SmitFraud issues

Please uninstall and reinstall HJT and rename it as instructed in the Read and RUn First!

Download and install Registrar Lite

Then run Registrar Lite.

Copy and paste the below into the Address box of registrar lit and hit the Enter key.

HKEY_LOCAL_MACHINE\SYSTEM

Then click the Security pull down ont the top menu and choose Take Ownership. Click OK in the next window to approve it. Now exit Registrar Lite and continue.

Copy the contents of the below Quote Box to Notepad. Then click File and then Save As. Change the Save as Type to All Files. Name the file fixme.reg and then click save. (make sure you save it somewhere you can find it. Saving it to your Desktop may make that easy.) Then double-click on the fixme.reg file on your desktop (or locate it with Windows Explorer and double click on it if not saved to the Desktop) and when it prompts to Add in to the registry, say yes.

Now attach new logs:
ShowNew
GetRun
HJT ---> properly renamed.

 

Please use add/remove programs to uninstall:
Java 2 Runtime Environment, SE v1.4.2_03

Search Assist ----->? Did you install this? Is it something you use?

Are you networked through this domain?
Domain = pinnacle.local?

Run HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now(not malware, just a resource hog):

Now download The Avenger by Swandog469, and save it to your Desktop.

* Extract avenger.exe from the Zip file and save it to your desktop
* Run avenger.exe by double-clicking on it.
* Check the 'Input script manually' box.
* Click on the magnifying glass icon.
* Copy everything in the Quote box below, and paste it in the box that opens:

* Now click the 'Done' button.
* Click on the traffic light icon and OK the prompt.
* You will be prompted to restart, OK the prompt and your PC should reboot, if not, reboot it yourself.
* A log file from Avenger will be produced at C:\avenger.txt

Attach the avenger log.

 

That looks good ....
The HJT line was not a nasty ....just a resource hog and does not need to run at startup.

Attach new logs for:
GetRun
ShowNew
HJT

I think we're done, but I want to check before you do the final cleanup.