Problem with Smitfraud-c

[Caldecotte]

I have downloaded dds which only gets to the first screen which assembled a row of dots and then did no more.

the problem came about when upgrading Adaware to the Pro version when Spybot reported that Smitfaudc was attached to smss.exe and blocked it. Since then my computer is very disabled.

I would appreciate your help as I am stuck as to what to do next!

thanks in anticipation

[Blade81]

Hi,

Make sure your protection software is disabled. Then download DDS here (http://download.bleepingcomputer.com/sUBs/dds.com) and run it (try in safe mode if normal mode ends up to same situation as you described in previous post).

[Caldecotte]

Here is the DDS file. I am not working on my own computer and can't find winzip to zip the attach file.

I hope you can do something to help me with this, I am doing it on behalf of my partner who is very ill (actually in hospital at the moment) and the stress of his computer not working is causing him a lot of extra stress.

Thanks in anticipation.

Val

[Blade81]

can't find winzip to zip the attach file.
It's ok to just copy-paste its contents to your reply :)

[Caldecotte]

Here it is!


.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_11-03-05.01)
.
.
==== Disk Partitions =========================
.
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
No restore point in system.
.
==== Installed Programs ======================
.
Aardvark Audio Professional Cards Manager
ABBYY FineReader 6.0 Sprint
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader X (10.0.1)
Apple Application Support
Apple Software Update
AVG Free 9.0
CCleaner
Dell Printer Software
Download Accelerator Plus (DAP)
DreamStation DXi2
DVD Suite
ERUNT 1.1j
GIMPshop 2.2.8
Google Chrome
Google Update Helper
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows XP (KB954550-v5)
Intel(R) Extreme Graphics Driver
Intel(R) PRO Network Adapters and Drivers
InterVideo WinDVD
Java Auto Updater
Java(TM) 6 Update 24
Lexmark 2500 Series
LG ODD Auto Firmware Update
LightScribe System Software
LightScribe Template Labeler
Malwarebytes' Anti-Malware
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Office Professional Edition 2003
Microsoft Silverlight
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MyShoppingGenie
Nero 7 Essentials
neroxml
PhotoScape
PowerDVD
PowerProducer
QuickTime
RealNetworks - Microsoft Visual C++ 2008 Runtime
RealPlayer
RealUpgrade 1.1
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Windows Internet Explorer 8 (KB2183461)
Security Update for Windows Internet Explorer 8 (KB2360131)
Security Update for Windows Internet Explorer 8 (KB2416400)
Security Update for Windows Internet Explorer 8 (KB2482017)
Security Update for Windows Internet Explorer 8 (KB2497640)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2503658)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2506223)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2511455)
Security Update for Windows XP (KB2524375)
Skype web features
Skypeô 4.1
SONAR 2
Sonic Timeworks Sonar 2 Plug-ins
SoundMAX
Spybot - Search & Destroy
T2488 Version: 1.0.3.3
Ulead VideoStudio 10
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 8 (KB975364)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows XP (KB971029)
Virtual DJ - Atomix Productions
Virtual Sound Canvas DXi
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
WebFldrs XP
Windows Defender
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows XP Service Pack 3
WinRAR archiver
.
==== End Of File ===========================

[Blade81]

Hi,

Disable Spybot's TeaTimer to make sure it won't interfere with fixes. You can re-enable it when you're clean again:
Run Spybot-S&D in Advanced Mode
If it is not already set to do this, go to the Mode menu
select
Advanced Mode

On the left hand side, click on Tools
Then click on the Resident icon in the list
Uncheck
Resident TeaTimer
and OK any prompts.
Restart your computer



Please visit this webpage for download links, and instructions for running ComboFix tool:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Please ensure you read this guide carefully first.

Please continue as follows:


Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link (http://www.bleepingcomputer.com/forums/topic114351.html)
Remember to re-enable them afterwards.


Click Yes to allow ComboFix to continue scanning for malware.


When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New dds log.

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

[Caldecotte]

I have successfully disabled teatimer, but when I run combofix, it won't let me continue because it says avg is present. I have attempted to uninstall AVG, but it tells me that it cannot remove
hklm/software/microsoft/windowsnt/currentversion.windows:creatingregistrykey

I am getting more and more panicked by this! What should I do?

Val

[Blade81]

Hi,

Try AppRemover (http://www.appremover.com/get/appremover.exe) to uninstall AVG.

[Blade81]

Are you still there?

[Caldecotte]

Hi Blade 81

I'm sorry I haven't got back to you. My partner is very very ill and my priority is with helping him getting back to health. I've set up my laptop so he can access the internet etc.

If things get better I will try again, but for the moment I think it's best to ask you to close this.

Thanks for all your help.

Val

[Blade81]

Ok. I wish speedy recovery to your partner. Like you said, it's health that comes first.