Spyware, viruses, & security forum: Welcome to S,V, & S forum; Security Tools and Removal Resources

AVG 7.5, formerly Ewido Security Suite

Ad-Aware SE (Lavasoft)

Spybot - Search & Destroy 1.4 (Safer-Networking)

Trend Micro standalone Sysclean "in the wild" cleaner

SpySweeper trial version

CCleaner

Trojan Hunter trial version

Doctor Web CureIT free virus remover

Donwload: http://www.trendmicro.com/download/dcs.asp

It is a standalone scanner and is designed to clean registries and system files from 'in-the-wild' malware infections.
Canned:

Create a folder on your desktop called Sysclean.
Go to http://www.trendmicro.com/download/dcs.asp and download sysclean package to the folder you made.
Go to http://www.trendmicro.com/download/pattern.asp and download the Official Pattern Release for windows to your desktop.
This file will be called lptXXX.zip (XXX represents the version number)
Unzip lptXXX.zip and you'll get the file lpt$vpn.XXX.
Move the lpt$vpn.XXX to that Sysclean-folder you created on your desktop.

Turn off your antivirus which is installed on your system because it can interfere with the Sysclean-scan.

Open the sysclean-folder and doubleclick sysclean.com.
Check: Automatically clean or delete detected files.
Click scan.

Doctor Web CureIT free virus remover

Dr.Web CureIT! detects and removes
* Mass-mailing worms * E-mail viruses * Peer-to-peer viruses * Internet worms * File viruses * Trojans * Stealth viruses* Polymorphic viruses * Bodiless viruses * Macro viruses * MS Office viruses * Script viruses * Spyware * Spybots * Password stealers * Paid Dialers * Adware * Riskware* Hacktools * Backdoors * Joke programs * Malicious scripts * Other malware*

How do I use Dr.Web CureIt!?
Download Dr.Web CureIt! from our web-site. Run the utility and confirm its launch by pressing the "OK" button and wait for the scanning results of the main memory and startup files. If you want to scan hard drives of your computer, select the objects for scanning in the central part of the scanner window and press "Start scanning" in the right bottom corner.

Our Online Scanner 3.3.0 was released with a new mix of technologies.

It's *free* to use (requires Internet Explorer). Custom Scan options are possible. You can scan your entire system or a single folder.

http://support.f-secure.com/enu/home/ols.shtml

with several common Anti-Virus tools to attempt to determine if the uploaded file is in fact some form of Malware.

Jotti Malware Scan
http://virusscan.jotti.org/

Virus Total
http://www.virustotal.com/

Virus.Org Rogue File Scanning Service
http://scanner.virus.org/

SpywareBlaster from javacool will block bad ActiveX and harmful cookies from getting on to your PC in the first place. Just download and install the program. Open SpywareBlaster, check for and download updates, then 'select all' to protect against all items checked. That's it! Just return to check for updates every couple of weeks.

IE-SPYAD adds a long list of sites and domains associated with known advertisers, marketers,and hijackers to the Restricted sites zone of Internet Explorer

Site Advisor is a browser Plug-in that assigns a safety ranking to the domains listed in your search engine results. A simple three color system is used to indicate the safety level of a website:

* Red (Warning)
* Yellow (Use caution)
* Green (Safe).

According to the Site Advisor website, 95% of websites have been tested.

A website's safety assignment is made on the basis of the following criteria:

1. Spam generated from filling out forms on the website.
2. Safety of site downloads
3. Popup advertisements and nuisance behavior encountered
4. User feedback

To install Site Advisor, just download the Plug-in for Internet Explorer or the Plug-in for FireFox

Some security programs with active monitoring processes are known to interfere with automatic scanners .

Please turn off or disable any of the following programs you may have, before running your preliminary scans .

To disable these programs, please follow the instructions. Some of these programs will automatically restart upon reboot, so you will have to repeat these disabling steps as required. After Malware Removal is complete, you should reactivate these protective programs.

Spybot S&D (Teatimer)
Ad-Aware Ad-Watch
Spywareguard
Windows Defender
TrojanHunter Guard
Disable SpySweeper
WinPatrol
AVG Anti-Spyware (formerly ewido)
Spyware Doctor
Prevx
ProcessGuard
ZoneAlarm's OS Firewall

1. Right click on the Ad-Watch icon in the system tray.
2. At the bottom of the screen there will be two checkable items called "Active" and "Automatic".

Active: This will turn Ad-Watch On\Off without closing it
Automatic: Suspicious activity will be blocked automatically

3. Uncheck both of those boxes.

# Click on "Tools"
# Click on "General Settings"
# Scroll down to "Real-time protection options"
# Uncheck "Turn on Real-time protection (recommended)"
# Click "Save"

Spy Sweeper version 4:

* Open it, Click Options over on the left, then Program options
* Uncheck load at windows startup.
* Over to the left, Click shields and Uncheck all there.
* Uncheck home page shield.
* Uncheck automatically restore default without notification.
* Reboot your machine for the changes to take effect.

SpySweeper version 5:

o disable SpySweeper Shields

* Open SpySweeper.
* Click Shield Settings on the right

(or Shields on the left, depending what screen you're on).

* Click Internet Explorer and uncheck all items.
* Click Windows System and uncheck all items.
* Click Hosts File and uncheck all items.
* Click Startup Programs and uncheck all items.
* Close SpySweeper.

Reboot you computer, and ensure Spy Sweeper is disabled.

Right-click the running icon of CounterSpy in the system tray.
With your mouse, hover over Active Protection Status (This should be enabled).
A menu will slide out and then you need to right click on "Disable Active Protection".

From within Spyware Doctor, click the "OnGuard" button on the left side.
Uncheck "Activate OnGuard".

1. Right-click the blue lock ProcessGuard icon located in the system tray.
2. Uncheck 'protection enabled'
3. Click yes.

This tool removes Desktop Hijack malware: AdwarePunisher, AdwareSheriff, AlphaCleaner, Antispyware Soldier, AntiVermeans, AntiVermins, AntiVerminser, AntivirusGolden, AVGold, BraveSentry, MalwareWipe, MalwareWiped, MalwaresWipeds, MalwareWipePro, MalwareWiper, PestCapture, PestTrap, PSGuard, quicknavigate.com, Registry Cleaner, Security iGuard, Smitfraud, SpyAxe, SpyCrush, SpyDown, SpyFalcon, SpyGuard, SpyHeal, SpyHeals, SpyLocked, SpyMarshal, SpySheriff, SpySoldier, Spyware Vanisher, Spyware Soft Stop, SpywareLocked, SpywareQuake, SpywareKnight, SpywareSheriff, SpywareStrike, Startsearches.net, TitanShield Antispyware, Trust Cleaner, UpdateSearches.com, Virtual Maid, VirusBlast, VirusBurst, Win32.puper, WinHound, Brain Codec, DirectVideo, EliteCodec, eMedia Codec, FreeVideo, Gold Codec, HQ Codec, iCodecPack, iMediaCodec, Image ActiveX Object, IntCodec, iVideoCodec, JPEG Encoder, Key Generator, Media-Codec, MediaCodec, MMediaCodec, MovieCommander, MPCODEC, My Pass Generator, PCODEC, Perfect Codec, PowerCodec, PornPass Manager, PornMag Pass, PrivateVideo, QualityCodec, Silver Codec, SiteEntry, SiteTicket, SoftCodec, strCodec, Super Codec, TrueCodec, VideoAccess, VideoBox, VidCodecs, Video Access ActiveX Object, Video ActiveX Object, VideoCompressionCodec, VideoKeyCodec, VideosCodec, WinAntiSpyPro, WinMediaCodec, X Password Generator, X Password Manager, ZipCodec...

Download plus instructions:

http://siri.urz.free.fr/Fix/SmitfraudFix_En.php