spy Sherrif

[Guest]

My computer has been infected by a so called-software spy sherrif, it
pretends to be a spyware but i'm sure it is not. Now my pc has some problems.
I eliminated it with a spyware I had before it happened, on my own, I
eliminated also the frightening sign that appear as desktop background "YOUR
COMPURER IS INFECTED"
but now I have some problems: the files framedyn.dll and services.exe seem
to be missed, sometimes my pc restart without reason or some software like
wmp does not work properly.
Can anyone help me?
Thanks a lot

 

[Harpo]

If you have SpyAxe, PSGuard, Smitfraud, Sinnaka Advertisments or detections
for Puper or Alemod that can not seem to be removed automatically, please
try this automated removal tool.

AntiPuper v1.0 by secured2k
http://secured2k.home.comcast.net/tools/AntiPuper.exe

What does this tool do?
This tool will attempt to delete several known Trojan files. These files are
modified by the malware authors and encrypted to avoid detection.
Fortunately, many of these tend to use the exact same file names. If the
files are in use, locked, protected, etc, this program will schedule Windows
to remove the files upon restarting.

This program will also remove some common security policies that are changed
by viruses and worms. Policies that lock out your desktop changes, windows
update, Windows Firewall, Explorer Run policies, Registry editing, and more
are all reset.

Finally, if you have an infected Alemod WININET.DLL file, this program will
try to copy a clean version from your Windows File Protection folder and
replace the bad copy on restart. If a backup copy can not be found, the tool
will quickly look for McAfee Antivirus files and attempt to clean a copy of
the file to replace the bad one on reboot. If all of this fails, you will
need to manually replace/clean your WININET.DLL file.

 

[Brian A.]

And you most likely are infected or you removed files that shouldn't have
been removed.
Type services.exe in the search box here for info:
http://castlecops.com/StartupList.html

For info on the Framedyn.dll error message:
"Application Has Failed to Start Because Framedyn.dll Was Not Found" Error
Message When You Open the System Properties Dialog Box
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q319114

**It is very important to run the update for each program before running
the app/s to be sure you have the latest definitions.**
Run the programs in Safe Mode after assuring you have shut down all running
tasks except explorer or systray and all apps are fully up to date.
Remove your Temp Internet files: Right click IE. Under the General tab
click Delete Files, put a check in Delete all Offline..., click OK and
close when finished.
Delete all files in c:\windows\temp.

Download/run Cool Web Shredder from:
http://www.intermute.com/products/cwshredder.html

For Info on Cool Web Search variants:
http://www.richardthelionhearted.com/~merijn/cwschronicles.html

Download/install/run Ad-Aware SE to detect/rid of any other
parasites/spyware that may be installed. It can be obtained free from:
http://www.lavasoftusa.com/
After installing Ad-Aware, open it and click on the ref update to get the
latest up-to-date ref file, then run Ad-Aware and delete everything it
finds.


--

Brian A. Sesko { MS MVP_Shell/User }
Conflicts start where information lacks.
http://basconotw.mvps.org/

Suggested posting do's/don'ts: http://www.dts-l.org/goodpost.htm
How to ask a question: http://support.microsoft.com/kb/555375

 

[Rock]

My computer has been infected by a so called-software spy sherrif, it
pretends to be a spyware but i'm sure it is not. Now my pc has some problems.
I eliminated it with a spyware I had before it happened, on my own, I
eliminated also the frightening sign that appear as desktop background "YOUR
COMPURER IS INFECTED"
but now I have some problems: the files framedyn.dll and services.exe seem
to be missed, sometimes my pc restart without reason or some software like
wmp does not work properly.
Can anyone help me?
Thanks a lot

Didn't you post this earlier? I believe you had some responses too.