Hi

Can someone please help me. My computer has recently been infected with spyware and I think it is using Windows Messenger to send these files to and from my computer.

I have done a virus scan and the file that appears is sq.ini

I have deleted this file and my computer is still infected.

Please help :(

On the whole Anti Virus software does a bad job of removing spyware.

(I'm going to assume that you are using XP even tho' you didn't mention.
Most of these steps will work with any Operating System)

Here's some simple steps for you to take.
1/ Remove temp files and other rubbish form your system, either with inbuilt Disc Clean up or CCleaner (www.ccleaner.com).
(Disc clean up; open my computer > right click your C: drive > properties > Disc clean up button on general tab. Let it run and select everything)
2/ To make sure everything is running fine also run both anti virus and anti spyware apps (make sure that they are updated first ;)) (AVG (http://free.grisoft.com/doc/1) is good and free AV)
(A couple of good Spyware removal tools are Spybot (http://www.safer-networking.org/) and Adaware (http://www.lavasoftusa.com/software/adaware/))

ALso an on line virus and spyware scanner is Trend Housecall (http://housecall.trendmicro.com/)

Hope all this lot helps;)

Looks like it's something called SpywareQuake, the fake anti-spyware program is known to issue fake warnings on your computer in order to manipulate you into buying its full commercial version.

I hate to point you to another forum but...

http://www.bleepingcomputer.com/forums/topic47826.html

Hi,
Try running your antivirus program in SafeMode. Run it two times, then re-boot.
I use AVG, and doing this removed something similar after it said "file cannot be deleted". It did remove it in SafeMode.
Best wishes.

Most antivirus programs will not detect and remove spyware.

HI,
Good point. I thought what I had was Spyware; ran Spyware programs in SafeMode. Ran AVG in Safemode, and it caught it as a Virus.
This virus had embedded itself in files similar to SpywareQuake; just thought it might be worth a try. The other methods for remove this, other links, are very involved!

You're right, it is quite a process to remove that one. I checked and the latest Spybot update (http://www.safer-networking.org/en/updatehistory/index.html)seems to set up find it.

I'm waiting to see the response of the asker, perhaps just running an updated Spybot in Safe Mode, as you suggest, maybe his solution. :)

Thanks guys...

I scanned my computer in SafeMode and it picked up the virus.

Hi, Maxine,
That's GREAT! Congratulations.
Hope everything runs smoothly now. SafeMode is wonderful for stuff like this.
Best wishes.