Recommended for You:
Fix up your PC Fast

TuneUp Utilities 2012 takes out the trash: Get back long lost disk space and performance in a snap – Free Download!






You are not connected. Please login or register

View previous topic View next topic Go down  Message [Page 1 of 1]

1 Types of hijack Malware SmitFraudFix removes on Thu Feb 05, 2009 8:01 am

DragonMaster Jay


Site Owner
Site Owner
The following is from the makers of SmitFraudFix. HMOS is not affiliated with the makers of SmitFraudFix.

Advanced Antivirus, AdwarePunisher,
AdwareSheriff, AlphaCleaner, AntiSpyCheck, AntiSpyware Expert,
Antispyware Soldier, AntiVermeans, AntiVermins, AntiVerminser,
AntiVirGear, Antivirus 2009, Antivirus 2010, Antivirus 360, AntiVirus
Lab 2009, Antivirus Master, Antivirus Sentry, Antivirus XP 2008,
AntivirusGolden, AVGold, Awola, BraveSentry, IE Defender, IE-Security,
Internet Antivirus, MalwareCrush, MalwareWipe, MalwareWiped,
MalwaresWipeds, MalwareWipePro, MalwareWiper, Micro Antivirus 2009, MS
Antivirus, PC Protection Center 2008, Personal Defender 2009,
PestCapture, PestTrap, Power Antivirus, Power-Antivirus-2009, PSGuard,
quicknavigate.com, Registry Cleaner, Security iGuard, Smart Antivirus
2009, Smitfraud, Spy Protector, SpyAxe, SpyCrush, SpyDown, SpyFalcon,
SpyGuard, SpyHeal, SpyHeals, SpyLocked, SpyMarshal, SpySheriff,
SpySoldier, Spyware Guard 2008, Spyware Vanisher, Spyware Soft Stop,
SpywareLocked, SpywareQuake, SpywareKnight, SpywareRemover,
SpywareSheriff, SpywareStrike, Startsearches.net, System Antivirus
2008, TheSpyBot, TitanShield Antispyware, Total Protect 2009, Total
Secure 2009, Trust Cleaner, Ultimate Antivirus 2008,
UpdateSearches.com, Virtual Maid, Virus Heat, Virus Protect, Virus
Protect Pro, VirusBlast, VirusBurst, VirusRay, Virus Remover 2008,
VirusResponse Lab 2009, VirusTrigger, Win32.puper, WinHound, Vista
Antivirus 2008, WinDefender 2009, XLG Security Center, XP Security
Center, XPert Antivirus, XP Police Antivirus, Brain Codec,
ChristmasPorn, DirectAccess, DirectVideo, EliteCodec, eMedia Codec,
EZVideo, FreeVideo, Gold Codec, HQ Codec, iCodecPack, IECodec,
iMediaCodec, Image ActiveX Object, Image Add-on, IntCodec, iVideoCodec,
JPEG Encoder, Key Generator, LookForPorn, Media-Codec, MediaCodec,
MMediaCodec, MovieCommander, MPCODEC, My Pass Generator, NetProject,
Online Image Add-on, Online Video Add-on, PCODEC, Perfect Codec,
PowerCodec, PornPass Manager, PornMag Pass, Pornovid, PrivateVideo,
QualityCodec, Silver Codec, SearchPorn, SexVid, SiteEntry, SiteTicket,
SoftCodec, strCodec, Super Codec, TrueCodec, VideoAccess, VideoBox,
VidCodecs, Video Access ActiveX Object, Video ActiveX Object, Video
Add-on, VideoCompressionCodec, VideoKeyCodec, VideosCodec,
WinAntiSpyPro, WinMediaCodec, X Password Generator, X Password Manager,
ZipCodec



HijackThis Log detection of the SmitFraud
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http:://www.quicknavigate.com/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http:://www.quicknavigate.com/bar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http:://www.quicknavigate.com/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http:://www.quicknavigate.com/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http:://www.quicknavigate.com/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http:://www.quicknavigate.com/search.php?qq=%1
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =http:://www.quicknavigate.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http:://www.startsearches.net/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http:://www.startsearches.net/bar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http:://www.startsearches.net/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http:://www.startsearches.net/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http:://www.startsearches.net/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http:://www.startsearches.net/search.php?qq=%1
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http:://www.startsearches.net/
O2 - BHO: VMHomepage Class - {FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF} - C:\WINDOWS\System32\hp6DD8.tmp
O4 - HKCU\..\Run: [WindowsFY] c:\wp.exe
O4 - HKCU\..\Run: [WindowsFY] c:\bsw.exe
O4 - HKLM\..\Run: [WindowsFZ] C:\WINDOWS\ZLOADER3.EXE
O4 - HKLM\..\Run: [Security iGuard] C:\Program Files\Security iGuard\Security
iGuard.exe
O9 - Extra button: Microsoft AntiSpyware helper - {D5BC2651-6A61-4542-BF7D-84D42228772C}
- C:\WINDOWS\System32\wldr.dll
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {D5BC2651-6A61-4542-BF7D-84D42228772C}
- C:\WINDOWS\System32\wldr.dll
O9 - Extra button: Microsoft AntiSpyware helper - {D5BC2651-6A61-4542-BF7D-84D42228772C}
- C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {D5BC2651-6A61-4542-BF7D-84D42228772C}
- C:\WINDOWS\System32\wldr.dll (HKCU)

Not all 04 entries will be present

DragonMaster Jay


Site Owner
Site Owner
Register for Help My Operating System or login to leave comments!


..........................................................
DragonMaster Jay
Administrative Director SecuraGeek Association
Advanced Malware Analysts Group Owner


Kaspersky E-Store Kaspersky Anti-Virus 2012: Click Here

Contribute/donate to our site

Ad Bot


View previous topic View next topic Back to top  Message [Page 1 of 1]

Permissions in this forum:
You cannot reply to topics in this forum