how to remove "spy crush" ??

[Guest]

a program by the above name has appeared. I can not remove. I went to
add/remove programs and deleted. I ran Webroot Spysweeper which removed a
trojan downloader. this 'spy crush" remains flashing on my toolbar. I am
running Windows XP.
Any assistance would be appreciated.

 

[Guest]

a program by the above name has appeared. I can not remove. I went to
add/remove programs and deleted. I ran Webroot Spysweeper which removed a
trojan downloader. this 'spy crush" remains flashing on my toolbar. I am
running Windows XP.
Any assistance would be appreciated.

Download the Hijackthis and send the report to one of many
forums for analysis and troubleshooting:
When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.
Does your Norton Up and current for updates and subscriptions?.
HTH.
nass
===
www.nasstec.co.uk

 

[C J.]

a program by the above name has appeared. I can not remove. I went to
add/remove programs and deleted. I ran Webroot Spysweeper which
removed a trojan downloader. this 'spy crush" remains flashing on my
toolbar. I am running Windows XP.
Any assistance would be appreciated.

Go to BleepingComputer.com and look on their forums...
http://www.bleepingcomputer.com/forums/forum55.html look there for and
print off removal instructions for "Spy Crush"

 

[Leythos]

a program by the above name has appeared. I can not remove. I went to
add/remove programs and deleted. I ran Webroot Spysweeper which removed a
trojan downloader. this 'spy crush" remains flashing on my toolbar. I am
running Windows XP.
Any assistance would be appreciated.

Always remember - only download files from Trusted Sites.

The following links will take you to vendors sites for Spy Ware / Ad
ware removal tools and also for Antivirus tools. After you install any
of these applications and update them, run them in SAFE MODE to allow
them to properly clean your system.

First, make sure that your Java is updated to the latest version:
http://www.java.com/en/download/index.jsp

These sites are for downloading Anti-Malware and Anti-Spyware tools, in
order that I would use them myself:

Dave Lipman's tools:
Download MULTI_AV.EXE from the URL --
http://www.pctipp.ch/downloads/dl/35905.asp

AdAwareSE can be found here:
http://www.lavasoft.com/products/ad_aware_free.php

SpyBot Search and Destroy can be found here:
http://www.safer-networking.org/en/download/index.html

--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
(e-mail address removed) (remove 999 for proper email address)

 

[PA Bear]

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

 

[Peter Foldes]

stuart

This is a variation of the Smithfraud malware. To remove this variation of Smithfraud see the section on Smithfraud in the following link. Scroll down to Smithfraud

http://www.elephantboycomputers.com/page2.html#Removing_Malware

 

[Guest]

thank you for the info. I gave in before reading your suggestions and just
performed a system restore which seems to have removed the flashing icon from
my icons. Spybot and Spy Sweeper runs do not indicate this Spy Crush now.

 

[Guest]

whoa, way too much for me!!!! Thank you anyway

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

 

[Guest]

thanks!!, the Adaware did not find this "spy crush". Spy bot found
spylocked.fakealert. I wound up doing a system restore which seems to have
worked.

 

[Guest]

thanks for your reply. post your log?? I am lost already and yes my Norton is
all up to date. I have done a system restore which seems to have solved the
immediate problem.