You have the latest variant of the PUPER.G/SmitFraud/PSGuard/SpyAxe trojan. Please follow these instructions
Download
SmitRem.zip and save the file to your desktop.
Right click on the file and extract it to it's own
folder on the desktop.
Place a shortcut to
Panda ActiveScan on your desktop.
Please download the trial version of
Ewido Security Suite
Please read
Ewido Setup Instructions
Install it, and update the definitions to the newest files. Do
NOT run a scan yet.
If you have not already installed Ad-Aware SE 1.06, follow these download and setup instructions, otherwise, check for updates:
Ad-Aware SE Setup
Don't run it yet!
Next, please reboot your computer in
SafeMode (By repeatedly tapping the F8 key until the menu appears).
Open the
smitRem folder, then double click the
RunThis.bat file to start the tool. Follow the prompts on screen.
Wait for the tool to complete and disk cleanup to finish.
The tool will create a log named
smitfiles.txt in the root of your drive, eg; Local Disk C: or partition where your operating system is installed. Please post that log along with all others requested in your next reply
Open
Ad-aware SE and do a full scan. Remove all it finds.
Run Ewido Security Suite:
- Click [Scanner]
- Click [Complete System Scan] to begin scanning.
- Click [OK] when prompted to clean files
- With the first file it prompts to clean, select the option - "Perform action on all infections" - & choose clean and click [OK].
- Once finished, click the [Save report] button
- Save the report to your desktop
Close Ewido
Next go to
Control Panel click Display > Desktop > Customize Desktop > Website > Uncheck "
Security Info" if present.
Reboot back into Windows and click the
Panda ActiveScan shortcut, then do a full system scan. Make sure the
autoclean box is checked!
Save the scan log and post it along with a new
HijackThis Log and the
Ewido Log by using
Add Reply.