.: Smitfraud thing....?

Discussion in 'Malware Help (A Specialist Will Reply)' started by geek_j2, Aug 29, 2005.

  1. geek_j2

    geek_j2 Private E-2

    .: hi, I've run all the steps in the READ ME... thread. Spybot S&D found this Smitfraud thing (30 entries). it said to reboot b/c somehing might be used in memory, but I've rebooted, let Spybot run again, and it didn't remove it, so I rebooted in Safe Mode w/ Networking, let it run, and it didn't work, and then a 3rd time in just Safe Mode. And the Smitfraud thing is still there. Can you please tell me how to remove it?
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Download SmitRem

    Then boot to safe mode and run smitRem.exe. It will self extract a bunch of files into a new folder it will create called smitRem. In this new folder you will find a file named Runthis.bat Run this file by double clicking on it from Window Explorer. Follow all the prompt that you get (read them). It will create a log at C:\smitfiles.txt - Please attach it to your next message.
     
  3. geek_j2

    geek_j2 Private E-2

    .: erm..... no .txt file... sorry for replying so late -_- I'll run the Runthis.bat file again.
     
  4. geek_j2

    geek_j2 Private E-2

    .: aha, realized it said C:\ first, well I didn't realize that until I ran it a second time. anyway, I've attached the C:\smitfiles.txt file. I rebooted in normal but my background is now blue and my taskbar is in the old-fashioned style, not the XP style. Don't kno if that was supposed to happen. ok thx!
     

    Attached Files:

  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Can you set your background to what you want and can you change the taskbar to be the standard Start Menu?

    Is Spybot finding anything? If so post the Spybot log, I remember a potential problem with that.
     
  6. geek_j2

    geek_j2 Private E-2

    .: hey, yeah, I can change the taskbar and background, so I changed both those back. I ran Spybot again, and it still brough up the Smitfraud-C thing again. I've attached the log to this msg.
     

    Attached Files:

  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Download the attached zip file and extract the fixdSF.reg file from it to your desktop and then follow the steps below.

    Then double-click on the fixSF.reg file on your desktop (or locate it with Windows Explorer and double click on it if not saved to the Desktop) and when it prompts to Add in to the registry, say yes
     

    Attached Files:

  8. geek_j2

    geek_j2 Private E-2

    I added it :confused:
     
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member


    That's nice but what is the result of adding it? Did you run Spybot again?
     
  10. geek_j2

    geek_j2 Private E-2

    .: YES! it worked! no more smitty! you rock chaslang! I really appreciate man, thanks for erething
     
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member


MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds