Smitfraud question.

ActionHam

New member
H'okay, so I run it and I find 2 smitfrauds. I read the info about the second one

"Smitfraud C- Toolbar888"

"Extra removal instructions: You will need to use the process explorer: http://www.sysinternals.com/Utilities/ProcessExplorer.html
There you need to right click on "Winlogon.exe" and choose "properties..."
Then you will have to go to the "Threads" tab, there you will see the dll with the randomized filename, it is the same name as in the Spybot scanresult.
Choose and kill the dll, it is running 2 times. After that you will need to reboot to have Spybot remove the dll from the System."

I did that, but I didn't see anything with the same name as Smitfraud C toolbar888.

Did I misread it or what? I'm just a tad confused.

EDIT: I still can't open my task bar thing with control alt delete so it has to be around somewhere
 
Last edited:
UPDATE:

I found out it's SMC-protectedfile or something like that.

But whenever I kill it and reboot it--it just keeps coming back, I could really use some help on this one..

EDIT: And for some reason I'm finding THREE Smitfraud files
 
Last edited:
Back
Top