Re: "stealth" spyware
- From: "David H. Lipman" <DLipman~nospam~@Verizon.Net>
- Date: Sun, 11 Dec 2005 13:54:14 -0500
From: "BobC" <BobC@xxxxxxxxxxxxxxxxxxxxxxxxx>
| I also recieve the same msg when accessing my home page. I was able to run
| the latest version of Norton (12-10-2005) and have deleted to trojan.zlob.f.
| I was left with the damage from the viris and have tried everything to
| repair. The viris changes wont allow me to change the default. Certain
| internet addresses are now blocked (ie bank)
| "Hula" wrote:
|
It is not a virus (correct spelling) it is a Trojan and is actually a new variant of the
SmitFraud Trojan.
Two part reply...
Part 1
-----------
Use noahdfear's SmitFraud and SpyAxe removal tool -- SmitRem.exe
http://noahdfear.geekstogo.com/click%20counter/click.php?id=1
http://www.bleepingcomputer.com/forums/topic36868.html
Part 2
-----------
Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe
Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close
NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.
Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }
A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.
* * Please report back your results * *
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
.
- Prev by Date: Re: Administrator problem when trying to run MSCONFIG
- Next by Date: Re: exploit/lsass
- Previous by thread: Re: "stealth" spyware
- Next by thread: Re: "stealth" spyware
- Index(es):
Relevant Pages
|
