Removal of Smitfraud.C

[jamirushford]

Hello I'm new the forum, I've been reading various threads on the Smitfraud.C.

My XP system was infected with Smitfraud.C, I downloaded S&D ran it in normal mode, it identified several problems including 3 Smitfraud.C issues.

I tried to fix, noted several registry updates, re-scanned it still found 3 Smitfraud.C issues.

I booted into safe mode S&D again identified Smitfraud.C but appeared to successfully clean them up as subsequent runs of S&D said the system was clean.

As soon as I boot back to normal mode I start receiving messages that my computer is infected, my screen background turns red with a strange logo and banner stating I need to download a spyware app.

Norton Internet Security says the system is clean, S&D continues to find Smitfraud.C but is unable to delete. I have tried with safe mode, it deletes and is not found, I have tried with safe mode & networking, same result it will find it once after a boot into normal mode, but once in cleans in in safe mode it says the system is clean until a reboot into normal mode and the problem starts all over again.

Any help in fixing this will be greatly appreciated.

thanks, Jami

 

[tashi]

Hello.

As soon as I boot back to normal mode I start receiving messages that my computer is infected, my screen background turns red with a strange logo and banner stating I need to download a spyware app.

You will probably need help with manual removal.

Please follow the procedure in this link:
"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance)

Then start your own thread in the Malware Removal Forum

A helper will advise you when available. Regards.

 

[jamirushford]

Problem Resolved

The following error was received:
"Cannot find file ':///c:/windows/privacy_danger/index.htm' Make sure the path on INternet address is correct.

I plugged the into a google search and found SmitfraudFix.php at the following URL:

This is a nice little executable that did in fact resolve the entire issue.

 

[tashi]

Hello.

Thank you for letting us know you appear to have resolved the issue.

S!Ri's tool is used in our malware removal forum. For various reasons, if regular scans do not remove items, we prefer helpers to analyse the logs we ask for there and then advise users how best to proceed.

Best regards.