and STILL they keep on coming .....

pchelpman

Another possible new member of the SmitFraud bunch of miscreants.

This appeared in a on another security site .....



I haven't seen the full HijackThis log and the user did some "DIY" fixing so some or all of the evidence has gone.

The user reported these files as associated with the desktop hijack:

C:\WINDOWS\yod.htm
C:\WINDOWS\back.jpg
C:\WINDOWS\bg.gif

Those files are the least of his worries, I know.

"thespyguard.com" is listed as bad and a "blocked" site, which means IE-Spyad and the like should protect against it, but we all know that not everyone uses these tools.

So .... motto is everyone watch out. Another thing to be careful of.

Browntoa

just checked Spybots host list but it's not on there yet on their latest update

thanks for the warning

pchelpman

I expect the usual will happen .... the anti-malware tools will pick it up, include it in their databases but then another unknown varient will ride along to stir up more trouble.

John_Gray

As many as 75 adult-orientated websites? Tut-tut!

John

pchelpman

John_Gray wrote:

As many as 75 adult-orientated websites? Tut-tut!

John

Indeed. Just one of the several clues to the fact this is a fake warning.

-=Mr-J=-

As well as the biggest give away with all these scams - Grammar !

pchelpman

-=Mr-J=- wrote:

As well as the biggest give away with all these scams - Grammar !