FAAAQ Posted March 14, 2012 ID:534919 Share Posted March 14, 2012 I'm running Windows 7 Home. Got infected by Smart Fortress 2012 two days ago. I followed the instructions here:http://www.myantispyware.com/2012/02/29/how-to-remove-smart-fortress-2012-virus/However it has been coming back daily and also it continues to redirect internet surfing so today I decided to get a bit more serious about this. I found one one of the posts here to run dds.scr which I did and it seems to have helped. Attached are the logs from running. I also ran tdsskiller.exe and also fixexec.exe . These both came up empty. Attaching fixexec log file.The issues I have at the moment are:1) I'm pretty sure that this isn't the end of it. I see a bunch of PING.EXE processes running in task manager that are taking up a bunch of cpu time.2) The fiends that created this rogue-ware have perhaps done something new since I can't access the folder where it exists. I see a folder C:/ProgramData/F4D55F3B0000A2240004269CB4EB2367 but I do not have access permission to it nor can I change the permissions. Yesterday I was able to change the permissions and delete but today with this new one I'm unable to. Could it be that it downloaded a newer version that re-installed with this new block out feature?Side questions I have:- I see several other postings saying that it keeps coming back but no solution: does anyone really know how to deal with this virus or is it still so new that there's no solution ?- does anyone know the location of the company that makes the rogue-ware? they're able to charge people's credit cards so they must be trackable and they should be shutdown asapAttach.txtDDS.txtFixExec.txt Link to post Share on other sites More sharing options...
MrCharlie Posted March 17, 2012 ID:535546 Share Posted March 17, 2012 Welcome to the forum.Please remove any usb or external drives from the computer before you run this scan!Please download and run RogueKiller.Click Scan to scan the system (don't run any other options)Post back the report.MrC Link to post Share on other sites More sharing options...
LDTate Posted March 23, 2012 ID:536975 Share Posted March 23, 2012 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts