My Anti Spyware

News | Forum | Free Software | Online Scanners | Tutorials - HowTo

1. Been infected with spyware? Tell us about your problem.
2. Protect your PC from viruses, spyware.
3. For fast automatic spyware removal, try CounterSpy, SUPERAntiSpyware

SDFix free trojan remover tool

The fixtool removes big amount Trojan Variants (Listed using Trend Micro’s - HijackThis)

Backdoor (IRCBot) Trojans:

F2 - REG:system.ini: Shell=Explorer.exe %WINDIR%\accwiz.exe
F2 - REG:system.ini: Shell=Explorer.exe %WINDIR%\astra32.exe
F2 - REG:system.ini: Shell=Explorer.exe %WINDIR%\Avsynmgr.exe
F2 - REG:system.ini: Shell=Explorer.exe %WINDIR%\BTStack.exe
F2 - REG:system.ini: Shell=Explorer.exe %WINDIR%\BTTray.exe
F2 - REG:system.ini: Shell=Explorer.exe %WINDIR%\ctfmon.exe
F2 - REG:system.ini: Shell=Explorer.exe %WINDIR%\czsrv.exe
…

Trojan Ranky/Ranck:

F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\config\svchost.exe
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\etc\services.exe
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\NT\nrcs.exe
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\1.tmp
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\mbti.exe
…

Misc’ - Downloader/Dropper, Proxy, Backdoor, PWStealer Trojans:

F2 - REG:system.ini: Shell=explorer.exe %Temp%\cryptfg.exe
F2 - REG:system.ini: Shell=Explorer.exe boot
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\alg32.exe
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\MSACCESS.exe
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\shell.exe
F2 - REG:system.ini: Shell=explorer.exe C:\WINDOWS\system\lsass.exe
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\explorer..exe
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\fservice.exe
…

HackerDefender:

O23 - Service: MSDN Driver (msdndr) - Unknown owner - C:\WINDOWS\system32\msdndr.pif
O23 - Service: MSDV Driver (msdvdr) - Unknown owner - C:\WINDOWS\system32\msdvdr.pif
O23 - Service: ro0 Service (ro0Srv) - Unknown owner - C:\WINDOWS\system32\ro0\ro0.exe
O23 - Service: Time Service (TIME) - Unknown owner - C:\WINDOWS\system32\(RandomName).exe

Trojan/Rootkit Components:

__oddysee.sys
asc355.sys
asc355O.sys
asc3550a.sys
asc3550o.sys
asc3550p.sys
asc3550u.sys
asc3550v.sys
backsys.sys
core.sys
…

Notes:
If this error message is displayed when running SDFix:

The command prompt has been disabled by your administrator. Press any key to continue . . .
Please goto Start Menu > Run > then copy and paste the following line: %systemdrive%\SDFix\apps\swreg IMPORT %systemdrive%\SDFix\apps\Enable_Command_Prompt.reg
Press OK then run SDFix again

If the Command Prompt window flashes on then off again on XP or Windows2000

Please goto Start Menu > Run > then copy and paste the following line: %systemdrive%\SDFix\apps\FixPath.exe /Q Reboot and then run SDFix again

If SDFix still doesnt run check the %comspec% variable

Goto Start Menu > Right click My Computer > click properties > click Advanced Click Environment Variables and check that the ComSpec variable points to cmd.exe %SystemRoot%\system32\cmd.exe

SDFix uses ERUNT to create a registry backup in this location: %SystemRoot%\ERUNT\SDFix\

Download SDFix

17 Comments »

RSS feed for comments on this post. TrackBack URI

I love SDFIX as a registry and trojan fixing tool.

Comment by Amaechi — December 6, 2007 #
thanks

Comment by a — January 8, 2008 #
thank you for the my anti spyware for poviding the download of SDFix.

Comment by kalyan — January 12, 2008 #
I have to say that SDFix has saved my butt so many times. I just used it today, probably for the millionth time and the client was but most happy.

THANK YOU!!

Comment by Monchster — February 14, 2008 #
i just used the SDFix. Run it under safe mode. it finished and restarted but after the windows came out, black/blank screen comes next and no more activity…what happened?

Comment by Levi Umali — February 19, 2008 #
Probably spyware damaged your system files

Comment by Patrik — February 24, 2008 #
Thanks very much been having problems removing this Trojan ********* for weeks, no gone , thanks very much indeed

Comment by Martin — March 9, 2008 #
thanks for this

Comment by Piyush — March 15, 2008 #
probably i couldn’t get thru first time

Comment by Piyush — March 15, 2008 #
i want to remove braviax spyware

Comment by meharoof — March 15, 2008 #
Meharoof, if you are still having problems with braviax spyware after using sdfix, then please open a new topic in the Myantispyware Forum.

Comment by Patrik — March 16, 2008 #
Wow SDFix saved my computer from two virsus i had, but im relieved that this program worked. Thanks

Comment by Gerardo — March 18, 2008 #
Thanks

Comment by Tamer — March 28, 2008 #
help please
the cleaner does not run for me…. i dont know wither im doing it right or wrong
help please =(
this infection/virus doing my head in
=D

Comment by Pazz — March 29, 2008 #
it fixed my pc but then it haven’t restored it the way before. whenenevr i click my hard drive it still display this message “could not find SSCVIIHOST.exe”. anyone got idea about this? thnks

Comment by dare — March 30, 2008 #
2 dare,
you have autorun infection and should remove autorun.inf from your drives. Download and run Combofix for it.

Comment by Patrik — March 30, 2008 #
2 Pazz, make a new topic at Spyware help forum with details of your problem.

Comment by Patrik — March 30, 2008 #