Help with Trojan_Smallfeg

[LeoAlcala]

I really need help. A few days ago my computer was infected by "Antivirus XP 2008". It was very nasty, it took control of my desktop and it stopped Internet Explorer and other programs. I was able to remove it with Spybot. After this, I ran a few spyware detection programs, but the only one that finds this Trojan is Spyware Doctor. After I remove the infections, they keep returning. I need to get rid of this thing completely.

Spyware Doctor shows this:
Trojan.Smallfeg
Registry Value:
HKEY_USERS\S-1-5-21-3279413687-3334538223-2258002976-1005\Software\Microsoft\Windows\CurrentVersion\Run, svchost.exe

I am also attaching my HJT log for your review. I would really appreciate it if you could help me with this issue.

Thank you.

 

[kimsland]

Follow the New Preliminary Removal Instructions , and attach the requested logs:

1) Malwarebytes Anti Malware log
2) SuperAntiSpyware log
3) Hijackthis log

Sorry, this is just the way of the board here
By doing all the steps in the link above, you will hopefully be rid of any bug

 

[rf6647]

You have too many spysweepers/spykillers running! It's possible the 'hook' for one of these is detected as a hit for the other.

I am not an expert here, but I saw no hits in the HJT log.

O4 - HKLM\..\Run: [SMSTray] "C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe"
O4 - HKLM\..\Run: [MAAgent] "C:\Program Files\MarkAny\ContentSafer\MAAgent.exe"

MAAgent is a companion for Samsung. Check out the complaints on other boards.

 

[kimsland]

Very Important: Malware infections can possibly lead to identity theft, stolen bank funds, misuse of credit card information etc. Therefore I strongly encourage you to please read this thread HERE before deciding what course of action to take regarding your infection.

If after reading the above, you wish to clean your system, do the following.

=========================================================

Step 1

Temporarily Disable Real Time Monitoring Programs

This is because some real time protection programs can interfere with any fixes we are trying to run.

First step in the above link

 

[LeoAlcala]

Problem Fixed. Thank You.

After following all the removal steps, the bug is no longer in my system.
Thank you very much for your help!

 

[SpiritWind]

Spybot Support Forums

Hi :

In the future & because you have Spybot, I recommend you use their EXCELLENT
Support Forums at http://forums.spybot.info , which are staffed by highly trained,
very experienced, CERTIFIED, volunteer "Malware Removal Specialists" .

 

[kimsland]

What are you talking about SpiritWind ??

Should he also go to Microsoft Technet forums for Windows issues?

LeoAlcala even stated that the problem is fixed using TECHSPOT's advice and removal proceedure.

Very strange that you would say got to Spybot's forum, that deal mainly with Spybots S&D, of which we don't even recommend !!!

 

[LeoAlcala]

I don't mind taking advice from any source, as long as they provide good information and support.
I am glad I was able to solve my problem using TechSpot's removal procedures. I will definetely return to this site if I run into trouble again. You were of excellent help. Thanks a lot.

 

[kimsland]

Thanks for the update :grinthumb