lesser-equity

Magazine
Go Back   Computer Juice > Computer Software > Virus, Spyware & Security

Register


 Default 

Smitfraud-c.msvps




Reply
 
Thread Tools
  #91  
Old 30th Jan 2008, 10:13
Moderator Group
 
Default Smitfraud-c.msvps

I think the F-Secure deleted the spyware which was blocking it.

We will proceed to find the spybot entry now. Does it have a file path where it is. If you right click the entry and choose jump to location will it take you to the registry key? You may need to right click it twice. Once to open the registry editor (just leave it open) and again to get it to go to the key.
__________________

  #92  
Old 30th Jan 2008, 10:20
Donor Group
 
Default Smitfraud-c.msvps

well the good new is that it only have one registry key.. yesterday it was two or three..

when i click to jump to it takes me to registry editor and thats it

it says

my computer
-HYEK_classes_root
-HYEK_current_user
HYEK_local_machine
HYEK_users
HYEK_current config

and thats it

ill just past you what spybot found it goes something like this
  #93  
Old 30th Jan 2008, 10:29
Donor Group
 
Default Smitfraud-c.msvps

[SBI $019C49CB] USER settings
HKEY_USERS/S-1-5-21-1042972278-2705886923-295879920-1006/Software/Microsoft/Windows/CurrentVersion/Ext/Stat/{0D

i cant extract spybot more to see the full thing
  #94  
Old 30th Jan 2008, 10:31
Moderator Group
 
Default Smitfraud-c.msvps

Quote:
when i click to jump to it takes me to registry editor and thats it

it says

my computer
-HYEK_classes_root
-HYEK_current_user
HYEK_local_machine
HYEK_users
HYEK_current config
Right, leave that window open and go back and right click and choose jump to location again. It should then move to the actual registry key.

Once there right click the key and choose copy key. Come back here and paste it in the reply.
__________________

  #95  
Old 30th Jan 2008, 10:34
Donor Group
 
Default Smitfraud-c.msvps

HKEY_USERS\S-1-5-21-1042972278-2705886923-295879940-1006\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{0D5227BF-0C5B-4EA8-833C-FE09F1496F39}
  #96  
Old 30th Jan 2008, 10:39
Moderator Group
 
Default Smitfraud-c.msvps

Is this showing up in the MRU listings in spybot?
__________________

  #97  
Old 30th Jan 2008, 10:46
Donor Group
 
Default Smitfraud-c.msvps

yes sir
  #98  
Old 30th Jan 2008, 11:08
Moderator Group
 
Default Smitfraud-c.msvps

In Spybot

Go to Mode > Advanced Mode (unless you are already there)

Then on the left choose Settings > File Sets > Uncheck Usage Tracking.

This isn't something to worry about and the results in Spybot can be confusing (even to me) so it is best to leave it unchecked.

Ad-Aware 2007 is a good program to use for usage track scanning.

Uncheck that, restart Spybot and see if it goes away.
__________________

  #99  
Old 30th Jan 2008, 11:11
Donor Group
 
Default Smitfraud-c.msvps

usage tracking is unchecked..
  #100  
Old 30th Jan 2008, 11:13
Moderator Group
 
Default Smitfraud-c.msvps

OK, download and run Ad-Aware 2007

See what it turns up. I don't want a log from it as they are too large and complicated.
__________________

Reply

Register

Bookmarks

Similar Threads
Thread Thread Starter Forum Replies Last Post
Smitfraud-C He does not want to die!!! PlatSpin Virus, Spyware & Security 13 19th Aug 2008 10:24
Smitfraud Virus PK28 Virus, Spyware & Security 12 5th Feb 2008 16:17
Smitfraudfix.exe - Smitfraud-C.Toolbar888 Hybr!d Virus, Spyware & Security 1 29th Oct 2007 11:02
Zlob, smitfraud, pop ups, red wallpaper changes guccijana Virus, Spyware & Security 20 30th Sep 2007 20:26
Thread Tools




Arabic Bulgarian Chinese (Simplified) Chinese (Traditional) Croatian Czech Danish Dutch English Finnish French German Greek Hebrew Hungarian Italian Japanese Korean Latvian Lithuanian Norwegian Polish Portuguese Romanian Russian Serbian Slovak Spanish Swedish Thai Turkish Ukrainian

Copyright ©2006 - 2009 Computer Juice.

Powered by vBulletin® Copyright ©2000 - 2009 Jelsoft Enterprises Ltd. SEO by vBSEO ©2009, Crawlability, Inc.