Avatar billede enoer Nybegynder
30. marts 2006 - 23:28 Der er 8 kommentarer og
1 løsning

SpywareQuake kan ikke fjernes

Hej Eksperter,

Hvordan slipper man af med et såkaldt antivirusprogram ved navn SpywareQuake

MVH
Noer
Avatar billede kalp Novice
30. marts 2006 - 23:30 #1
Download hijackthis herfra og gem det i en folder for sig selv på dit skrivebord

http://www.arlet.dk/hjt.exe

Start programmet og vælge, at udføre en scan samt gemme en log fil.
Når hijackthis er færdig med, at scanne vil den bede dig om en placering hvor du vil gemme "hijackthis" en tekst fil.
Gem den i samme folder som hijackthis. Når du har sagt okay hopper der et nyt vindue frem nemlig notepad med en masse tekst linjer. Marker alle linjerne og kopir dem herind så jeg kan kigge på dem. Du må ikke selv begynde, at fikse noget i hijackthis.
Avatar billede jacla Nybegynder
30. marts 2006 - 23:32 #2
Hej noer,

Jeg har selv lige haft den.

Prøv følgende:



øTools Needed for this fix:
•    smitRem.exe
•    FixSQ.reg
Symptoms in a HijackThis Log:

O4 - HKLM\..\Run: [SpywareQuake] C:\Program Files\SpywareQuake\SpywareQuake.exe /h



Note: Currently smitRem alone will not remove this infection. We are including it in this fix because SpywareQuake has been seen to install with other portions of the Smitfraud infection. The instructions here plus the use of smitRem should remove most, if not all, of this infection. Once smitRem is updated to include the removal of this infection, the guide will be updated accordingly.

Removal Instructions:
Print out these instructions as we will need to close every window that is open later in the fix.

Download FixSQ.reg to your desktop by right clicking on the following link and then selecting Save Link As or Save File as, depending on your browser.

FixSQ.reg Download Link

Confirm that the file FixSQ.reg now resides on your desktop as we will need it later.

Go to this page and click on the smitRem Download Link link to download smitRem.exe. When downloading smitRem.exe save it to your desktop. You will now see an icon on your desktop that looks like the one below.





Double-click on the smitRem.exe file. You will now see a screen similar to the one below.







Click on the Start button and the program will start extracting the files into a folder on your desktop called smitRem. When it is finished, click on the OK button. If you look on your desktop you will now see a folder called smitRem.

Go to your desktop and double click on the FixSQ.reg file that you downloaded earlier. When it asks if you would like to merge the information, press the Yes button and then the OK button.

Next, please reboot your computer into Safe Mode by doing the following:

Restart your computer

After hearing your computer beep once during startup, but before the Windows icon appears, press F8.

Instead of Windows loading as normal, a menu should appear

Select the first option, to run Windows in Safe Mode.

When you are at the logon prompt, log in as an Administrator

When your computer has started in safe mode and you see the desktop.

Click on the Start Menu

Click on the Control Panel option.

Double-click on the Add or Remove Programs icon.

Find the entry for SpywareQuake and double-click on it. Follow the prompts to uninstall the program, but do not allow it to reboot the computer if it asks.

When it has completed uninstalling you can close Add or Remove Programs and your Control Panel.

Delete the following files and folders (Do not be concerned if this folder does not exist):

C:\Windows\System32\stickrep.dll
C:\Program Files\SpywareQuake\

Close all open Windows.

Open the smitRem folder on your desktop and the contents of the folder will be similar to the image below.






Double-click on the RunThis.bat file, as shown by the arrow in the image above, to start the tool.

When the tool starts you will see a series of screens with information on them. Read each screen, and when you are finished reading it, simply press any key on your keyboard. After reading the various screens that appear, the program will start the removal process.

If there is an uninstaller present for an infection that smitRem removes it will start this uninstaller.

Simply click on the Uninstall button and allow the uninstaller to finish. When it is completed, it will close automatically and smitRem will prompt you to continue. Now you should press any key to continue.

When no more uninstallers can be found, the tool will continue. Your desktop will disappear and you will start seeing text scroll across the screen. This is normal and nothing to be concerned about. When smitRem has finished running it will automatically start the Disk Cleanup program as shown by the image below.






This program will remove all Temp, Temporary Internet Files, and empty your Recycle Bin in order to remove any leftover files installed by this infection. This process can take up to a few hours depending on your computer, so please be patient. When it is complete, it will close automatically and you will be back at your desktop.

When the tool is finished, it will will create a log named smitfiles.txt in the root of your drive, eg; Local Disk C: or the partition where your operating system is installed. Examining that log should show that the infection was cleaned.

Reboot your computer back to normal mode.

Perform an onlinescan with Panda: Panda Online

Once you are on the Panda site click the Scan your PC button

A new window will open...click the Check Now button

Enter your Country

Enter your State/Province

Enter your e-mail address and click send

Select either Home User or Company

Click the big Scan Now button

If it wants to install an ActiveX component allow it

It will start downloading the files it requires for the scan (Note: It may take a few minutes)

When download is complete, click on Local Disks to start the scan


Your computer should now be free of the SpywareQuake infection.

If you are still having problems with spyware after completing these instructions, then please follow the steps outlined in the topic linked below:

Preparation Guide For Use Before Posting A Hijackthis Log




This is a self-help guide. Use at your own risk.


BleepingComputer.com can not be held responsible for problems that may occur by using this information. If you would like help with any of these fixes, you can post a HijackThis log in our HijackThis Logs and Analysis forum.

If you have any questions about this self-help guide then please post those questions in our AntiVirus, Firewall and Privacy Products and Protection Methods forum and will someone will help you.

MVH Jan C
Avatar billede jacla Nybegynder
30. marts 2006 - 23:34 #3
Du kan se min "sag" på http://www.eksperten.dk/spm/698356
Avatar billede jacla Nybegynder
30. marts 2006 - 23:59 #4
UPS

Her er linket til opskriften

MVH

JAN C
Avatar billede jacla Nybegynder
31. marts 2006 - 00:03 #5
Avatar billede enoer Nybegynder
31. marts 2006 - 00:36 #6
Tak for hurtigt svar,

Jeg ser på opskriften i morgen og vender tilbage.


Mvh

enoer
Avatar billede enoer Nybegynder
31. marts 2006 - 02:16 #7
Hej

Jeg har kørt guiden som du henviser til.

Jeg er nu sluppet at med det L..te program. tak for hjælpen

Send et svar og du får point.

En lettet enoer
Avatar billede jacla Nybegynder
31. marts 2006 - 02:19 #8
Det glæder mig,

Løsning: http://www.bleepingcomputer.com/forums/topic47826.html

NB!

husk at lukke :-))

Mvh

Jan C
Avatar billede enoer Nybegynder
31. marts 2006 - 02:21 #9
debatten er lukket.

Mvh

enoer
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester