Smitfraud

[Guest]

I have just upgraded to Defender at a similar time to being hammered with
several Adware/Spyware infestations including Smitfraud-C, PestTrap, Vcodec,
Windows Security Centre.FirewallDisableNotify andWindows Security
Centre.AntivirusDisableNotify and Zolob. The only one Defender identified was
Zolob which it was unable to remove successfully until after the others had
been removed. I beleive Smitfraud was the culprit and seems to show as Unkown
in Defender which allows it to install E:\WINDOWS\system32\mssearchnet.exe
and is not yet classified. It may have been allowed by one of the other users
of the computer, but how do I stop it allowing this installation?

 

[Guest]

http://castlecops.com/t7736-So_how_did_I_get_infected_in_the_first_place.html

http://forums.majorgeeks.com/showthread.php?t=74265

Еиςеl

 

[Bill Sanderson]

This stuff is very fast moving, and it sounds as though the current Windows
Defender may not be up to this one yet. Have you tried in safe mode?

I believe the folks here have the current best-accepted advice on how to
remove this:

http://wiki.castlecops.com/Malware_Removal:_SpyAxe_Removal

 

[Guest]

I have already got rid of it, I'm just tring to ensure I don't have to do it
again! Spybot S & D will remove most with the latest detection signatures
(17-Feb-06) but a couple of goes are required to remove Vcodec on bootup.
After they had been removed Defender removed Zolob with no problems. My
question was more about how to stop Defender allowing the "not yet
classified" item that appears to be Smitfraud?

 

[Bill Sanderson]

Submit it via the process noted in Windows Defender Help, or here:

http://www.microsoft.com/athome/security/spyware/software/support/reportspyware.mspx

--