Help me please - a website has taken over my PC!

skiddy2k

upload C:\Program Files\SIFXINST\SIFXINST.EXE to http://www.virustotal.com/en/indexf.html to check if its a virus or not.. in virustotal website, click "browse", find the file and upload it and see the results

also download this Host file to prevent further infections: http://www.mvps.org/winhelp2002/hosts.zip, unzip it and doubleclick the "mvps.bat" file

dc

I would recommend getting rid of Norton and replace it with a set of free virus protection/ firewall and nastie removers. like AVG and also get Ewido.


The free version of Spyware Doctor is also very good at finding probs, but you have to remove the nasties yourself by doing a search and then delete each file individually

Browntoa

hold on every one

LET ME READ THAT LOG !!!

then I'll give some proper advice !!

Browntoa

and only follow my, pchelpmans or alfonso's advice on the hijackthis log

skiddy2k

Browntoa wrote:

hold on every one

LET ME READ THAT LOG !!!

then I'll give some proper advice !!

weyheyyy! Browntoa's here! problem should be solved in a jiffy now!... hopefully!

skiddy2k

dc wrote:

I would recommend getting rid of Norton and replace it with a set of free virus protection/ firewall and nastie removers. like AVG and also get Ewido.

i think nortons is MUCH better than AVG... stay away from AVG, stick with nortons IMO

Browntoa

there is no infection shown in that log, there are a couple of things that need fixing but thay are just missing files etc from stuff that has been deleted from the PC

no CWS infection for sure

are you still having problems ?? or does everything seem ok now ??

BrokeBrunette

hi Browntoa

I managed to get rid of the homepage takeover with the Smitfraud thing, however I am still left with the red no-entry sign flashing alternately with white question mark on my bottom taskbar, and the red box that keeps coming up with the 'CRITICAL SYSTEM ERROR, Click here to get software. Please use antimalware softwear to clean and protect your system from parasite sofware'. Thats more or less what the box says. I cannot get rid of that box, nor the taskbar one.

Browntoa

skiddy2k wrote:

upload C:\Program Files\SIFXINST\SIFXINST.EXE to http://www.virustotal.com/en/indexf.html to check if its a virus or not.. in virustotal website, click "browse", find the file and upload it and see the results

SIFXINST.EXE is a process which belongs to the Lanovation Prism. This program is non-essential process to the running of the program, but should not be terminated unless suspected to be causing problems

Browntoa

BrokeBrunette wrote:

hi Browntoa

I managed to get rid of the homepage takeover with the Smitfraud thing, however I am still left with the red no-entry sign flashing alternately with white question mark on my bottom taskbar, and the red box that keeps coming up with the 'CRITICAL SYSTEM ERROR, Click here to get software. Please use antimalware softwear to clean and protect your system from parasite sofware'. Thats more or less what the box says. I cannot get rid of that box, nor the taskbar one.

try this

Download VundoFix.exe and save it to your desktop.

• Double-click VundoFix.exe to run it.
• Place a check in the checkbox labeled Run VundoFix as a task. You will receive a message stating that VundoFix will close and re-open in a minute or less.
• When VundoFix reopens, click the OK button.
• Click the Scan for Vundo button.
• Once it's done scanning, click the Remove Vundo button.
• You will receive a prompt asking if you want to remove the files, click the YES button.
• Once you click yes, your desktop will go blank as it starts removing Vundo.
• When completed, it will prompt that it will shutdown your computer, click the OK button.
• When the computer has shutdown, turn your computer back on.
• The Winfixer/Vundo infection should now be cleaned from your computer

did you run ewido earler on ??