flrman1, my dear! Take us to another dimension, please!

[O_and_O]

flrman1 ... my man! Where are you?

Since I'm sure that you are the only one who knows exactly what needs to be done ... what's might be going wrong on someone's system, ... I need your help over here ... and from you specifically!

First, ... if you look around and I'm sure you do ... you will find that ALMOST ALL the fixes our "HJT log helpers" will start with is asking the "HJTlog ... I need help!"'s member to do the "canned fix" you developed over HERE ... regardless of (form what I can see) what the HJT Log content is listing.

My question is ... and still ... what is/are the entry(ies) in the HJT logs that tells those helpers ... "Here it is!" ... for them to ask the member to go ahead and perform those fixes first?

If there is no such entry in the HJT log that tells I'm infected with the Smit, Sheriff or Aaurora spy/ad wares ... then, why do I have to do these fixes? ...

Is it only so to "kill" the doubts??! ... What doubts, we are running systems over here!

When I asked one of those "remarkables", ... You know what the reply I got??!... "Because they are everywhere! ... look around the board!"

Can you believe this?!

This means ,... that it only requires from the member to post a new thread saying "I have a problem! What to do?" and will have someone for sure telling him/her to do ALL those installations, scanning, cleaning and removing activities first ... then to post the HJT log ... to close the fix?!!

flrman1 ... my man! ... it seems we have a problem!

Going back ... I still remember that it only required a HJT log , "fix this and remove that" and probably couple of antivirals scans to solve a "Hijacked" browser ... and that's it!

What happened since then??! What a HJT log file has evolved into?

Now for the direct question I was running around ...Thanking you in advance.

What scanning tool and a log file is required from the user to post/say which will will determine to/tell us that his/her system is 100% infected by spysheriff, smitfraud or aurora?

O&O (flrman1, my dear!... Take us to another dimension, ... please!)

 

[Flrman1]

I have no idea what you are talking about!

Everyone here is not asked to run a smitfraud fix. The helpers we have here for the most part are quite good at identifying what particular malware has been identfied in the Hijack This log and post recommendations accordingly and usually if they are not sure they will request assistance.

My opinion: You have overreacted.

 

[O_and_O]

I got the below (before the originator decided to delete his input) as a "First of all" fix to this ...

go to this site and download these tools and once you get both
adaware and spybot, update both of them.

Set adaware to do a full system scan and deselect, "search for neglible risk
entries". Click next to start the scan. Delete everything adaware finds.

reboot and now run spybot

Spybot: Search and destroy.

Delete what spybot finds marked in red. After updating spybot hit the
immunize button.

reboot again

With CWshredder close all browsers and programmes and select the FIX button.

Go here and download Microsoft Antispyware Beta. First in the top menu click
File then Check for updates to download the definitons updates.

After updating look in the right side of the main window under "Run Quick
Scan Now" and click Spyware scan options. In that window put a tick by Run a full system scan and then put a check by all three options below that then
click Run Scan now.

When the scan is finished, let it fix anything that it finds (have it
quarantine the items that have that option rather than delete just in case.
It is a beta program and there may be false positives)

Restart your computer.

All tools can be downloaded at the link below and found on that page!

. Microsoft® Windows AntiSpyware
. SpyBot search and destroy
. AdAware SE

http://www.majorgeeks.com/downloads31.html

download ccleaner

http://www.ccleaner.com/

* Install CCleaner
* Launch CCleaner and look in the upper right corner and click on the "Options" button.
* Click "Advanced" and remove the check by "Only delete files in Windows temp folders older than 48 hours".
* Click OK
* Do not run CCleaner yet. You will run it later in safe mode.

Click on the Issues tab, uncheck both boxes Registry Integrity and File
Integrity
Click the Applications tab, scroll down to the Multimedia section and uncheck
Macromedia Flash Player.

* Download the trial version of Ewido Security Suite here

http://www.ewido.net/en/

* Install ewido.
* During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
* Launch ewido
* It will prompt you to update click the OK button and it will go to the main screen
* On the left side of the main screen click update
* Click on Start and let it update.
* DO NOT run a scan yet. You will do that later in safe mode.

* Click here for info on how to boot to safe mode if you don't already know
how.

How to boot to safe mode

http://service1.symantec.com/SUPPOR...src=sec_doc_nam

* Now copy these instructions to notepad and save them to your desktop. You will need them to refer to in safe mode.

* Restart your computer into safe mode now. Perform the following steps in
safe mode:

* Run Ewido:

* Click on scanner
* Click Complete System Scan and the scan will begin.
* During the scan it will prompt you to clean files, click OK
* When the scan is finished, look at the bottom of the screen and click the Save report button.
* Save the report to your desktop

Now run ccleaner.

Run ActiveScan online virus scan here

http://www.pandasoftware.com/activescan/

When the scan is finished, anything that it cannot clean have it delete it.
Make a note of the file location of anything that cannot be deleted so you
can delete it yourself.
- Save the results from the scan!

post another hijack this log, the ewido and active scan logs

What is it in that HJT log file ... you think ... which requires from me to do all the above?

O&O

 

[khazars]

Actually, I told you to run adaware, spybot, Micrsoft's antispyware, ccleaner, ewido and Pandas active scan.
I at no point told you to run anything pertaing to smitfraud.

You, however, questioned the need to run all these tools. I repsonded that it
was necessary as the pests we are now encountering are getting harder and
harder to remove and I told you to look around the boards at the amount of
posts we receive on spysheriff, smitfraud and aurora as an example of how
bad things are getting seeing as you yourself said you had not been on here
for a few years!

However, you have managed to misconstrue this as my informing you to run all
these tools for smitfraud, I simply told you to run all these tools to clean
up your system!

Therfore, I withdrew my posts to you because of your belligerent stance. I
am here to help people the best I can, not to debate with them on current
removal procedures of pests and inform them of every step of the cleaning
process. You came here looking for help with your already highlighted hijack
this log, and I reponded, then you started to debate me was this all really
necessary!

 

[khazars]

This is your original post.

And a simple click in hijack this doesn't always work these days!

http://forums.techguy.org/t378378.html

 

[O_and_O]

Actually, I told you to run adaware, spybot, Micrsoft's antispyware, ccleaner, ewido and Pandas active scan.
I at no point told you to run anything pertaing to smitfraud.

You, however, questioned the need to run all these tools. I repsonded that it
was necessary as the pests we are now encountering are getting harder and
harder to remove and I told you to look around the boards at the amount of
posts we receive on spysheriff, smitfraud and aurora as an example of how
bad things are getting seeing as you yourself said you had not been on here
for a few years!

However, you have managed to misconstrue this as my informing you to run all these tools for smitfraud, I simply told you to run all these tools to clean
up your system!

Thank you khazars for your reply and courage much appreciated.

I understand now it is not required from me to run "adaware, spybot, Micrsoft's antispyware, ccleaner, ewido and Pandas active scan"... so to "clean up your system!" as you put it ... since there is no indication on the HJT log, I posted over there, that requires from me to do so ... that my system is not clean.

Thanks again.

O&O (Are those applications ... shareware (Free)?)

 

[Flrman1]

Yes they are freeware. I still don't see what all the fuss is about.

 

[cybertech]

Closing thread, you are being helped here: http://forums.techguy.org/showthread.php?t=378378