smithfraudfix

[bb202]

Spybot scan sayes that my is infected with Smithfraud-C.MSVPS which it cannot
delete the file. Googled lead me to this site
http://www.bleepingcomputer.com/forums/topic125373.html

which I followed and supposely to fix the problem. Then I scanned with
spybot again and it again found Smithfraud-C.MSVPS (c:\windows\xpupdate.exe)
but this time it was able to delete it.

When I launched my IE6, I noticed that immediately below the address bar,
there is a 'warning that my pc is infected with spyvare/adware and click here
to fix it"

Well it looks that the site from which I download the Smithfraud fix is
very suspisicous itself. I never I that warning before not even before I run
the Smithfraud ifx. So I guess I have to be aware of all these 'help' from
the internet. I suppose nothing is free................... thanks

 

[Newbie Coder]

BB202,

Use a proper forum & not Bleeping Computers:

http://forums.spybot.info/forumdisplay.php?f=4

 

[pcbutts1]

You are still infected. Use Remove-it version 18, it's fast and free. It now
has over 9500 signatures to remove All variants of Rogue scanners,
Desktop/Homepage Hijackers, Trojans, Codec's, and related Malware/Spyware.
Download it here http://pcbutts1.com/downloads/tools/tools.htm


--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.
Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell

 

[Malke]

Spybot scan sayes that my is infected with Smithfraud-C.MSVPS which it cannot
delete the file. Googled lead me to this site
http://www.bleepingcomputer.com/forums/topic125373.html

which I followed and supposely to fix the problem. Then I scanned with
spybot again and it again found Smithfraud-C.MSVPS (c:\windows\xpupdate.exe)
but this time it was able to delete it.

When I launched my IE6, I noticed that immediately below the address bar,
there is a 'warning that my pc is infected with spyvare/adware and click here
to fix it"

Well it looks that the site from which I download the Smithfraud fix is
very suspisicous itself. I never I that warning before not even before I run
the Smithfraud ifx. So I guess I have to be aware of all these 'help' from
the internet. I suppose nothing is free................... thanks

You've been given incorrect advice by the other posters.
BleepingComputer.com is a well-respected forum and one of the best
places to get help. The error message you are getting is not coming from
BleepingComputer but rather from malware still on your computer. Your
computer is far from clean.

At this point, you should register at one of the specialty forums below
- which include BleepingComputer - and post a HijackThis log to get
guided help. Please do *not* post your HJT log here in the MS newsgroups
as you will not get the help you need here.

http://aumha.org/downloads/hijackthis.zip
http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Merijn
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42 -
another tutorial
http://aumha.net/ - Click on the HijackThis forum. Read the announcement
and the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://spywarewarrior.com/viewforum.php?f=5

The only alternative to going through the malware removal tediously and
systematically with online help from an HJT forum and taking the machine
to a real professional is to back up your data and do a clean install of
Windows. It's your call. If you do take the machine to a professional
computer repair shop, do not use your local equivalent of
BigComputerStore/GeekSquad. Get recommendations from friends, family,
colleagues. Please be aware that not all local shops are skilled at
removing malware and even if they are, your computer may be so infested
that Windows will need to be clean-installed. If possible, have all your
data backed up before you take the machine into a shop.


Malke

 

[Leythos]

Remove-it version 18

Hosted on the same site as filthy pornographic material created by
butts, blocks access (according to butts) to reputable malware sites, no
backup of deleted files/data.....

Do you really want to trust something like that?

--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
(e-mail address removed) (remove 999 for proper email address)

 

[Anteaus]

There is a SmitFraud removal tool available from the reputable antispyware
people, and this usually works, though it may have to run in Safe Mode.

Removing SmitFraud manually is possible, but it's a lengthy process.

Note when searching: it's Smit, not Smith.

The tool is available from:
http://siri.geekstogo.com/SmitfraudFix.php
-and it looks a bit like a DOS program. The author is S!Ri
You can also find it on various freeware sites, for example
http://www.afterdawn.com/software/desktop_software/desktop_security/smitfraudfix.cfm

As mentioned the antispyware market is rife with snake-oil sellers, so
beware of anything you google which cannot be traced back to a reputable
source.