View Full Version : How can i get rid of this pls help..
when i visit a site, cracks.am after i download a crack from a game,
i get this files in my Local Drive C:
drsmartload.exe, MTE3NDI6ODoxNgM.exe,
when i scanned it to virsutotal it's a trojan,
pls anyone help me how to get rid of this thing,
it slows my window start up ang lots of advertisement/s pop ups
coming up,.. i need a help plsss...
additional info to this:
after i scanned with Spybot S&D
detections:
*Smitfraud-C.
*Network Monitor
*Command Service
*Microsoft.Windows.RedirectedHosts
*TargetSaver
etc. etc.
any help would much be appreciated... thankz..
spybotsandra
2006-10-30, 14:30
Hello,
Which version of Spybot Search and Destroy do you run?
Do you have installed the latest updates?
Best regards
Sandra
Team Spybot
yup it's the latest spybot (latest updates) i installed..
after being scanned by spybot, it says restart the comp to fix all
but after i restarted, the same problem happens, same files
scanned and pop ups detected by spybot.
spybotsandra
2006-10-30, 15:51
Hello,
Please run a scan in safe mode:
http://www.computerhope.com/issues/chsafe.htm
That should fix it.
Best regards
Sandra
Team Spybot
done scanning with safe mode, files cleaned, but when i start up again
windows in not safe mode, vcmon.exe back again, the same thing
happens, nothing happened after i fix it with spybot in safemode..
when i visit a site, cracks.am after i download a crack from a game,
Cracks mean the original program was illegally modified, quickest way to have a computer that is infected enough to be exploited and act as a zombie or server of malware to infect many others.
Follow the instructions in our 'sticky' topic:
"BEFORE you POST" -Preliminary Steps and scanning with SPYBOT-S&D (http://forums.spybot.info/showthread.php?t=288)
Then start your own thread in the malware forum:
Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22)
A helper will assist you as soon as available to do so.
Cheers.
Previous topic:
http://forums.spybot.info/showthread.php?p=27102#post27102