Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Spycrush..


  • Please log in to reply
17 replies to this topic

#1 Evesmum

Evesmum

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Perth. Western Australia
  • Local time:12:58 PM

Posted 10 June 2007 - 08:27 PM

hey....

my sister used my computer over the weekend and now i have this spycrush on it i tried un installing it and i cant. Ive deleted all the files but theres still an icon on my bar thing down the bottom. Im getting heaps of popp-ups and it says my computer has all this spyware. I know spycrush is the virus because i googled it and ive tried everything on how to remove it and i cant remove it!!!! :thumbsup:
Can someone please please help i will really appreciate it...

Thanks . Shana x

Sharnz x


BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • BC Advisor
  • 12,995 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:11:58 PM

Posted 10 June 2007 - 09:06 PM

Spycrush removal instructions in link below.
http://www.bleepingcomputer.com/forums/t/80749/how-to-remove-spycrush-removal-instructions/

Install Super Antispyware. Run it in safe mode. Allow it to quarantine whatever it finds.
http://www.superantispyware.com/

How To start Windows in Safe Mode
http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss

A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”


#3 model59

model59

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:03:58 PM

Posted 10 June 2007 - 09:13 PM

Ive just used the Smitfraudfix and I want to thank all those responsible.THANKYOU,THANKYOU,THANKYOU ad infinitum.
The only thing that varied from the instructions was I saw no red screen and the Notepad came up before the reboot.I rebooted anyway and all seems to be fine.That damned Spycrush appears to be gone !
This is such an excellent site !

#4 Evesmum

Evesmum
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Perth. Western Australia
  • Local time:12:58 PM

Posted 10 June 2007 - 09:23 PM

Okay thankyou for replying!!!
Ive just used the super anti spyware thing downloaded that right and i rebooted the comp in safe mode tried to open it and it came up with "The System admin has set policies to prevent this installation"

Ill have to give that Smitfraudfix a go then ... i hate computers lol i know nothing about them
thanks heaps to both of you for your help i really really really really appreciate it

Sharnz x


#5 Evesmum

Evesmum
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Perth. Western Australia
  • Local time:12:58 PM

Posted 10 June 2007 - 09:25 PM

Also.. Sorry but would super aniti spyware be ok to use in normal mode? because it will not open now im back into my normal mode...

Sharnz x


#6 oldf@rt

oldf@rt

  • Members
  • 2,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Avondale, Arizona USA
  • Local time:09:58 PM

Posted 10 June 2007 - 09:56 PM

Download and install Rogue Remover. Make sure the data base is updated. Scan the system, the program will then walk you through the removal process.

http://www.malwarebytes.org/rogueremover.php
The name says it all -- 59 and holding permanently

**WARNING** Links I provide might cause brain damage

#7 Evesmum

Evesmum
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Perth. Western Australia
  • Local time:12:58 PM

Posted 10 June 2007 - 10:14 PM

Cheers mate, ive used the superspyware thing and its quarantined all it found my computer isnt running so slow but it still has the thing in the corner with the ?mark and the X flashing and the Spycrush message is still coming up. So i will give this other one a go now. Thanks heaps

Sharnz x


#8 oldf@rt

oldf@rt

  • Members
  • 2,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Avondale, Arizona USA
  • Local time:09:58 PM

Posted 11 June 2007 - 01:18 AM

After you have completed everything, you will still need to run Spybot S&D in safe mode

http://www.safer-networking.org is the download site, make sure that you get all updates. Download and install Ad Aware, from

http://www.lavasoft.com again, make sure that you have all updates. use safe mode for both of these programs, they will work fine.
The name says it all -- 59 and holding permanently

**WARNING** Links I provide might cause brain damage

#9 Evesmum

Evesmum
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Perth. Western Australia
  • Local time:12:58 PM

Posted 11 June 2007 - 08:26 AM

yep i tried that right and it was turning up nothing even in safe mode.
i still have the spycrush questionmark and X shield on my bar thingo
I cant really understand why :thumbsup: and it was going through files and i kept seeing it was scanning through virusburst? and like it had stuff like spyarsenal and just all weird names and like casino names etc but it didnt pick them up and i cant find them. Was it just looking for these things? because i had a pop up come up for one of the casino sites.... Sorry and thanks for all your help.

Sharnz x


#10 oldf@rt

oldf@rt

  • Members
  • 2,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Avondale, Arizona USA
  • Local time:09:58 PM

Posted 11 June 2007 - 10:56 AM

Go here: http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

post the hijack this log in the correct forum.

One of the hijack this team members will help you as soon as they can.
The name says it all -- 59 and holding permanently

**WARNING** Links I provide might cause brain damage

#11 buddy215

buddy215

  • BC Advisor
  • 12,995 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:11:58 PM

Posted 11 June 2007 - 11:14 AM

Did you run the Smitfraudfix described in the link below? Do you have a problem with it?

Spycrush removal instructions in link below.
http://www.bleepingcomputer.com/forums/t/80749/how-to-remove-spycrush-removal-instructions/

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss

A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”


#12 Chaves

Chaves

  • Members
  • 38 posts
  • OFFLINE
  •  
  • Local time:12:58 AM

Posted 11 June 2007 - 06:29 PM

I just used smitfraudFix and...THANKs was woundering how to remove that anoying thing.

#13 Evesmum

Evesmum
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Perth. Western Australia
  • Local time:12:58 PM

Posted 11 June 2007 - 06:48 PM

Wel this morning i like did another scan with that Rogue Remover Pro. And it picked up some Hkey things. Because i updated the Rogue Remover last night when i did it and did about 4 scans with it the first 2 picked up stuff and i deleted it all after that nothing.
Then i updated it again this morning and it picked up 3 things i deleted them. Everything but teh rogue remover thing went blank and then that annoing thing was gone. Lol im sooo happy.
Thanks all of yous like sooooo much. I really really appreciate it. thankyou.

Sharnz x


#14 oldf@rt

oldf@rt

  • Members
  • 2,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Avondale, Arizona USA
  • Local time:09:58 PM

Posted 12 June 2007 - 12:41 AM

Evesmum, I would still like for you to post a hijack this log in the hijack this forum, here:

http://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-logs/

there may be other hidden problems that will take an expert to ferret out.
The name says it all -- 59 and holding permanently

**WARNING** Links I provide might cause brain damage

#15 Evesmum

Evesmum
  • Topic Starter

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Perth. Western Australia
  • Local time:12:58 PM

Posted 12 June 2007 - 06:42 AM

Okay so how do i do that, obviously post in that forum do i just explain my situation?

Sharnz x





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users