Security management Toolkit
Story: Smart security: network scanners
Posted by: Jessica (Thursday 17 June 2004, 1:07 AM)
Removing it from the desktop is addresses just one of the wounds this causes.
This one is definitely a f***er.
I found that it installed 4 .exe files (I have win2k, so windows dir is winnt, yours may be just windows).
winnt\seksdialer.exe
winnt\desktop.exe
winnt\system.exe
winnt\downloaded program files\load.exe
It also seemed to install winnt\system32\system32.dll, at least it had a create date as the time this f***er took over. (I was trying to help someone else debug over the phone, went to the website & it's been downhill ever since.) I checked 2 other Win2k systems and they didn't have this file, so I moved it to a floppy. Still not sure if I need it, though windows seems to run without, just without sound at the moment.
I then ran through the registry and replaced or deleted:
secure.html (on another infected pc, it was an ip, so whatever your home page is getting set to - look for that)
load.exe (this is installed into IE, like the google or yahoo toolbars, so everytime you start up IE, it loads itself again) I deleted the branch that held this file.
I didn't find the other .exe's in the registry.
Then I went to control panel -> internet options and changed the home page and deleted all files.
Then to the cookies location (varies per platform) and deleted them all.
Then I ran through Windows Updates (choose from Tools menu in IE) until there were no more CRITICAL updates. I chose to skip the rest.
Then I made sure I had the latest virus defs & scanned (nothing found).
Then I went to webroot.com & installed the trial version of Spy Sweeper & ran that.
For the most part, it seems ok, but now my sound is hosed, and the pc seems much slower.
I saw a mstask.exe as "Guest" mentioned, but I don't seem to have access to get rid of that. So off to find out where that's hiding.
I sent them a nasty message on their site. I also looked them up via whois, but of course the phone # for the contact is disconnected.
Good luck all.
Full Talkback thread
Story: Smart security: network scanners
-
my computer has been invaded by smart security on... gillian mary holland -
I HAVE THIS SAME PROBLEM!!! How do you remov... Kelli -
I cannot find the 'Cali student' instructions... Mike
-
Thank you for your information. Can you tell me ho... Anonymous
-
ok, this is how you remove it. right click at the... Anonymous
-
I too, have just been hijacked by these moron... Anonymous
-
Thank you for the help in removing this... Anonymous -
Thank you! Thank you! Thank you! S... Anonymous
-
Man! Thank you!! I was really gettin... Anonymous
-
can i just say a HUGE thanks to the student f... Svend
-
Thanks for the advice over here,
I looke... Sander
-
i followed everyones advise on here... jen
-
Ok... I have a friend who has this probl... brewer
-
I just spent 3 days trying to rid this f***er... Anonymous
-
wow! thank you student in cali, you are aweso... hiroyuki
-
Smart-Security
Oh these people really suck!
L... Anonymous
-
whoever did this smart security thing should... Anonymous
-
I have no security tab on my desktop/web wind... makie
-
i really wish i read this before i tried to g... Anonymous
-
My right click button doesnt work, how can i... April
-
Removing it from the desktop is addresses just one... Jessica -
Jessica, I tried to do what you said to get r... Mike B.
-
Thanx to student from cali !! These cret... bazza
-
How can I get the information on de... kill smart security -
Hi all!
I followed the instructions and manag... Anonymous
-
The Grammar! The Horror!
without this program... blair
-
Can anyone help me to remove this stupid secu... Anonymous
-
Can anyone help me to remove this stupid... Anonymous
-
thanx for your help.it took 3 times to get ri... den
-
go to smart secxurity sight ,use there remova... den
-
i saved there free clean removal tool f... den
-
Hi all. I followed the instructions on how t... Anonymous
-
Like Gillian Mary Holland in the UK my PC was inva... Jude Mndeme
-
I has been invaded by smart-security wallpaper, an... Albert
-
Many thanks to the student from Cali for help... Anonymous
-
ty so much........ that smart thingy has been the... jonathan
-
If you right click and select view source on the "... Ziegg
-
anyone can email me if you need the fix for this p... joe vanwormer
-
If the Cali-tip doesn't work,try this...
I couldn'... Anonymous
-
I too have been attacked by smart-security, I... Jewett
-
hi! how can i remove smart security ad on my deskt... Anonymous
-
this is the only way i know of how to remove... rami kanso
-
go to link and take the freeclean.exe
That's... Carlos Theodoro
-
This smart security thing is turning me... Anonymous
-
many thanx to the guy from california !
i was... Michael
-
Hey... I am a 17 year old from Mexico, and I am a... 23c0n
-
Easy to fix. For clarication to anybody who gets... Know Names
-
hi all,
go to their sight and run their remov... den
-
i got rid of the SMART SECURITY wallpaper by usin... Slava
-
http://www.smart-security.info/removal.html
go to... Carlos Theodoro
-
Still there! I deleted the "smart security" screen... Anonymous
-
SMART SECURITY YOU GUYS SUCK
Can someone please he... Mark
-
My Kudos to the anonymous student in Cal.
I'v... Rix Seacord
-
Hi everyone, I must admit whoever did this is very... jovi otite
-
I was hijacked by this smartsecurity today an... Anonymous
-
Both my brother's and mother's PCs got infected wi... Tom
-
how to i get rid off smart security from my destop... neo smith
-
my computer has also been taking over by smartsecu... Anonymous
-
I have problem with smart security background. The... Anonymous
Back to: Smart security: network scanners
