Found in Windows/System32 directory
I am not sure where this file came from, but I had been downloading various
files from rapidshare. This seems to have been associated with WinDefender 2009,
a browser hijacker. I did not have any of the usual registry entries found with this virus,
nor did a manual & automated search find any of the WinDefender files that were reported
to be present with this hijacker.
Scans with Symantec, Spybot, AdAware, SpyDoctor, CCCleaner nor Windows Mechanic
detected any problems. It became so persistant that even after unplugging my cable modem,
using the computer was impossible.
Using a second computer I found a fix here on this site called 'SmitfraudFix' that
cured the virus immediately. Once again, NONE of the regular files associated with this
virus were found on my hard drive or in the registry. I was able to download the program to a
thumb drive, then transfer the thumb to my affected computer, plug it in, & SmitfraudFix did the rest.
I am fully aware of the dangers of downloading from sites such as RapidShare & others like it. In the past my
Symantec always stopped infected files before they had any effect, but not this time.
I wish to thank everyone here at BleepingComputer.com for having the info & the related program and
complete instructions required to stop & eliminate this hijacker from my computer.
My wishes to all for a happy & virus free holiday season.
Edited by wiggey, 06 December 2008 - 04:17 PM.