Hi,

this is my first post, I hope it's posted in the right forum.

Well, I seem to have been infected with spydawn and also did read the removal instructions, but before I start with that I still would like to ask a question.

On the site where you can download the SmitFraudFix program it says "I do not recommend using the tool without guidance from a qualified malware removal specialist!" and since I would call myself a computer newbie, at least when it comes to solving problems, I would like to know how risky it is to use that program, or do the removal instructions count as "guidance from a qualified malware removal specialist" ?

And that guide is also for windows XP, isn't it?

Thanks in advance.

Good questions. With the images along with the written instructions, I would feel safe in using the fix. If you have any problem or want to clarify a step, please ask.
I always recommend using Super Antispyware along with the Smitfraudfix. Super Antispyware has had success in removing Spydawn and because there is always a good chance that you have other malware. Yes, Smitfraudfix is for XP. I don't think it works with Vista, though..

Install Super Antispyware. Run it in safe mode. Allow it to quarantine whatever it finds.
http://www.superantispyware.com/

Do you mean I should first use Super Antispyware and then the fix or both, or the fix first?

And if I use Super Antispyware should I end Spybot or isn't it a problem to have both programs active?

Use both. Spybot should not interfere. Super Antispyware free is good to have around for occassional scanning. Just remember to update it at least once a week so it will be ready when you need it. Do the Smitfraudfix first.

Ok, thank you, I'm gonna try it this way.

But I still got one last question:

In the removal instruction in step 8 it says after the clean up is finished I should continue with step 11, but what should I do if I will be presented with that option wheather I want to clean the registry or not which would be step 9 ?
Should I choose yes or no?

choose yes

I have trouble with getting into the safe mode.

I already did start my computer in safe mode once, but this time it doesn't seem to work.

I hit F8 after the beep and a menu appears, but it has no option to start in safe mode, the options it shows are the following:

1. 1st FLOPPY DRIVE
2. CDROM:SM-TSSTcorpDVD-REOM SH-D16
3. HDD: 3M-WDC WD1200JS-00NCBI

I did choose the first since the instruction says "Select the first option to run Windows in Safe Mode", but as far as I remember then windows tells you it is in safe mode, which isn't the case.

So what can I do now to get into safe mode?

I think you hit the F8 key too soon. There is another method to get to safe mode described in the BC tutorial in the link below. What you did was change the boot order so your comp will first look to boot from the floppy drive and as long as their is no floppy disk in the drive it will go on and boot from the HDD.
http://www.bleepingcomputer.com/tutorials/tutorial61.html

Well, now I managed to get into safe mode, but found another problem...

When I click on the SmitFraudFix icon which is on my desktop, there doesn't open any window (or just for less than a second) and a SmitfraudFix-file appears on my desktop.

How can I get the program to run now?

What do you mean a smitfraudfix file appears on your desktop? Can you be more specific? Is it a text file?

Well, take a look at this screenshot:

When I downloaded the program I got the first icon on my desktop.
Now after doubleclicking on it in safe mode I get the the file seen in the right site of the screenshot (don't exactly know how it's called in english, this is why I put this screenshot in here )

But I can't start the program.

Sorry you are having that problem. What happens if you right click on the file folder? Do you have an option to open it and if if does open what do you see?
Super Antispyware may remove the Spydawn infection without using the Smitfraudfix. Why not try that. Please let us know the results.

I also had tried it with right click-> open, but it didn't start this way either.

Now I have tried it with Super Anti Spyware and it seems that spydawn is removed succesfully.

Yippee!!