# fux0r3d my computer in four seconds. **URL:** \ **Category:** NYSpeed Off Topic\ **Created:** [June 11, 2007, 1:16pm UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697 "2007-06-11T13:16:08Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![JustinH](https://avatars.discourse-cdn.com/v4/letter/j/9fc29f/32.png) [@JustinH](https://forums.speedlife.net/u/JustinH)\ **Post date:** [June 11, 2007, 1:16pm UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/1 "2007-06-11T13:16:08Z")
This is a fully patched xp box running AVG antivirus, all of spybots protections, and a hardware firewall. I went from a auto forum to a link to one of those sites that let you upload files, and download them to share with your friends. I clicked the download link and then ten command boxes opened up at once. I was totally fucked. You can’t close it, you can’t do anything. It was installing this win antivirus pro software on the computer. Then I uninstalled the win antivirus pro software, and ran spybot. Here’s how it looks. Now I’ll have to post a hijackthis! log to a forum to get some help getting it cleaned. This is one nasty nasty infection. ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [June 11, 2007, 1:17pm UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/2 "2007-06-11T13:17:16Z")
n00b ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [June 11, 2007, 1:17pm UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/3 "2007-06-11T13:17:31Z")
Post the hijackthis log on here… ---
**Author:** ![JustinH](https://avatars.discourse-cdn.com/v4/letter/j/9fc29f/32.png) [@JustinH](https://forums.speedlife.net/u/JustinH)\ **Post date:** [June 11, 2007, 1:21pm UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/4 "2007-06-11T13:21:48Z")
Logfile of Trend Micro HijackThis v2.0.0 (BETA) Scan saved at 4:21:42 PM, on 6/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\PROGRA~1\Grisoft\AVG7\avgemc.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\Raxco\PerfectDisk\PDAgent.exe c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\PowerQuest\Drive Image 7.0\Agent\PQV2iSvc.exe C:\Program Files\Raxco\PerfectDisk\PDEngine.exe C:\WINDOWS\system32 askswitch.exe C:\WINDOWS\CTHELPER.EXE C:\Program Files\eFax Messenger 4.2\J2GDllCmd.exe C:\Program Files\QuickTime\qttask.exe C:\PROGRA~1\Grisoft\AVG7\avgcc.exe C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOWS\system32 winondt.exe C:\Program Files\Google\Google Talk\googletalk.exe C:\Program Files\AIM\aim.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\Program Files\SkypeMate\SkypeMate.exe C:\Program Files\Skype\Plugin Manager\SkypePM.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\WINDOWS\system32\rundll32.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\Program Files\Lavasoft\Ad-Aware 2007\LSUpdateManager.exe C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Aware2007.exe C:\Documents and Settings\Justin\Desktop\HiJackThis\_v2.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default\_Page\_URL = [http://go.microsoft.com/fwlink/?LinkId=69157](http://go.microsoft.com/fwlink/?LinkId=69157) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default\_Search\_URL = [http://go.microsoft.com/fwlink/?LinkId=54896](http://go.microsoft.com/fwlink/?LinkId=54896) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [http://go.microsoft.com/fwlink/?LinkId=54896](http://go.microsoft.com/fwlink/?LinkId=54896) R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [http://go.microsoft.com/fwlink/?LinkId=69157](http://go.microsoft.com/fwlink/?LinkId=69157) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\_01\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll O2 - BHO: OToolbarHelper Class - {EAD3A971-6A23-4246-8691-C9244E858967} - C:\Program Files\PayPal\PayPal Virtual Debit Card\PayPalHelper.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: PayPal Virtual Debit Card - {DC0F2F93-27FA-4f84-ACAA-9416F90B9511} - C:\Program Files\PayPal\PayPal Virtual Debit Card\OToolbar.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O4 - HKLM…\Run: [CoolSwitch] C:\WINDOWS\system32 askswitch.exe O4 - HKLM…\Run: [CTHelper] CTHELPER.EXE O4 - HKLM…\Run: [DeadAIM] rundll32.exe “C:\PROGRA~1\AIM\DeadAIM.ocm”,ExportedCheckODLs O4 - HKLM…\Run: [eFax 4.2] “C:\Program Files\eFax Messenger 4.2\J2GDllCmd.exe” /R O4 - HKLM…\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime O4 - HKLM…\Run: [AVG7\_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O4 - HKLM…\Run: [iTunesHelper] “C:\Program Files\iTunes\iTunesHelper.exe” O4 - HKLM…\Run: [{E4-40-0A-A1-ZN}] c:\windows\system32\mndsregr.exe CHD003 O4 - HKLM…\Run: [ExploreUpdSched] C:\WINDOWS\system32 winondt.exe CHD003 O4 - HKLM…\Run: [Salestart] “C:\Program Files\Common Files\WinAntiVirus Pro 2007\mav\_startupmon.exe” O4 - HKCU…\Run: [googletalk] “C:\Program Files\Google\Google Talk\googletalk.exe” /autostart O4 - HKCU…\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl O4 - HKCU…\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU…\Run: [Skype] “C:\Program Files\Skype\Phone\Skype.exe” /nosplash /minimized O4 - HKCU…\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19…\Run: [AVG7\_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User ‘LOCAL SERVICE’) O4 - HKUS\S-1-5-20…\Run: [AVG7\_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User ‘NETWORK SERVICE’) O4 - HKUS\S-1-5-18…\Run: [AVG7\_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User ‘SYSTEM’) O4 - HKUS.DEFAULT…\Run: [AVG7\_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User ‘Default user’) O4 - Startup: SkypeMate.lnk = C:\Program Files\SkypeMate\SkypeMate.exe O4 - Startup: Think-Adz.lnk = C:\WINDOWS\system32 winondt.exe O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\_01\bin pjpi160\_01.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\_01\bin pjpi160\_01.dll O9 - Extra button: SideStep - {3E230861-5C87-11D3-A1C6-00105A1B41B8} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: [PartyPoker.net](http://PartyPoker.net) - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Program Files\[PartyPoker.net](http://PartyPoker.net)\partypokernet.exe (file missing) O9 - Extra ‘Tools’ menuitem: [PartyPoker.net](http://PartyPoker.net) - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Program Files\[PartyPoker.net](http://PartyPoker.net)\partypokernet.exe (file missing) O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - [http://housecall60.trendmicro.com/housecall/xscan60.cab](http://housecall60.trendmicro.com/housecall/xscan60.cab) O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - [http://www.creative.com/su/ocx/15015/CTSUEng.cab](http://www.creative.com/su/ocx/15015/CTSUEng.cab) O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - [http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB](http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB) O16 - DPF: {640B39C1-D713-464F-92C3-75BD972B95EE} - [http://www.sidestep.com/get/k42037/sb02b.cab](http://www.sidestep.com/get/k42037/sb02b.cab) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - [http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb\_site.cab?1120267348233](http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1120267348233) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - [http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb\_site.cab?1143337248031](http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1143337248031) O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - [http://www.worldwinner.com/games/shared/wwlaunch.cab](http://www.worldwinner.com/games/shared/wwlaunch.cab) O16 - DPF: {9903F4ED-B673-456A-A15F-ED90C7DE9EF5} (Sol Control) - [http://www.worldwinner.com/games/v45/sol/sol.cab](http://www.worldwinner.com/games/v45/sol/sol.cab) O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - [http://www.crucial.com/controls/cpcScanner.cab](http://www.crucial.com/controls/cpcScanner.cab) O16 - DPF: {AC2881FD-5760-46DB-83AE-20A5C6432A7E} (SwapIt Control) - [http://www.worldwinner.com/games/v64/swapit/swapit.cab](http://www.worldwinner.com/games/v64/swapit/swapit.cab) O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - [http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab](http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - [https://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab](https://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab) O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - [http://games.pogo.com/online2/pogo/zuma/popcaploader\_v5.cab](http://games.pogo.com/online2/pogo/zuma/popcaploader_v5.cab) O16 - DPF: {E4738497-1F8E-4630-961F-664F09C03B33} (PayPad SVLoad) - [https://www.paypad.com/PPEpay.cab](https://www.paypad.com/PPEpay.cab) O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - [http://www.creative.com/su/ocx/15016/CTPID.cab](http://www.creative.com/su/ocx/15016/CTPID.cab) O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O18 - Filter hijack: text/html - (no CLSID) - (no file) O20 - Winlogon Notify: catdb - C:\WINDOWS\Help\Tours\catdb.dll (file missing) O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Adobe Version Cue CS2 - Adobe Systems Incorporated - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv.exe (file missing) O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe O23 - Service: V2i Protector - PowerQuest Corporation - C:\Program Files\PowerQuest\Drive Image 7.0\Agent\PQV2iSvc.exe – End of file - 12934 bytes ---
**Author:** ![Violator](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/violator/32/7278_2.png) [@Violator](https://forums.speedlife.net/u/Violator)\ **Post date:** [June 11, 2007, 1:23pm UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/5 "2007-06-11T13:23:40Z")
suggest using system restore to go to a previous restore point (provided that was nt disabled) if all else fails ---
**Author:** ![ZOMGVTEK](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/zomgvtek/32/5063_2.png) [@ZOMGVTEK](https://forums.speedlife.net/u/ZOMGVTEK)\ **Post date:** [June 16, 2007, 12:14pm UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/6 "2007-06-16T12:14:55Z")
HAHAA… yea, coming back from something like this generally takes wayyy to long, and its dam near impossible to get rid of it all for good. System resore should work, or else your going to be spending alot of time running mulptile spyware apps at the same time while being disconnected from the internet for weeks… The key is running like 3+ apps at the same time to catch all these little buggers… It usually worked for me, until i switched to mac 😛 ---
**Author:** ![ryanmcell](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/ryanmcell/32/7510_2.png) [@ryanmcell](https://forums.speedlife.net/u/ryanmcell)\ **Post date:** [June 16, 2007, 1:07pm UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/7 "2007-06-16T13:07:56Z")
Ive learned a few things when it comes to my PC… A) back in the noob days, virus attack OMG what to do. B) virus attack, ahhHhH MUST fix it and remove file, learning a billion things along the way C) now a days, somehow i’m stupid enough to get a virus/spyware, just reformat, much faster and cleaner anyways. I say just format, it’ll be easier. ---
**Author:** ![Clean\_Baldy](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/clean_baldy/32/7308_2.png) [@Clean\_Baldy](https://forums.speedlife.net/u/Clean_Baldy)\ **Post date:** [June 16, 2007, 1:11pm UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/8 "2007-06-16T13:11:27Z")
find smitfraudfix and run it as well. use defender in safe mode first, then smitfraudfix after in safe mode. see where you stand after that. stupid winantivirus pro. i see it constantly ---
**Author:** ![The\_Russian](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/the_russian/32/7414_2.png) [@The\_Russian](https://forums.speedlife.net/u/The_Russian)\ **Post date:** [June 16, 2007, 2:36pm UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/9 "2007-06-16T14:36:38Z")
I had the same thing, it was called Spydawn. Smitfraudfix works. Update AVG and Spybot Have spybot run when your reboot. smitfraudfix has to be run in safe mode also get peerguardian2. It wont allow the windows that show up to actually get to a page. just a blank screen, so you cant get more infected. ---
**Author:** ![JustinH](https://avatars.discourse-cdn.com/v4/letter/j/9fc29f/32.png) [@JustinH](https://forums.speedlife.net/u/JustinH)\ **Post date:** [June 16, 2007, 2:47pm UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/10 "2007-06-16T14:47:55Z")
spybot wouldn’t touch it, same for adaware. I ended up getting a copy of this software called spyware doctor, then getting a crack for it. That cleaned it up fine. ---
**Author:** ![IROC-Z](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/iroc-z/32/7389_2.png) [@IROC-Z](https://forums.speedlife.net/u/IROC-Z)\ **Post date:** [June 16, 2007, 3:30pm UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/11 "2007-06-16T15:30:15Z")
[quote=“JustinH”"] I clicked the download link and then ten command boxes opened up at once. I was totally fucked. You can’t close it, you can’t do anything. [/quote] This happend to me a few times back in the day. When that would happen, I would just power the computer down manually, then boot in safe mode and scan. Saved it a couple times doing that without having to format. ---
**Author:** ![FightinMike](https://avatars.discourse-cdn.com/v4/letter/f/7bcc69/32.png) [@FightinMike](https://forums.speedlife.net/u/FightinMike)\ **Post date:** [June 16, 2007, 10:52pm UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/12 "2007-06-16T22:52:04Z")
durrrrr dont go clicking links like a retarded monkey ---
**Author:** ![The\_Russian](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/the_russian/32/7414_2.png) [@The\_Russian](https://forums.speedlife.net/u/The_Russian)\ **Post date:** [June 17, 2007, 12:06am UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/13 "2007-06-17T00:06:29Z")
[quote=“JustinH,post:10,topic:30697"”] spybot wouldn’t touch it, same for adaware. I ended up getting a copy of this software called spyware doctor, then getting a crack for it. That cleaned it up fine. [/quote] Actually it didnt, spyware doctor is not a reputable program, it makes it seem like it cleaned it out, but really it just Hid it. Have fun ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [June 17, 2007, 7:13am UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/14 "2007-06-17T07:13:11Z")
:lol: This is great ---
**Author:** ![Dex](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/dex/32/7210_2.png) [@Dex](https://forums.speedlife.net/u/Dex)\ **Post date:** [June 17, 2007, 8:37am UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/15 "2007-06-17T08:37:39Z")
[quote=“02AccordCoupe,post:6,topic:30697"”] HAHAA… yea, coming back from something like this generally takes wayyy to long, and its dam near impossible to get rid of it all for good. System resore should work, or else your going to be spending alot of time running mulptile spyware apps at the same time while being disconnected from the internet for weeks… The key is running like 3+ apps at the same time to catch all these little buggers… It usually worked for me, until i switched to mac 😛 [/quote] are you kidding? ---
**Author:** ![IROC-Z](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/iroc-z/32/7389_2.png) [@IROC-Z](https://forums.speedlife.net/u/IROC-Z)\ **Post date:** [June 17, 2007, 9:03am UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/16 "2007-06-17T09:03:12Z")
[www.superantispyware.com](http://www.superantispyware.com) ---
**Author:** ![ILCisDEAD](https://avatars.discourse-cdn.com/v4/letter/i/a87d85/32.png) [@ILCisDEAD](https://forums.speedlife.net/u/ILCisDEAD)\ **Post date:** [June 17, 2007, 11:50am UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/17 "2007-06-17T11:50:16Z")
[quote=“FormulaLS1,post:14,topic:30697"”] :lol: This is great [/quote] yea, i’m laughing at the “advice” too ---
**Author:** ![JustinH](https://avatars.discourse-cdn.com/v4/letter/j/9fc29f/32.png) [@JustinH](https://forums.speedlife.net/u/JustinH)\ **Post date:** [June 17, 2007, 6:49pm UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/18 "2007-06-17T18:49:43Z")
computer is totally back to normal. I don’t post bs, that spyware doctor program worked just fine, then I uninstalled it. I’m not a computer newbie, so save that also. Not even close. ---
**Author:** ![ILCisDEAD](https://avatars.discourse-cdn.com/v4/letter/i/a87d85/32.png) [@ILCisDEAD](https://forums.speedlife.net/u/ILCisDEAD)\ **Post date:** [June 17, 2007, 7:10pm UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/19 "2007-06-17T19:10:04Z")
[quote=“JustinH,post:18,topic:30697"”] I’m not a computer newbie, so save that also. Not even close. [/quote] yet your computer was compromised … ---
**Author:** ![Vile](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/vile/32/7595_2.png) [@Vile](https://forums.speedlife.net/u/Vile)\ **Post date:** [June 19, 2007, 5:29pm UTC](https://forums.speedlife.net/t/fux0r3d-my-computer-in-four-seconds/30697/20 "2007-06-19T17:29:08Z")
and the hijack log was… 100+ entries…