i have a balloon pop up telling me i have 4 active spyware applications on my computer. it says to click to resolve so i download the sortware, it says i have x amount of infected files etc... but i have to pay to fix the problems!
i have downloaded ewido anti spyware, followed the instructions from the sticky thread. it's found one infected file already.
will this software fix the problem?
Answers:
ps its been running for 15 minutes , scanned over 18,000 files
Answers:
and i also get a "floating" info box (grey with red border) saying my computer is infected
Answers:
Are you scanning with ewido?
My last ewido scan took nearly two hours. It will clean or quarrantine anything it finds.
Answers:
this is a different infection, ewido will not cure it on its own
stop the Ewido Scan
what is the software called they are trying to get you to buy ??
Answers:
ok, do this first
Step 1: Run SmitfraudFix
The first step is to .
It's a ZIP file, so once it has downloaded, you will need to extract (unzip) it. ( if you're not sure how to unzip files).
The SmitfraudFix download site also offers instructions on how to use SmitfraudFix. Follow the instructions exactly
Answers:
there was four different ones. one called busta virus or something similar? it was yellow and black? there where some others. i can't remember the names. i will rack my brains
Answers:
there was four different ones. one called busta virus or something similar? it was yellow and black? there where some others. i can't remember the names. i will rack my brains no problem, run the smitfraud fix i posted above first
the boot into safe mode and run ewido as shown above
only follow instructions from me, Pchelpman or alfonso from this point on
Answers:
Next, you will need to reboot into safe mode.
- Restart your computer and press F8 just before windows starts (before the Windows logo screen appears).
- Choose Safe Mode from the menu that appears.
1 Click the "Scan" tab to return to scanning options.
2 Click "Complete System Scan" to start.
3 When the scan has finished you will be presented with a list of infected objects found. Click "Apply all actions" to place the files in Quarantine.
4 Click on "Save Report" to view all completed scans. Click on the most recent scan you just performed and select "Save report as" - the default file name will be in date/time format as follows: Report-Scan-20060620-142816.txt. Save to your desktop. A copy of each report will also be saved in C:\Program Files\ewido anti-spyware 4.0\Reports\
5 Exit Ewido when done
Answers:
if you find Smitfraud and ewido do not clear the infection then follow these instructions, but only if you still have problems
- Print out these instructions as we will need to close every window that is open later in the fix.
- Download roguescanfix_setup.exe from here:
Confirm that the file roguescanfix_setup.exe now resides on your . - Double-click on the roguescanfix_setup.exe file found on your desktop.
- Select your language from the and then press the OK button.
- Now press the Next button.
- Select the option that says I accept the agreement and press the Next button
- Press the Next button again.
- Now click on the Install button.
- The installation program will start installing RogueScanFix into C:\Program Files\Roguescanfix and then display a new . At the next screen, leave the checkmark in the Launch RogueScanFix and press the Finish button.
- RogueScanFix will automatically be started and you will be presented with the Credits screen. At this screen press the spacebar and you will be presented with a menu. Press the number 1 on your keyboard and press enter. At the next screen simply press the spacebar on your computer to start the removal process.
Note:Please note that when the program starts it will download a program from that it needs to use during the cleanup. If your firewall gives an alert about this, please allow the download.exe or run.bat program to .
When the program starts, your desktop will disappear, which is normal, so please do not be concerned. It will then start the SpywareQuake uninstallation program. When that program starts, click on the Uninstall button. When it has finished uninstalling, you can then press the OK button to finish the uninstalling of SpywareQuake.
When this program is finished, and it was able to delete all the files, you will see a small prompt that says Completed script execution. Simply press the OK button. It will then open the Brute Force Uninstaller program. Close this by press ing the Exit button. If there a notepad open called task.txt, you can close that as well.
If there were more files that needed to be deleted, the program will prompt you to reboot your computer. Press the Yes button and allow the computer to reboot. When you are back at the desktop, close the task.txt notepad if it is open
Answers:
thanks! my pc crashed but its just loaded up okay. one of the programs was called virus blast
Answers:
i have extracted the smitfraud files. do i run the files or just do safe mode?
Answers:
do i foollow the instructions on the smitfraud site?
Answers:
sorry being a bit thick here, just read what you typed! will do so now
Answers:
no problem I'll be around until 10ish so it will give you time to run Ewido in safe mode afterwards and come back to let me know how you got on
Answers:
ok, just gotta reboot pc nopw, still following the smit fix instructions,. pc going slow
Answers:
ok done the smit fix part, now running the scan on ewido.
will disconnect from internet now and let it run. fingers crossed.
thank you for you help!
Answers:
you need to be in "safe Mode"
Restart your computer and press F8 just before windows starts (before the Windows logo screen appears).
Choose Safe Mode from the menu that appears
then run Ewido
Answers:
I think it has got rid of it! How do i make sure this does not happen again?
Answers:
Am sure that one of the techie experts will be on soon to advise you properly.
You do need a firewall - good free version is Zone Alarm
Anti-virus - I am using Norton, but there are plenty of good free AV programmes to be had.
Spyware detection - get ad-aware, spybot, windows defender and spywareblaster, spywareguard. You already have ewido.
Have a look at the sticky security post for other ideas.
Never ever click on a wee window that comes up on a web page telling you that you have spyware or some other such message - often comes up in a wee grey box as if you have a Windows error message.
Don't open up email from anyone that you don't know. Just delete it and don't be tempted to be nosy.
Even if it is from someone you know, be wary of opening anything with an attachment. I usually send email saying am sending next email with attachment, but even that isn't foolproof - scan email attachments with AV - possibly your internet provider does that already, but definitely check again yourself.
Make sure that your firewall is secure - you can always check by going to and doing some checks there.
Sure someone else will be along soon with some other stuff.