PDA

View Full Version : SmitfraudC.grp -Can't get rid of it



sleighr
2008-06-02, 03:32
I'm having a major difficulty with a SmitfraudC.grp. Spybot can't get rid of it. No matter how many times it removes the files, it can't remove one malevolent registry entry called "autorun" (claims to be in the memory). Spybot says it can remove it on restarting, but on each next startup, a new line of six problem areas have erupted, having the exact same entries, and three of them occur right after removing the original group.

It also keeps adding a program: cftmon.exe to my user folder.

How can I isolate and remove this bastard, short of a hard drive wipe?

drragostea
2008-06-02, 03:44
Sorry to hear that. The Smitfraud trojan can be persistent to remove.
--
Consider posting in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum and having someone take a look at your system.

If you decide to have an experienced malware removal specialist assist you, please follow the procedure in this link to run scans and produce a HijackThis log: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) ( http://forums.spybot.info/showthread.php?t=288).
--

Please watch your language. :)