Help in removing Smitfraud-C

[pskelley]

Thanks for returing your information, first your HJT log, this is what I see:

C:\Program Files\DAP\DAP.EXE <<< if you paid for this, I suppose it's ok. I really do not believe Windows XP needs any help with downloads and I believe it is a waste of resources for anything it gives. If you did not pay for it, see this:
http://www.castlecops.com/startuplist-7192.html

Note that the free version is adware based

Megaupload Toolbar <<< optional and not needed as far as I believe, if you must use it, be aware of this information:
http://www.castlecops.com/clsid-30914.html

Besides that, I see no malware in the HJT log.

Smitfraudfix:
»»»»»»»»»»»»»»»»»»»»»»»» hosts
hosts file corrupted !

I am concerned the hosts file did not get cleaned because the fix was run in normal mode? Let's reset the Hosts Files to the Microsoft original like this:

Download HostsXpert v4.\1 - Hosts File Manager.
http://www.funkytoad.com/download/HostsXpert.zip
Unzip HostsXpert - Hosts File Manager to a convenient folder such as C:\HostsXpert
Click HostsXpert.exe to Run HostsXpert 4.1 - Hosts File Manager from its new home
Click "Make Hosts Writable?" in the upper right corner (If available).
Click Restore Microsoft's Hosts file and then click OK.
Click the X to exit the program.
Note: If you were using a custom Hosts file you will need to replace any of those entries yourself.

If you wish a good Hosts files, have a look at this one:
http://www.mvps.org/winhelp2002/hosts.htm

I would like you to run the Kaspersky online scan to double check for hidden junk. Your resident Kaspersky may complain, if it does, turn it off while you run the scan and then turn it back on.

Run this online scan using Internet Explorer:
Kaspersky Online Scanner from http://www.kaspersky.com/virusscanner

Next Click on Launch Kaspersky Online Scanner

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.

* The program will launch and then begin downloading the latest definition files:
* Once the files have been downloaded click on NEXT
* Now click on Scan Settings
* In the scan settings make that the following are selected:
* Scan using the following Anti-Virus database:
* Standard
* Scan Options:
* Scan Archives
* Scan Mail Bases
* Click OK
* Now under select a target to scan:
* Select My Computer
* This will program will start and scan your system.
* The scan will take a while so be patient and let it run.
* Once the scan is complete it will display if your system has been infected.
* Now click on the Save as Text button:
* Save the file to your desktop.

Then post it here.

Thanks

[tashi]

This topic has been archived due to inactivity.

As it has been 10 days since your last post, and the helper assisting you posted a response to that post to which you did not reply, this topic will not be reopened. If you still require help, please start a new topic and include a fresh HijackThis log and a link to this thread in your new topic.

Applies only to the original poster, anyone else with similar problems please start a new topic.