Help needed in removing Smart Engine please

  Chris Webster 15:26 14 Nov 2010


my friends laptop has been infected with the rouge anti virus prog 'Smart Engine'

I have downloaded and run 'rkill' then scanned with malwarebytes and removed 780 infections.

But everytime I restart the laptop it comes back, I have tried removing it both normal start up and in safe mode.

Any help or advice gratefully received.

Regards, Chris.

  GaT7 15:35 14 Nov 2010

These removal guides of any help click here & click here? G

  rdave13 15:35 14 Nov 2010

Have a look here; click here

You also need to return the Hosts file to default settings.

  Chris Webster 15:47 14 Nov 2010

Thanks for the links, I've tried the instructions from bleepingcomputer but it still keeps coming back.

I've removed other rouge anti virus progs from other computers in the past just by running 'rkill' then malwarebytes.

But this 'Smart Engine' just keeps coming back.

Regards, Chris.

  jimv7 15:49 14 Nov 2010

Run malwarebytes in safe mode.

  GaT7 15:52 14 Nov 2010

How about the instructions in the other link?

If no joy, I'd run HijackThis (HT) click here, & post the resultant log in a dedicated HT forum like click here (instructions before posting click here). They may ask you to run other programs as well.

You can also do a quick DIY HT analysis via click here. Unless you know what you're doing, do NOT manually remove anything 'suspect' on your own, but rather ask for help on one of those forums. All the best with it. G

P.S. More HT related forums at click here (see left column), so you can choose whichever one you fancy :-)

  Fruit Bat /\0/\ 15:54 14 Nov 2010

Switch off system restore
scan and remove
rescan to check its gone.

  Chris Webster 15:59 14 Nov 2010

In normal boot up or safe mode?

Do I still run 'rkill' first?

Regards, Chris.

  Fruit Bat /\0/\ 16:13 14 Nov 2010

Safemode is always better when tryink to get rid of spyware.

Only run rkill if needed

  sunnystaines 16:17 14 Nov 2010

is it luring in system restore or a back drive

  Chris Webster 16:46 14 Nov 2010

I've just rebooted and its come back again.

Regards, Chris.

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Fujitsu Lifebook P727 laptop review

Converse's new logo: the trainer brand looks to its heritage for a fresh identity

Mac power user tips and hidden tricks

Comment lancer Windows 10 en mode sans ├ęchec ?