Results 1 to 10 of 10

Thread: smitfraud-c help please

  1. #1
    Junior Member
    Join Date
    Mar 2008
    Posts
    3

    Default smitfraud-c help please

    spybot has picked up a virus called smitfraud-c.gp on my computer but it cant fix it. When I try and fix it a message comes up saying "some problems could not be fixed; the reason couls be that the associated files are still in use (in memory)" I have looked at different forums and found lots of people have been able to get rid of it but only through complicated measures that i don't really understand. I'm not great at computers and really want this smitfraud gone soon as I've had it for a while. please could you give me stright forward, easy to follow advice? Thank you so much!

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    32,627

    Default

    Hi there,
    Quote Originally Posted by darkoni View Post
    When I try and fix it a message comes up saying "some problems could not be fixed; the reason couls be that the associated files are still in use (in memory)"
    Have you run Spybot-S&D in safe mode, which gives access to only basic files and drivers. When the machine is operating in normal mode all processes are running.

    Scanning with Spybot-S&D in safe mode allows the program to try and remove items that keep reappearing after a scan, despite having been 'fixed'.
    http://forums.spybot.info/showpost.p...29&postcount=2


    Best regards.
    Microsoft MVP. Consumer Security 2006-2014


  3. #3
    Junior Member
    Join Date
    Mar 2008
    Posts
    3

    Default

    Thank you for replying. I'll try that and then let you know.

  4. #4
    Junior Member
    Join Date
    Mar 2008
    Posts
    3

    Default

    Thank you so much!! that got rid of it! I've sent you a 5 donation as I think your program is great and that the help i recieved got the problem sorted with no problems. Thank you again and keep up the good work!

  5. #5
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    32,627

    Default

    Great, thank you for letting us know, and we appreciate your donation.

    Cheers.
    Microsoft MVP. Consumer Security 2006-2014


  6. #6
    Junior Member
    Join Date
    Sep 2008
    Posts
    1

    Default The probelm for mi persist

    Hi, I'm using Windows 2000 Sp4 and I have formatted and reinstall all again
    but the trojan "Smitfraud-c.gp" infect again my computer.
    I have installed SpyDestroy 1.6 and it remove it, but in 15 minutes the system
    present again the virus in file "A.exe" in system32 and this trojan download other virus as "mda.exe" + "msv.exe" in directory system32.
    In few minutes the system crash and show me the advise irreversible error on Csrss.exe and the system REBOOT.
    I have also installed Internet explorer 6.0 sp1 and activate in Spybot the block access to registry and blocking of explorer option, but the system (new from format) are always infected in few minuted after connection.
    My Antivirus is AVAST free.

    There is some possibility to solve it.
    Using other computer with Windows Xp Sp3 the problem there isn't.

    Thanks


    Quote Originally Posted by tashi View Post
    Hi there,


    Have you run Spybot-S&D in safe mode, which gives access to only basic files and drivers. When the machine is operating in normal mode all processes are running.

    Scanning with Spybot-S&D in safe mode allows the program to try and remove items that keep reappearing after a scan, despite having been 'fixed'.
    http://forums.spybot.info/showpost.p...29&postcount=2


    Best regards.
    Last edited by apollo13; 2008-09-29 at 19:58.

  7. #7
    Senior Member
    Join Date
    Oct 2005
    Location
    Los Angeles
    Posts
    219

    Default

    Gentlemen:
    IMHO anyone with a smitfraud infection is advised to remove themselves to the Malware Removal Forum
    read the stickies
    and post a hijack this (not here)
    give your posts meaningful names including SMITFRAUD

    once posted
    DO NOT REPLY TO YOUR OWN FIRST POST

    some new versions of smitfraud cannot be removed with spybot (or your AV) and you need the guidance of an expert to use the tools needed

  8. #8
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    32,627

    Default

    Hello apollo13,

    Please follow the procedure in this link: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance)

    Then start your own thread in the Malware Removal Forum where a helper will advise you as soon as available.

    Best regards.
    Microsoft MVP. Consumer Security 2006-2014


  9. #9
    Junior Member
    Join Date
    Oct 2008
    Posts
    1

    Default

    new member here and this is my first post. good day everyone.
    as you can easily guess, i've had this trojan/virus. in fact i have been getting it several times over and spybot 1.6 always can get rid of it but alas it reappears after another spybot scan. out of sight out of mind and the cycle goes on. until today that i decided to google it, leading me to this site.

    question: what exactly is smitfraud-C.gp? If it keeps reappearing after eradicating it, this must be doing some serious screwing around in my lappy for it to be so intrusive and pervasive.
    Last edited by philipq; 2008-10-29 at 14:29.

  10. #10
    Senior Member drragostea's Avatar
    Join Date
    Jan 2008
    Location
    @Home
    Posts
    3,699

    Default

    phili, SmitFraud is a dangerous malware, leading to the installation of backdoors, other trojans, and probably some pop-ups too.
    Rogue programs like WinFixer or VirusHeat are part of the notorious SmitFraud trojan family.
    http://research.sunbelt-software.com...threatid=44645
    -

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •