We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

spyware

13»

Comments

  • wlfc1
    wlfc1 Posts: 962 Forumite
    bump to the top.sorry!
  • Browntoa
    Browntoa Posts: 49,612 Forumite
    Part of the Furniture 10,000 Posts Name Dropper Photogenic
    you have a trojan infection as well but that may be assocaited with the main infection..

    sourced from here

    http://www.bleepingcomputer.com/forums/topic17258.html

    Removal Instructions:
    1. Print out these instructions as we will need to close every window that is open later in the fix.
    2. Download SmitfraudFix.zip from here:

      SmitFraudFix.zipConfirm that the file SmitfraudFix.zip now resides on your desktop. The icon will look like the one below:
    3. Extract all of the files to your desktop. Instructions on how to extract files from a zip file can be found here:

      How to create and extract a Zip File in Windows ME/XP/2003

      How to create and extract a ZIP File in Windows 95/98/2000


      After you extract the zip file you should see an icon similar to the one below on your desktop.



      folder-icon.jpg
    4. Next, please reboot your computer into Safe Mode by doing the following:
      1. Restart your computer
      2. After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
      3. Instead of Windows loading as normal, a menu should appear
      4. Select the first option, to run Windows in Safe Mode.
      5. When you are at the logon prompt, log in as the user your normally log in as.
    5. When your computer has started in safe mode and you see the desktop.
    6. Close all open Windows.
    7. Open the Smitfraudfix folder on your desktop and the contents of the folder will be similar to the image below.


      folder-contents.jpg


      Double-click on the SmitfraudFix.cmd file, as shown in the image above, to start the removal process
    8. When the tool first starts you will see a credits screen. Simply press any key on your keyboard to get to the next screen.
    9. You will now see a menu as shown in the image below. Press the number 2 on your keyboard and the press the enter key to choose the option Clean (safe mode recommended).


      menu.jpg
    10. The program will start cleaning your computer and go through a series of cleanup processes. When it is done, it will automatically start the Disk Cleanup program as shown by the image below.


      dc.jpg


      This program will remove all Temp, Temporary Internet Files, and other files that may be leftover files from this infection. This process can take up to a few hours depending on your computer, so please be patient. When it is complete, it will close automatically and you will should continue with step 11.
    11. When Disk Cleanup is finished, you will be presented with an option asking Do you want to clean the registry ? (y/n). At this screen you should press the Y button on your keyboard and then press the enter key.
    12. When this last routine is finished, you will be presented with a red screen stating Computer will reboot now. Close all applications. You should now press the spacebar on your computer. A counter will appear stating that the computer will reboot in 15 seconds. Do not cancel this countdown and allow your computer to reboot.
    13. Once the computer has rebooted, you will be presented with a Notepad screen containing a log of all the files removed from your computer. Examine this log, and when you are done, close the Notepad screen.
    Your computer should now be free of the SmitFraud infection.

    you must then please follow the steps in posts 1 to 4 outlined in the topic linked below STRAIGHT AWAY AFTERWARDS !!!!! :

    http://forums.moneysavingexpert.com/showthread.html?t=133269
    Ex forum ambassador

    Long term forum member
  • wlfc1
    wlfc1 Posts: 962 Forumite
    Browntoa

    Thank you very much for all your help !!!!!!!!

    It seems to have done the trick
  • Browntoa
    Browntoa Posts: 49,612 Forumite
    Part of the Furniture 10,000 Posts Name Dropper Photogenic
    could yo do a final hijack this log to check it's clean , just post it there again ;)
    Ex forum ambassador

    Long term forum member
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 352K Banking & Borrowing
  • 253.5K Reduce Debt & Boost Income
  • 454.2K Spending & Discounts
  • 245K Work, Benefits & Business
  • 600.6K Mortgages, Homes & Bills
  • 177.4K Life & Family
  • 258.8K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.2K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.