Check out some similar questions!

Maxine321 · Apr 23, 2006, 07:19 PM

Hi

Can someone please help me. My computer has recently been infected with spyware and I think it is using Windows Messenger to send these files to and from my computer.

I have done a virus scan and the file that appears is sq.ini

I have deleted this file and my computer is still infected.

Please help :(

Curlyben · Apr 24, 2006, 04:13 AM

On the whole Anti Virus software does a bad job of removing spyware.

(I'm going to assume that you are using XP even tho' you didn't mention.
Most of these steps will work with any Operating System)

Here's some simple steps for you to take.
1/ Remove temp files and other rubbish form your system, either with inbuilt Disc Clean up or CCleaner.
(Disc clean up; open my computer > right click your C: drive > properties > Disc clean up button on general tab. Let it run and select everything)
2/ To make sure everything is running fine also run both anti virus and anti spyware apps (make sure that they are updated first ;)) (AVG is good and free AV)
(A couple of good Spyware removal tools are Spybot and Adaware)

ALso an on line virus and spyware scanner is Trend Housecall

Hope all this lot helps;)

NeedKarma · Apr 24, 2006, 04:42 AM

Looks like it's something called SpywareQuake, the fake anti-spyware program is known to issue fake warnings on your computer in order to manipulate you into buying its full commercial version.

I hate to point you to another forum but...

http://www.bleepingcomputer.com/forums/topic47826.html

fredg · Apr 24, 2006, 06:31 AM

Hi,
Try running your antivirus program in SafeMode. Run it two times, then re-boot.
I use AVG, and doing this removed something similar after it said "file cannot be deleted". It did remove it in SafeMode.
Best wishes.

NeedKarma · Apr 24, 2006, 06:56 AM

Most antivirus programs will not detect and remove spyware.

fredg · Apr 24, 2006, 07:04 AM

HI,
Good point. I thought what I had was Spyware; ran Spyware programs in SafeMode. Ran AVG in Safemode, and it caught it as a Virus.
This virus had embedded itself in files similar to SpywareQuake; just thought it might be worth a try. The other methods for remove this, other links, are very involved!

NeedKarma · Apr 24, 2006, 07:13 AM

You're right, it is quite a process to remove that one. I checked and the latest Spybot update seems to set up find it.

I'm waiting to see the response of the asker, perhaps just running an updated Spybot in Safe Mode, as you suggest, maybe his solution. :)

Maxine321 · Apr 24, 2006, 07:25 PM

Thanks guys...

I scanned my computer in SafeMode and it picked up the virus.

fredg · Apr 25, 2006, 05:21 AM

Hi, Maxine,
That's GREAT! Congratulations.
Hope everything runs smoothly now. SafeMode is wonderful for stuff like this.
Best wishes.