This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Stress Removal

What the bleep!! Malware with a green wheelchair icon

1 min read

This thread's last reply is from May 21, 2006, 9:46 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Recently, I reformatted the HDD, because the following occured:

1. I was browsing the internet. When browsing the internet, I suddenly got pop-ups of a web site with a DNS name that had something to do with porn.
I didn't see the image in any of the pop-ups, because I closed them before I could see the images.

2. I saw the green wheelchair and no sign tray icon


3. I saw a fake spyware or malware warning message.


4. Then right after the tray icon and fake warning message appeared, got disconnected from the internet and Windows 2000 didn't even try to redial.

Heard the dreaded disconnect sound, "kerplop!" from my 56k external modem speaker.

The malware hung up my modem!! :angryfire:


I would like to know exactly which malware I got?
Welcome!

Download HijackThis. Save it to its own folder. Run the program and click the Do a System Scan and Save a Logfile button.

Post that log as a new topic in the Malware Removal Forum.

Someone will get to it as soon as we can.

Thanks!
Oh, I also had an unusual process listed in Task Manager.

I terminated that process.

It had a process name that looked something like "7ewitbbt.exe".
If you don't post your log to the forum link I gave you in my last reply we can't help you.

Please follow the instructions in my previous reply.

Thanks!
I already reformatted and reinstalled Windows. Sorry. :(
No need to apologize... entirely your choice on what you wanted to do.

But just so ya know... we would've been able to clean it without much of a problem ;)
You had what is called SmitFraud in case you were wondering. A great free tool to help remove it is SmitFraudFix. Using that and Ewido Antimalware, should take care of the problem if you should run across this again.
But is the apparently porn-related pop-ups from different malware?

Also, is getting disconnected the usual symptom of Smitfraud?