New Rogueware - Spyware Soft Stop

pchelpman

Yet another goad to part you from your money. A new infection trying to make you buy something useless. Details here with screenshots ....

http://sunbeltblog.blogspot.com/ (scroll down to the 4th & 5th news stories).

Looks like it's related to the Smitfraud family of infections but don't quote me on that. Still awaiting confirmation.

pchelpman

Bump to keep this "front & centre" for a little while.

Definitely looks like another Smitfraud but still waiting for positive confirmation.

Whether the "standard" removal approach will work on this one I can't say at the moment as I have yet to see a live fix.

Whilst I am hopeful none of you become infected with this I'd be interested to hear if anyone does get it and manages to remove it.

pchelpman

Update in general to this issue.

The Smitrem tool is no longer updated or supported and won't be anytime soon.

There is another tool for newer infections from this bunch of miscreants called SmitfraudFix and this has a new way of being used.

LULUBELLE_2

Haven't had the need to use anything as no problems here - but I appreciate the heads-up! :T

pchelpman

You're welcome, Lulubelle

pchelpman

More food for thought has just turned up.

This is an OK download link for SmitfraudFix.....

http://siri.urz.free.fr/Fix/SmitfraudFix.zip

The other link - http://www.geekstogo.com/modules.php...download&id=80 - requires you to register as a member before you can download it.

Smitfraudfix appears to do the job BUT take note of this warning which comes with it :

Warning: running option #2 on a non infected computer will remove your desktop background.

Running smitrem won't do that even if it doesn't find anything.

So smitfraudfix looks to be good, if used on a definite infection, but bad if used in the wrong place.

Also Siri's Smitfraudfix does not Win9X systems.

So I'm undecided about it at the moment...

If any of you have any more thoughts, or see anything that would add to our knowledge on this, please post here. Thanks.

Rex_Mundi

In the last couple of days, I've just cleaned a customers computer of one of this family of malware (SpyFalcon). This whole group of programs are really very nasty.

I used an excellent set of removal instructions I found HERE . This worked first time for me.

pchelpman

Rex_Mundi wrote:

This whole group of programs are really very nasty.

You got that right. No argument here!

That G2G fix is excellent - as are all the fixes there - but it was written before the comments on Atri's smitrem program and Smitfraudfix. I'm still waiting to see what G2G and other help sites do about the apparent shortcomings in Smitfraudfix.