Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works

SpySherriff: Round Thirty Million?

  • This topic is locked This topic is locked



    New Member

  • Member
  • Pip
  • 1 posts
Hello. .my name is Jason. First off, I apologize if this thread is in the wrong place or anything - I don't really know this site well at all.
I'm not computer illiterate, but this new bout with spyware has my head spinning. Yesterday, while browsing on Internet Explorer (browser have always used), I got what looked like a normal popup advertisement, except that when I closed it, my computer made that "thinking" noise. . the one it generally makes when downloading, installing, or running something (sorry - I dont know computer lingo well!). A few moments later, 28 icons popped up on my desktop (the usual - Casino, Pornograpy, Insurance, Cigarettes, DVDs,etc) and my tray at the bottom flashed a "Your computer is infected with spyware. Windows will now install the latest anti-virus software . . ." message. I didn't click it, but the software (Spysherriff) was installed anyway. I uninstalled that program and ran AdAware, and it caught 70 some-odd occurrences that I proceeded to delete. AdAware informed me there was one (I can't remember which, but it was a .dll) that couldn't be deleted; Would I like to have AdAware remove it after the next reboot? I selected yes and restarted my system. AdAware loaded and I deleted what I thought was the last malignant file - but alas, my problems were just beginning.

Now I cannot access my desktop. I can get to the desktop, but it's all locked up- I can't select anything, and the Start menu has a permament hour-glass icon whenever I move the mouse down there. This happens every time I restart my computer - I can sign into my Administrator account, and SpySherriff will run, but nothing else. I can cancel Spysherriff, but everything remains locked. I have done end-task on every program I don't recognize, but the desktop remains inaccessible. I've rebooted in Safe Mode, Safe Mode with Command Prompt, Last Known Good Configuration, even VGA Mode - they're all the same. SpySherriff is all that indicates my computer is even working anymore. I have read your postings on what to do if you suspect adware or spyware, but I can't DO any of that stuff on my computer - I can't get on the internet or reach the control panel or anything. It's just all locked up.

Is there anything I can do? I realize without having access to my computer's files, there probably isn't much hope, but I don't have any real idea. I'm more than willing to reformat my computer, but there are several files I would like to back up before doing that. . any chance of that happening?

Thanks. If I'm breaking any protocols on this site with my post or way in which I'm posting, I apologize. I'm just (like everyone who goes through this kinda thing, doubtless) pretty frustrated and confused.

good day,
  • 0




    retired HiJack Helper

  • Retired Staff
  • 5,080 posts
Welcome Jason to Geeks to Go!

We'll need to transport some files from the computer you are now using, to your infected computer.

Please download noahdfear's smitRem.exe© and save the file to your desktop.
Right click on the file and extract it to it's own folder on the desktop.
So you'll get a new folder called smitrem on your desktop.
I want you to put that folder on cd, floppy or usb-stick.

On your infected computer, boot again in safe mode and open your task manager again.
Now insert the cd, floppy or usb-stick where you saved the smitrem folder in your infected computer.

In your Task Manager, click 'applications' (first tab).
Click the New Task button.
Cick browse.

Now browse to the drive where your floppy, usb-stick or cd is present (could be A or D or E or F.. you'll see..)
Search for that smitrem folder.
Right click on the smitrem folder and choose: Copy

Now browse again via Task Manager to My Documents or Program Files.
Right click somewhere in there, right click and choose: Paste
Now open the smitrem folder you just copied and pasted and click the file: RunThis.bat
Then click open.
In the window where it says 'Create new task', click OK.

Normally, you'll have to drag the different windows you'll see to left or to right, because normally they will open on top of each other and you wont see the command window the tool starts that is under it.
You'll see a blue window now.
Follow the prompts on screen.
Wait for the tool to complete.

When done, in Task Manager, click 'shut down' from the menu on top and click restart. Your computer will reboot now.
Reboot to normal mode and post a Hijackthis log in your next reply.

Edited by g2i2r4, 05 November 2005 - 06:11 AM.

  • 0

Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP