Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Tibs.vq; Smitfraud-c On My Spybot Search


  • Please log in to reply
5 replies to this topic

#1 bennpcidiot

bennpcidiot

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:07:43 AM

Posted 31 May 2006 - 08:31 PM

I am having the hardest time trying to figure out how to get rid of Smitfraud-C and tibs.vq. Spybot identified
them and I can't seem to remove them. Is there some special thing I need to do? I have Adaware; Spybot;
Spyblaster; Symantec Anti-virus on my computer. I am about as non-computer saavy as they come and have no idea where to even start. Any ideas? Please!!! Thanks.

BC AdBot (Login to Remove)

 


#2 Nat Sci

Nat Sci

  • Members
  • 156 posts
  • OFFLINE
  •  
  • Local time:07:43 AM

Posted 31 May 2006 - 10:30 PM

You can use the tutorial here and delete it manually or wait for Quietman7 to post the Smipfraudfix tutorial to delete it auto.
Legend has it that... If you put an AOL disc the opposite way and play it you can hear devilish music... Even worse if you put it the right way... IT INSTALLS AOL!
Click here 3 times for $100,000<--- I mean .00001 dollars.

#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,057 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:43 AM

Posted 01 June 2006 - 06:48 AM

Those malware files were included in Spybot's defintion updates for April & May. Similar reports have been made at the Spybot forum where they have been detected but not removed.

You should print out these instructions, or copy them to a NotePad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.

Please download and install Ewido Anti-Malware v3.5. DO NOT perform a scan yet..
Print out the Ewido Install and Scan Instructions.

Go here and follow the instructions for using SmitfraudFix.
After using the tool reboot again in "SAFE MODE" and

Clean out your Temporary Internet files as follows:
  • Quit Internet Explorer and quit any instances of Windows Explorer.
  • Click Start, click Control Panel, and then double-click Internet Options.
  • On the General tab, click "Delete Files" under Temporary Internet Files.
  • In the Delete Files dialog box, tick the "Delete all offline content check box", and then click "OK".
  • On the General tab, click "Delete Cookies" under Temporary Internet Files, and then click "OK".
  • Click on the Programs tab then click the Reset Web Settings button. Click "Apply" then "OK".
  • Click "OK".
Next Click Start, click Control Panel and then double-click Display. Click on the Desktop tab, then click the Customize Desktop button. Click on the Web tab. Under Web Pages you should see a checked entry called Security info or something similar. If it is there, select that entry and click the Delete button. Click "Ok" then "Apply" and "Ok".

Empty the Recycle Bin by right-clicking the Recycle Bin icon on your Desktop, and then clicking Empty Recycle Bin.

Then perform a scan with Ewido and reboot back to normal mode.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#4 bennpcidiot

bennpcidiot
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:07:43 AM

Posted 01 June 2006 - 01:18 PM

Thanks, I will try the steps when I get home from work tonight.

#5 bennpcidiot

bennpcidiot
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:07:43 AM

Posted 01 June 2006 - 08:11 PM

OK, so now I am completely confused. I just got home, re-ran Spybot and neither Smitfraud-C or Tibs.vq showed up. The only thing identified was Casalemedia.

I'm an idiot, but does that mean my computer is clean from this?

Is there a way to determine if my computer is spyware/malware/virus free. I assume if my scans don't show anything it means my computer is clean?

#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,057 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:43 AM

Posted 01 June 2006 - 08:17 PM

If you followed my instructions and then performed another Spybot scan afterwards where it found nothing than I would say the fix worked. If you didn't it could also be that Spybot deleted the files afterall.

The only way to be sure is to take a deeper look at your system by creating a hijackthis log. If you want to do this then I suggest you read and follow all instructions in the pinned topic titled Preparation Guide For Use Before Posting A Hijackthis Log.

When you have done that, post a log in the HijackThis Logs and Analysis Forum, not here, for assistance by the HJT Team Experts.

It may take a while to get a response because the HJT Team members are very busy. Please be patient as they are volunteers who will help you out as soon as possible. Once you have made your post, please DO NOT make another reply until it has been responded to by a member of the HJT Team. Generally the staff checks the forum for postings that have no replies as this makes it easier for them to identify those who have not been helped. If you post another response, a team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users