Hi my friend has a really bad virus infection , hope u can help it out

Where's the log?

Hi Matt.


He has a Spywarequake and an Spyfalcon infection on there , among severall others.

First have him uninstall WinAntiVirus Pro 2006 , that is no AV but malware itself.

Then run the Smitfraud fix , see link and instructions here:

http://siri.urz.free.fr/Fix/SmitfraudFix_En.php

And when done post the Smitfraud log , plus a new hjt log to get the rest.

Here is it

Lets get the rest of it.



First uninstall Ultimate Defender in add/remove programs if present.



Click Start>Run and type in: services.msc
Click OK
In the Services window find: Firewall service
Select/highlight and right click the entry, and choose: Properties
On the General tab, under Service Status click the Stop button
Beside: Startup Type, in the drop menu, select: Disabled
Click Apply, then OK

Open HJT and click config > misc tools > “delete an NT service”
Copy and past: FWSvc
Click OK.


Then boot in safemode and fix these with hjt:
(if still present)

Delete the files in bold manually and also delete this file:

C:\WINDOWS\system32\regperf.exe

Then reboot , and post a new hjt log to check if its gone.

Here is it