PDA

View Full Version : Smitfraud and Security Protection



LeeFoo
2011-08-28, 20:34
I had Security Protection Malware and I think I have finally gotten rid of it.

However, Spybot keeps telling me over and over again that I have Smitfraud-C GP. I remove it, do a scan and it comes back. I have tried to remove it via safe mode and nothing seems to work.

Can anyone tell me how to remove it?

Thx

LeeFoo
2011-08-29, 01:27
I have tried just about everything. I have done the manual deletion of SP and the auto removal (using another SPYWARE product).

I am at my wits end. My computer ran fine for about an hour this afternoon. This evening I go on to see if anyone has replied and BOOM, SP is back with a vengeance.

Does anyone have any advice?

Thx

LeeFoo
2011-08-29, 01:28
Btw, not that it may make a difference, but I have donated to SPYBOT twice, including just yesterday.

Hopefully my bucks will buy me a cure. :cowboy:

tashi
2011-08-29, 03:32
Hello LeeFoo,

So that everyone is on the same track please see the forum FAQ which also includes instructions for posting preliminary DDS logs for analysis in post #2.
"BEFORE You POST"(Please read this Procedure Before Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

Then start a new topic providing the DDS logs as shown in that sticky and a link back to this thread. A volunteer analyst will advise you when available. :)

Also please do not add additional posts to your new topic as helpers look for ones with no response.

Best regards.

LeeFoo
2011-08-30, 02:59
Smitfraud-C.gp: [SBI $8E7F06B8] Executable (File, nothing done)
C:\Windows\svchost.exe
Properties.size=20480
Properties.md5=2CEFF13ACE25A40BD8D97654944297CD
Properties.filedate=1247534086
Properties.filedatetext=2009-07-13 21:14:45


--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---

2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2009-01-26 SDWinSec.exe (1.0.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-03-05 TeaTimer.exe (1.6.6.32)
2010-08-23 unins000.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-11-04 advcheck.dll (1.6.5.20)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2008-10-22 Tools.dll (2.1.6.8)
2009-01-16 UninsSrv.dll (1.0.0.0)
2011-03-18 Includes\Adware.sbi (*)
2011-06-28 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2010-12-14 Includes\Dialer.sbi (*)
2011-03-08 Includes\DialerC.sbi (*)
2011-02-24 Includes\HeavyDuty.sbi (*)
2011-03-29 Includes\Hijackers.sbi (*)
2011-05-16 Includes\HijackersC.sbi (*)
2010-09-15 Includes\iPhone.sbi (*)
2010-12-14 Includes\Keyloggers.sbi (*)
2011-03-08 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2011-04-05 Includes\Malware.sbi (*)
2011-08-23 Includes\MalwareC.sbi (*)
2011-02-24 Includes\PUPS.sbi (*)
2011-05-24 Includes\PUPSC.sbi (*)
2010-01-25 Includes\Revision.sbi (*)
2011-02-24 Includes\Security.sbi (*)
2011-05-03 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2011-02-24 Includes\Spyware.sbi (*)
2011-06-14 Includes\SpywareC.sbi (*)
2010-03-08 Includes\Tracks.uti
2011-06-20 Includes\Trojans.sbi (*)
2011-08-01 Includes\TrojansC-02.sbi (*)
2011-08-09 Includes\TrojansC-03.sbi (*)
2011-08-24 Includes\TrojansC-04.sbi (*)
2011-08-23 Includes\TrojansC-05.sbi (*)
2011-08-23 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll

tashi
2011-08-30, 06:27
Hello LeeFoo,

Please start a new topic providing the DDS logs.


DDS Log

Download to your desktop DDS from one of the links below:

Link 1 (http://download.bleepingcomputer.com/sUBs/dds.scr)
Link 2 (http://download.bleepingcomputer.com/sUBs/dds.com)


Double click the tool to run it.
If a black Screen opens, just read the contents and do nothing.
When the tool finishes, it will open 2 reports, DDS.txt and attach.txt
Copy/Paste the contents of 'DDS.txt' into your post.
'attach.txt' should be zipped using Windows native zip utility and attached to your post. Compress and uncompress files (zip files) (http://windows.microsoft.com/en-us/windows-vista/Compress-and-uncompress-files-zip-files)


http://forums.spybot.info/showpost.php?p=1150&postcount=2

Best regards.

LeeFoo
2011-08-30, 20:18
I'm sorry.........I could've sworn I started a new Topic. I even gave it a different name.

I will try again when I get home

tashi
2011-08-30, 20:27
Hello LeeFoo,

I'm sorry.........I could've sworn I started a new Topic. I even gave it a different name.


Yes you did. :)

See the edit in post #5 above. :wink:

Last edited by tashi; Yesterday at 09:24 PM. Reason: Merged two topics

But the DDS logs were not provided, only the top of the Spybot-S&D log.

Our volunteer helpers need the complete DDS log to analyze. If you are not sure what a DDS log looks like please check out another member's topic. :flowers:

Cheers.

tashi
2011-08-31, 00:09
New topic: http://forums.spybot.info/showthread.php?t=63760