Smitfraud and other viruses

[ken545]

Good Morning,

If you go to Start> Run and type in services.msc, it will show you all the services that are running on your computer. They are most all needed by windows to run ( but this is another issue that we do not want to get into ) sometimes a virus will install itself as one of those services. You can click on any service once to highlight it and it will tell you what it does. As far as Fast User Switching and Network DDE, there both legit, I have just never seen it with the title is has and Google picks up nothing with the file attached to that service except coming back to your thread.

So, open up services and highlight this one and lets see what it does or what its related to
Network DDE NetDDEFastUserSwitchingCompatibility

[liebcin]

NetDDEFastSwitchingCompatibility does not show a description it just says Start the Service and the word start is the start button.

Network DDE & Network DDE DSDM manages the Dynamic Data Exchange network shares.

[ken545]

We need to make sure all hidden files are showing :

• Click Start.
• Open My Computer.
• Select the Tools menu and click Folder Options.
• Select the View tab.
• Under the Hidden files and folders heading select Show hidden files and folders.
• Uncheck the Hide file extensions for known types option.
• Uncheck the Hide protected operating system files (recommended) option.
• Click Yes to confirm.
• Click OK.

Once your system is clean, we suggest that you reverse this to keep critical windows files from accidently being deleted.

Go to this site Jotti Upload and use the browse feature to find this file and upload it


C:\WINDOWS\system32\0.6043512f.exe

Then click on Submit and it will give you a report, post the report in your next reply.

[liebcin]

I did it twice and received the same results and the second time was after I turned off my firewall.

The file you uploaded is 0 bytes. It is very likely a firewall or a piece of malware is prohibiting you from uploading this file

When I hit browse a Choose File window pops up with the Look In address System 32. When I click on open it tells me that file is not found.

I ran a search for C:\WINDOWS\system32\0.6043512f.exe in all files including system and all hidden files and folders and the result came back with no file or folder found.

[ken545]

This is what I think I would do is to disable that service, use your computer for a bit and see if any programs squawk that they need it, you can always re enable it if you have to .

• Go to Start> Run and type in services.msc then press Enter
• Scroll down to Network DDE NetDDEFastUserSwitchingCompatibility
• Double Click that service to open it.
• Click on Stop Service.
• Then change the Startup Type to Disabled.
• OK your way out of the program.

[liebcin]

Thank you so much for your help. This computer is 100 times better and I can actually work on it now. Thanks again. cindy

[ken545]

Your very welcome Cindy, I am so glad things are running well for you. Please do post back if you have any other issues in the future.

Ken