Malwarebytes & Antivirus 2009

[Lil' Abner]

I've got a computer here that AV 2009 has screwed up so bad that it won't
even let me install Malwarebytes in Safe Mode. You double click the setup
file and it shows up in the Task Manager but that's all.
I also tried to run SmitfraudFix.exe and Windows brought up the error
message that Smitfraud.exe had caused an error - (Send, Don't Send)
Any suggestions?

--
--- Where did my libigo? ---

[David H. Lipman]

From: "Lil' Abner" <blvstk@dogpatch.com>

| I've got a computer here that AV 2009 has screwed up so bad that it won't
| even let me install Malwarebytes in Safe Mode. You double click the setup
| file and it shows up in the Task Manager but that's all.
| I also tried to run SmitfraudFix.exe and Windows brought up the error
| message that Smitfraud.exe had caused an error - (Send, Don't Send)
| Any suggestions?


Can use the Sysinternals utilities; Process Explorer and AutoRuns ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[The Real Truth MVP]

Use my Remove-it software, it will remove that malware from your system.
Choose yes for all options when prompted. Download it here
http://pcbutts1.com/downloads/tools/tools.htm

--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/




"Lil' Abner" <blvstk@dogpatch.com> wrote in message
news:Xns9B60A74ED23EBbutter@wefb973cbe498...
> I've got a computer here that AV 2009 has screwed up so bad that it won't
> even let me install Malwarebytes in Safe Mode. You double click the setup
> file and it shows up in the Task Manager but that's all.
> I also tried to run SmitfraudFix.exe and Windows brought up the error
> message that Smitfraud.exe had caused an error - (Send, Don't Send)
> Any suggestions?
>
> --
> --- Where did my libigo? ---

[Andy Walker]

The Real Truth MVP wrote:

>Use my Remove-it software, it will remove that malware from your system.
>Choose yes for all options when prompted. Download it here
>http://pcbutts1.com/downloads/tools/tools.htm

"Lil' Abner", PCButts is hosting a pirated batch file that has been
modified to prevent you from seeking help from respected anti-malware
web sites. You should never use any software downloaded from the
ocbuts1.com domain, or any of its other domains for that matter. The
PCButts1 "Remove-It software" is a trojan anti-malware script designed
to pharm your DNS.

Interesting read here

http://************/67ppo4
or
http://www.microsoft.com/communities...r=us&sloc=&p=1

and here

http://www.f-secure.com/weblog/archives/00001474.html

The F-Secure boot cd is a linux based virus scanner that will scan
windows systems without having to load any of the windows OS. I would
use this first followed by Malwarebytes to remove the refuse. You can
also run other anti-malware products and AV scans - the more you use
the more you could potentially catch.

[The Real Truth MVP]

You are a liar. Did you lie on purpose or are you just that stupid to
believe those things about me. Prove your lies "script designed to pharm
your DNS." Wow that's a new one when did make that up?


--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/




"Andy Walker" <awalker@nspank.invalid> wrote in message
news:492b6260.1087743828@news.webtv.com...
> The Real Truth MVP wrote:
>
>>Use my Remove-it software, it will remove that malware from your system.
>>Choose yes for all options when prompted. Download it here
>>http://pcbutts1.com/downloads/tools/tools.htm
>
> "Lil' Abner", PCButts is hosting a pirated batch file that has been
> modified to prevent you from seeking help from respected anti-malware
> web sites. You should never use any software downloaded from the
> ocbuts1.com domain, or any of its other domains for that matter. The
> PCButts1 "Remove-It software" is a trojan anti-malware script designed
> to pharm your DNS.
>
> Interesting read here
>
> http://************/67ppo4
> or
> http://www.microsoft.com/communities...r=us&sloc=&p=1
>
> and here
>
> http://www.f-secure.com/weblog/archives/00001474.html
>
> The F-Secure boot cd is a linux based virus scanner that will scan
> windows systems without having to load any of the windows OS. I would
> use this first followed by Malwarebytes to remove the refuse. You can
> also run other anti-malware products and AV scans - the more you use
> the more you could potentially catch.
>
>

[Andy Walker]

The Real Truth MVP wrote:

>You are a liar. Did you lie on purpose or are you just that stupid to
>believe those things about me. Prove your lies "script designed to pharm
>your DNS." Wow that's a new one when did make that up?

You've altered a pirated script to redirect legitimate anti-malware
sites. It's obvious that you're trying to infect people's systems by
preventing them from cleaning with reputable products. Stay away from
pcbutts1.com, which is actually a porn site that wants to hijack your
systems.

More on PCBUTTS activities:

http://msmvps.com/blogs/spywaresucks...-the-plot.aspx
or
http://************/59o5yf


>"Andy Walker" <awalker@nspank.invalid> wrote in message
>news:492b6260.1087743828@news.webtv.com...
>> The Real Truth MVP wrote:
>>
>>>Use my Remove-it software, it will remove that malware from your system.
>>>Choose yes for all options when prompted. Download it here
>>>http://pcbutts1.com/downloads/tools/tools.htm
>>
>> "Lil' Abner", PCButts is hosting a pirated batch file that has been
>> modified to prevent you from seeking help from respected anti-malware
>> web sites. You should never use any software downloaded from the
>> ocbuts1.com domain, or any of its other domains for that matter. The
>> PCButts1 "Remove-It software" is a trojan anti-malware script designed
>> to pharm your DNS.
>>
>> Interesting read here
>>
>> http://************/67ppo4
>> or
>> http://www.microsoft.com/communities...r=us&sloc=&p=1
>>
>> and here
>>
>> http://www.f-secure.com/weblog/archives/00001474.html
>>
>> The F-Secure boot cd is a linux based virus scanner that will scan
>> windows systems without having to load any of the windows OS. I would
>> use this first followed by Malwarebytes to remove the refuse. You can
>> also run other anti-malware products and AV scans - the more you use
>> the more you could potentially catch.
>>
>>

[The Real Truth MVP]

"You've altered a pirated script to redirect legitimate anti-malware sites".
Geeeeeeeeesh where do you get this stuff.


--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/




"Andy Walker" <awalker@nspank.invalid> wrote in message
news:492c8796.1097269984@news.webtv.com...
> The Real Truth MVP wrote:
>
>>You are a liar. Did you lie on purpose or are you just that stupid to
>>believe those things about me. Prove your lies "script designed to pharm
>>your DNS." Wow that's a new one when did make that up?
>
> You've altered a pirated script to redirect legitimate anti-malware
> sites. It's obvious that you're trying to infect people's systems by
> preventing them from cleaning with reputable products. Stay away from
> pcbutts1.com, which is actually a porn site that wants to hijack your
> systems.
>
> More on PCBUTTS activities:
>
> http://msmvps.com/blogs/spywaresucks...-the-plot.aspx
> or
> http://************/59o5yf
>
>
>>"Andy Walker" <awalker@nspank.invalid> wrote in message
>>news:492b6260.1087743828@news.webtv.com...
>>> The Real Truth MVP wrote:
>>>
>>>>Use my Remove-it software, it will remove that malware from your system.
>>>>Choose yes for all options when prompted. Download it here
>>>>http://pcbutts1.com/downloads/tools/tools.htm
>>>
>>> "Lil' Abner", PCButts is hosting a pirated batch file that has been
>>> modified to prevent you from seeking help from respected anti-malware
>>> web sites. You should never use any software downloaded from the
>>> ocbuts1.com domain, or any of its other domains for that matter. The
>>> PCButts1 "Remove-It software" is a trojan anti-malware script designed
>>> to pharm your DNS.
>>>
>>> Interesting read here
>>>
>>> http://************/67ppo4
>>> or
>>> http://www.microsoft.com/communities...r=us&sloc=&p=1
>>>
>>> and here
>>>
>>> http://www.f-secure.com/weblog/archives/00001474.html
>>>
>>> The F-Secure boot cd is a linux based virus scanner that will scan
>>> windows systems without having to load any of the windows OS. I would
>>> use this first followed by Malwarebytes to remove the refuse. You can
>>> also run other anti-malware products and AV scans - the more you use
>>> the more you could potentially catch.
>>>
>>>
>

[Gaz]

The Real Truth MVP wrote:
> You are a liar. Did you lie on purpose or are you just that stupid to
> believe those things about me. Prove your lies "script designed to
> pharm your DNS." Wow that's a new one when did make that up?
>
>
>

But you do block sites that you have had personal disagreements with in the
hosts file following installation of your software, dont you?

Gaz

[Rhonda Lea Kirk Fries]

Gaz wrote:
> The Real Truth MVP wrote:
>> You are a liar. Did you lie on purpose or are you just that stupid to
>> believe those things about me. Prove your lies "script designed to
>> pharm your DNS." Wow that's a new one when did make that up?
>>
>>
>>
>
> But you do block sites that you have had personal disagreements with
> in the hosts file following installation of your software, dont you?

He's proud of it.

Here's the most recent example.

Path:
news.eternal-september.org!motzarella.org!news.glorb.com!bigfee d2.bellsouth.net!bigfeed.bellsouth.net!news.bellso uth.net!flpi089.ffdc.sbc.com!prodigy.net!flpi088.f fdc.sbc.com!prodigy.com!flpi107.ffdc.sbc.com!nlpi0 65.nbdc.sbc.com.POSTED!1244ae27!not-for-mail
From: "The Real Truth MVP" <toidi@tpap.com>
Newsgroups: alt.privacy.spyware
References: <XJSdnbLs_obnoWLVnZ2dnUVZ_uWdnZ2d@comcast.com>
<Xns9B3F765ADE37AHHI2948AJD832@69.16.185.247>
<WP-dnTffr_eI02LVnZ2dnUVZ_qHinZ2d@comcast.com>
<bJLLk.3660$D32.2805@flpi146.ffdc.sbc.com> <gdre9f$3c1$1@aioe.org>
<3cudndcsrJ-7PJzUnZ2dnUVZ_vCdnZ2d@giganews.com>
<gdseap$hro$1@blackhelicopter.databasix.com>
In-Reply-To: <gdseap$hro$1@blackhelicopter.databasix.com>
Subject: Re: Ping: Dustin Cook
Lines: 73
Organization: http://pcbutts1-therealtruth.blogspot.com/
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="iso-8859-1";
reply-type=response
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Windows Mail 6.0.6001.18000
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049
X-Antivirus: avast! (VPS 081024-0, 10/24/2008), Outbound message
X-Antivirus-Status: Clean
Message-ID: <UrkMk.4709$c45.2611@nlpi065.nbdc.sbc.com>
NNTP-Posting-Host: 75.54.139.217
X-Complaints-To: abuse@prodigy.net
X-Trace: nlpi065.nbdc.sbc.com 1224856436 ST000 75.54.139.217 (Fri, 24
Oct 2008 09:53:56 EDT)
NNTP-Posting-Date: Fri, 24 Oct 2008 09:53:56 EDT
X-UserInfo1:
TSU[@I_AOPT[BW\[ZBNB^^UDEB\@PD\MNPWZKB]MPXHJUZ]CDVW[AKK[J\]^HVKHG^EWZHBLO^[\NH_AZFWGN^\DHNVMX_DHHX[FSQKBOTS@@BP^]C@RHS_AGDDC[AJM_T[GZNRNZAY]GNCPBDYKOLK^_CZFWPGHZIXW@C[AFKBBQS@E@DAZ]VDFUNTQQ]FN
Date: Fri, 24 Oct 2008 06:53:54 -0700
X-Old-Xref: news.eternal-september.org alt.privacy.spyware:17315

Yes I do. She jumped on the troll bandwagon and I warned her I was going
to
do that. She ignored me.


--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/




"Rhonda Lea Kirk Fries" <nimue@databasix.com> wrote in message
news:gdseap$hro$1@blackhelicopter.databasix.com...
> David H. Lipman wrote:
>> From: "---Fitz---" <fitz@invalid.com>
>>
>>> "The Real Truth MVP" <toidi@tpap.com> wrote in message
>>> news:bJLLk.3660$D32.2805@flpi146.ffdc.sbc.com...
>>>> Dustin's assessment of my Remove-it program is flawed. The only
>>>> correct think he said about it was that it is a batch file. The
>>>> only intentional errors/markers placed in it are mine the ones I
>>>> put in it to track who was stealing it. I know which one they are.
>>>> Try asking him which ones he is talking about to try and prove what
>>>> he says. The program is all mine and it is totally different then
>>>> any other tool out there and it does a lot more then most including
>>>> MBAM. There are no false positives in Remove-it. it will clean your
>>>> system of malware in less then 10 minutes, compare that to
>>>> everybody else's that takes hours. Remove-it will set a restore
>>>> point prior to making any changes, it will modify your hosts file
>>>> and protect it from being changed by rogue malware.
>>
>>> Does your hosts file block the MVP sites and other legit malware
>>> tools?
>>
>> From Butts' Hosts file...
>>
>> # [Thieves and trolls]
>> 127.0.0.1 www.pctipp.ch
>> 127.0.0.1 pctipp.ch
>> 127.0.0.1 www.raymond.cc
>> 127.0.0.1 raymond.cc
>> 127.0.0.1 www.claymania.com
>> 127.0.0.1 claymania.com
>> 127.0.0.1 www.elephantboycomputers.com
>> 127.0.0.1 elephantboycomputers.com
>
> He blocks Malke? Oh my sides.
>
>> 127.0.0.1 www.it-mate.co.uk
>> 127.0.0.1 it-mate.co.uk
>> 127.0.0.1 mysteryfcm.co.uk
>> 127.0.0.1 www.mysteryfcm.co.uk
>> 127.0.0.1 www.internetinspiration.co.uk
>> 127.0.0.1 internetinspiration.co.uk
>> 127.0.0.1 www.mvps.org
>> 127.0.0.1 mvps.org
>> 127.0.0.1 bughunter.it-mate.co.uk
>> 127.0.0.1 www.bughunter.it-mate.co.uk
>> 127.0.0.1 www.siri.geekstogo.com
>> 127.0.0.1 siri.geekstogo.com
>> 127.0.0.1 siri.urz.free.fr
>> 127.0.0.1 www.siri.urz.free.fr
>> 127.0.0.1 noahdfear.geekstogo.com
>> 127.0.0.1 www.noahdfear.geekstogo.com
>
> What a pathetic, stupid little man Christopher Butts is.
>
> --
> Rhonda Lea Kirk Fries
>
> "You know you can indict a ham sandwich if you want to."
> William J. Martini, Judge, United States District Court
>
--
Rhonda Lea Kirk Fries

"You know you can indict a ham sandwich if you want to."
William J. Martini, Judge, United States District Court

[Lil' Abner]

Andy Walker <awalker@nspank.invalid> wrote in
news:492b6260.1087743828@news.webtv.com:

> The Real Truth MVP wrote:
>
>>Use my Remove-it software, it will remove that malware from your
>>system. Choose yes for all options when prompted. Download it here
>>http://pcbutts1.com/downloads/tools/tools.htm
>
> "Lil' Abner", PCButts is hosting a pirated batch file that has been
> modified to prevent you from seeking help from respected anti-malware
> web sites. You should never use any software downloaded from the
> ocbuts1.com domain, or any of its other domains for that matter. The
> PCButts1 "Remove-It software" is a trojan anti-malware script designed
> to pharm your DNS.

Yeah, I know... :-)
The damn thing finally got to where it wouldn't even boot in safe mode.
I cloned the drive, wiped it and started over. I got all the pictures,
music, and other data off the cloned drive.
--
--- Where did my libigo? ---