===================================== QuickSMASH By Marco Allam : T68KV ========

=========================================
QUICKSMASH ASSISTANCE!!
Brought To You By TipidPC Virus And Spyware Removal Team
Fast And Lightweight
Able to Remove On Removable Drives
More Advance Detection And Deletion Compare To Standalone Batch File Removal.
Anti-Shutdown Protection While Running THe Program
Registry Critical Entries Override Protection
Update Definition
Update Program Notice. Redirection To Downloading Site.
Unload Process Then Delete
Pro-active Malware Checker
Able to delete on reboot.
Registry Entry Delete.
Log File Will Open Before the End Of Program.
Include Hijackthislog Program.
http://www.4shared.com/file/49439376/457533bb/QuickSMASH.html
================================================================================
===================
INFO: Quicksmash Is Not Anti-Virus!! It is a tool to help you remove malwares wi
th multiple files
or processes therefore you need a powerfull batch file removal, basically
it is loaded with
known malware definitions but you can also manually edit the definition an
d insert locations
on your own "USE AT YOUR OWN RISK". Its better to know the program before
using it manually
or contact TPC Virus And Spyware Thread For More Info on manual usage.
================================================================================
===================
****Usage\Options:****
-Update Before Smashing-
You must check this always unless you run the quicksmash and update recently
Better to check the TipicPC Virus And Spyware Removal Thread For Updates.
If you change or add something at definition, never check this option
so it will not override your changes.
-Include Smashing Removable Drives-
Include removal on removable drives.
Insert removable drives before smashing.
-Include Hijackthislog-
This will include hijackthislog to your quicksmashlog.
This is very useful for uploading you log to tipicpc virus and spyware removal t
hread for checking.
-Backup Registry-
This Function Will Backup Your Whole Registry First Before Smashing. This is rec
ommended for the first usage of Quicksmash.
Warning: the output will be very large, it is better to use this when quicksmash
is running at local drives.
-Spy Smash-
This will help you on removing persistent spywares. It will reset your pc once q
uicksmash is finish.
This will look like a bluescreen but don't worry. It is the same as resetting yo
u computer.
Still "USE AT YOUR OWN RISK". Before using that function, make sure you know wha
t are you doing.
-ExDefinition-
This will ask you for external text definition files. For Specific Removal.
Use At Your Own Risk. Ask Me First Before Using This Function.
Tip: Backup Registry If You Want To Try THis.

****Program Reaction:*****
-anti shutdown-
this will prevent all posible calls of shutdown.
-Detection-
Beep on CPU Speaker
Traytip Showing The File Location.

*****Legend On Log Output:*****

-Recycled-
Detected Files Move To Recycle Bin.
-Quarantined-
Detected Files Move To Quarantined Folder At Quicksmash Location.
-Delete File On Reboot-
The Detected File Can Be Deleted After Reboot.
-Unload And Deleted-
Kills the process where the files is loaded and eventually deleted.
-Deleted Registry Entry-
Registry Entry Created By Malwares Deleted. Usually it is on startup location an
d BHOs.
-Marked As Legit Programs-
Programs Logs marked as legit.
ALL FILES DETECTED HAVE BACKUPs EXCEPT REGISTRY!! Check the backupfiles folder w
here you run the quicksmash program.
FOr Registry, Its better to check the backup registry function to backup whole r
egistry before smashing.
Incase false positives.

Changes Made To Product ID when Infected By Viruses.

--------------------------------------------------------------------------------
--------------------------------------------------
-Protected By Quicksmash-
This means that you are infected with a malware that changes the product id to V
IRUS ALERT!
If you want to changes it back to your normal product id.
Go to Run and type regedit. Enter
Locate this:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion] Left side "Exp
lorer Side"
"ProductId"="XXXX-XXX-XXXXXXX-XXXXX" Right side

Nevermind changing this when you don;t know anything on backuping and editing at
registry.
Don't Worry this not critical that will make your system unstable unless you del
eted or edited wrong location.

Credits:
--------------------------------------------------------------------------------
--------------------------------------------------
GOD - for giving me strenght on my everyday life :D
Parents - For support on my studies and living expenses hehe.
TipidPC Core Team - for support
Trend Micro - Hijackthis
FileAssassin - Malware Bytes
--------------------------------------------------------------------------------
--------------------------------------------------
This program is 100% percent tested on my system "Windows XP"
If you have problem with the software, pls contact t68kv@yahoo.com
I will entertain you so that i can improve this remover further.
Want To Donate?
Never Hesitate to Contact Me :D
--------------------------------------------------------------------------------
--------------------------------------------------

USE AT YOUR OWN RISK!! Specially when you edit the definitions by yourself.
Warning: Do not edit definition unless you know what are you doing!!.
Files Detected Will Move To Recycle Or Quarantined
Incase Of False Positive Detection
PM ME at t68kv@yahoo.com
TIPID PC VIRUS AND SPYWARE REMOVAL THREAD
http://www.tipidpc.com/viewtopic.php?tid=139282
Marco Allam 2008
T68KV