Help with Trojan_Smallfeg

By LeoAlcala ยท 8 replies
Sep 19, 2008
  1. I really need help. A few days ago my computer was infected by "Antivirus XP 2008". It was very nasty, it took control of my desktop and it stopped Internet Explorer and other programs. I was able to remove it with Spybot. After this, I ran a few spyware detection programs, but the only one that finds this Trojan is Spyware Doctor. After I remove the infections, they keep returning. I need to get rid of this thing completely.

    Spyware Doctor shows this:
    Registry Value:
    HKEY_USERS\S-1-5-21-3279413687-3334538223-2258002976-1005\Software\Microsoft\Windows\CurrentVersion\Run, svchost.exe

    I am also attaching my HJT log for your review. I would really appreciate it if you could help me with this issue.

    Thank you.
  2. kimsland

    kimsland Ex-TechSpotter Posts: 14,523

    Follow the New Preliminary Removal Instructions , and attach the requested logs:

    1) Malwarebytes Anti Malware log
    2) SuperAntiSpyware log
    3) Hijackthis log

    Sorry, this is just the way of the board here
    By doing all the steps in the link above, you will hopefully be rid of any bug
  3. rf6647

    rf6647 TS Maniac Posts: 829

    You have too many spysweepers/spykillers running! It's possible the 'hook' for one of these is detected as a hit for the other.

    I am not an expert here, but I saw no hits in the HJT log.

    O4 - HKLM\..\Run: [SMSTray] "C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe"
    O4 - HKLM\..\Run: [MAAgent] "C:\Program Files\MarkAny\ContentSafer\MAAgent.exe"

    MAAgent is a companion for Samsung. Check out the complaints on other boards.
  4. kimsland

    kimsland Ex-TechSpotter Posts: 14,523

    First step in the above link
  5. LeoAlcala

    LeoAlcala TS Rookie Topic Starter

    Problem Fixed. Thank You.

    After following all the removal steps, the bug is no longer in my system.
    Thank you very much for your help!
  6. SpiritWind

    SpiritWind TS Rookie Posts: 164

    Spybot Support Forums

    Hi :

    In the future & because you have Spybot, I recommend you use their EXCELLENT
    Support Forums at , which are staffed by highly trained,
    very experienced, CERTIFIED, volunteer "Malware Removal Specialists" .
  7. kimsland

    kimsland Ex-TechSpotter Posts: 14,523

    What are you talking about SpiritWind ??

    Should he also go to Microsoft Technet forums for Windows issues?

    LeoAlcala even stated that the problem is fixed using TECHSPOT's advice and removal proceedure.

    Very strange that you would say got to Spybot's forum, that deal mainly with Spybots S&D, of which we don't even recommend !!!
  8. LeoAlcala

    LeoAlcala TS Rookie Topic Starter

    I don't mind taking advice from any source, as long as they provide good information and support.
    I am glad I was able to solve my problem using TechSpot's removal procedures. I will definetely return to this site if I run into trouble again. You were of excellent help. Thanks a lot.
  9. kimsland

    kimsland Ex-TechSpotter Posts: 14,523

    Thanks for the update :grinthumb
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...