 Tibs.vq; Smitfraud-c On My Spybot Search |
Welcome Guest ( Log In | Click here to Register a free account now! )
Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
When posting your problem, do not run and post a ComboFix logs. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.
To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.
  |
 May 31 2006, 08:31 PM
Post
#1
|
|
|
New Member  Group: Members Posts: 6 Joined: 31-May 06 Member No.: 70,275  |
them and I can't seem to remove them. Is there some special thing I need to do? I have Adaware; Spybot; Spyblaster; Symantec Anti-virus on my computer. I am about as non-computer saavy as they come and have no idea where to even start. Any ideas? Please!!! Thanks. |
 |
 
|
|
May 31 2006, 10:30 PM
Post
#2
|
|
 Forum Regular Group: Members Posts: 156 Joined: 21-March 06 Member No.: 60,389 |
You can use the tutorial here and delete it manually or wait for Quietman7 to post the Smipfraudfix tutorial to delete it auto.
-------------------- Legend has it that... If you put an AOL disc the opposite way and play it you can hear devilish music... Even worse if you put it the right way... IT INSTALLS AOL!
Click here 3 times for $100,000<--- I mean .00001 dollars. |
|
|
|
|
Jun 1 2006, 06:48 AM
Post
#3
|
|
 Bleepin' Janitor Group: Global Moderator Posts: 18,036 Joined: 9-July 05 From: Virginia, USA Member No.: 26,513 |
Those malware files were included in Spybot's defintion updates for April & May. Similar reports have been made at the Spybot forum where they have been detected but not removed.
You should print out these instructions, or copy them to a NotePad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site. Please download and install Ewido Anti-Malware v3.5. DO NOT perform a scan yet.. Print out the Ewido Install and Scan Instructions. Go here and follow the instructions for using SmitfraudFix. After using the tool reboot again in "SAFE MODE" and Clean out your Temporary Internet files as follows:
Empty the Recycle Bin by right-clicking the Recycle Bin icon on your Desktop, and then clicking Empty Recycle Bin. Then perform a scan with Ewido and reboot back to normal mode. -------------------- "THE BAD GUYS DON'T NEED A SEARCH WARRANT. ARE YOU PROTECTED?"
Microsoft MVP - Windows Security 2007-2009  Member of UNITE, Unified Network of Instructors and Trusted Eliminators |
|
|
|
|
Jun 1 2006, 01:18 PM
Post
#4
|
|
|
New Member Group: Members Posts: 6 Joined: 31-May 06 Member No.: 70,275 |
Thanks, I will try the steps when I get home from work tonight.
|
|
|
|
|
Jun 1 2006, 08:11 PM
Post
#5
|
|
|
New Member Group: Members Posts: 6 Joined: 31-May 06 Member No.: 70,275 |
OK, so now I am completely confused. I just got home, re-ran Spybot and neither Smitfraud-C or Tibs.vq showed up. The only thing identified was Casalemedia.
I'm an idiot, but does that mean my computer is clean from this? Is there a way to determine if my computer is spyware/malware/virus free. I assume if my scans don't show anything it means my computer is clean? |
|
|
|
|
Jun 1 2006, 08:17 PM
Post
#6
|
|
|
Bleepin' Janitor Group: Global Moderator Posts: 18,036 Joined: 9-July 05 From: Virginia, USA Member No.: 26,513 |
If you followed my instructions and then performed another Spybot scan afterwards where it found nothing than I would say the fix worked. If you didn't it could also be that Spybot deleted the files afterall.
The only way to be sure is to take a deeper look at your system by creating a hijackthis log. If you want to do this then I suggest you read and follow all instructions in the pinned topic titled Preparation Guide For Use Before Posting A Hijackthis Log. When you have done that, post a log in the HijackThis Logs and Analysis Forum, not here, for assistance by the HJT Team Experts. It may take a while to get a response because the HJT Team members are very busy. Please be patient as they are volunteers who will help you out as soon as possible. Once you have made your post, please DO NOT make another reply until it has been responded to by a member of the HJT Team. Generally the staff checks the forum for postings that have no replies as this makes it easier for them to identify those who have not been helped. If you post another response, a team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond. -------------------- "THE BAD GUYS DON'T NEED A SEARCH WARRANT. ARE YOU PROTECTED?"
Microsoft MVP - Windows Security 2007-2009 Member of UNITE, Unified Network of Instructors and Trusted Eliminators |
|
|
|
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
| Lo-Fi Version | Time is now: 21st November 2009 - 06:53 AM |
© 2003-2009 All Rights Reserved Bleeping Computer LLC.