PSguard & Smitfraud

hi, i thiiink i need some help here...

im infected with psguard and smitfraud among others...

my problem solving history:

-got infected with psguard, smitfraud, yoursitebar, medload, istbar, and some cookies....

-ive runned bitdefender, lavasoft adaware, hijackthis, spyemergency
both in normal and safe mode and removed all infected files,
ive also tried to insert the smitfraud.reg file in safe mode...

i just cant get rid of it...

the hijack is showing a windows security center page as a startpage...

what can i do ??

im running xp, and have all the above programs, but im not all 100 % into everyting yet...

please help me some...

 

Download smitRem.exe and save the file to your desktop.

Double click on the file to extract it to it's own folder on the desktop.

Reboot into safe mode.

Open the smitRem folder, then double click the RunThis.bat file to start the tool. Follow the prompts on screen. Wait for the tool to complete and disk cleanup to finish.

The tool will create a log named smitfiles.txt in the root of your drive, eg; Local Disk C: or partition where your operating system is installed. Please attach this log to your next reply.

Please follow the steps below:

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

 

ok, done it...

heres the logs from hijackthis and smitrem...

everything seems to be ok now, im running spy emergency and adaware se
and it doesent find anything more

please look at the files and tell me everything is ok

 

Your log looks clean. Any other issues?

 

everything is in perfect order !!!

u rule gunny

thanx for all, ill keep an eye on ur site, and i'll recomend u to all i know,
and ill promote u on norways biggest and best lan party, www.convention.no

respect

 

You're, welcome; and safe surfing.