Search:

I think its repaired, dont see it anymore..

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:57:42, on 19/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
...

ComboFix 08-10-19.03 - PC_10 2008-10-19 23:50:11.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.580 [GMT 1:00]
Running from: C:\Documents and...

Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)
Adobe Color Common Settings
Adobe Color Common Settings
Adobe ExtendScript Toolkit 2
Adobe ExtendScript Toolkit 2
Adobe Flash Player...

I got this X red thing in my task bar saying i have a spyware in my computer and it will start to download an up-to-date anti spyware software..when I click on the alert it disappears..Heres a...

Hey,

I have a process running called iexplore.exe, and at randoms times, like in every 2 minutes it jumpes to 99% cpu usage and makes my computer freeze, could I get on removing this?
Thank you,...

o wait ignore wat i said..i just done a scan and it says no threats where found.:cool:...thanks alot for your help.

This is after i done fix problems. It says fixed but its still there.

DoubleClick: Tracking cookie (Internet Explorer: Mama) (Cookie, fixed)


Avenue A, Inc.: Tracking cookie (Internet...

DoubleClick: Tracking cookie (Internet Explorer: Mama) (Cookie, nothing done)


Avenue A, Inc.: Tracking cookie (Internet Explorer: Mama) (Cookie, nothing done)


Statcounter: Tracking...

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe...

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://uk.yahoo.com
R1 -...

Logfile of HijackThis v1.99.1
Scan saved at 12:42:42, on 24/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:...

:mozilla.396:C:\Documents and Settings\Mama\Application Data\Mozilla\Firefox\Profiles\yvga8d52.Mama\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.397:C:\Documents and...

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 12:21:36 24/05/2007

+ Scan...

Hi shelf life,

Yes. I am sure that i have removed Bearshare. Its still detects smitfraud and many other problems..:sad:

Hi shelf life,

I scanned and viewed the report here it is..:cool:

1408

do i have to scan first then show the report?

Is was to large so i compressed it to zip folder ;)

Click below for the report...:laugh:

Spybot report

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://uk.yahoo.com
R1 -...

Logfile of HijackThis v1.99.1
Scan saved at 16:39:17, on 17/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:...

Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\tmwxyidn

*******************

Script file located at:...

ok..now ive done all the steps...the smitfraud is still there lol...

hi shelf life,

I done what you told me to. I removed bearshare i dont use it anymore...:D:

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Lol..the second bit had 7 charaters more..so i put the last bit here..:crowned:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://uk.yahoo.com
R1 -...

Logfile of HijackThis v1.99.1
Scan saved at 23:10:15, on 15/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:...

VundoFix V6.3.21

Checking Java version...

Java version is 1.5.0.3
Old versions of java are exploitable and should be removed.

Scan started at 18:08:11 12/05/2007

Listing files found...

"Mama" - 2007-05-15 22:57:18 Service Pack 2
ComboFix 07-05.13.V - Running from: "C:\Documents and Settings\Mama\Desktop\"


(((((((((((((((((((((((((((((((((((((((((((((((((( V Log ...

hi shelf live,

The vundofix scan did not fight any problems..im confused...

hi shelf live,

I have removed Desktop Messenger aswell. Im afraid the smitfraud isnt gone yet. Is there more?

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.Runescape.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program...

Logfile of HijackThis v1.99.1
Scan saved at 18:30:28, on 12/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:...

SmitFraudFix v2.181

Scan done at 18:29:10.28, 12/05/2007
Run from C:\Documents and Settings\Mama\Desktop\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The...

Just wanted to ask one question before i make this move. When you say that Vundo will promot me to reboot my computer and i click yes. Does this actually mean my computer will be rebooted?:scratch:

hmmm...What do you mean by another forum?:sad:

Can someone help me please...i need my pc repared fast..my exams are in less than 1 week...and all these crazy stuff this virus is doing is preventing me to study...please somehelp...:banghead:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.Runescape.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program...

Hey,

I needed help to remove this smitfraud from my computer.

Here my log (had to do 2 pages because it had 2000+ letters):


Logfile of HijackThis v1.99.1
Scan saved at 18:21:12, on...

got it, please delete this topic..:rolleyes:

Hello,

Well, i have a probem most people have called smirtfraud and it said on the discription if it does not remove you could get help from via email or forums. I chose forums, now when ever i...