SMITFRAUD! Find your fix here

[442nd]

Has your computer been taken over by this disastrous virus?

We can fix it.

Here are some tell tale signs.

Do you get any of these popup security windows?




This virus disables
1. virus protection and virus protection updates
2. spyware detection systems [spybot, adaware etc]
3. Windows task manager [cntrl + alt + delete > task manager]
4. Run Command
5. Command prompt
The virus repopulates itself because of running services which do not allow the end user to delete them.
DO NOT USE ANY REMOVAL or SPYWARE SOFTWARES
Removal must be done manually, and must be done by somebody familiar with system services and system file structure within Windows, and Win32 directories.

Reboot your pc
Before the pc begins to reboot, (black screen) hit F8 repeatedly until you are prompted with a screen to boot in safe mode.
Arrow up until you've highlighted "safe mode", hit enter.
Let the system load
Once booted up and initialized do the following:
Click "Start>Run>tye regedit>click OK"
Browse to: HKEY_CURRENT_USER
Key: Software\Microsoft\Windows\CurrentVersion\Policies\System
Name: DisableTaskMgr
Type: REG_DWORD
Value: 1=Enablethis key, that is DISABLE TaskManager
Value: 0=Disablethis key, that is Don't Disable, Enable TaskManager

Hit [ctrl + alt + del]
Open task manager
Delete any of the following running services
adobepnl.dll
ccc3.dll
cdromdrv32.dll
dcvwaah.dll
dpfwu.dll
ekvrlfzz.exe
fyhhxw.dll
gqagksr.dll
gtpbx.dll
hjfjhigjxe.dll
ishost.exe
ismini.exe
ismon.exe
isnotify.exe
issearch.exe
ixt0.dll
okkmtv.dll
olechs32.dll
oqabf.dll
sbnudh.dll
syycum.dll
titiau.dll
urroxtl.dll
users32.exe
veklo.dll
vwlummc.dll
wuwbxp.dll
xxfgmy.dll
zphnok.dll
dpvtporsdq.dll
asgp32.dll
flashwindow.exe
loader.exe
main.exe
reger.exe
wow.dll
zloader3.exe

Now go to C:\windows
Right click and select "arrange by>type"
Look over every .exe file and if not sure what it does, google it
Delete any executables and any of the above .dll files from this directory as well as C:\windows\system32

Once completed, run either spybot, or adaware doing a full system scan.
When either choice completes its scan, select "Fix selected items"
Reboot

Smitfraud is gone.