The latest in a long series of scamware releases is VirusProtectPro. VirusProtectPro is a new rogue anti-spyware program released by the same makers of SpyLocked, SpyCrush, SpywareQuake, etc.




As the previous programs in this family, VirusProtectPro is installed by Zlob Trojans that are said to be audio or video codecs, but are in reality Trojans. Once you run the setup program for these so-called "codecs", the program will launch a DLL that downloads and installs VirusProtectPro and then issues fake security alerts on your taskbar.

It is advised that if you are infected with this software, you do not purchase it by any means. A free removal guide for this infection can be found below.

Yikes!


Another "helpful" program designed to prey on the uninformed.

"And it looks so genuine, too."


Thanks for the warning, Grinler.

You would think the time a few hackers spent on making this software, they could have spent that same time making a spyware remover and probably made more money.

More money in this method apparently.

THANK YOU! I'm so computer illiterate and was infected with the VirusProtectPro and somehow found you all. It's fixed now thanks to you all! I'm registered and will visit often.

Thanks,
nocturnicole

Great news nocturnicole, Welcome to Bleeping Computer

Help! S.O.S. - I've read, printed the removal instructions, downloaded the SmitFraudFix and then stopped in my tracks. As was explained in the instructions I should have had an icon on my desktop that pertained to the SFF that would be used later on as I removed the Virusprotect Pro from my computer. I am wondering...has anybody who has been effected (infected) by this crap using Microsoft ME? If so, how did you get it to work? Our computer is an HP Pavilion XL753 and has been working just great. There are at least twelve (12) security programs on our computer running with no conflicts and this is the first one that has gotten through. I can find the downloaded SFF in my Windows folder but when I click on it - it does nothing. The icon that I should have had on my desktop after downloading is not there. I tried reinstalling per instructions and the same thing happened. I did go into Control Panel and use the Add/Remove to uninstall this unwanted program VPP and it did...I think...anyway, I could find nothing on my system after doing so except this little flashing shield icon in my taskbar. It flashes red with a white x and blue with a ? - If I right-click it it takes me to their site, of course, left clicking does the same thing. This is the first time in seven years that something like this has happened, or at least since we've had this system (from new) and I am usually the one to help other people get rid of this crap. Okay, I'm kinda stuck. Where do I go from here or what else can I do? -WolfRaven

Unfortunately SmitFraudFix does not work with ME. I suggest you post a HijackThis log in our HijackThis forum. You can then get manual removal help for this infection.

http://www.bleepingcomputer.com/forums/topic34773.html

Thank you so much!! I have had this "thing" on my computer for days. I tried everything eventully found you guys and hey presto its gone!!!!!

I'm not very good with computers but this way was really easy and idiot proof thanks so much I really thought i'd had it.

Will pop in for a visit now that i've discovered you

I'm infected... ugh. What an evil, annoying and nefarious situation. Wish I could box the ears of the knuckleheads who created this spyware.

Here's my problem: when I tried the auto-fix, and re-started in Safe Mode, I wasn't able to see the SmitFraud Fix icon on my desktop or find the program which I had downloaded, so I got stuck. I'm running Windows XP Pro.

Any suggestions?

Thanks.
Kate

When you reboot into safe mode, make sure you log in to the same account you use normally.

Oh, right. Didn't think of that because normally my log in is automatic. But anyway, I searched for SmitFraudFix in Windows Explorer and was able to activate it that way; as others have said, it seems to have worked just swell. Whew.

Kudos to you for your altruistic help. Thanks ever so much.

Kate

p.s. Curses to the virus makers. May their evil little programming fingers swell like fat greasy sausages covered with toady warts. So there.

Thank you ! thank you ! thank you !!!!
I was infected with that "thing" for 3 days, and it took me 5 minutes to get rid of it.
I'm new here, i will come back often now i'm registred.
thank you very much for your help.
Merci et au revoir !!!
Alain

OK gang, I'm baffled. I ran SmitFraudFix and got rid of everything as far as I can see, but I keep getting new IE windows popping up with a variety of ad pages. Publishers Clearing House, Black Singles, eBay Search, Marketing this and Cams that and it's driving me crazy. I've run AdAware, Super Anti-Spy, SpywareBlaster, Norton and several others, but all they find are tracking cookies.

I'm running XP, if that makes a difference.

Any thoughts before I throw this thing out the bloody window?

Seriously, any help will be greatly appreciated. Shall I post a HiJackThis log?

Cheers!

Scott

Thank you for your support. My computer is now free from virusprotectpro... using the automated option.

The advice here worked very well and I would like to thank Smitfraudfix for a seamless operation. I tried the advice given on the symantec website but it did not work at all. I have the Norton 360.
Jandup

TY TY TY I just want to thank whomever wrote the article on VirusProtectPro. This help me dig out from under a smitfraud attack yesterday. (and believe me I was getting desperate!) I was about 30 minutes from a complete system wipe. I ran AdAware, Spybot and the smitfraudfix file and "POOF", I had my PC back! Outstanding work gentlemen!

I had VirusProtectPro on my computer and used McAfee to solve the problem which was useless. I then came across McAfee SiteAdvisor which directed me to the boards here.

I did the Automatic Removal using SmitFraudfix and it removed the backdoor trojan. The #10 step of the automatic removal - I did not see a red screen stating Computer will reboot now. Close all applications. Instead after step 9, it went to step 11 where a Notepad screen appeared before I had to close the Notepad screen. After that, I then restarted my Computer back in normal mode. I'm happy with the removal of VirusProtectPro and the blinking icon from my taskbar. I'm impressed and so wanted to let u guys know that you're awesome and I've registered with your site for future reference and help.

Hey There,,, Thanks so very much for this top shelf information and help. I thought i was downloading an active x control
to view a short video and bing bam boom. this crap infested my computer and screwed me out of about four hours of missery.
Thanks to you and your removal program I am happy to say I am up and running again. A lttle smarter, and more experienced. And happy as a pig in You know what.
Thanks again,,
Terry

Thank you so much bleeping computer!!!!!! its been 6 days of horror for me , now its finally over...hope you will keep me posted for some potential ad-awares, spywares and malwares that may come...
thank you very much..i just got the information of your brilliant site from Mcafee siteadvisor..i think i should also give them the credit...Again, Thank you so much

Just glad we could help. For those of you who reached us from siteadvisor, do not forget to give us a review so others can benefit as well!

Thank you For this posting I followed it up Did as advised re "smitfraudfix" and it worked Like a Charm Thank you to all who helped Dasha

Hey Everyone,

I'm still caught in the VirusProtect matrix from hell!

I've followed the removal instructions listed above but can't find the SmitfraudFix.exe file after I've downloaded it. There isn't an icon on my desktop. I am running Windows XP. I'm assuming I choose "Run" instead of "Save" when asked what to do with SmitfraudFix when I click on the link on your website.

Need some help!!

Thanks,

Suzecruise

If the problem is that you can not find the icon when you boot into safe mode, you must make sure you are logging into the same account you downloaded the file with when in safe mode.

Should I be seeing the icon on my desktop before I restart my computer in safe mode? If so, I'm not able to find it.

If you are not seeing it, you must not be saving the file correctly to your desktop. Make sure you select save, not run, and then specify the desktop as where you to save it

Happy, Happy, Joy, joy!!

Victory at last!

Thanks so much for your help. I appear to be Viruspro Free!!!

Thanks,

Suzecruise

I had virusprotectpro on my computer which I removed using the Smitfraudfix. I now have a question... Do I leave the smitfraudfix icons on my desktop or do I remove it from the computer. I have too many icons on my desktop and would like do some cleaning up. I would like to take out the smitfraudfix but was just wondering if it would do any computer damage or not and how do I go about removing it?

Nothing. Feel free to remove smitfraudfix now.