Friend has a spyware/virus

[Soccerman06]

She has recently somehow downloaded something called spyshredder and it says that she has some sort of virus/spyware on her computer. It shows up when she turns her computer on and when she cancels the load process of XPupdater.exe with a location of C:/windows.

Now the Spyshredder is apparently one of those trial versions of the real program which you have to pay for online... we have tried the add/remove solution and that didnt work, also did a search/find for spyshredder and a whole list of files came up and I am wary of deleting all of them (30 or so) because they are in important places. What/how should I do to get rid of the spyware thingy. She thinks taking it to bb/geek squad, I say some virus program like mcfee.

Moved from Software For Windows to Security.

AnandTech Moderator
mechBgon

 

[law9933]

Give her a list of trusted websites to only download from, or I could.

http://www.bleepingcomputer.com/forums/topic98791.html

Smithfraud is often the first thing HJT advisers have you do.

 

[f1sh3r]

download and run the trial version of spysweeper with antivirus.

http://www.softpedia.com/progD...us-Download-65622.html

should take care of it for you.

 

[Captante]

Here are some fairly simple instructions to remove it ... be sure to print them out before you begin:

Link


You might also try installing Spybot Search & Destroy v1.5 as it should be able to assist you ... try these steps & report back.

 

[John]

Originally posted by: f1sh3r
download and run the trial version of spysweeper with antivirus.

http://www.softpedia.com/progD...us-Download-65622.html

should take care of it for you.

The only thing that will accomplish is adding bloat to your pc.

http://valleywag.com/tech/webr...s-core-team-208837.php

Chances are if you have a smitfraud infection you've got some other nasties on your pc. I'd recommend running all of the tools in my rogueremoval kit, then post a hjt & combofix log afterwards.

http://www.elitekiller.com/files/rogueremoval.zip