File Description:
SmitRem is a tool that
noahdfear created to remove the Trojan-Spy.HTML.Smitfraud.c malware infection and it's variants, AntivirusGold, PSGuard Spyware Remover, SpySheriff, Spy Trooper, SpyAxe, Security Toolbar, WinHound and SpywareStrike.
These infections are known as Desktop Hijackers and make many unwanted changes to a user's computer. They are also difficult to remove. The effects of each of the above variants varies, in some cases infecting the system file wininet.dll and/or disabling the Task Manager in addition to taking over the desktop. I have included the repair of all of the known registry changes made by these hijackers, as well as the removal of the
associated files and folders created. Panda ActiveScan online should be run following the use of this tool, since it can detect and often repair anything not found and removed with the tool.
I do not recommend using the tool without guidance from a qualified malware removal specialist!
Usage Instructions:
Download smitRem.exe, saving the file to your desktop. Double click it to extract the contents to a folder of it's own. Restart your computer in safe mode, logon to the user account that is infected, open the smitRem folder and double click the RunThis.bat file to start the tool. Follow the prompts on screen and allow disk cleanup to complete. Upon reboot, you can reset your desktop background. Note: XP users using the XP theme may ex-perience a change to the Classic Windows theme. This can be changed on the themes tab of desktop properties.
For expert Spyware, Popup, and Hijacker removal assistance, do not hesitate to
visit our HijackThis Logs and Analysis forum.
Search
BleepingComputer.com -> smitRem