No taskmgr,

hi,
been ages since i touched a computer for more than just emails and net,
but a friend of mine wants me to fix her computer for her,
she has a spyware program on it called security master av, easy to identify and find a solution on google. however to try and kill the processes needed i can’t fire up taskmgr. or find the executables through a search.

and ideas?

yeah i have… the automatic remover program didn’t work for it either.

Have you set your computer so that both ‘System’ and ‘Hidden Files’ are viewable when you do a wildcard search like: *.dll

killbox acts as a taskmgr too, so i’m getting there slowly… i know why i left computers now…

i shall try killbox now… hopefully that works

So right clicking on the task bar and selecting the task manager from the menu there doesn’t work then?

nope. she has spybot on her computer but that isn’t helping neither

these are the directions i have found to delete this Security Master AV

Security Master AV manual removal:
Kill processes:
SM345d.exe sld.exe DBOLE.exe

Delete registry values:
HKEY_CURRENT_USERSoftware3
HKEY_CLASSES_ROOTCLSID{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOTSM345d.DocHostUIHandler
HKEY_USERS.DEFAULTSoftwareMicrosoftInternet ExplorerSearchScopes “URL” = “http://findgala.com/?&uid=7&q={searchTerms}
HKEY_CURRENT_USERSoftwareClassesSoftwareMicrosoftInternet ExplorerSearchScopes “URL” = “http://findgala.com/?&uid=7&q={searchTerms}
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload “RunInvalidSignatures” = “1”
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun “Security Master AV”
HKEY_CLASSES_ROOTSoftwareMicrosoftInternet ExplorerSearchScopes “URL” = “http://findgala.com/?&uid=7&q={searchTerms}
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload “CheckExeSignatures” = “no”

Unregister DLLs:
mozcrt19.dll PE.dll runddl.dll exec.dll CLSV.dll ANTIGEN.dll sqlite3.dll

Delete files:
16.mof mozcrt19.dll SM345d.exe SMAV.ico sqlite3.dll vd952342.bd SMMPIBBZGHAV.cfg Security Master AV.lnk cookies.sqlite Security Master AV.lnk ANTIGEN.dll CLSV.dll DBOLE.exe DBOLE.tmp ddv.sys energy.tmp exec.dll FS.sys kernel32.drv PE.dll runddl.dll runddl.sys runddlkey.drv sld.drv sld.exe sld.sys tempdoc.tmp tjd.tmp

now,
with the kill processes i only found
SM93af_289.exe as the exe file for the program, and none of the 2 others.

notice the exe file is now a different name…

i had no problem deleting the required registy values. but i can’t find the dll files i need to delte…

any helpers out there?