Installed Antispyware Beta No help

[Guest]

I contacted the microsoft support about a problem I am having on my sons Dell
Inspiron 2200. The desktop has been turned into a blue screen with a window
in the middle saying his computer is infected with spyware. Also a red ball
with a white X through it that keeps sending a ballon saying basically the
same thing. They had me download and run the Antispyware Beta and it found
three bad files but still have the desktop and red ball. Had Sherriff
something on it. tried everything I can think of. Have run several scans with
Trend Micro PC-cillin says everything is fine no alerts. Have run two other
scans with the Antispyware Beta no alerts since the first scan.

 

[plun]

Hi

Really sad that MS support cannot help you with this,
beacuse this is a well known problem, scandal IMHO.
But home users are worth nothing it seems.

Nevertheless follow this:
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Overview

Step 3, Smitfraud removal with Noahfears Smitrem.exe.

Download and unpack.

Note ! run this tool then in "Safe mode", press F8 during reboot just
before the Windows flag screen appears.

Also run Crap cleaner - step 6 and Ewido-step 9.

Done !

Good luck.

--
plun



Chevyboy96 explained on 2006-01-18 :

 

[Guest]

When the Beta spyware ran on its regular scheduled scan the red ball with the
white X went away but desktop is still unchanged.

 

[Guest]

Haven't tried your suggestion yet though.

Hi

Really sad that MS support cannot help you with this,
beacuse this is a well known problem, scandal IMHO.
But home users are worth nothing it seems.

Nevertheless follow this:
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Overview

Step 3, Smitfraud removal with Noahfears Smitrem.exe.

Download and unpack.

Note ! run this tool then in "Safe mode", press F8 during reboot just
before the Windows flag screen appears.

Also run Crap cleaner - step 6 and Ewido-step 9.

Done !

Good luck.

--
plun



Chevyboy96 explained on 2006-01-18 :

 

[plun]

Hi

Maybe you are clean already, can you reset your wallpaper ?

Taken from Andy M:
"You will need to reload your wallpaper after this tool finishes,
Smitrem will reset it because some variants will display a spyware
warning as a desktop wallpaper which cannot be removed, To change your
wallpaper right click desktop and choose properties, Set the Theme to
XP if you are running XP then goto the Desktop tab and choose your
wallpaper from there."

It might be so that this is needed also if MSAS manage to remove it ?

Please report back.

regards
plun





Chevyboy96 submitted this idea :

 

[Guest]

Fixed it after work yesterday. There are bad files attached in the desktop
regestry from the spysheriff that have to be deleted. Works great now. Knock