Page 1 of 3 123 LastLast
Results 1 to 10 of 34

Thread: Help with some spyware

Hybrid View

  1. #1
    Join Date
    Apr 2007
    Posts
    27

    Help with some spyware

    Lately I seem to be getting pop-ups when I load internet explorer, and when my computer is starting up it says that it is missing a DLL file. I was wondering if anyone can help me. I followed all of the steps in the stickied post, and I have attached my HJT log to my post. Thanks in advance for any help that I can get.
    Attached Files Attached Files

  2. #2
    Join Date
    Aug 2006
    Location
    The Middle
    Age
    80
    Posts
    4,079
    Please download SmitfraudFix (by S!Ri)

    Double-click SmitfraudFix.exe.
    Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
    Please copy/paste the content of that report into your next reply.

    **If the tool fails to launch from the Desktop, please move SmitfraudFix.exe directly to the root of the system drive (usually C:), and launch from there.

  3. #3
    Join Date
    Apr 2007
    Posts
    27
    Here's the file it generated after doing that.
    Attached Files Attached Files

  4. #4
    Join Date
    Aug 2006
    Location
    The Middle
    Age
    80
    Posts
    4,079
    Please download VundoFix.exe to your desktop.
    • Double-click VundoFix.exe to run it.
    • Click the Scan for Vundo button.
    • Once it's done scanning, click the Remove Vundo button.
    • You will receive a prompt asking if you want to remove the files, click YES
    • Once you click yes, your desktop will go blank as it starts removing Vundo.
    • When completed, it will prompt that it will shutdown your computer, click OK.
    • Turn your computer back on.
    • Please post the contents of C:\vundofix.txt and a new HiJackThis log.

  5. #5
    Join Date
    Apr 2007
    Posts
    27
    Ok, I've done that and I attached the log and the HiJackThis log also.
    Attached Files Attached Files

  6. #6
    Join Date
    Aug 2006
    Location
    The Middle
    Age
    80
    Posts
    4,079
    Did you add these addresses to your Hosts File?
    irc.westwood.com
    servserv.westwood.com

  7. #7
    Join Date
    Aug 2006
    Location
    The Middle
    Age
    80
    Posts
    4,079
    Do a file search for this file in C:\Windows\System32 and see if you can locate it.

  8. #8
    Join Date
    Apr 2007
    Posts
    27
    It found nothing

  9. #9
    Join Date
    Aug 2006
    Location
    The Middle
    Age
    80
    Posts
    4,079
    Do the file search again but this time do this first;
    Click Start.
    Open My Computer.
    Select the Tools menu and click Folder Options.
    Select the View Tab.
    Under the Hidden files and folders heading select Show hidden files and folders.
    Uncheck the Hide protected operating system files (recommended) option.
    Click Yes to confirm.
    Click OK.
    Now, look again and see if it happens to be there.

  10. #10
    Join Date
    Apr 2007
    Posts
    27
    Ok, sorry about that I forgot to uncheck the protected operating system files part. Yes it does find this DLL in the system32 folder.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •