windowsxp antispyware2009

[wasted]

Hi - a friend has been hit with this and is having trouble running any
scanners/fixers (Superantispyware won't run amongst many others)

I'm planning to go over armed with whatever - can anyone recommend which
software I can download and take - preferably free - some stuff he was
trying - like spynomore seemed to be detecting everything, but wanted a fee
before fixing.

Thanks

[Gaz]

wasted wrote:
> Hi - a friend has been hit with this and is having trouble running any
> scanners/fixers (Superantispyware won't run amongst many others)
>
> I'm planning to go over armed with whatever - can anyone recommend
> which software I can download and take - preferably free - some stuff
> he was trying - like spynomore seemed to be detecting everything, but
> wanted a fee before fixing.
>
> Thanks


malwarebytes and smitfraudfix.

There is a variant out at the moment that stops superantispyware from
running (even in safe mode) and malwarebytes doesnt remove. You might need
to take this one out manually....

Gaz

[Dustin Cook]

"Gaz" <gazter@msn.com> wrote in news:6m6thkFff3iqU1@mid.individual.net:

> wasted wrote:
>> Hi - a friend has been hit with this and is having trouble running
>> any scanners/fixers (Superantispyware won't run amongst many others)
>>
>> I'm planning to go over armed with whatever - can anyone recommend
>> which software I can download and take - preferably free - some stuff
>> he was trying - like spynomore seemed to be detecting everything, but
>> wanted a fee before fixing.
>>
>> Thanks
>
>
> malwarebytes and smitfraudfix.
>
> There is a variant out at the moment that stops superantispyware from
> running (even in safe mode) and malwarebytes doesnt remove. You might
> need to take this one out manually....
>
> Gaz

One of them also prevents us from being installed, and if we already are
installed, it'll corrupt the VB runtimes, killing us and a slew of other
tools.

Sadly, in those cases, manual removal is a must.

--
Regards,
Dustin Cook, Author of BugHunter
BugHunter - http://bughunter.it-mate.co.uk
MalwareBytes - http://www.malwarebytes.org

[Gaz]

Dustin Cook wrote:
> "Gaz" <gazter@msn.com> wrote in
> news:6m6thkFff3iqU1@mid.individual.net:
>
>> wasted wrote:
>>> Hi - a friend has been hit with this and is having trouble running
>>> any scanners/fixers (Superantispyware won't run amongst many others)
>>>
>>> I'm planning to go over armed with whatever - can anyone recommend
>>> which software I can download and take - preferably free - some
>>> stuff he was trying - like spynomore seemed to be detecting
>>> everything, but wanted a fee before fixing.
>>>
>>> Thanks
>>
>>
>> malwarebytes and smitfraudfix.
>>
>> There is a variant out at the moment that stops superantispyware from
>> running (even in safe mode) and malwarebytes doesnt remove. You might
>> need to take this one out manually....
>>
>> Gaz
>
> One of them also prevents us from being installed, and if we already
> are installed, it'll corrupt the VB runtimes, killing us and a slew
> of other tools.
>
> Sadly, in those cases, manual removal is a must.

Have you got a pointer to that one, and removal instructions?

Gaz

[Dustin Cook]

"Gaz" <gazter@msn.com> wrote in news:6m88i9Ffdl40U1@mid.individual.net:

> Dustin Cook wrote:
>> "Gaz" <gazter@msn.com> wrote in
>> news:6m6thkFff3iqU1@mid.individual.net:
>>
>>> wasted wrote:
>>>> Hi - a friend has been hit with this and is having trouble running
>>>> any scanners/fixers (Superantispyware won't run amongst many others)
>>>>
>>>> I'm planning to go over armed with whatever - can anyone recommend
>>>> which software I can download and take - preferably free - some
>>>> stuff he was trying - like spynomore seemed to be detecting
>>>> everything, but wanted a fee before fixing.
>>>>
>>>> Thanks
>>>
>>>
>>> malwarebytes and smitfraudfix.
>>>
>>> There is a variant out at the moment that stops superantispyware from
>>> running (even in safe mode) and malwarebytes doesnt remove. You might
>>> need to take this one out manually....
>>>
>>> Gaz
>>
>> One of them also prevents us from being installed, and if we already
>> are installed, it'll corrupt the VB runtimes, killing us and a slew
>> of other tools.
>>
>> Sadly, in those cases, manual removal is a must.
>
> Have you got a pointer to that one, and removal instructions?

Not yet, haven't had time. I've seen 4 or 5 different variations of it so
far. Bruce has run into it several times now as well. I'll check with him


--
Regards,
Dustin Cook, Author of BugHunter
BugHunter - http://bughunter.it-mate.co.uk
MalwareBytes - http://www.malwarebytes.org

[David H. Lipman]

From: "Dustin Cook" <bughunter.dustin@gmail.com>


| Not yet, haven't had time. I've seen 4 or 5 different variations of it so
| far. Bruce has run into it several times now as well. I'll check with him

Bruce indicated he's added detections for it.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[Clark...]

wasted wrote:
> Hi - a friend has been hit with this and is having trouble running any
> scanners/fixers (Superantispyware won't run amongst many others)
>
> I'm planning to go over armed with whatever - can anyone recommend
> which software I can download and take - preferably free - some stuff
> he was trying - like spynomore seemed to be detecting everything, but
> wanted a fee before fixing.
>
> Thanks

boot that thing into safe mode, change the desktop wallpaper if it is
something you care about, (smitfraud deletes the wallpaper)
run the utility, then I'd reboot and again go into safe mode and run
something like, malwarebytes or asquared scanning tools

Smitfraud tool also sets your system policies back to their proper settings,
taskmanager etc,

http://siri.geekstogo.com/SmitfraudFix.php

http://www.emsisoft.com/en/software/download/
about half way down, download this one:
a-squared Emergency USB Stick files

http://www.malwarebytes.org/rogueremover.php
http://www.malwarebytes.org/mbam.php

with some luck you will be clean
Clark...


--
HUH??

[The Real Truth MVP]

Use my Remove-it software, it will remove that malware from your system.
Choose yes for all options when prompted. Download it here
http://pcbutts1.com/downloads/tools/tools.htm

--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/




"wasted" <rubbish@xxnone.notreal.com> wrote in message
news:0YOdneiTtYNDpWPVnZ2dnUVZ8v-dnZ2d@posted.plusnet...
> Hi - a friend has been hit with this and is having trouble running any
> scanners/fixers (Superantispyware won't run amongst many others)
>
> I'm planning to go over armed with whatever - can anyone recommend which
> software I can download and take - preferably free - some stuff he was
> trying - like spynomore seemed to be detecting everything, but wanted a
> fee before fixing.
>
> Thanks

[wasted]

"wasted" <rubbish@xxnone.notreal.com> wrote in message
news:0YOdneiTtYNDpWPVnZ2dnUVZ8v-dnZ2d@posted.plusnet...
> Hi - a friend has been hit with this and is having trouble running any
> scanners/fixers (Superantispyware won't run amongst many others)
>
> I'm planning to go over armed with whatever - can anyone recommend which
> software I can download and take - preferably free - some stuff he was
> trying - like spynomore seemed to be detecting everything, but wanted a
> fee before fixing.
>
> Thanks
Thanks to all - I downloaded Malwarebytes on my computer, saved to memory
stick and ran it on friend's computer - had to run it twice but seems to
have cleared it. A pleasur doing business with you!

[rjdriver]

"wasted" <rubbish@xxnone.notreal.com> wrote in message
news:0YOdneiTtYNDpWPVnZ2dnUVZ8v-dnZ2d@posted.plusnet...
> Hi - a friend has been hit with this and is having trouble running any
> scanners/fixers (Superantispyware won't run amongst many others)
>
> I'm planning to go over armed with whatever - can anyone recommend which
> software I can download and take - preferably free - some stuff he was
> trying - like spynomore seemed to be detecting everything, but wanted a
> fee before fixing.
>
> Thanks

Not sure if this will work for you, but I got the 2008 version of this off
my neighbors system with a simple system restore. Actually, it wasn't that
simple. All the normal routes to system restore were deactivated by the
virus, but the command prompt worked.

1. Restart in safe mode with command prompt.
2. If login required, sign in an administrator account.
3. Type this at the command prompt
%systemroot%\system32\restore\rstrui.exe
4. Press ENTER and follow the instructions. You may see "virus warning"s
even within the system restore GUI, but they are just to scare you. Proceed
with the system restore as instructed.


Bob