What does Spyware <insert name> do?

[azanda]

Hi,

Apologies if this has already been asked 100 times before (I have been through the FAQ, the help, the search facility etc etc) but I'm trying to find out where to go to find a definition of particular bits of spyware that I have been infected with - this is primarily to figure out how my system has been compromised and what information may have been given away. I am particularly interested in:

Smitfraud-C.Toolbar888
Zlob.HomepageMonitor

I could not find a page that described these in any depth no the internet (via google) nor on the S&D site.

Any help appreciated and apologies again if this has already been asked (if it has, could this info please be included in one of the forum stickies?)

Regards

A.

[tashi]

Hi there.

These infections are caused by bad downloads installing rogue security programs such as PestTrap, SpyFalcon and WinAntivirusPro; the so-called Smit family hijackers.

We have two options for removal, a self help topic for those experienced and comfortable with such:

VirusBurst, X Password Generator, various ZLOB CODECS, and other desktop type hijacks (http://forums.spybot.info/showthread.php?t=4015)

For those who prefer to have a HJT log analysed and to be guided by a trained malware remover:

"BEFORE you POST" -Preliminary Steps and scanning with SPYBOT-S&D (http://forums.spybot.info/showthread.php?t=288)

You would then start your own thread in the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22)

Once you have posted, a helper will take a look at the logs as soon as available and give any further instructions necessary.


FYI: Spybot-S&D detecting HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\WinLogon\Notify\Sebring as "Smitfraud-C.Toolbar888" was a false positive which was fixed in the 2006/11/10 definitions update.

Regards. :)