Smitfraud / Zlob trojan

[JBH1876]

I read that the following c:/windows/privacy_danger/index.htm. could be from the Smitfraud or Zlob trojan... Ran Superantispyware, and Spybot which identified their prescence, and supposevely removed both, but it still appears...... anyway to positively remove??

[crunchie]

Yeah, Superantispyware might be good at getting rid of cookies and other easily removed stuff, but is not much cop against the 'real' malware imo .

Please download SmitfraudFix (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.

Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consulting/proc...processutil.htm

[JBH1876]

You know I tried the download, and AVG opened saying a possible threat has been detected....

[fink]

If AVG sees smitfraud fix as a threat then it's a false positive. Temp disable AVG.

[JBH1876]

I had that probabilty occur to me, but I wasn't sure... Thanks

[crunchie]

You can be sure that none here would ask anyone to download any files that were a threat to their PC.