Computing.Net > Forums > Security and Virus > McAfee, Adaware & Spybot no help

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

McAfee, Adaware & Spybot no help

Reply to Message Icon

Original Message
Name: cxgcxg
Date: February 8, 2007 at 12:02:17 Pacific
Subject: McAfee, Adaware & Spybot no help
OS: Windows XP
CPU/Ram: 512MB
Manufacturer/Model: Dell C521
Comment:

I have McAfee installed on a (full) trial preiod as my computer is still quite new. It has recently found four Trojans/Memory Trojans but it cannot clean, delete or quarantine them.

The info that McAfee gives is:

The file C:/WINDOWS/system/csrss.exe is infected by the New Malware.j trojan and cannot be cleaned.

AND

The file C:/Program Files/Window Media Player/skins/Data/smss.exe is infected by the New Malware.j trojan and cannot be cleaned.

As mentioned in the title, Lavasoft Adaware and Spybot don't even find it/them and although I don't (yet?) notice any adverse effects on my computer I would like to clean it of these trojans.

Can anybody help me find a way to zap these please?

Thanks
cxgcxg


Report Offensive Message For Removal


Response Number 1
Name: jabuck
Date: February 8, 2007 at 14:22:43 Pacific
Reply:

Please post a Hijack This log so that the files associated with the virus/spyware/hijacker can be identified.

Please download HJTsetup.exe from this link http://www.thespykiller.co.uk/files/HJTsetup.exe to your desktop.
Doubleclick on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click "next" in the setup dialogue boxes until you get to the "Select Addition Tasks" dialogue.
Put a check by "Create a desktop icon" then click "Next" again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click "Finish" and it will launch Hijack This.
Click on the "Do a system scan and save a logfile" button. It will scan and the log should open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log and post it in this thread.

Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly.

Please download SmitFraudFix from this link http://siri.urz.free.fr/Fix/Smitfra... Then extract the contents to your desktop.
!!!! Only run option #1 as runing the other options on an uninfected computer will damage the desktop.!!!!
Open the "SmitfraudFix" folder and double-click "smitfraudfix.cmd"
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.
Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.


Report Offensive Follow Up For Removal

Response Number 2
Name: Beachcoffee
Date: February 8, 2007 at 17:40:35 Pacific
Reply:

Run System file checker (SFC) to replace the C:/WINDOWS/system/csrss.exe file. To do this you need the windows XP install CD. To run SFC click Start - Run - type SFC press <enter>.

C:/Program Files/Window Media Player/skins/Data/smss.exe is part of windows media player. Uninstall WMP and reinstall to remove this infected file.

If you have other infected files similar methods to replace the files are necessary.

Compaq Presario SR1720NX Desktop Computer
AT&T SBC Yahoo DSL Home
Linksys Router/2 computers


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home



Results for: McAfee, Adaware & Spybot no help

W32.Spybot.Worm (HELP I'm lost!)
    Summary: Symantec is telling me that I have the W32.Spybot.Worm. I poked around in the forums, but they were no help. I need help cleaning up my system! ...
www.computing.net/answers/security/w32spybotworm-help-im-lost/21523.html

Trusting Adaware and Spybot
    Summary: First-time poster here: the advice here's gone a long way to helping secure my computer, which I appreciate. Question: I recently downloaded, installed, and ran Adaware and Spybot, which turned up a f...
www.computing.net/answers/security/trusting-adaware-and-spybot/7998.html

Need Help w/ Virus Adware?
    Summary: Hello Everyone, I believe i have a virus or adware but am not sure. Everytime i open up internet explorer i get spyware & antivirus advertisement popups from "SecureExportCleaner" requesting that i sc...
www.computing.net/answers/security/need-help-w-virus-adware/23470.html








Which MP3 player do you have?

iPod/iPhone
Zune
Something Else
None


View Results

Poll Finishes Today.
Discuss in The Lounge
Poll History






Data Recovery Software