08.05.07
How to remove the latest Smitfraud-C Variant Spyware
The latest Smitfraud-C spyware virus issue has a new removal instructions
Follow the Vundofix at the bottom of this page to fix the issue
The latest variant of Smitfraud C may not change your screen saver or background but it will install some softwae that will cause webpages to randomly appear as you browse the web. Some of the pages are www.broadcaster.com and a winpcdoctor virus remover site. Several other virus removal webpages come up and some ask you to pay for their program to remove this spyware and virus trojan at an unrealistic price.
The spyware trojan virus basically holds your computer hostage with annoying pop ups until you pay to have it removed using their software.
Lots of the Removal tools out there for this are outdated and no longer work. Even the manual removal instructions available on the internet are no longer relevant to the latest variant.
These instructions work as of August 2007 in removing the Smitfraud-C Spyware program that has been lately propagated via spam email across the internet. Many of the spam mails are labeled postcard or someones name along with a pdf file.
Please download VundoFix.exe to your desktop.
- Double-click VundoFix.exe to run it.
- Click the Scan for Vundo button.
- Once it’s done scanning, click the Remove Vundo button.
- You will receive a prompt asking if you want to remove the files, click YES
- Once you click yes, your desktop will go blank as it starts removing Vundo.
- When completed, it will prompt that it will reboot your computer, click OK.
- Please post the contents of C:\vundofix.txt.
Note: It is possible that VundoFix encountered a file it could not remove. In this case, VundoFix will run on reboot, simply follow the above instructions starting from “Click the Scan for Vundo button.” when VundoFix appears at reboot.
Please also post a fresh HijackThis log. There may be some more left overs to clean up with HijackThis, but we can deal with that when you post a fresh log file.