Smitfraud removal

Bookmark on del.icio.us

Print this page

Name: Smitfraud

Belongs to Trojan

Remover: SpywareDoctor

Smitfraud is related to Trojan. Trojans - malicious programs. Trojan installation occurs when an infected file is opened or a certain program that contains Trojan parasite is being launched. Once Trojan is installed, it gets harder to repair the damage and to clean the machine. Trojans may come in filenames as "funny picture.exe" etc.

Free Smitfraud scan:

Scan your computer now for free with SpywareDoctor:

Hijackthis entries:

O4 - HKLM\..\Run: [WindowsFZ] C:\WINDOWS\System32\LogFiles\A5281300.so
O21 - SSODL: advsort - {Random CLSID} - C:\WINDOWS\advsort.dll
O21 - SSODL: iereport - {8487CE16-72C1-48BA-BB07-B0DBA6BC18A5} - C:\WINDOWS\iereport.dll
O4 - HKLM\..\Run: [intel32.exe] C:\WINDOWS\SYSTEM\intel32.exe
O4 - HKLM\..\Run: [intell321.exe] C:\WINDOWS\system32\intell321.exe
O21 - SSODL: mssms - {D12B9F52-01EC-4AFE-9D0F-9685BEDAA999} - C:\WINDOWS\mssms.dll
O21 - SSODL: ossmart - {5EDF8A3D-8CDD-422B-A74F-898A28FF0610} - C:\WINDOWS\ossmart.dll
O4 - HKLM\..\Run: [PSGuard] C:\Program Files\PSGuard\PSGuard.exe
O4 - HKLM\..\Run: [PSGuard spyware remover] C:\Program Files\PSGuard\PSGuard.exe
O4 - HKLM\..\Run: [P.S.Guard] D:\Program Files\P.S.Guard\PSGuard.exe
O4 - HKCU\..\Run: [autoload] C:\WINDOWS\system32\drivers\svchost.exe
O4 - HKCU\..\Run: [autorun] C:\Documents and Settings\\svchost.exe
O4 - HKLM\..\Run: [bal] C:\Program Files\Win32p1Messenger\SYSMONMS.EXE
O21 - SSODL: tlhelp - {1A846D25-0E45-42CA-B330-5E673D6D36CA} - C:\WINDOWS\tlhelp.dll
O21 - SSODL: vpnconfig - {E3C1E02B-96B4-4C73-A6F3-0000B71C8E29} - C:\WINDOWS\vpnconfig.dll
O4 - HKLM\..\Run: [Windows Critical Alert] "C:\WINNT\system32\wincrt.exe"
O23 - Service: Windows Notification Service (Winnotify) - Unknown owner - C:\WINNT\System32\winntify.exe

How to remove Smitfraud

To download Smitfraud removal tool SmitfraudFix.exe and choose Save
Save it on the desktop:
Restart the computer into safe mode
Go to desktop and launch Smitfraudfix.exe application.
First you will see SmitFraudFix tool informational screen. Press a key to continue.
After menu appeared select option 2 - "Clean" - and hit "Enter" key. Wait while clean process is in progress...
After you will be asked Do you want to clean the registry? (y/n) press "y" (yes) and hit "Enter".
Quit SmitFraudFix and reboot the computer. Now computer should be clean.

Smitfraud Files and Registry Entries:

Executable files:

A5281300.so
intel32.exe
intell321.exe
PSGuard.exe
svchost.exe
SYSMONMS.EXE
wincrt.exe
winntify.exe

Dynamic-link library files:

advsort.dll
iereport.dll
mssms.dll
ossmart.dll
tlhelp.dll
vpnconfig.dll