Results 1 to 10 of 10

Thread: smitfraudfix

  1. #1
    Member
    Join Date
    Jul 2006
    Posts
    5
    Points
    0

    Default smitfraudfix

    I downloaded the SmitFraudFix (from recognised web site) but the .cmd file will not open. I tried 3 times with new downloads but still will not activate. I am infected with the sysprotectionpage.net browser hijack and want to get rid of it. What could be wrong with SmitFraudFix?

  2. #2
    Member Spyware Fighter Clark76's Avatar
    Join Date
    Feb 2006
    Location
    Cleveland, Ohio
    Posts
    1,359
    Points
    239

    Default

    Perhaps you should try a different site. Worth a try. Here are some different sites you can download it from.
    http://siri.urz.free.fr/Fix/SmitfraudFix.zip
    http://siri.geekstogo.com/SmitfraudFix.zip
    http://siri.urz.free.fr/Fix/SmitfraudFix.zip

    benc

  3. #3
    Member steamwiz's Avatar
    Join Date
    Sep 2003
    Location
    Yorkshire U.K.
    Posts
    14,022
    Points
    2335

    Default

    HI

    First of all ... what operating system are you using ?

    steam
    Look here for Ways to keep your computer safe
    M'SOFT MVP -Windows Security 2004/8 .member ASAP -

  4. #4
    Member
    Join Date
    Jul 2006
    Posts
    5
    Points
    0

    Default SmitFraudFix

    Thanks guys,

    Already tried the downloads from the various recognised sites. Using XP Home SP2. The thing is I had a previous problem with a hijacker and successfully used SmitFraudFix to resolve the problem on this same system.

    Any ideas?

  5. #5
    Member
    Join Date
    Jul 2006
    Posts
    5
    Points
    0

    Default SmitFraudFix

    Hey guys,

    Guess what....got SmitFraudFix.cmd file to activate, dont know what happened but just decided to try again and it went active in dos. Ran the clean up and got rid of the pesky hijacker.

    If you can think of any reason why this suddenly came good it could be useful for future reference.

    Cheers

  6. #6
    Member steamwiz's Avatar
    Join Date
    Sep 2003
    Location
    Yorkshire U.K.
    Posts
    14,022
    Points
    2335

    Default

    Hi

    Just making sure you didn't have a win9x system, which smitfraudfix would not work on anyway...

    Go to start > run type cmd

    does a cmd prompt open ? & if it does, at the top does it say cmd.exe or cmd.com ?

    Did you run Smitfraudfix option #2 (cleanup) in safemode ?

    do you have a Smitfraudfix ( C:\rapport.txt file ) to show us ?

    Can you please post a hijackthis log .. it may be other unrelated malware which caused the problem.

    steam
    Look here for Ways to keep your computer safe
    M'SOFT MVP -Windows Security 2004/8 .member ASAP -

  7. #7
    Member
    Join Date
    Jul 2006
    Posts
    5
    Points
    0

    Default

    Hi,
    This is the log from the scan. Yes I ran the fix in safe mode and now my system appears to be clean. the hjacker is gone as well as some other annoyig adware.

    SmitFraudFix v2.74

    Scan done at 13:04:53.67, Fri 21/07/2006
    Run from C:\Documents and Settings\BM\Desktop\SmitfraudFix
    OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
    Fix ran in normal mode

    »»»»»»»»»»»»»»»»»»»»»»»» C:\


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

    C:\WINDOWS\system32\isnotify.exe FOUND !
    C:\WINDOWS\system32\issearch.exe FOUND !
    C:\WINDOWS\system32\ixt?.dll FOUND !
    C:\WINDOWS\system32\ixt??.dll FOUND !
    C:\WINDOWS\system32\components\flx?.dll FOUND !
    C:\WINDOWS\system32\components\flx??.dll FOUND !

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\BM\Application Data


    »»»»»»»»»»»»»»»»»»»»»»»» Start Menu


    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\BM\FAVORI~1

    C:\DOCUME~1\BM\FAVORI~1\Antivirus Test Online.url FOUND !

    »»»»»»»»»»»»»»»»»»»»»»»» Desktop


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


    »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


    »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="My Current Home Page"


    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    "cinnamomum"="{93ac7c30-3878-4eaa-9420-7977285df5b1}"


    »»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection


    »»»»»»»»»»»»»»»»»»»»»»»» End

  8. #8
    Member steamwiz's Avatar
    Join Date
    Sep 2003
    Location
    Yorkshire U.K.
    Posts
    14,022
    Points
    2335

    Default

    HI

    The log you posted is from option #1 run in normalmode (find bad files)...

    If you could answer the questions I asked you in my last post, it may help to find out if you are indeed clean ?

    steam
    Look here for Ways to keep your computer safe
    M'SOFT MVP -Windows Security 2004/8 .member ASAP -

  9. #9
    Member
    Join Date
    Jul 2006
    Posts
    5
    Points
    0

    Default

    Hi,

    Sorry, been away. I have cleaned my computer totally and running without any of the old problems. Thanks for your help.

  10. #10
    Member
    Join Date
    Dec 2002
    Posts
    12,000
    Points
    1191

    Default

    Since this issue appears resolved ... this Topic is closed.

    If you need this topic reopened, please request this by sending a moderator a PM with the address of the thread. This applies only to the original topic starter.

    Everyone else please begin a New Topic.

    Basementgeek