smartsecurity

[Guest]

[quote name=\'Guest\' date=\'Jun 13 2004, 04:27 PM\']this is the only way i know of how to remove this crap..

i hate those [censored]ers at smart security..

at the very top of the screen, right click, it should appear as a standard option menu (compared to when right click the big black desktop..)

as you right click, select properties..

destop tab..

click the "customize destop" button at the bottom..

select the "web" tab..

an uncheck the "security" box..

and your done..i would suggest you dl some type of adware killer..

if anyone has anymore ideas, or questions, email [email protected][/quote]
 thank you so much.  those bastards really suck!!!!!!

[Toby]

first thanks for info of right clicking top right corner and properties....
it worked for me.  I agree that who ever the suckers are for doing this
needs to have to answer to everyone of us who have had to go thru this,
and at least for me, the anxioty, and yet, not for doing anything wrong. For
the anxioty alone, they need to be sued.... anyway, the best to us all.

[Guest]

Amazing job to those who contributed.  My sister brought her PC to the house and didn't know what to do (and neither did I) but with your help, I cleared it all up!!

Great Job

[Guest_Steve]

Whew!!! I finally got this bastard off my computer! Thanks to everyone for their help.   http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/biggrin.gif\' class=\'bbc_emoticon\' alt=\'\' />

[ben]

stuff sueing, if anyone has any details on smart security just post them here, they will soon stop

[Guest]

thanx for the info everyone, it worked like a charm for me, and this thing kept me up all night thank god for the techguide  http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/biggrin.gif\' class=\'bbc_emoticon\' alt=\'\' />

[Guest]

[quote name=\'Jessica\' date=\'Jun 16 2004, 05:49 PM\']This one is definitely a f***er.   http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/mad.gif\' class=\'bbc_emoticon\' alt=\':angry:\' />

I found that it installed 4 .exe files (I have win2k, so windows dir is winnt, yours may be just windows).

winnt\seksdialer.exe
winnt\desktop.exe
winnt\system.exe
winnt\downloaded program files\load.exe

It also seemed to install winnt\system32\system32.dll, at least it had a create date as the time this f***er took over. (I was trying to help someone else debug over the phone, went to the website & it's been downhill ever since.)  I checked 2 other Win2k systems and they didn't have this file, so I moved it to a floppy.  Still not sure if I need it, though windows seems to run without, just without sound at the moment.

I then ran through the registry and replaced or deleted:
secure.html  (on another infected pc, it was an ip, so whatever your home page is getting set to - look for that)
load.exe (this is installed into IE, like the google or yahoo toolbars, so everytime you start up IE, it loads itself again)  I deleted the branch that held this file.

I didn't find the other .exe's in the registry.

Then I went to control panel -> internet options and changed the home page and deleted all files.

Then to the cookies location (varies per platform) and deleted them all.

Then I ran through Windows Updates (choose from Tools menu in IE) until there were no more CRITICAL updates.  I chose to skip the rest.

Then I made sure I had the latest virus defs & scanned (nothing found).

Then I went to webroot.com & installed the trial version of <a href="spy%20sweeper" onmouseover="window.status='Spy Sweeper'; return true;" onmouseout="window.status=''; return true;">Spy Sweeper</a> & ran that.

For the most part, it seems ok, but now my sound is hosed, and the pc seems much slower.

I saw a mstask.exe as "Guest" mentioned, but I don't seem to have access to get rid of that.  So off to find out where that's hiding.

I sent them a nasty message on their site.  I also looked them up via whois, but of course the phone # for the contact is disconnected.  

Good luck all.[/quote]
  http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/mad.gif\' class=\'bbc_emoticon\' alt=\':angry:\' />
The info Jessica notes is helpful---and if you could note their web address as I will send them a nasty gram as well----I wish I could find an address for these fellows----I would visit them personally-------which would be a bad day for them.

Signed---avid emailer and former Marine Recon 2nd Lt.------served in Somalia and would like to use some of my little tricks on them personally.

[Rob]

or go  to control panal > Display settings > Web Tab we un-check "Security" & it goes away

[Guest]

Hey Guys.  I was able to get rid of the image as per your directions but now I have just a blank white screen where the image used to be.  I went back to the web desktop folder and found an image that was all white and removed it, but that didn't fix the problem.  Suggestions?

Dee

[Young]

Thanks guy u really helped me out with the suggestions. They all work good.Thanks alot! http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/tongue.gif\' class=\'bbc_emoticon\' alt=\'\' />

[MAD]

I have found the following .exe files created exactly at the same time:

C:\soft.exe
C:\sysmap.exe
C:\WINDOWS\system32\Mon.exe
C:\WINDOWS\system32\egdi32.exe

The added desktop was removed with:

C:\soft.exe /r

Hope it will be useful.

[http://www.neu-net.com]

here's all the info on smart-security you will need...



Domain Name:SMART-SECURITY.INFO
Created On:18-May-2004 10:24:19 UTC
Last Updated On:15-Jun-2004 17:50:11 UTC
Expiration Date:18-May-2006 10:24:19 UTC
Sponsoring Registrar:R159-LRMS
Status:ACTIVE
Status:OK
Registrant ID:C4844095-LRMS
Registrant Name:Aleksandr Romantsev
Registrant Organization:Smart Security GM
Registrant Street1:Lindaal 33
Registrant City:Overijse
Registrant Postal Code:3090
Registrant Country:BE
Registrant Phone:+1.3022617417
Registrant FAX:+1.3022617417
Registrant Email:[email protected]
Admin ID:C4844095-LRMS
Admin Name:Aleksandr Romantsev
Admin Organization:Smart Security GM
Admin Street1:Lindaal 33
Admin City:Overijse
Admin Postal Code:3090
Admin Country:BE
Admin Phone:+1.3022617417
Admin Email:[email protected]
Billing ID:C4844095-LRMS
Billing Name:Aleksandr Romantsev
Billing Organization:Smart Security GM
Billing Street1:Lindaal 33
Billing City:Overijse
Billing Postal Code:3090
Billing Country:BE
Billing Phone:+1.3022617417
Billing Email:[email protected]
Tech ID:C4844095-LRMS
Tech Name:Aleksandr Romantsev
Tech Organization:Smart Security GM
Tech Street1:Lindaal 33
Tech City:Overijse
Tech Postal Code:3090
Tech Country:BE
Tech Phone:+1.3022617417
Tech Email:[email protected]
Name Server:NS1.SMART-SECURITY.INFO
Name Server:NS2.SMART-SECURITY.INFO

[Roydha]

[quote name=\'Al Orfi\' date=\'Aug 10 2004, 02:56 PM\']I found Smart-Security's page to remove this beast.

http://www.smart-security.info/removal.html

If that doesn't work, I also found another way to do it.  Anyone who needs help can email me at [email protected].  Good Samaritans helped me so I'm happy to return the favor to someone else.[/quote]
This worked great for me thanks you're a life saver http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/biggrin.gif\' class=\'bbc_emoticon\' alt=\'\' />

[Guest]

[quote name=\'kkken\' date=\'Jun 14 2004, 11:20 PM\'][quote name=\'Guest\' date=\'Jun 13 2004, 04:27 PM\'] this is the only way i know of how to remove this crap..

i hate those [censored]ers at smart security..

at the very top of the screen, right click, it should appear as a standard option menu (compared to when right click the big black desktop..)

as you right click, select properties..

destop tab..

click the "customize destop" button at the bottom..

select the "web" tab..

an uncheck the "security" box..

and your done..i would suggest you dl some type of adware killer..

if anyone has anymore ideas, or questions, email [email protected][/quote]
This worked for me thanks guys [/quote]
 Thanx!! it worked for me also.  I had XP-PRO installed with SP2,Norton AV,Spy-Begone and Spy Pop UP as well as Ad-Aware installed.  The Bastards got past ALL of them.   Harry

[ecyta]

Hello Everyone. Thanks for all your input. Question does anybody know how bad the infection is when the black screen is gone? I did a system restore which visually looks the way it did but how about the inside of the machine? Any ideas on how bad the damage is DOC? Thanks!

[Guest]

it's really good to see that "GOOGLE" wants to advertise and be associated with this crap site......

I know who my next seach Engine will be....

[Guest_Steve]

[quote name=\'Cricket\' date=\'Jun 16 2004, 10:40 AM\']I also had the smart security background on mycomputer.  It not only took over most of my screen but slowed my computed down to a slow crawl.  I ran a scan on norton anti-virus and had two adware viruses which is probably how the smart security trash got onto my computer.  First I removed these two viruses.  Had to do one in safe mode as it won't delete in normal mode.  Then I right clicked on the smart security background and found the properies.  The picture on the top was in 20 pieces from i_01.gif to i_20.gif. I did a search for where these were and found them and deleted them.  Then I right clicked on the main body of the background and found it was in a file called c:\windows\web\desktop.html.  I then searched and found this and then deleted it and the backgound went away.  I also did a search for "smart security" and found this and also deleted this.  This is the path that worked.  I tried a  whole bunch of other ways that didn't work.  In the end I spent about 8 hours getting rid of the dam background.  I will NEVER buy anthing from that company.[/quote]
 Thank you all for your your input on smartsecurity.  I was infected by those bastards yesterday and used your comments to get out of the jamb.  How do we go about a class-action against them?  Perhaps a public lenching would be more appropriate and deserving?

BTW, for those of you with XP, follow these slightly modified (clarified) instructions:
1. Hit "Start"
2. Choose "Control Panel
3. Choose "Display"
4. Choose "Customize Desktop"
5. Choose "Web" (Tab)
6. Uncheck the "Security" box
7. Hit "OK"
You are finished and your screen should be back to normal.

Dont know about the "slow down" issues yet but have a feeling I might soon!

Thanks again!

[notzrus]

http://www.smart-security.info/help.php?a=1

here is their website

[Guest]

I had that same nasty little bug on my machine.
If you right click on the top of your screen and dont get the needed option then goto control panel,under display,goto desktop, click on customize settings and unclick security

[dave]

[quote name=\'Guest\' date=\'Jun 15 2004, 04:30 PM\']Doesn't work for me, unfortunately.  Right clicking does bring up a menu.  Selecting Properties gets a window but, no Web tab, only General.  

Has anyone any advice to offer?[/quote]
 the message posted by freehelp guest was right and if you can not right click on desktop then go to "control panel" "diplay"or try moving your start menu either way from there you can get to your "desktop" tab and then "customise desktop" then "web" and finally delete the web page from smart security but be warned you do get all kinds of goodies from these guys as well as a [censored]ty desktop. If anyone still cannot get it to go away email me at wtz137Email Removed