VIRUS -need help

[its_my_dime]

A little red button bottom right that comes and goes. It gives me a
security warning that says my computer may be infected. If I click on it or
otherwise try to get to the internet....

The internet immediately goes to eurodatepage.com that wants to download
some sort of antivirus software.

Basically have no internet access on that computer.

Norton AV, Defender, Spybot and Adaware can't even find it. They did find
ismini exe and is notify exe that were deleted but something is still there.

What do I do?

 

[Guest]

Open internet options,delete cookies,delete all off-line files,click on
settings,
view objects,R.click each one at a time,properties,anything suspect,delete
it...
Go to run,type:regedit Expand:HKEY_LOCAL_MACHINE,software,R.click anything
suspect,delete it,close out,open:HKEY_LOCAL_USER,software,edit,close out
regedit when thru.Go to run,type:%Temp% Go to edit,select all,delete
all,close
when thru,empty recycle bin.You might also run,windows defender,& malicous
software removal utility....

 

[its_my_dime]

Open internet options,delete cookies,delete all off-line files,click on
settings,
view objects,R.click each one at a time,properties,anything suspect,delete
it...
Go to run,type:regedit Expand:HKEY_LOCAL_MACHINE,software,R.click
anything
suspect,delete it,close out,open:HKEY_LOCAL_USER,software,edit,close out
regedit when thru.Go to run,type:%Temp% Go to edit,select all,delete
all,close
when thru,empty recycle bin.You might also run,windows defender,& malicous
software removal utility....

Still working on it. We may be dealing with something called smithfraud-c
according to Spybot.

 

[its_my_dime]

Open internet options,delete cookies,delete all off-line files,click on
settings,
view objects,R.click each one at a time,properties,anything suspect,delete
it...
Go to run,type:regedit Expand:HKEY_LOCAL_MACHINE,software,R.click
anything
suspect,delete it,close out,open:HKEY_LOCAL_USER,software,edit,close out
regedit when thru.Go to run,type:%Temp% Go to edit,select all,delete
all,close
when thru,empty recycle bin.You might also run,windows defender,& malicous
software removal utility....

It keeps coming back. Defender and malicious software removal tool can't
find it.

Spybot finds it but doesn't remove enough.

Thoughts?

 

[xfile]

Hi,

Try this:
http://www.besttechie.net/forums/Trojans-And-Virus-Help-NeededRESOLVED-t10286.html

If not, try Google it.

Hope this helps.

 

[Guest]

It keeps coming back. Defender and malicious software removal tool can't
find it.

Spybot finds it but doesn't remove enough.

Thoughts?

Try a scan in safe mode and see if that helps but it might be respawning
through system restore so you may be better off disabling that as well and
then reactivate it after your sure it's gone and create a new restore point
from after it has been removed (I haven't done this myself but I've heard
from others across the internet that it does)

 

[Daave]

Still working on it. We may be dealing with something called
smithfraud-c according to Spybot.

About a week ago, David H. Lipman posted a thorough fix for the very
obtrusive SmitFraud:

From http://tinyurl.com/yen5bz :

 

[Guest]

Be prepared to spend some time on this one it takes awhile to get rid of.
Cleaned up a computer a couple of months ago with the same symptoms. The
MVP's here are great they'll help.

 

[Malke]

Still working on it. We may be dealing with something called
smithfraud-c according to Spybot.

Please do not follow Andrew E.'s suggestions - he is a destructive
troll.

Go through the preparatory steps here:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Then do the specific removal steps here:
http://www.elephantboycomputers.com/page2.html#Smitfraud_Trojan

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the link above (not here, please).

If the procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a professional
computer repair shop (not your local version of BigStoreUSA).

Malke