hey ppl, i got a friend thats got this heatvirus on their computer. it just ended up there by its self and they didnt download it, its sumthing about heatvirus.com, in the system files its actually got a uninstaller, it some how installed its self- hmmmmm - strange. i actually got a few mates with this heatvirus on their pc, both of them are kind of doing the same thing but a little different from each other. some help with this would be cool, cheers ppl

Teleported to relevant forum.

wot u talkn about mate this thread is for anything. nice one mate cheers for the help man >:-(

why did u even bother to post!!!!!!!!!!!!

kill the process tree
http://www.ghacks.net/2008/04/28/batch-k...h-kill-process/


empty the files that have to do with it from here
C:\Documents and Settings\All Users\Application Data

then do a full system scan
http://forums.afterdawn.com/thread_view.cfm/292257


post a list of the processes here,

btw he's an admin......he bother's to post because hes helping you by putting this thread in an area where people like me will see it:)

best of luck!
-tripplite

bakedpsp, i'm watching to see what loco does to you after that comment of yours.

What antivirus scanner do you have?

and owned, by the way.

Please download http://siri.urz.free.fr/Fix/SmitfraudFix.exe (by S!Ri)

If the tool fails to launch from the Desktop, please move SmitfraudFix.exe directly to the root of the system drive (normally C:), and launch from there.


Please print out or copy this page to Notepad as you will be in Safe Mode and unable to refer to this page.


Reboot your computer in Safe Mode (before the Windows icon appears, tap the F8 key continually)
Double-click on SmitfraudFix.exe
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".

The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.
A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply.
The report can also be found at the root of the system drive, normally C:\rapport.txt

1. Get this version of Hijackthis from http://danborg.org/spy/hjt/alternativ.exe

2 Save it in a permanent folder of your choice, such as C:\HJT\. To create this specific folder on your hard drive: Double click the 'My Computer' icon on your desktop, then under the category hard disk drives: double click Local Disk:, then select file->New -> Folder and name it HJT
3 Run hijackthis. (alternativ exe).

Choose the "Do a system scan and save a log file" option to perform your scan.
HijackThis will analyze your system, and automatically open a notepad textfile containing the HijackThis log when the scan is finished.
Open the text files containing the logs with a text editor and click Edit -> Select All, followed by Edit -> Copy.
From within the browser window and with the message body text box selected, click Edit -> Paste.
Post a hijackthis log with rapport txt, and tell how your computer are behaving.

very simple.. 10 seconds with google yet again!

oh well your no fair....i spend a good 3 minutes righting out the directions and you use google? thats totally cheating:P

http://www.xp-vista.com/spyware-removal/...al-instructions

same method as i mentioned, kill the process remove the registry entries then remove the application data
http://www.zimbio.com/Spyware/articles/2...ow+remove+Virus

it may also help to disconnect your computer from the internet during the removal.....buts thats probably not needed

ok ppl.....wot ever im watching too, i've sorted it anywayz-killed the virus for good.

i'm not telling ya wot anti-virus programs i got but that virus is gone and its never coming back hahahahahha

i like coming here for help and to try an help others aswel(not much at the moment tho) but when i get comments that are just a waste of time, i think "why did i bother with this place if they gonna be dumb about it" or not realy help

sory to be anti about it ppl

Come here for a problem, solve it yourself and tell us off about it and don't even tell us how you solved it. It's organfaces like you who make using forums a chore rather than a passion. I hope never to have to deal with you again.

sam, 2nd that.

bakedpsp, do you hear the approaching thunder?

@bakedpsp every single post in this thread was aimed at helping you get ride of heat virus.....we all posted (in clear english i remind you) information on how to remove or requesting further details to help with the removal....i dont see how any of these posted didn't help you (besides this one in violation of rule 8)


-tripplite

Originally posted by bakedpsp:

---

why did u even bother to post!!!!!!!!!!!!

---

I wonder myself sometimes....of course some people can't be helped, especially when their attitude is so much bigger than their brain.

Originally posted by LOCOENG:

---

Originally posted by bakedpsp:

---

why did u even bother to post!!!!!!!!!!!!

---

I wonder myself sometimes....of course some people can't be helped, especially when their attitude is so much bigger than their brain.

---

That about sums it up for this nut job! He probably had someone, who knew something, fix it; and that's why he couldn't explain the fix if he wanted.

i just finished getting rid of that program off a customer's pc. i used avg8 free & spybot s&d 1.5. did that last night & the scheduled scan this morning of avg did not find anthing. doing the defrag right now then closing it up.

i dont believe a virus scan would even pull it up.....let alone remove it fully.......its one of those ucky bugs you have to go after part by part....the application data is the worst as it always regenerates:(

ha u ppl........... i did my self an all of this would have been avoided if ya just been nice in the 1st place.

avg and spybot S & D. i have used spybot for some time now, i also just recently found a new program to tackle that virus.

p.s. how is telling me to go somewhere else helping me ay......!!!!!!!!

bye

bakedpsp, thunder is getting closer.

ddp: fry his a$$, at least for a week.

If you go someplace else, we won't have to listen to your drivel. How did you make junior status, junior? We're just continuing your vitriol. Are you doing long division properly,yet?

is it wolf feeding time?

It darn well should be!

Yes.. then dish out a 6 month ban for being a twat.. I hope his fista gives him the shafting he deserves. and I was so nice telling the idiot how to fix it as well.. no mention of being an idiot and laughing at him for running that drm filled bag-o-shite called fista... what a wanker!! He hit No1 in the deathlist..




I hope he has a well prepared arse... he's going to need it.. Now what's his tag so I can watch for him on irc with my "force upload" tools... ahhhh.. clocked.. stormworm waiting muahahahahahaha..

giggity giggity
Nicely vandalised homepage now as well...

moved to safety valve for the wolves.

@TC

Are you some sort of mental midget? How in the hell did you tackle that virus yet cannot comprehend that the people in this thread were trying to help? You sir, are the definition on an etard.

Good day

Stupidity isn't something your born with, its something you learn...


In case your wondering why this is here, Read the first 3 posts...