Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Cannot Uninstall Smitfraud.


  • Please log in to reply
3 replies to this topic

#1 fulfillthedream

fulfillthedream

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:03:43 PM

Posted 18 April 2007 - 08:36 AM

So, I believe I've been infected with Smitfraud. Explorer randomly crashes, and I get alot of the WinAntivirusPro popups while surfing the internet. Also, when I scan my computer with Spybot, it locks up while searching SmitfraudC for about 40 minutes before continuing the search. I have no malicious processes running (to my knowledge), here's what the task manager shows.

UNSECAPP.EXE
taskmgr.exe
EXPLORER.EXE
iPodService.exe
CTFMON.EXE
iTunesHelper.exe
WMPNetwk.exe
ePower_DMC.exe
WMIPRVSE.EXE
firefox.exe
SPOOLSV.EXE
SVCHOST.EXE
SVCHOST.EXE
SVCHOST.EXE
SVCHOST.EXE
SVCHOST.EXE
LSASS.EXE
SERVICES.EXE
WINLOGON.EXE
CSRSS.EXE
SVCHOST.EXE
SMSS.EXE
avgemc.exe
avgupsvc.exe
avgamsvr.exe
AluSchedulerSvc.exe
MemCheck.exe
System
System Idle Process


I've run the Smitfraudfix.exe in safe mode (as best I could, explorer kept resetting.) but nothing's changed. How do i get rid of this thing?

Edited by fulfillthedream, 18 April 2007 - 08:41 AM.


BC AdBot (Login to Remove)

 


m

#2 fozzie

fozzie

    aut viam inveniam aut faciam


  • Members
  • 3,516 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ossendrecht/The Netherlands
  • Local time:09:43 PM

Posted 18 April 2007 - 08:42 AM

Posted Image to BC.

There are some issues identified with the Smitfraudfix and the developper of the software is currently adressing those. As soon as all is solved we will post back

#3 fulfillthedream

fulfillthedream
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:03:43 PM

Posted 18 April 2007 - 08:46 AM

I'll be waiting :thumbsup:

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:43 PM

Posted 18 April 2007 - 01:06 PM

The new version is now available. Follow the instructions provided in BC's self-help tutorial "How to remove the Smitfraud/Generic Zlob".

When done, download and scan with Dr.Web CureIt. Follow the instructions here for performing a scan.

Then perform one of these online Virus scans:
BitDefender Online Scanner. <- Add a check by "Autoclean".
Trend Micro Housecall <- Use "Autoclean" and manually delete what it can't clean.
[Watch the Address bar in IE. You may receive alerts that "This site might require the following ActiveX control...Click here to install...". Click on that alert and then Click Install ActiveX component.]

You can search for suspiciouss file using Google, The File Database or the File Research Center.

If you cannot find any information then submit the file to jotti's virusscan or virustotal.com. In the "File to upload & scan" box, browse to the location of the suspicious file and submit (upload) it for scanning/analysis.

Also see How to determine what services are running under a SVCHOST.EXE process.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users