trying to follow instructions from S&D

[emily]

I ran Search and Destroy and, besides all the "cookies", there was the following: Smitfraud-C.Toolbar888 .

The instructions to the right said I would have to follow extra steps. It gave me the web address
http://www.sysinternals.com/Utilitie...sExplorer.html .

After that I was to right click on "Winlogon.exe", choose "properties" and then the "Threads" tab (where I would see the same name mentioned above). I was to "Choose and kill the dll" (running 2 times [?]). Then I was to reboot.

When I typed in the above web address, I was taken to
http://www.microsoft.com/technet/sys...sExplorer.mspx
Here, I can't find the things to follow the steps outlined above.

Can anyone help me? Note - I am a real idiot when it comes to computers, but I am trying to keep mine safe. Thank you for your time!

[LonnyRJones]

Welcome emily

There is a much easyer way to deal with that infection, if indeed its there.
Please go here and follow instructions.
http://forums.spybot.info/showthread.php?t=288
Start a new topic > http://forums.spybot.info/forumdisplay.php?f=22
Post a hijackthis and an online scan logs (not here)
Someone will then take a look at the system and advise you.

[emily]

Sorry. I'm mostly a right brainer. I don't understand your instructions. I went to the links you gave, but I don't see what applies to me. One post led me to believe that unless I was actually experiencing problems, I shouldn't try to post anything there. I don't really know a problem if I see one. I'm just trying to use Spybot's instructions in order to try to keep my computer all good . Unfortunately, my knowledge of all this is elementary (if that!) . What does it mean to hijackthis? Are you saying that someone (from Spybot) will "tap" into my computer and see what is up? Thank you for any assistance you feel like giving! ^_^

[LonnyRJones]

No, no one taps into your computer

Lets do this for now here
Post a SpyBot results report.
Run SpyBot check for problems, fix all red items, when its finished right click and choose copy results (not full report) to clipboard and past that back here please.

[emily]

Hi! I checked for problems. The thingie that I was instructed to jump through all the hoops for is gone, and there's quite a few new problems (just since this morning). I copied the results to my clipboard. How do I send it to you (I don't see how to access the clipboard)? Thanks for patience.

[LonnyRJones]

Post a reply then rightclick where you would type and choose paste.

[emily]

Statcounter: Tracking cookie (Internet Explorer: User) (Cookie, fixed)


Mediaplex: Tracking cookie (Internet Explorer: User) (Cookie, fixed)


TagASaurus: Tracking cookie (Internet Explorer: User) (Cookie, fixed)


Avenue A, Inc.: Tracking cookie (Internet Explorer: User) (Cookie, fixed)


BlueStreak: Tracking cookie (Internet Explorer: User) (Cookie, fixed)


DirectTrack: Tracking cookie (Internet Explorer: User) (Cookie, fixed)


Tradedoubler: Tracking cookie (Internet Explorer: User) (Cookie, fixed)


Zedo: Tracking cookie (Internet Explorer: User) (Cookie, fixed)


FastClick: Tracking cookie (Internet Explorer: User) (Cookie, fixed)


AdRevolver: Tracking cookie (Internet Explorer: User) (Cookie, fixed)


AffiliateFuel: Tracking cookie (Internet Explorer: User) (Cookie, fixed)


DoubleClick: Tracking cookie (Internet Explorer: User) (Cookie, fixed)



--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2006-03-02 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2006-02-06 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2006-02-20 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2006-11-24 Includes\Cookies.sbi (*)
2006-10-13 Includes\Dialer.sbi (*)
2006-11-24 Includes\DialerC.sbi (*)
2006-11-24 Includes\Hijackers.sbi (*)
2006-11-24 Includes\HijackersC.sbi (*)
2006-10-27 Includes\Keyloggers.sbi (*)
2006-11-24 Includes\KeyloggersC.sbi (*)
2006-10-13 Includes\Malware.sbi (*)
2006-11-24 Includes\MalwareC.sbi (*)
2006-10-20 Includes\PUPS.sbi (*)
2006-11-24 Includes\PUPSC.sbi (*)
2006-11-24 Includes\Revision.sbi (*)
2006-10-13 Includes\Security.sbi (*)
2006-11-24 Includes\SecurityC.sbi (*)
2006-10-13 Includes\Spybots.sbi (*)
2006-11-24 Includes\SpybotsC.sbi (*)
2005-02-17 Includes\Tracks.uti
2006-11-24 Includes\Trojans.sbi (*)
2006-11-24 Includes\TrojansC.sbi (*)

[LonnyRJones]

Are you experiencing any spyware symptoms ?
Browser redirects or homepage changes ?

[emily]

No, I don't think so. Any problems? Thanks again for your help!

[LonnyRJones]

Your good to go unless theres a bot/spyware item that SpyBot cannot fix.

Surf safe