[SOLVED] Spyblocker Pop-up

braddds · 06-26-2007, 02:55 PM

I have a pc that shows a "Spyblocker" pop up indicating several threats running. If you click on the icon, running in the system tray, it launches a web page where you can download it. This acts just like the spyware it claims to stop.

I've done a search and have found it (Spyblocker) called "spyware" to a "great product"! Regardless of which it is I'd like it gone. I have run Hitmanpro but no joy. I used WinXP "safemode" option in Hitman and it (Spyblocker) was still running in the system tray, making it impossible to remove.

The person claims he downloaded or installed nothing.

Has anybody any experience with removing this trayicon?

chauffeur2 · 06-26-2007, 09:25 PM

Greetings braddds, Welcome to TSF!

I strongly recommend that you go here; read and follow the instructions very carefully; then, post your HiJackThis Log here. (Just click on the coloured links.)

Once this is done, please be patient, as the Security Team is usually very busy; however, one of the trained analysts will answer your request as soon as they can.

Good Luck with it.

Kind Regards,

braddds · 06-27-2007, 10:56 AM

Oops...sorry I re-read the pop-up and it said "Spylocked" not 'Spyblocker'! Anyway I found the offending .dll file in the system32 directory, renamed and rebooted. No system tray icon. I'm re-running Hitmanpro to cleanup the leftovers!

**Glaswegian** · 06-27-2007, 11:46 AM

Hi braddds

chauffeur2 gave you excellent advice. SpyLocked is part of an infection called Smitfraud and needs specialised tools to remove it fully. It may also have invited others to the party. I would recommend you follow the previous instructions and post your logs in the HJT Forum.

braddds · 07-02-2007, 05:34 PM

Thanks for the reply

Sorry for the delay in getting back. After removing the .dll file and running hitmanpro everything was cleared out. I checked with HJT and it appears all is clean. No scraps or offending programs poped up or showed in HJT.

Thanks again for the advice.

chauffeur2 · 07-02-2007, 08:33 PM

Hi again braddds,

The fact that you think that by just removing the .dll files has completely "removed" this threat, does not necessarily apply.

Glaswegian mentioned that the infection your computer has is part of the 'Smitfraud Family' and does require specialised tools and advice to remove them completely.

Glaswegian

Quote:

chauffeur2 gave you excellent advice. SpyLocked is part of an infection called Smitfraud and needs specialised tools to remove it fully. It may also have invited others to the party. I would recommend you follow the previous instructions and post your logs in the HJT Forum.

I therefore strongly suggest that you follow the advice and instructions I gave you in Post #2 above.

Kind Regards,

braddds · 07-03-2007, 11:00 AM

Thanks again for your concern. As I've said the computer IS clean. I'm the guy everyone brings their messed up rigs to fix. Just was looking for some more info before continuing.

Love the 5 step program by the way! I think I'll have people do this before hand! It'll make my job a whole lot easier ;)

Thanks again.

06-26-2007, 02:55 PM	#1 (permalink)
braddds Registered User Join Date: Jun 2007 Posts: 4 OS: WinXP	[SOLVED] Spyblocker Pop-up I have a pc that shows a "Spyblocker" pop up indicating several threats running. If you click on the icon, running in the system tray, it launches a web page where you can download it. This acts just like the spyware it claims to stop. I've done a search and have found it (Spyblocker) called "spyware" to a "great product"! Regardless of which it is I'd like it gone. I have run Hitmanpro but no joy. I used WinXP "safemode" option in Hitman and it (Spyblocker) was still running in the system tray, making it impossible to remove. The person claims he downloaded or installed nothing. Has anybody any experience with removing this trayicon?

06-26-2007, 09:25 PM	#2 (permalink)
chauffeur2 Manager Emeritus Join Date: Feb 2006 Location: Adelaide, South Australia Posts: 10,180 OS: Xp Sp3 with all updates + Vista™ Ultimate SP1. My System	Re: Spyblocker Pop-up Greetings braddds, Welcome to TSF! I strongly recommend that you go here; read and follow the instructions very carefully; then, post your HiJackThis Log here. (Just click on the coloured links.) Once this is done, please be patient, as the Security Team is usually very busy; however, one of the trained analysts will answer your request as soon as they can. Good Luck with it. Kind Regards, __________________ Dave T. Submit New Articles If it works, Don't fix it! Especially if Bill Gates had anything to do with it!!

06-27-2007, 10:56 AM	#3 (permalink)
braddds Registered User Join Date: Jun 2007 Posts: 4 OS: WinXP	Re: Spyblocker Pop-up Oops...sorry I re-read the pop-up and it said "Spylocked" not 'Spyblocker'! Anyway I found the offending .dll file in the system32 directory, renamed and rebooted. No system tray icon. I'm re-running Hitmanpro to cleanup the leftovers!

06-27-2007, 11:46 AM	#4 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 23,934 OS: Win XP Pro SP3 / Win 7 RC My System Blog Entries: 10	Re: Spyblocker Pop-up Hi braddds chauffeur2 gave you excellent advice. SpyLocked is part of an infection called Smitfraud and needs specialised tools to remove it fully. It may also have invited others to the party. I would recommend you follow the previous instructions and post your logs in the HJT Forum. __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. Ad-Aware::SpywareBlaster::SpyBot::SpywareGuard::SnoopFree::AVG Free::HOSTS File::HijackThis::Donate::Photographers Corner

07-02-2007, 05:34 PM	#5 (permalink)
braddds Registered User Join Date: Jun 2007 Posts: 4 OS: WinXP	Re: Spyblocker Pop-up Thanks for the reply Sorry for the delay in getting back. After removing the .dll file and running hitmanpro everything was cleared out. I checked with HJT and it appears all is clean. No scraps or offending programs poped up or showed in HJT. Thanks again for the advice.

07-03-2007, 11:00 AM	#7 (permalink)
braddds Registered User Join Date: Jun 2007 Posts: 4 OS: WinXP	Re: Spyblocker Pop-up Thanks again for your concern. As I've said the computer IS clean. I'm the guy everyone brings their messed up rigs to fix. Just was looking for some more info before continuing. Love the 5 step program by the way! I think I'll have people do this before hand! It'll make my job a whole lot easier ;) Thanks again.