PDA

View Full Version : Smitfraud-C: Please confirm FP



macstorm
2007-07-12, 01:00
Hello experts,

Just updated to the today's latest definitions and Spybot detected 'Smitfraud-C' under this reg entry:
HKEY_USERS\S-1-5-21-1409082233-1957994488-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E5DF9D10-3B52-11D1-83E8-00A0C90DC849}

I'd like anyone to confirm if it's a false positive.
Scanned with Ad-Aware and Superantispyware = Clean

Thanks

Stompaman
2007-07-12, 13:54
Just updated to the today's latest definitions and Spybot detected 'Smitfraud-C' under this reg entry:
HKEY_USERS\S-1-5-21-1409082233-1957994488-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E5DF9D10-3B52-11D1-83E8-00A0C90DC849}

I'm getting exactly the same thing (though the S-1-5-21-..... number is different). I've tried some other scans:

Norton Antivirus scan - Clean
Kaspersky Online scan - Clean
Adaware scan - Clean
HJT scan - nothing suspicious seen
SmitfraudFix scan - nothing suspicious seen

I'm also not seeing any indication of Smitfraud-C as described in the Spybot Smitfraud-C description (i.e. changes to wallpaper etc.....).

So I too am wondering if it's a false positive?

Stompaman

tashi
2007-07-12, 20:25
Thank you for reporting, I will bring to our detectives attention.

Yodama
2007-07-13, 12:43
hi,

thanks for reporting it is a false positive. The change to the detection database will be effective with the next update.

Stompaman
2007-07-13, 13:47
thanks for reporting it is a false positive. The change to the detection database will be effective with the next update.

OK, thanks for confirming.

Stompaman

bertkc
2007-07-15, 01:31
I had this show up aswell I clicked fix it and it hasn't showed up since. I assume it deletes the registry is this going to affect my PC in a negative way since this infact wasnt a harmfull entry?

bertkc
2007-07-15, 02:36
anyone? this worries me :O

tashi
2007-07-15, 19:26
Hi bertkc.

Are you experiencing any problems?

I will ask a detective to respond, which will be Sunday evening, Monday, depending on time zones. :)

bertkc
2007-07-16, 02:48
hey man. No problems yet but I'm wondering if i reboot my system is going to have issues? Like is the registy entry that the user posted above vital to making windows and programs function properly. I'm just assuming that when I told it to fix the problem it deleted that entry. I just need to know if this is going to cause my problems.thanks

Yodama
2007-07-16, 10:47
hello,

the key reported above is not system critical, it actually is only a reference to another existing key and will be recreated if needed.