Getting rid of Spyshredder

  • Thread starter Thread starter paullie
  • Start date Start date
P

paullie

Does anyone know of a SAFE, free download that'll do this? Thanks in advance.

Best, Paul
 
Obviously the first thing I tried. Went thru 2 different
downloads/installs/uninstalls when programs required buying in order to
remove. THAT'S why I posted the question here.
 
Thanks, Robear.

Is 'Stopzilla' the package you recommend? I looked at the discription, and
it's pretty much the same as the fullblown AVG software package that is
currently running. I did a full scan last night with AVG, but it turned up
nothing. Spyshredder is still in there lurking. It turns up around the
5th-10th time I open IE6. A real PITA. Thought there might be a specific
tool. As none of the files seem to show corruption, maybe I'll just try to
find a good restore point. Thanks again.

Best, Paul
 
Hi Daave,

I was selecting from the lefthand side. Maybe I just chose the wrong deals,
but both downloads 'found' problems that AVG didn't(AVG took 1 full hour to
do a total scan), and both wanted subscription to remove. Neither found
'Spyshredder' per se(if it's still ID-able).

Thanks, Paul
 
Duh!
Hi Daave,

I was selecting from the lefthand side. Maybe I just chose the wrong
deals,
but both downloads 'found' problems that AVG didn't(AVG took 1 full hour
to
do a total scan), and both wanted subscription to remove. Neither found
'Spyshredder' per se(if it's still ID-able).

Thanks, Paul
 
No security applications can detect or remove a Zlob+Vundo/SDBot-variant
infection, including AVG Internet Security.

I do not recommend Stopzilla, no.

Did you try the removal instructions at
http://www.bleepingcomputer.com/forums/topic98791.html ?

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
 
Obviously the first thing I tried. Went thru 2 different
downloads/installs/uninstalls when programs required buying in order to
remove. THAT'S why I posted the question here.

Next time it would be advisable for you to include that info in the
FIRS post.
 
Hi Robear,

Almost went crazy looking for "removal instructions" till I scrolled down.
Are you referring to SmitFraudFix.exe and running it from Safe mode? If so,
I'll definately try it.

BTW, AVG did ID Shredder when it first appeared. AVG gave a pop-up box, and
I authorized it to place Spyshredder in the virus vault. However, when I
closed the AVG pop-up, Shredder apparently continuded to run it's dialog. Had
to leave IE6 to get away from it. It's been popping up ever since.

AAR, if you confirm SmitFraudFix.exe as something useful, I'll download it
and give 'er a shot. Thanks for the very useful suggestion.

Best, Paul
 
paullie said:
Thanks, Robear.

Is 'Stopzilla' the package you recommend?

Stopzilla is an ad. Don't get sidetracked!

Just follow the instructions (scroll down to Manual Removal Instructions
for SpyShredder). And yes, SmitFraudFix is definitely part of the
instructions.
 
AVG neither detected nor removed all Spyshredder-related files, processes,
and Registry entries.

SmitFraudFix is at least one step you'll have to take to resolve the
infections, yes. (There are others we use but start with SFF.)

After doing so, run a /thorough/ check for hijackware, including posting
your hijackthis log to an appropriate forum. You most likely also have
rootkit, Vundo, and SDBot infections, too.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
 
From: "PD43" <[email protected]>

|

|
| Next time, try Google

No.
There are too many rogue utilities and faux information that are obtained in Google
searches.
For removing malware, direct responses are the way to go, not Google searches.
 
David H. Lipman said:
From: "PD43" <[email protected]>


|

|
| Next time, try Google

No.
There are too many rogue utilities and faux information that are obtained in Google
searches.
For removing malware, direct responses are the way to go, not Google searches.

There are too many bozos here giving bad information.

If the OP can't use Google, then the OP should take the computer to a
competent tech.
 
From: "PD43" <[email protected]>


|
| There are too many bozos here giving bad information.
|
| If the OP can't use Google, then the OP should take the computer to a
| competent tech.

No. Robear Dyer replied and he is "no bozo".
You have NO IDEA about the faux information and anti malware rogues that are out there. One
can just end up with a so-called remover that will just get entrenched, can not be removed,
and will charge the person money to both remove the malware and their utility.

When it comes to removing malware, Google is NOT your friend as there is too much faux
information and rogue anti malware out there thay can just make the situation worse. If
they don't have the skills to personally remove the malware then they also won't have the
skills to "separate the wheat from the chaff."

If a poster does not have the personal skills then they can post in an "expert forum".

Below is such information...



1. Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

2. Disable Notepad's word wrap:
In Notepad.exe; Format --> uncheck; "Word wrap"

3. Download/run Deckard's System Scanner:
http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post in one of the below
expert forums...


{ Please - Do NOT post the HJT and Deckard's System Scanner Logs here ! }

Forums where you can get expert advice for HiJack This! (HJT) and Deckard's System Scanner
Logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://www.malwarebytes.org/forums/index.php?showforum=7
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13
 
Does anyone know of a SAFE, free download that'll do this? Thanks in advance.

Best, Paul

Here's what I did: 'System Restore' a couple of days before my first
instance, rebooted, found Spyshredder still in my program files
folder, deleted it there and in my recycle bin. Worked for me.

I'm still a bit puzzled with system restore. I thought it fully went
back in time to the restore point, in this case 5 days, but when I
went to my temporary files folder, there were still entries from
today. ???. I don't care, it still worked.

Bill
 
I'm still a bit puzzled with system restore. I thought it fully went
back in time to the restore point, in this case 5 days, but when I
went to my temporary files folder, there were still entries from
today. ???

System Restore isn't a complete system backup. It backs up certain
system settings and keeps them in case you will need them.

It looks as if temporary Internet files aren't critical system
components, eh? :-)
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top