also @ TechSpot: Leaked next generation iPhone casing photos validate multiple rumors

TechSpot

Help with Trojan_Smallfeg

Discussion in 'Windows OS' started by LeoAlcala, Sep 19, 2008.

Thread Status:
Not open for further replies.
  1. LeoAlcala Newcomer, in training

    I really need help. A few days ago my computer was infected by "Antivirus XP 2008". It was very nasty, it took control of my desktop and it stopped Internet Explorer and other programs. I was able to remove it with Spybot. After this, I ran a few spyware detection programs, but the only one that finds this Trojan is Spyware Doctor. After I remove the infections, they keep returning. I need to get rid of this thing completely.

    Spyware Doctor shows this:
    Trojan.Smallfeg
    Registry Value:
    HKEY_USERS\S-1-5-21-3279413687-3334538223-2258002976-1005\Software\Microsoft\Windows\CurrentVersion\Run, svchost.exe

    I am also attaching my HJT log for your review. I would really appreciate it if you could help me with this issue.

    Thank you.
  2. kimsland Ex-TechSpotter

    Follow the New Preliminary Removal Instructions , and attach the requested logs:

    1) Malwarebytes Anti Malware log
    2) SuperAntiSpyware log
    3) Hijackthis log

    Sorry, this is just the way of the board here
    By doing all the steps in the link above, you will hopefully be rid of any bug
  3. rf6647 Newcomer, in training

    You have too many spysweepers/spykillers running! It's possible the 'hook' for one of these is detected as a hit for the other.

    I am not an expert here, but I saw no hits in the HJT log.

    O4 - HKLM\..\Run: [SMSTray] "C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe"
    O4 - HKLM\..\Run: [MAAgent] "C:\Program Files\MarkAny\ContentSafer\MAAgent.exe"

    MAAgent is a companion for Samsung. Check out the complaints on other boards.
  4. kimsland Ex-TechSpotter

    First step in the above link
  5. LeoAlcala Newcomer, in training

    Problem Fixed. Thank You.

    After following all the removal steps, the bug is no longer in my system.
    Thank you very much for your help!
  6. SpiritWind Newcomer, in training

    Spybot Support Forums

    Hi :

    In the future & because you have Spybot, I recommend you use their EXCELLENT
    Support Forums at http://forums.spybot.info , which are staffed by highly trained,
    very experienced, CERTIFIED, volunteer "Malware Removal Specialists" .
  7. kimsland Ex-TechSpotter

    What are you talking about SpiritWind ??

    Should he also go to Microsoft Technet forums for Windows issues?

    LeoAlcala even stated that the problem is fixed using TECHSPOT's advice and removal proceedure.

    Very strange that you would say got to Spybot's forum, that deal mainly with Spybots S&D, of which we don't even recommend !!!
  8. LeoAlcala Newcomer, in training

    I don't mind taking advice from any source, as long as they provide good information and support.
    I am glad I was able to solve my problem using TechSpot's removal procedures. I will definetely return to this site if I run into trouble again. You were of excellent help. Thanks a lot.
  9. kimsland Ex-TechSpotter

    Thanks for the update :grinthumb
Thread Status:
Not open for further replies.