Options

Ugh computer keeps crashing.

Unknown
edited July 2006 in Spyware & Virus Removal
I have no idea how I got into this but I do believe that my computer is infected with a smitfraud. My computer crashes whenever I run a virus scan or whenever I run a game. Everytime I go on iexeplorer the homepage is always the same even when I change it, it always goes back to http://www.virushelpzone.com/ which is really weird :skeptic: I tried downloading other anti-virus programs but all the pages won't show. Is this a property of a virus? I've looked at this thread: http://www.short-media.com/forum/showthread.php?t=32218 but the download link is broken. I don't know if it's actually broken or if my computer refuses to display it. Any help is greatly appreciated :respect:

EDIT: I've been looking at other threads and it seems to me like I need to get a program called Hijack this. I've followed the link to download it but whenever I do that my internet closes down.

I've removed the homepage hijacker with CWShredder but my computer still freezes very often. My AVG program won't even start up, is the virus restricting it? I'm scanning my computer with AntiVir but it always freezes up in the middle of the scan and I need to manually restart.

Another edit: I've managed to download Hijack This but when I try to unzip it, the unzipping application automatically closes down. If anyone could enlighten me on this, it'd be much appreciated.

Comments

  • chiazchiaz
    edited July 2006
    Please download SmitfraudFix (by S!Ri)
    Extract the content (a folder named SmitfraudFix) to your Desktop.

    Open the SmitfraudFix folder and double-click smitfraudfix.cmd
    Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
    Please copy/paste the content of that report into your next reply.

    Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
    http://www.beyondlogic.org/consulting/proc...processutil.htm
  • Joboman
    edited July 2006
    Thanks for the reply ;] although the homepage hijacker was removed for a while, it is now back and somehow the CWShredder can no longer detect it.
    The scan results:

    SmitFraudFix v2.74

    Scan done at 21:30:50.33, Sat 07/22/2006
    Run from C:\Documents and Settings\big boy\Desktop\SmitfraudFix
    OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
    Fix ran in normal mode

    »»»»»»»»»»»»»»»»»»»»»»»» C:\


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\big boy\Application Data


    »»»»»»»»»»»»»»»»»»»»»»»» Start Menu


    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\BIGBOY~1\FAVORI~1


    »»»»»»»»»»»»»»»»»»»»»»»» Desktop


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


    »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


    »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="My Current Home Page"


    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection


    »»»»»»»»»»»»»»»»»»»»»»»» End
  • chiazchiaz
    edited July 2006
    Looks like smitfraud is not present in your computer.

    Run Panda's ActiveScan from here and perform a full system scan.
    - Once you are on the Panda site click the "Scan your PC" button
    - A new window will open...click the big "Check Now" button
    - Enter your Country
    - Enter your State/Province
    - Enter your e-mail address and click send
    - Select either Home User or Company
    - Click the big Scan Now button
    - If it wants to install an ActiveX component allow it
    - It will start downloading the files it requires for the scan (Note: It will take a couple minutes)
    - Click on "Local Disks" to start the scan
    - Save the log file to your desktop and post it in your next reply. Thanks! :)
  • Joboman
    edited July 2006
    When I click the link this appears:

    Google
    Error


    Not Found
    The requested URL /activescan/com/activescan_principal.htm was not found on this server.

    I've also tried other online scans but same results.
  • chiazchiaz
    edited July 2006
    Follow the instructions below to download and run HijackThis then.

    Click on this link:
    http://216.180.233.162/~merijn/files/HijackThis.exe

    Save it to your deskop, or somewhere convenient. Now run it. Choose the top option to "do a system scan and save a log file". The scan will run, and a nortepad file will soon pop up. Please copy and paste the contents of this file in your next reply. :)
Sign In or Register to comment.