Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.



  • Please log in to reply
3 replies to this topic

#1 mechmaker


  • Members
  • 26 posts
  • Location:Mos Eisley
  • Local time:03:45 PM

Posted 14 April 2006 - 04:13 PM

recently i was infected with a strange program called lich.exe that looks like dracula from the simpsons. I know it is a known virus or malware program and i want to remove it. Can you help? I am running zonealarm, ad-aware, ccleaner, cleanup40, spybot s&d, ewido , smitrem, hijackthis, and cwshredder. I noticed it was in my system 32 folder and i told zone alarm to deny it..
"Infection is the death's second cousin next to disease."

BC AdBot (Login to Remove)


#2 Enthusiast


  • Members
  • 5,898 posts
  • Location:Florida, USA
  • Local time:02:45 PM

Posted 14 April 2006 - 04:16 PM

Run both Adaware and Spybot Search and Destroy from safe mode, updating each program before you scan and allowing both to fix what they find.

Following that that I suggest you post a “HijackThis” log for expert assistance with your problem.

Read the pinned post in our “HijackThis” forum,
Carefully read and follow all directions explicitly.

Following instructions create a HJT log, and POST THE HJT LOG YOU CREATED IN OUR HJT FORUM – not in this forum,
at this link.
Include the specs for your computer (ie, processor, amount of RAM, brand or motherboard, etc, and briefly describe the problem you are experiencing.)

Unless you are expert at editing the registry, Do not use the Hijack This program to try to fix anything by yourself as even what may seem to be a small mistake can render your operating system inoperable.
Some files when in one folder may be fine while in another may be malware.

A member of our HJT Team will analyze your log, make recommendations and offer assistance.

It may take a period of time to get a response to the log you posted because the members of our HJT Team are kept very busy.
Please be patient as this team is manned by volunteers. They will help you in order received as soon as possible.

Once you have posted your HJT log, please DO NOT make any additional posts in the HJT forum thread you created until you get a response from a member of our HJT expert team, and do not make any changes to your system (changes, including any attempted repairs, will make it different than displayed in the log you posted and therefore make your log inaccurate).

The first criteria they have when looking for logs that need replies are posts showing 0 replies. If you make an additional post, it will show as having 1 reply.
A team member, looking for a new log to work on might well assume another HJT Team member is already assisting you and might not open the thread to respond.

So, make your post and wait for a response from a team member.

#3 Herk


  • Members
  • 1,609 posts
  • Gender:Male
  • Location:S.E. Idaho, USA
  • Local time:03:45 PM

Posted 14 April 2006 - 04:21 PM

Yup. It's a trojan. Best to post a log in the Hijack forums. Best to read this first.

This trojan lowers your security settings.

edited to add: Whoops, Enthusiast beat me to the punch.

Edited by Herk, 14 April 2006 - 04:21 PM.

#4 mechmaker

  • Topic Starter

  • Members
  • 26 posts
  • Location:Mos Eisley
  • Local time:03:45 PM

Posted 14 April 2006 - 04:59 PM

its in hijackthis forums, and spybot said i had smitfraud c.....
"Infection is the death's second cousin next to disease."

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users