\"]process.exe[/color] [color=\"#3366FF\"]is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.[/color]

Title: anyone heard of spywarequake
Post by: berencam on August 03, 2006, 06:33:20 PM

i found it, that was a tricky little bugger, ty

Title: anyone heard of spywarequake
Post by: guestolo on August 03, 2006, 06:35:35 PM

You don't want to post a hijackthis log or the smitfraudfix log?

Title: anyone heard of spywarequake
Post by: berencam on August 03, 2006, 08:35:12 PM

well i wouldnt mind, but i fixed the problem, so theres no need

Title: anyone heard of spywarequake
Post by: guestolo on August 03, 2006, 09:42:38 PM

There may be other files hiding
But I'll lock this topic since you don't need assistance