Smitfraud C

[webfact]

My sons computer got "sick"!

One of the major annoyances is Smitfraud-C

Spybot search & destroy found Smitfraud... and I clicked to fix it!

Got suspicious after reboot and scanned with S&D again.

Not to my surprise, the evil Smitfraud was back in business

and regedit won't start anymore.

What program shall I use? I tried cureit (Dr. Web) without success.

Any recommendation how to get rid off this bastard is much appreciated!

Thx

[Daffy D]

Hi

Check This Forum

Scroll down to #2

[Guest Reimar]

first at all you'll need to start the computer from an external device like CD, DVD ppp.

I use for that an so named Winternal CD and start by bypassing the Network connection wizzard and NOT from an internal OS!

Use the Freeware program Winbubble for to take over the Ownership of ALL files. You can download the program from here: http://download.cnet.com/WinBubble/3000-2094_4-10773093.html

Delete ALL .tmp and other temporary files from the whole drives. Do the same with ALL cookies!

Download the latest version of cureit from FreeDrWeb and copy to HDD and run it from within Winternals!

Download Advanced Registry Doctor form here: http://www.elcor.net (it's a trial with limited function, I use the full version). Run it after restart in normal Mode. Best is to install the prog and re-run windows in Safe Mode for to scan the registry.

Good luck.

[webfact]

Thanks to all Daffy D & Reimar.

Will give your suggestions a try.

I trust Smitfraud is the worst virus so far...!