Smitfraud question.

[ActionHam]

H'okay, so I run it and I find 2 smitfrauds. I read the info about the second one

"Smitfraud C- Toolbar888"

"Extra removal instructions: You will need to use the process explorer: http://www.sysinternals.com/Utilities/ProcessExplorer.html
There you need to right click on "Winlogon.exe" and choose "properties..."
Then you will have to go to the "Threads" tab, there you will see the dll with the randomized filename, it is the same name as in the Spybot scanresult.
Choose and kill the dll, it is running 2 times. After that you will need to reboot to have Spybot remove the dll from the System."

I did that, but I didn't see anything with the same name as Smitfraud C toolbar888.

Did I misread it or what? I'm just a tad confused.

EDIT: I still can't open my task bar thing with control alt delete so it has to be around somewhere

 

[ActionHam]

UPDATE:

I found out it's SMC-protectedfile or something like that.

But whenever I kill it and reboot it--it just keeps coming back, I could really use some help on this one..

EDIT: And for some reason I'm finding THREE Smitfraud files

 

[tashi]

Hi there.

Please follow the procedure in this link: "BEFORE you POST" -Preliminary Steps

Then start your own thread in the Malware Removal Forum

Once you have posted, a helper will take a look at the system and advise you as soon as available.

Cheers.