ssk has disabled everything

Surfsidekick has simply gone crazy now. I have run every program imaginable to remove it. to no avail. adaware found it…said it was removed. spybot found it…..said it was removed tried to copy smitrem from cd to root directory……copy/paste doesnt work/disabled. hijackthis found 4 or 5 entries……said removed……scanned again & back again….tried 4 times. am unable to copy anything from cd to pc using cut/past or simply dragging over. qoologic remover found 8 or 9 infected files said it removed them. YET SSK REMAINS!!! help!!java script:emoticon('', 'smid_16')

Hi cajundood:

Please copy and paste this text into a Notepad file and place it on your desktop, to review as you work. Please read this entire text, before beginning and ask any questions you may have about the following.


1. Download this file - combofix.exe
2. Double click combofix.exe & follow the prompts.
3. When finished, it shall produce a log for you. Save that log to post in your next reply.

Next:
Please download Hijack This from here:
http://radiosplace.com

Or from here:

http://www.spywareinfo.com/~merijn/files/hijackthis.zip

133060

Next:
Your copy of HijackThis needs to be in a folder of it's own. When HJT fixes anything, it makes backups of the original files in the folder it is in. For this reason it cannot be run from a Zip file or from Temporary folders because the backups will be deleted. Having the backups could be VITAL to restoring your system if something went wrong in the FIX process!

1. Please go to you're 'My Documents' folder, right-click and select 'New > Folder' then name the folder 'HJT'.

2. Copy and paste HijackThis.exe to the new folder.

You need to Update HiJackThis. Do the following:
1. Open HiJackThis, click on the Config button (bottom right corner)
2. Click on Misc. Tools (button at the top)
3. Click on *Check for online Update*
4. Check for updates often (weekly is recommended) or just before scanning.

Also, if you have any Startup items disabled in Msconfig, uncheck those items, reboot, then post a fresh log. Hijack This can not "see" disabled items in Startup.

Next:
Close all other Windows and Browsers, leaving only Hijack This open.

Double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Click: "Save Log" (generates: "hijackthis.log")

Copy and Paste the entire log,including the header, into this topic, along with the Combofix log.

Please use the [external image: Posted Image] button to reply.

Hint: after posting your log click "Track this topic" at the top of the page, this way you will be notified (email) when a response is made to your post.

thanks for the response Piatan. have since formatted the disk. was able to figure out how to get around the fact that ssk had somhow disabled cut/paste. i used command line to copy the needed files over. before i formatted i ran combofix. it would run then window would close then start over again. each time saying that: Qoologic found! SurfSideKick found! Adware Look2Me found! then: performing supplementary fixes. start over again "do you want to run combo fix? y or n got stuck in some sort of loop. my hijack this got picked up by the norton….said it was infected by "trojan.downloader!p2p" not sure if this is true because my main pc….zone alarm says the file is fine. Hmmm….. anyways thanks for the help would like more info on the class. i am very interested in joiining.

Hi cajundood:

I have not seen your Hijack This log, so I don't know which OS you are using, but it would be advisable to get all Critical Updates from Microsoft.

Here's a link that will take you to the Classroom area. Scroll down the page and read the "Announcements" "Pinned Topics', which will explain Classroom procedures.

http://forums.tomcoyote.org/index.php?showforum=49

Since you have reformatted, there are some free Programs that would be advisable to download and install.
They will be found at Tony Kleins link, below.

See TonyKlein's good advice and highly recommended FREE PROTECTION PROGRAMS. A must for all PC users.
http://forums.spywareinfo.com/index.php?showtopic=60955
So how did I get infected in the first place?

Safe surfing.

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php