SmithFraud

Discussion in 'Malware Help (A Specialist Will Reply)' started by JusitnN, Sep 12, 2005.

  1. JusitnN

    JusitnN Private E-2

    I am trying to remove the smithfraud trojan from my computer but I am having problems. I found tools that are suppose to help remove it but I can't get my computer to boot up. I deleted the Bitmap picture that it uses as wallpaper but I get a blue screen when trying to boot up. It won't boot up in save mode either. I can do an (alt ctrl del) and get to the task manager. Thats about it. Any help?????
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    What exactly (step by step) did you do to get to this point?
    What tools are you referring too?
    And what files or registry keys have you been deleting(if any)?

    Can you get your browser to run from Task Manager?
     
  3. JusitnN

    JusitnN Private E-2

    I ran symantec, ccleaner, cleanup, smithfraud.reg, spybot, and ad-aware se. I deleted the bitmap image that was saying I have a virus. I did not delete any registry keys. I can get my browser to run.
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    See how much of the below you can do. For anything you cannot do, make note to tell me later, and then move to the next step. When all finished, come back and report.

    Please follow the steps below:

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds