Smitfraud is driveing me crazy
|
Original Message
|
Name: Teetot
Date: May 18, 2007 at 19:08:32 Pacific
Subject: Smitfraud is driveing me crazyOS: Windows XPCPU/Ram: 2.2 Ghz. / 1024 Mb.Model/Manufacturer: Gateway GT4010 |
Comment: I've been trying to get rid of the Smitfraud-C Coreservice virus for 2 day and have had no luck. nothing I have found on the internet has worked. Can someone please help me?
Report Offensive Message For Removal
|
|
Response Number 1
|
Name: OtheHill
Date: May 19, 2007 at 13:38:46 Pacific
Subject: Smitfraud is driveing me crazy |
Reply: (edit)Did you try Spybot Search & Destroy. I know it does scan for than malware. When first installing S&D don't let it create any backup folder. Download it program, install, update, run. May ask you if you want to have S&D run at the next startup. Say yes and restart. Find it here alone with AdawareSE. http://www.pcworld.com/downloads/
 Report Offensive Follow Up For Removal
|
|
Response Number 2
|
Name: Teetot
Date: May 19, 2007 at 21:24:29 Pacific
Subject: Smitfraud is driveing me crazy |
Reply: (edit)Thank you very much for helping me. I've ran Ad-aware SE and Spybot S&D more times than I can count. They get rid of everything except for Smitfraud-C Coreservice. Specifically HKEY_LOCAL_MACHINE\SYSTEM\Controlset001\
services\core Every time I let Spybot fix all of the problems this remains and reinstalls the rest of the garbage immediately. I've tried running Spybot on startup, in safe mode, on start up while in safe mode and none of this has worked. Do you have any advice to get rid of this last bit of the virus?
Report Offensive Follow Up For Removal
|
|
Response Number 4
|
Name: Teetot
Date: May 20, 2007 at 14:01:34 Pacific
Subject: Smitfraud is driveing me crazy |
Reply: (edit)Thank you for taking the time to help me. I just finished doing what you said and the problem remains. Your advice seems to have kept all of the other viruses from returning but Spybot is still having problems getting rid of Smitfraud-C Coreservice. The reason Spybot gives is that the file HKEY_LOCAL_MACHINE\SYSTEM\Controlset001\
services\core is still in use and it asks if I want to run Spybot at my next system startup. I've done this a lot and no matter how many times I do this it still can't get rid of the virus because it is in use. I've tried running it at startup while in safe mode and that hasn't helped either. I've seen on other websites where people that have the same problem as I do have used a program called hijackThis create a log file and then the person helping them uses that to determine what the problem is and tell them what files to delete. It seems that most people have been successful in fixing the problem using this method. I'm not a tech savvy guy however and I would have no idea how to use the log to determine the problem.
I don't know if that helps but I thought I would throw that out there. Any further help would be very much appreciated.
Report Offensive Follow Up For Removal
|
Use following form to reply to current message:
