Help needed in removing Smart Engine please

  Chris Webster 15:26 14 Nov 10


my friends laptop has been infected with the rouge anti virus prog 'Smart Engine'

I have downloaded and run 'rkill' then scanned with malwarebytes and removed 780 infections.

But everytime I restart the laptop it comes back, I have tried removing it both normal start up and in safe mode.

Any help or advice gratefully received.

Regards, Chris.

  GaT7 15:35 14 Nov 10

These removal guides of any help click here & click here? G

  rdave13 15:35 14 Nov 10

Have a look here; click here

You also need to return the Hosts file to default settings.

  Chris Webster 15:47 14 Nov 10

Thanks for the links, I've tried the instructions from bleepingcomputer but it still keeps coming back.

I've removed other rouge anti virus progs from other computers in the past just by running 'rkill' then malwarebytes.

But this 'Smart Engine' just keeps coming back.

Regards, Chris.

  jimv7 15:49 14 Nov 10

Run malwarebytes in safe mode.

  GaT7 15:52 14 Nov 10

How about the instructions in the other link?

If no joy, I'd run HijackThis (HT) click here, & post the resultant log in a dedicated HT forum like click here (instructions before posting click here). They may ask you to run other programs as well.

You can also do a quick DIY HT analysis via click here. Unless you know what you're doing, do NOT manually remove anything 'suspect' on your own, but rather ask for help on one of those forums. All the best with it. G

P.S. More HT related forums at click here (see left column), so you can choose whichever one you fancy :-)

  Fruit Bat /\0/\ 15:54 14 Nov 10

Switch off system restore
scan and remove
rescan to check its gone.

  Chris Webster 15:59 14 Nov 10

In normal boot up or safe mode?

Do I still run 'rkill' first?

Regards, Chris.

  Fruit Bat /\0/\ 16:13 14 Nov 10

Safemode is always better when tryink to get rid of spyware.

Only run rkill if needed

  sunnystaines 16:17 14 Nov 10

is it luring in system restore or a back drive

  Chris Webster 16:46 14 Nov 10

I've just rebooted and its come back again.

Regards, Chris.

This thread is now locked and can not be replied to.

Huawei P10 review

1995-2015: How technology has changed the world in 20 years

How Nearly Normal created super-fun papercraft for Google

47 iPhone camera tips to help you take better photos