This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

"SmartService" virus, cannot seem to remove

2 min read

This thread's last reply is from September 26, 2017, 3:30 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Previously, I had started a topic with a seemingly unbeatable virus. Unfortunately for me, I apparently had some illegal software on my system that I was unaware of, but have since removed it. A brief rundown of the problem now identified as "SmartService" virus.

A few days ago, I had downloaded something I shouldn't have, and it left me with what I believe was ransomware. It gave me a blue screen that demanded I provide my Windows activation key. I suspected it was a virus, and removed several programs that had recently installed on their own. I thought all was done until I learned my antivirus programs wouldn't work, and a process was running that seemed suspicious (dwonhxbsrv.exe). I also apparently had the Unmelted virus, but that went away on its own, it seemed.

I'm uploading the FRST and Addition text files, as well as the fixlog since I was asked to do so in the last post. There are two usernames that I do not recognize that are jumbled letters. Aside from removing a number of programs that I didn't need or were possible illegal programs, I haven't done anything else.

I am running Windows 10 Home Edition, too. I thank you again in advance for any assistance.
OK before we get down to fixing anything I've got one more scan I need you to run ...

Download CKScanner to your Desktop.
  • Doubleclick CKScanner.exe to launch it.
  • Click Search For Files.
  • After a couple minutes a list will appear in the panel to the right.
  • Click Save List To File.
  • A message box will verify the file saved.
  • Close CKScanner.
  • Copy/paste the contents of ckfiles.txt in your next reply please (it will be on your Desktop).
  • Please run the program once only.
Here you go:


CKScanner 2.5 - Additional Security Risks - These are not necessarily bad
c:\pcsx2\pcsx2_keys.ini.default
c:\program files\git\usr\bin\ssh-keygen.exe
c:\program files (x86)\cyberlink\powerdvd10\navfilter\kmsvc.exe
c:\program files (x86)\pcsx2 1.4.0\pcsx2_keys.ini.default
c:\users\joshua\google drive\loqui kb\areas\the cracks of terra\desktop.ini
c:\users\joshua\google drive\loqui kb\areas\the cracks of terra\l4 map.gdraw
c:\users\joshua\google drive\loqui kb\areas\the cracks of terra\room notes.gdoc
c:\users\joshua\google drive\loqui kb\areas\the cracks of terra\terra.gdoc
scanner sequence 3.GJ.11.NMLBI0
----- EOF -----


Also, to answer a question you asked before: It's a personal use laptop, no business or education currently.
Since you have chosen to edit your CKScanner log I can only presume that you are trying to conceal something that it indicated.

THIS TOPIC IS THEREFORE CLOSED

Do not attempt to open another help topic at this forum as it too will be closed,