[andybeal]

My laptop desck top has been replaced by a fatal error warning. Error caused by Trojan Spy listed above. I cannot get into the PC at all, CPU is running at 100%. Help!!!
Can I recover all my data; or is it terminal?

[Advertisements]

Hi andybeal, welcome to GeeksToGo

Can you access the task manager by CTRL+ ALT+DEL ?

[Armodeluxe]

Hi andybeal, welcome to GeeksToGo

Can you access the task manager by CTRL+ ALT+DEL ?

[andybeal]

Thanks for the reply. Yes, I can get to the task manager, but it sooo slow and I can see the the CPU is at 100%.

Nothing seems to respond because of the speed.

I really don't want to loose my data.

Thanks

andybeal

[Armodeluxe]

We'll need to transport some files from the computer you are now using, to your infected computer.

Download smitRem.zip and save the file to your desktop.
Right click on the file and extract it to it's own folder on the desktop.
So you'll get a new folder called smitrem on your desktop.
I want you to put that folder on cd, floppy or usb-stick.

On your infected computer, boot in safe mode by tapping F8 before Windows starts to load and open your task manager again.
Now insert the cd, floppy or usb-stick where you saved the smitrem folder in your infected computer.

In your Task Manager, click 'applications' (first tab).
Click the New Task button.
Cick browse.

Now browse to the drive where your floppy, usb-stick or cd is present (could be A or D or E or F.. you'll see..)
Search for that smitrem folder.
Right click on the smitrem folder and choose: Copy

Now browse again via Task Manager to My Documents or Program Files.
Right click somewhere in there, right click and choose: Paste
Now open the smitrem folder you just copied and pasted and click the file: RunThis.bat
Then click open.
In the window where it says 'Create new task', click OK.

Normally, you'll have to drag the different windows you'll see to left or to right, because normally they will open on top of each other and you wont see the command window the tool starts that is under it.
You'll see a blue window now.
Follow the prompts on screen.
Wait for the tool to complete.

When done, in Task Manager, click 'shut down' from the menu on top and click restart. Your computer will reboot now.
Reboot to normal mode and post a hijackthis log in your next reply along with smitfiles.txt. The tool will create a log named smitfiles.txt in the root of your drive, eg; Local Disk C: or partition where your operating system is installed. Please post that log along with a HijackThis log in your next reply.

Regards,

Armodeluxe

[Armodeluxe]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.