Re-infestation

[Guest]

There are many users (not in this forum!) out there who have never even heard
of safe mode or system restore. The nasty malware, e.g., SpywareQuake, put
bogus uninstallers in add/remove programs, Run and Services entries in the
system registry, cripple or manipulate IE through a BHO, and prevent
successful System Restores. SpywareQuake does even more stuff, but I'll
save you the gory details. Does Windows Defender have the "smarts" to
terminate actively running processes, stop and disable Services, remove
entries in add/remove programs? I don't know the answer because WD was in a
very early stage and I elected to use some other programs and manual
intervention to remove the "beast" from my friends computer. If WD is really
smart, then after a scan an indication should be made to try again in safe
mode. If WD doesn't have these features built-in, then re-infestation may
occur.

 

[plun]

Hi Mr Cat

SpywareQuake is just a GUI for Smitfraud..........

And for unknown reasons a lot of vendors don´t touch it. The same
situation with Vundo.

Ewido, F-Secure and Counterspy has removals. Maybe also NIS 2006
with security risk module.

The majority of users with Smitfraud and Vundo infests visits Internets
backyard ie prOn, gambling, p2p/Warez.

A lot of these infests also comes with non updated Sun Java........

Other infests comes with carier trojans as Zolob or through non updated
PCs with security holes.

So maybe it´s right to not touch Smitfraud/Vundo and force users to
protect his/hers PC, maybe a tough way........ ? But it´s too many junk
PCs now running om Internet and Smitfraud/Vundo maybe gives a user a
hard lesson and change behavior.

regards
plun