smartsecurity

[Die Smart-Security Die!!]

Well after a long strugle with this pain in the ass problem,  I think I got rid of it all.  Thanks to all the posts here.  Here is how I did it:

I ran Norton Anti Virus and I found that it downloaded a virus call Trojan.Noupdate.B.  The Norton program was unable to get rid of it but there are instructions on the website as to how to do it.
here is the link with instructions to get rid of it:

http://securityresponse.symantec.com/avcen...noupdate.b.html

Then I restarted on safe mode and got rid of the following files:
mstasks2.exe (if it is running, stop it)
mstasks1.exe
mstasks3.exe
mstasks4.exe
desktop.exe
system.exe
seksdialer.exe

But Most importantly look for and erase
System32.dll and any other file with similar name to it with the same time stamp

then run Hijackthis and erase all he references to the hijacker's website c//windows.secure

then look for and erase the following
secure.html (the anoying hijacking website-if you erase it before erasing system32 another copy of secure will just appear again)
and erase a notepad file called
secure32

restart your computer normally and that should get rid of the problem.

This was the most anoying eperience I had in a while of course those assholes in smartsecurity are impossible to find.  There has to be a way to get back at them! Oh well I hope this post helps

[p'oed]

[quote name=\'Guest\' date=\'Jun 17 2004, 12:10 AM\']http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/mad.gif\' class=\'bbc_emoticon\' alt=\':angry:\' />

These Smart Security Assholes appear to be based in the UK. Can we find out if they're a real company and sue the hell out of them?

If not, Ill personally give $1000 US to anyone in the UK who will kill or maim these [censored]ers... IRA or Al Qaeda are you listening?


ps, Im just joking on the last one. Don't want The Dept of Homeland Security knocking on my door[/quote]
 I feel you? That damn trash was killing my computer softly. But thanks to everyone hear I finally was able to rescue my computer. The persons on MS newsgroups had no answers. I was about to pay Norton or MS tech support for help!

Thanks! I will come to this site if I have any more major problems.

[p'oed]

[quote name=\'Guest\' date=\'Jun 17 2004, 12:10 AM\']http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/mad.gif\' class=\'bbc_emoticon\' alt=\':angry:\' />

These Smart Security Assholes appear to be based in the UK. Can we find out if they're a real company and sue the hell out of them?

If not, Ill personally give $1000 US to anyone in the UK who will kill or maim these [censored]ers... IRA or Al Qaeda are you listening?


ps, Im just joking on the last one. Don't want The Dept of Homeland Security knocking on my door[/quote]
 I feel you? That damn trash was killing my computer softly. But thanks to everyone hear I finally was able to rescue my computer. The persons on MS newsgroups had no answers. I was about to pay Norton or MS tech support for help!

Thanks! I will come to this site if I have any more major problems.

[patrick]

http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/rolleyes.gif\' class=\'bbc_emoticon\' alt=\':rolleyes:\' />
What a pain in the butt!!!  I finally got rid of it but it came back when I used the windows media player to open a file off the net.

I noticed that the smartsecurity software seems to load after notification from Norton Anti_Virus detects something called "bloodhound".

I restored the media player to it's original configuration, then went to windows update and re-installed media player 9.  Hopefully, that issue is resolved.  I will post again if that doesn't solve the problem.

Thanks to everyone for the assistance on this monster smartsecurity.  I hope it's gone for good.

[BK]

Oh my.
My computer (Windows XP) downloaded this nasty thing June 19 or so. I've deleted all the files fore mentioned, and restored my computer to an earlier time. Thinking, that I've gotten rid of this crap. My desktop is back to normal, and my homepage is set to my prefered default. However, I keep getting tons of pop-ups, which I don't recall being there before. Some are adverstisments and others are porn-related, and others are 'Your computer may be infected with spyware!' types. Anyone else having this problem? Is there something I possibly could have missed?

[CompleteTranslations.com]

[quote name=\'Die Smart-Security Die!!\' date=\'Jun 22 2004, 10:26 AM\']Well after a long strugle with this pain in the ass problem,  I think I got rid of it all.  Thanks to all the posts here.  Here is how I did it:

I ran Norton Anti Virus and I found that it downloaded a virus call Trojan.Noupdate.B.  The Norton program was unable to get rid of it but there are instructions on the website as to how to do it.
here is the link with instructions to get rid of it:

http://securityresponse.symantec.com/avcen...noupdate.b.html

Then I restarted on safe mode and got rid of the following files:
mstasks2.exe (if it is running, stop it)
mstasks1.exe
mstasks3.exe
mstasks4.exe
desktop.exe
system.exe
seksdialer.exe

But Most importantly look for and erase
System32.dll and any other file with similar name to it with the same time stamp

then run Hijackthis and erase all he references to the hijacker's website c//windows.secure

then look for and erase the following
secure.html (the anoying hijacking website-if you erase it before erasing system32 another copy of secure will just appear again)
and erase a notepad file called
secure32

restart your computer normally and that should get rid of the problem.

This was the most anoying eperience I had in a while of course those assholes in smartsecurity are impossible to find.  There has to be a way to get back at them! Oh well I hope this post helps[/quote]
 I know who these people are.

It is a guy in Belgium.

Want his phone number and address?
Just go to www.internic.net and do a whois on his URL


I hope you do not mind but I have gotten a lot of calls on this problem and I am going to post the fix for it on my web site's forum (with a link to your forum as well)

My web site is CompleteTranslations.com

and hopefully I will put it in other languages soon.

[Guest]

Thanks for the tip to get rid of the web page on the desktop. Slow PC will be the rest of the crap they deposited on your machines do google searches for mstasks2.exe and msrexe.exe and follow the advise for dealing with them using the program 'Hijackthis' and CWShredder.

Spybot did not get it for me. But I think I am clean now. http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/blink.gif\' class=\'bbc_emoticon\' alt=\':blink:\' />

[kostas]

I have catched this mess too.
Instead your desktop you see nasty black picture and your start page changes. I think in my case a bit different.  But one thing is true this is trojan. What I did.
At first, delete all content in temporal intenet folder (there exist some maliciuos *.exe file and other mess)
Second, Start/Control Panel/Display/Desktop/Customize Desktop/Web and in Web page window delete "Security".
Third, C/Windows/Web and delete all nasty pictures (about 12).
Then run antivirus (in my case Norton) or other special application to find trojan and remove one away.
Succesion could be various. Most important that you know the reason.
In my case I did not find
mstasks2.exe
mstasks1.exe
mstasks3.exe
mstasks4.exe
desktop.exe
system.exe
seksdialer.exe
or other, may be this scum like a variety.

[frenziedfreak]

These smartsecurity guys are real m.fkers..I have been affected by this virus

First to remove the desktop image...follow as mentioned by "guest". It works.

For PC running slow, do the following

1. Reboot your machine in save mode , (Press f8 when starting machine)
2. Press CTRL+ALT+DEL and see if there is any process "mstask2.exe" is running. If it is running stop it
3. Go to c:\windows and remove the following files
- system.exe
-desktop.exe
-seksdialer.exe
-mstasks1.exe  
-mstasks2.exe  
-mstasks3.exe  
-mstasks4.exe  

restart the machine in normal mode. Hope this helps. It works for me...

Dont know how these f..kers are born in this world...

[am]

thanks for the info. there are a few more things that needs to be taken care of:

there is a file called wintime.exe that automatically starts up when the machine boots up. search for it in the windows directory and delete it.
also delete the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinTime" = C:\WINDOWS\system32\wintime.exe

also search and delete the file dl.html from your harddrive.
refer to
http://uk.mcafee.com/virusInfo/default.asp...&virus_k=126205
for details

[am]

also the hosts file needs to be cleaned up. refer to

http://securityresponse.symantec.com/avcen...tartpage.e.html
for details

[THAT THING WORKed for the deskto]

[color=\"green\"][size=14][font=\"Arial\"]i used one of the preivous things, and i got rid of the backround... its on page one. i also ran nortan anti virus and t found 2, and quatented. FULL sytem scan. THATS so stupid i hate them for doing that, but im a tech wizard so take my word, more once i find the best cure. PS> Check your e-mial an hour eailer i found a virus that was blocked by my server.. http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/ph34r.gif\' class=\'bbc_emoticon\' alt=\':ph34r:\' /> [/size][/color][/font]

[Die Smart-Security Die!!]

I need to add something to my post on june 22 2004

You need to run Norton Antivirus on the Windows Media Player, this is where the main file is hidden (I think) is called "downloader"  This one installs all the nonsense that affects the computer.  Once the Anti Virus Detects this file it will quarantine it and then you may erase it manually. That is the last I heard of Smart-Security.  Man I hate those assholes.

[vinnysmiff]

hiya people all u can do without a reformat is this....download a free spysweeper do a search 4 cwshredder and download it now u got them do this right click at the top of your desktop theres a thin line at the very top go to propertys then desktop then customize then click tab web and uncheck security and ok it then go back a page and change ure screen saver should be gone do your spy sweeper and shredder ..on your spysweeper click active shields and set to restore to default without notification so everytime u reeboot it cant change ure homepage ..haha  ps if u want to get rid of that poxy picture its here go to c:\  then windows then web folder delet picture 1 to 20 and no more now u should be safe if not use cwshredder before u connect 2 internet .....dont u just love me  it worked 4 me and ime running ....xppro....

[Guest]

http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/biggrin.gif\' class=\'bbc_emoticon\' alt=\'\' /> thanks you guy's are life savers im just a teen ,and im pretty nifty with a computer but i couldnt figure out how to get that black screen off my desktop


thanks alot

[Anakin4711]

Hi All

I made an systemrecovery from yesterday and it worked .
I got rid of the dirty programm. http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/wink.gif\' class=\'bbc_emoticon\' alt=\'\' />

[Luupi]

Hello my fellow SmartSecure victims. I just got rid of this friggen SS but I think I did something wrong. Now my computer whines something about some Backwed thing? I used Spy Sweeper and I deleted backweb thingy because Spy Sweeper said it was adware. But now sometimes a window pops up and it says something about Backweb-44... (<- about 7 digits).

So ... HELP! http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/biggrin.gif\' class=\'bbc_emoticon\' alt=\'\' />

[Guest]

Oh and it was Backweb-4476822 http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/dry.gif\' class=\'bbc_emoticon\' alt=\'<_<\' />

[Al Orfi]

I found Smart-Security's page to remove this beast.

http://www.smart-security.info/removal.html

If that doesn't work, I also found another way to do it.  Anyone who needs help can email me at [email protected].  Good Samaritans helped me so I'm happy to return the favor to someone else.

[jazzsyx]

Hmmmm, I am very leary of going to any page on their site!  I haven't completely gotten rid of everything (no sound & can't browse network drives with explorer), but am limping along.  Have no desire to get slammed again.  Perhaps you could post the instructions?