Help - Search - Members - Calendar
Full Version: Puper Trojan
BleepingComputer.com > Security > Am I infected? What do I do?
   
mmscort
I run McAfee Virus Scan that identifies the Puper file. I am updated and the program does not allow me to delete the file. It instructs me to restart the computer to complete the clean process. I do and when I scan again I still find it and get pop-ups that are inappropriate for children. Can you help?
Nat Sci
Hey Mmscort,
I know about htis program and I have deleted this of my friends computer once. Heres what I did:
Download SmitfraudFix from http://siri.geekstogo.com/SmitfraudFix.php
Then Extract the folder called SmitfraudFix to your desktop. Reboot your computer and run it in safe mode by pressing the key "F8" continously after rebooting the computer. when you are in safe mode, open the folder SmitfraudFix and double-click smitfraudfix.cmd. Select option 2-Clean by typing 2 and press enter to delete the infected files. It will ask if you want to if you want to clean the registry. Say yes by typing Y then pressing enter. This should delete the background if its infected and it should also clean the registry keys if infected.
Please post if this has any effect on your computer and if it gets rid of it.
quietman7
Before running SmitfraudFix do this.

Please download and install Ewido Anti-Malware v3.5. DO NOT perform a scan yet..
Print out the Ewido Install and Scan Instructions.

Then follow the directions for running smitfraudfix. Tutorial here if you need it.

After using the tool reboot again in "SAFE MODE" and

Clean out your Temporary Internet files as follows:
  • Quit Internet Explorer and quit any instances of Windows Explorer.
  • Click Start, click Control Panel, and then double-click Internet Options.
  • On the General tab, click Delete Files under Temporary Internet Files.
  • In the Delete Files dialog box, tick the Delete all offline content check box , and then click OK.
  • On the General tab, click Delete Cookies under Temporary Internet Files, and then click OK.
  • Click on the Programs tab then click the Reset Web Settings button. Click Apply then OK.
  • Click OK.
Next Click Start, click Control Panel and then double-click Display. Click on the Desktop tab, then click the Customize Desktop button. Click on the Web tab. Under Web Pages you should see a checked entry called Security info or something similar. If it is there, select that entry and click the Delete button. Click Ok then Apply and Ok.

Empty the Recycle Bin by right-clicking the Recycle Bin icon on your Desktop, and then clicking Empty Recycle Bin.

Then perform a scan with Ewido and reboot back to normal mode.
mmscort
clapping.gif Thank you both for your assistance. I used smitfraud, cleaned all the temporary files and cookies, emptied the recycle bin and loaded the antimalware. I appreciate the assistance now my children can use the computer again!
quietman7
Your welcome.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.