Navigation: Main » Adware Tools » SmitFraudFix

Adware Tools

SmitFraudFix

SmitFraudFix is a tool created to remove various desktop hijackers, adware and malware installed by Zlob family of trojans.  

Author:
SiRi 

Operating System:
Windows 2000/XP

License:
Freeware

SmitfraudFix is free, but you can contribute financially to the development of this program by sending a donation to the Author. Click here to make a Donation.

Download Here:
SmitFraudFix v2.250

Removal Procedure:

Important: Please print this procedure or download and print the PDF version as we have to close open windows during the process later.

1. Download SmitFraudFix by SiRi and save to your Desktop

2. Reboot your computer in SafeMode.

  • Restart your computer
  • Just before the computer begins to startup and before loading Windows press F8
  • A selection menu should appear
  • Select the line that says “Safe Mode”
  • At logon prompt, log in as the usual user.
  • During Windows Start process it will prompt you if you would like to continue running in SafeMode, press Yes
  • You should now see your Desktop but in a low resolution mode only.
  • Make sure no other application or windows is open.

3. Double-click on the Smitfraudfix.exe file which you downloaded earlier on your desktop. Press any key when the credit screen displays to proceed to removal procedure.

4. A selection menu will be displayed as shown in image below.

5. Press 2 on your keyboard, then Enter, to execute the selection - Clean (SafeMode Recommended)
6. It will begin to scan and clean your system thoroughly.
7. After that process, it will then run a Disk Cleanup tool to remove any unwanted files on your computer. It may take some time to complete this process.

8. After Disc Cleanup, it will show another prompt:

Do you want to clean the registry? (y/n). Press the Y button and then press the Enter to begin cleaning your registry.

9. This tool will also check if your wininet.dll is infected and will prompt:
Replace infected file? Press Y and then Enter to replace you wininet.dll with the clean version.

10. A reboot may be needed to complete the process. It will reboot your computer automatically, if not please restart your computer manually.

11. It will generate the report that can be found at the root of the system drive, usually at C:\rapport.txt. Keep this log file for your future reference.

License: SmitfraudFix is free, but you can contribute financially to the development of this program by sending a donation to the Author. Click here to make a Donation.

Note: This tool removes Desktop Hijack malware: AdwarePunisher, AdwareSheriff, AlphaCleaner, Antispyware Soldier, AntiVermeans, AntiVermins, AntiVerminser, AntivirusGolden, AVGold, BraveSentry, MalwareWipe, MalwareWiped, MalwaresWipeds, MalwareWipePro, MalwareWiper, PestCapture, PestTrap, PSGuard, quicknavigate.com, Registry Cleaner, Security iGuard, Smitfraud, SpyAxe, SpyCrush, SpyDown, SpyFalcon, SpyGuard, SpyHeal, SpyHeals, SpyLocked, SpyMarshal, SpySheriff, SpySoldier, Spyware Vanisher, Spyware Soft Stop, SpywareLocked, SpywareQuake, SpywareKnight, SpywareSheriff, SpywareStrike, Startsearches.net, TitanShield Antispyware, Trust Cleaner, UpdateSearches.com, Virtual Maid, VirusBlast, VirusBurst, Win32.puper, WinHound, Brain Codec, DirectVideo, EliteCodec, eMedia Codec, FreeVideo, Gold Codec, HQ Codec, iCodecPack, iMediaCodec, Image ActiveX Object, IntCodec, iVideoCodec, JPEG Encoder, Key Generator, Media-Codec, MediaCodec, MMediaCodec, MovieCommander, MPCODEC, My Pass Generator, PCODEC, Perfect Codec, PowerCodec, PornPass Manager, PornMag Pass, PrivateVideo, QualityCodec, Silver Codec, SiteEntry, SiteTicket, SoftCodec, strCodec, Super Codec, TrueCodec, VideoAccess, VideoBox, VidCodecs, Video Access ActiveX Object, Video ActiveX Object, VideoCompressionCodec, VideoKeyCodec, VideosCodec, WinAntiSpyPro, WinMediaCodec, X Password Generator, X Password Manager, ZipCodec…
Disclaimer: This is a self-help guide. Use it at your own risk. PreciseSecurity.com can not be held responsible for problems that may occur by using this information.

Note on SmitFraudFix:

Provided tools and resources are just recommended and/or optional. Not all threats can be disinfect by these tools/procedures. If you are unsuccessful , there may be a more complicated issues needed to be resolved on your computer. In this case, you may need to post a HiJackThis (HJT) log files on appropriate forums so that experts can analyze your system.

If you find the tools/procedure a success in removing the threat, please post what specific infections you have removed for our reference.

Discussion

155 comments for “SmitFraudFix”

  1. I down loaded SmitFraudFix v2.195 and then noticed that it was for Windows 2000/XP. I have Vista. I have the Trojan SPM/LX virus and it is drivinging me crazy, mainly because somehow, my Windows Explorer is affected and I continually get a pop-up window saying Windows Explorer has stopped working. This stays on for approx 60 sec, then a window saying Windows Explorer is restarting pops up and I only have about 10-15 sec before it stops working again. Any ideas where I go from here?
    Thank you.

    Posted by Paul Gochenauer | August 26, 2007, 6:39 pm
  2. To whom it may concern, I recently battled for a whole day against some spyware of the likes that none of my security programs could take care of. After a few trial and errors, I figured out what was needed to be removed, and ended up on your site. I did as was instructed, and YAAAAAAAAAAAA…. it worked ! I cannot thank you all enough for offering the Smitfraudfix, it worked as stated and saved me big time. I am in the skilled trades but currently caretaking my very elderly folks, so out of ‘paying’ work and my puter is my only source of entertainment these days. Thanks a million ! John.

    Posted by J Red | September 1, 2007, 11:37 pm
  3. Hi there,

    Just wanted to say thanks for all of your directions on how to remove the trojan from my computer.

    I successfully deleted files associated with the following trojan:

    Video Access ActiveX Object

    It was bogging the computer down with false security threats.

    Once again thanks for your help.

    Posted by Kevin | September 7, 2007, 9:28 pm
  4. I cannot thank you enough for this wonderful program….after many hours of flashing icons in my system tray and innumerable pop ups for every type of spyware removal you could ever want, I AM FREE!!!!

    Thanks again…your work is greatly appreciated!

    Posted by Susan B. | September 21, 2007, 1:03 am
  5. Hey! Thanks for this. I had the Universal Cleaner 2007 and about 4 or 5 others of a similar name they whole day. I’m not a techie but sorta knew what I was dealing with (basically a lot of pop-ups telling you to buy certain anti-spywate programmes. jaysus.

    Anyway, all is well now in this parish. I’ve just been able to select indymedia.ie as my homepage without it being subverted at root by another invitation to buy software you don’t need.

    It works!

    Posted by franc | September 24, 2007, 1:25 am
  6. can you make the program work with vista

    Posted by chris | September 29, 2007, 3:52 pm
  7. Thanks; My sons computer got infected with the bug.. “windows safety alert”. I was runing Norton 360, and this still got in. I searched Nortons website and I did not even find reference to this problem. Your fix corrected it just as you have instructed.
    Byron

    Posted by Byron | September 30, 2007, 11:02 pm
  8. I down loaded SmitFraudFix v2.195 and then when i run it i recieve a messeg saying “smitfraudfix.exe is not a valid win32 application” i hav win xp sp2. what should i do?

    Posted by mehran | October 3, 2007, 10:16 am
  9. hi it really work, all of the pop ups are gone, especially the triangle which keeps in informing you with that you have spywares etc….thanks so much…

    Posted by christine | October 3, 2007, 10:55 am
  10. Hey guys!

    Even me, I just want to let you know that am so relieved that i found your site.

    Thanx alot! As someone who is not literate enough about those things you guys really helped!

    Thanx for helping

    Posted by Staryme | October 7, 2007, 1:51 pm
  11. 5 Min of relief, I followed the directions, and it removed the Virus for seem like 5 min, then it showed its ugly self again, seems it did not completely rid of it.
    This is one tough virus,
    Any suggestions to fully rid of this thing?
    Marko

    Posted by Marko | October 8, 2007, 4:31 pm
  12. Great little program! Tried many other anti-spyware programs, and pretty much only dug myself deeper into spyware :D lol

    but SmitFraudFix got the job done! Thanks again for your help!

    Posted by Vance | October 10, 2007, 9:29 pm
  13. Marko, what type of virus do you have?

    Posted by webmaster | October 13, 2007, 9:56 am
  14. how to remove it from vista please help …

    Posted by memo | October 17, 2007, 6:02 pm
  15. This solution worked for removing spyware. No Bull…

    Can’t thank you enough!!!

    Keep up the great work!

    Jack

    Posted by Jack Slater | October 18, 2007, 3:18 pm
  16. Uh-oh. I’ve run Smitfraud and the bugs are still there.

    Actually, I never got to complete the process. I couldn’t finish disk cleanup, and an extra line or two appeared while the program was “killing process”. Something like a *.* file not found in C:/temps, etc. Also, I wasn’t asked if I want to replace the infected file (wininet.dll). This is getting frustrating. My system’s totally bogged down.

    Posted by Lee | October 19, 2007, 7:45 am
  17. go canada. woo. thank god it deleted all the porn

    Posted by the canadian | October 19, 2007, 8:49 pm
  18. this program has not help me at all. need help…….

    Posted by john | October 20, 2007, 8:22 pm
  19. Tried running smitfraudfix to get rid of cyber-log-x. Had some trouble running it - the procedure didn’t match the results I got, but all eventually worked out OK. Thanks a lot!

    Posted by Davo | October 22, 2007, 12:35 am
  20. Thanks guys!!

    Posted by Sammy | October 22, 2007, 7:39 am
  21. Hey!!! still having problems with cyberlog-x try this SmitFraudFix v2.195. i had the same virus i try more antiviruses but couldnt work. follow those procedure on SmitFraudFix trust u ll ‘ve a smile on your u in few mins. dont knw if i ll get it bac bt 4 now am out

    Posted by francis | October 22, 2007, 7:14 pm
  22. AWESOME AWESOME AWESOME!!

    It worked & made me sooooo happy:)

    The toxic desktop & internet explorer junk is fixed!!

    THANKS SOOOOO MUCH!

    I have been battling this virus/worm/trojan…whatever it is and even bought a new antivirus program which fixed the worm but left this annoying crap behind & your little program fixed it in a matter of a few minutes vs. the hours I spent trying to manually delete files!!

    HATS OFF TO YOU!!

    Posted by Cherie | October 24, 2007, 6:10 pm
  23. this software worked great to get rid of constant pop ups of alerts and software…but my IE still goes to a virus software site evey time I open it and wont save my home page? how do I get rid of that all together and keep my home page in tact?

    Posted by Kevin | October 25, 2007, 6:51 pm
  24. thankyou very much. but theother computer that was affected by networm_.virus@ft has deleted important file from winsystem32 folder sothat it cant solve the problem. I have to format or is ther any other methed. in teh run command i tried” sfc .scannow” command but it can not start.

    Posted by mulugeta | October 26, 2007, 1:24 pm
  25. My son’s computer got the security toolbar 7.1, and ever since I am getting pop ups alerting me of system performance warning, Networm-i.virus@fp, sends my explorer to protectroom.com, savethisinformation.com.
    I tried your program, it looked at the beginning that it worked (desktop icons for “online secuirty guide” and “live safety Center”) + the desktop background were all gone. But after few keystrokes it all came back. Since, I am running Trend Micro virus cleanup which has not found anything.

    I am going to try the above instructions again. Any Ideas?

    Posted by Joseph | October 27, 2007, 6:40 am
  26. Smitfraudfix did an excellent job removing Privacy_Danger from my computer, and it was easy to use. Thanks.

    Posted by psychadellic one | October 27, 2007, 6:12 pm
  27. I have followed the instructions and the Smartfraudfix has not removed the popups… Is there a specific file I can Delete if I boot to DOS?

    Posted by Kurtis | October 28, 2007, 7:25 pm
  28. It was just excellent. My company IT dept couldnt figure it out and this one did the job. Just how relieved I am. Thanks a lot.

    Posted by Ajain | October 30, 2007, 4:36 am
  29. I have entered a site and gave me a virus that keeps poping up with spam windows saying virus found i think it is cyberlog-x I did the smitfraudfix thing but it still happens to me please help me… I have run antiviruses and some say there were changes made to your system that are unhealable please help me and now my internet has a internet speed monitor and a security tool bar how do i END THIS MADNESSSSSS!!!!

    Posted by Superdude | October 31, 2007, 2:19 am
  30. also any1 know the file name is and where it would be saved to so i can do it manually??
    also the prcess name??

    Posted by Superdude | October 31, 2007, 2:25 am
  31. i wanna try that xoftspyse but i just wanna use it for one time before buying =/

    Posted by Superdude | October 31, 2007, 2:50 am
  32. In a word BRILLIANT!

    Posted by Greg | October 31, 2007, 8:35 am
  33. This program worked once for me before, but now, for one, my restart restarts too fast to get in an F8 for safe mode, i have to use the reboot tool, interupt it with manual shut down and start which brings up safe mode menu. Then when I try The SmitfraudFix tool it just flashes Up there once and won’t stay up, so it doesn’t work! Help!

    Posted by Chris | October 31, 2007, 8:20 pm
  34. alright well like all of you guys my computer also had all those “security alerts”and pop ups and all those stuff like that. and for some reson it got really bad so that i could barely do anything on my computer. so then i found and used this program. and it didnt completely remove all of it, but at least now i can use my computer. can anyone please help me and tell me what i can do to completely remove it?

    thanks

    Posted by Ryan | November 2, 2007, 2:23 am
  35. Smitfraudfix seems to have worked since I’m not receiving any security related popups etc. Thanks!

    Posted by gal | November 4, 2007, 4:19 am
  36. you guys are awesome,now a bit about pc and have been a L2/3 eng-tech for almost 25yrs, and i got this thing and I was on mu 4th day, have two IBM Tpads r40-extremely beefed-up so was able to get this data, easy-low time consumption and will be sending some support that way…….

    Posted by kmacho | November 5, 2007, 12:14 am
  37. I just ran through the instructions and found the same results as Joseph described. The symptoms of the spyware/virus are persisting and the desktop background disappeared. Does anyone have any thoughts or ideas?

    Posted by Kimberly | November 5, 2007, 10:35 pm
  38. If somebody’s still suffering from any adware or anything like that,I can give a link of that great program,which helped me and made me smile

    Posted by Mermaid | November 7, 2007, 1:31 pm
  39. My case seemed hopeless,even my software eng friends were telling me to reinstall the Windows or even format the hard drive…Even sounds like a nightmare huh

    Posted by Mermaid | November 7, 2007, 1:36 pm
  40. The problems that I started having were the exact ones described by Joseph - the security bar 7.1, the Networm-i.virus, etc… so I tried using this software but met with no success, like Kimberly. I then tried using a “Spybot - Search & Destroy” software found with Google and I don’t seem to be having any more problems. I ran the SmitFraudFix instructions after using the Spybot software a couple of times and nothing was detected. Hopefully this is the end of the problems.

    Posted by David | November 8, 2007, 6:53 am
  41. My girlfriend’s computer got infected with alloversafety.com. Tried a few things (including McAfee) but nothing worked. Downloaded SmitFraudFix, followed the instructions, and it got rid of that crap on the first try. Thanks!

    Posted by Frankiestage | November 11, 2007, 6:46 pm
  42. I have the same problems with David and Joseph. After scanning, the desktop background was gone and the it does not get rid of it . Since so many people succeed with this program, i dont know what happen in my case . Can anybody help me ?

    Posted by Quy Nguyen | November 13, 2007, 6:18 am
  43. this works excellent got rid of that pesky trojan Zlob-X.a. and even better that this is free..cool!! two thumbs up

    Posted by kronk'n'roll | November 14, 2007, 3:35 am
  44. I downloaded your program to desktop, but when i booted into safe mode, i could not see your program to execute your directions.
    is there something i’ve done wrong?.

    Posted by Peter | November 14, 2007, 12:39 pm
  45. Hi,
    Trying to help a friend get rid of VirusBurst (or cyberlog-x), ran the program but still got the virus.
    Ok so this is what i did: First turned “auto-restore” (donnu the english word for it) of scanned the computer for viruses with AVG free edition in safe mode, deleted infected files and shut AVG down (as well as all other applications) then ran the program (without reboot inbetween) according to your directions.
    Any ideas on what to do?

    Posted by Tor | November 14, 2007, 3:10 pm
  46. Ready to give birth to puppies Im so frustrated. Ran the program SmitFraudFix and still…hijacking popups and ’security tool bar 7.1′ remains. Keyboard extremely slow so one has to retype over and over….

    I got this from Limewire…NEVER again.

    Help!!!????

    Posted by Cat | November 14, 2007, 7:48 pm
  47. Finally figured out how to get into safe mode and the software found some things which it said it killed, but still have the same pop-ups, redirects & viruses. You don’t know how much I wish it would have worked!

    So now I have tried Spypot (which I cannot get rid of) but said it removed 37 items, AVG which said it removed 6, but slowed my machine to a stop so not really sure if it worked because I had to remove it and all the same problems came back.

    Thanks for trying though!

    Posted by RFR | November 18, 2007, 5:11 pm
  48. Friends,all who need help,please download Spyware Terminator program! It helped me and can help you too!

    Posted by Mermaid | November 18, 2007, 6:06 pm
  49. Hey, thanks very much for this information…I am not the most computer literate guy…but this worked for me…computer is working great now…

    top of the bookmarks now…

    thanks

    laz

    Posted by Laz | November 22, 2007, 11:40 pm
  50. It worked!! Yahoo. I have been battling this for 4 days. I tried 4 different spyware programs and my Norton Antivirus and nothing worked. I was on the edge of Formating c:/. Instead I downloaded this tiny 1 meg file and in moments it’s fixed. You guys are the greatest. Donation on the way!!!

    Posted by steve | November 23, 2007, 2:42 am
  51. Hi. i am using AVG which picked up the JS/downloading.agent virus. I ran your program but I wasn’t asked if I wanted to replace the infected file (wininet.dll) after the scan but went straight to the log report. When i run AVG now it doesn’t pick up the virus, but i still get..
    (file) shell32.dll
    (result/infection) change
    (Path) C:\WINDOWS\system32\shell32.dll

    does this mean the virus has gone? not sure if its 100%

    Posted by scottdlot | November 24, 2007, 1:27 am
  52. Hello
    I am having the same problem as scottdlot. I have got the JS/downloading.agent virus. This was picked up by AVG but it couldn’t heal it.
    How serious is this virus and does the change in file shell32.dll still mean I have the virus
    sorry I am nt much of a techie

    Posted by Sue | December 6, 2007, 9:28 am
  53. Thank you sooooo much. This program is legit (I know you’ve heard that about all the other ones too). Worked like a charm (took away my wallpaper but I can live with that). Follow instructions and you should be fine. Good Luck!

    Posted by Robert | December 12, 2007, 11:57 am
  54. I owe you so much thanks and submit my appreciation.I had a Trojan.spy.Win32@mx and was using Vista in my laptop.I used your instructions and seems that It worked well. As my internet browser starts working well. Even I could not run CCleaner prog (third step). I think I solved it. I also noticed another TrojanDropper.Win32 and not sure if I removed it… Any other recommendation ? again thanks a lot for the instructions
    Best

    Posted by sartre4 | December 15, 2007, 9:47 am
  55. Hey,
    thanks a lot SmitFraudFix made the job done !!

    AAA+++

    an headake that resolveded it self easely….

    Posted by MAxime | December 19, 2007, 1:03 am
  56. Wow, something that works exactly as advertised! Zlob and SmitFraud finally cleaned and gone. Thanks!!

    Posted by gord | December 22, 2007, 12:53 am
  57. Outstanding job guys, I fought with this all day long and you fixed me up 100%!, gonna get a new machine for the kids after this :)

    Regards.

    Joyce.

    Posted by Joyce Devries | December 28, 2007, 9:26 pm
  58. Will this work for windows xp 2002, if not does anyone know what will?

    Posted by Cheryl | December 30, 2007, 8:47 pm
  59. Finally I’ve gotten this “junk” off of my computer. I’ve been trying to figure out how to remove this for the last two days. Thank you sooooo much.

    Posted by Julie | January 3, 2008, 2:26 am
  60. My PC was infected by ‘JS/Downloader.Agent’ I tried several spyware removers(no luck) and AVG antivirus. AVG found it, but it couldn’t clean it. I searched the web for anything that could clean this Trojan and found SmitFraudFix. Ran SmitFraudFix per the instructions on your website and it worked like a charm. Thank you very very much!!

    Posted by P2pick | January 5, 2008, 6:02 am
  61. Thank you for the SmitFraudFix free trojan virus removal software. I am very amaze and glad that all the virus is removed. Finally i don’t need to reformat the computer becos of this trojan virus. I hope that you can create the same software for Vista.

    Posted by Edwin | January 6, 2008, 11:25 am
  62. I am full of praises for this wonderfull tool, I don’t have words to explain how good this tool is.
    I am looking for its version that works with VIsta because I think that Vista needs it.
    Sandeep

    Posted by Sandeep | January 7, 2008, 9:32 am
  63. Worked great. Used it to remove the Spymare Cyberlog x malware. System is back to normal. I’m keeping this program around.

    Posted by Dave | January 8, 2008, 7:27 pm
  64. Hi! Just finished the overkill of the PSW.x-Vir Trojan and its vast derivatives, and I can’t find the exact words to show my gratitude!!! When my computer was attacked, It gave me a real headache, until I stumbled upon your website with the detailed but easy instructions how to get rid of such abomination!

    Now, my computer works great, thanks to you!!!

    Posted by Nemanja | January 10, 2008, 9:35 pm
  65. I downloaded this SmitFraudFix.exe and after manually scanning it with AVG anti-virus, it detected a Trojan VB.CEC. I thought this was a fix to a Trojan JS/Downloader.Agent. What’s goin on?

    Posted by hpum | January 19, 2008, 4:52 am
  66. hpum, AVG used to report false positive on some file. Meaning it may give impression that a certain file is infected even if it is not. You can Google “AVG false positive” for other mistaken identify it has made.

    Though the author of the program stated it in his website that the file “process.exe” may be detected as virus by some AV software.

    Posted by webmaster | January 20, 2008, 12:07 pm
  67. after installing etc. i did have pop ups like adult friendfinder etc. i removed it and dowloaded avira antivir and discovered 7 trojans, thanks but no thanks to this “nice” program……………..

    Posted by ruby | January 23, 2008, 5:20 am
  68. I can not express in words what this tool and your directions have done for me. I love this tool and i will tell a few of my friends if they ever experience trouble like this.

    Now my computer is working fine, thanks!!!

    Posted by Kirti | January 24, 2008, 12:01 am
  69. Where all else failed this little program solved it! Brilliant application worked wonders thanks! =)

    Posted by Benny | January 27, 2008, 1:49 pm
  70. For those of you who still have problems with pop ups/redirect, even if you use this solution and it seems to work otherwise (no more Smitfraud/Zlob detections), here’s how things went for me:

    SpyBot S&D detected the SmitFraud/Zlob crap, removed. Scanned against, still had the crap, removed. Still had the crap. The Zlob stuff kept coming back with an even longer version of “tobedeleted_old” repeated over and over each delete.

    Smitfraud plus one more SpyBot run got rid of all of that, nothing showed up again on SpyBot scans. Still got the pop ups and redirects.

    I just tried SuperAntiSpyware (freeware), and apparently the damn things managed to download some stuff while I was getting rid of them. I’ve got something called Adware.SXGAdvisor, which is responsible for everything ‘advising’ you to go get the anti-spyware stuff. There were several registry and file items related to it that SAS is able to get rid of.

    Teach me to ever download an ActiveX control again :/

    Posted by Marie | January 27, 2008, 6:59 pm
  71. So Far So Good!!!
    I ran the AVG, and SMitfruad.

    Seems to have removed all traces of the infections.

    Have installed SPybot, Adaware, and Sym AV.

    Ran all programs and removed smaller miscellaneous problems.

    Hoping its all gone!!

    COY

    Posted by coy | January 30, 2008, 1:33 am
  72. i think i have the zlob thingy, loads of warnings for spyware removal etc, pc slow, cant start my computer etc. My norton dont even detect it. Adaware finds 4 problems, say they are fixed but they remain. also used spybot and that removed 33 items, but they remain. I removed norton and installed nod32, that seems to block the trojan, but not remove them. Finally i the fraudfix, did as instructed, and to be honest, it had made no difference except nod32 dosent seem to be as effective now.Please help me

    Posted by Tony | January 30, 2008, 11:02 pm
  73. Well ive just done another spybot, and it still found problems. The nod has so far detected and removed 3211 trojans, and a warning keeps popping up for detecting the win32trojandownloader.alphabet.nag trojan.

    How in the hell do i sort this out? Says a lot i think for how good the virus and spyware programs are if they cant stop it

    Posted by Tony | January 31, 2008, 1:44 am
  74. One day when I started browsing the avg alert came that there is a virus threat JS/downloader.Agent and location was C:\documents and settings\local settings\temporary files\content.IE\OM23F8\ads
    (1).js ” I downloaded SmitFraudfix and followed the steps. I did not secceed to get rid of the virus. I have windows xp service pack. I found two deviations while trying to clean the virus. a)Under para two during windows start process it did not prompt me if I would like to continue running in safe mode. I also did not see desktop in low resolution mode. b) Under para 9, I did not get any prompt’replace infected file?
    When I started to browse, the virus alert was there. I closed the computer and tried next day to follow the procedure again by clicking twice on the icon on desktop of smitfraudfix. In the selection menu that appeared I found a line that ‘C:\documents and settings\localsettings\temporary internet files is not found. The process continued.
    I request that you may please help me what I should do to be free from the virus.

    Posted by Saty | February 2, 2008, 2:04 pm
  75. I’ve donwloaded the smidfraudfix latest version and followed the instructions above. After opening the program and pressing option 2 it starts the cleaning but I never get the question with yes/no. The program just closes down after ‘deleting the temp files’ and I get a blank screen in Safe Mode. What to do now?
    Please help me as I really want to get rid of the Spyware.Cyberlog-X and Networm-i.virus@fp.

    Thanks,

    Posted by John | February 2, 2008, 3:57 pm
  76. I used it in normal windows XP mode not in safe mode and it worked. till now it has been awesome and removed spyware.cyberlog-x of my PC. I do not know if it make any problem for me later.
    Thanx PS. I think you have been great till now.

    Posted by Farshad-isfahani | February 6, 2008, 6:26 am
  77. Seems a great tool but g-data tells me that the file is infected with win32.reboot.f …. how about that ?

    Posted by ntt-FX | February 15, 2008, 8:59 am
  78. THANK YOU!!!

    Tried other removal tools no luck.

    This worked for me… It will for you!

    Posted by CC | February 16, 2008, 1:15 am
  79. i was getting alerts: cyberlog-X, networm-i.virus and trojan then my internet explorer would open to a security software website.

    i downloaded smitfraudfix and followed the instructions. when i was downloading, i didn’t realize that it was not for vista but i decided to try anyways. well so far, it seems to have worked. i have been online for the past 10 minutes and no alerts!!! thank you thank you!

    Posted by eunice | February 16, 2008, 6:31 am
  80. Sumitfraudfix is amazing tool,Wonderfull,You Guys Are really doing great job sitting over there, keep it up…….thanking Naresh

    Posted by vidya naresh | February 19, 2008, 5:17 am
  81. I downloaded this software to fix a friends computer of the Networm-i.virus@fp, and what more can I say. It worked per your instructions. And it only took about 10 minutes, if that long. You guys are great to provide for free such a resource for these intrusions. I will make sure he makes a donation because he is lost without the proper functioning of his system. Thanks bunches and bunches.

    God Bless

    John 3:16

    Posted by Malcolm | February 19, 2008, 9:53 am
  82. WOW!!!!!!!!!

    I fought several viruses for hours today including: Networm-i.virus@fp.
    I thought it would end bad :( BUT THEN!
    I tried this and WOOOOW!!
    very good helped me in minuttes, bless you! :D

    Posted by Eirik | February 23, 2008, 9:33 pm
  83. If anyone could help me it’d be great. I tried to use this, but at step 3 I fail. When I load up safe mode, the icon for smitfraudfix isn’t there. So I can’t figure out how to run it, and in non-safe mode it simply looks at me and does nothing.

    I have a windows ME shell, upgraded to XP pro with service pack 2. :/

    Managed to get a bad codec I guess and now I’m offered rouge anti-virus software every few minutes. What fun xD. lol

    Posted by Brita | February 24, 2008, 9:04 am
  84. Tkhs very much…I’m portuguese and that thing just appears in my laptop…when i was working in a very important thing!
    You just save me.
    Keep it like that!
    Tkhs!

    Posted by Mário Matos | February 26, 2008, 10:15 pm
  85. Help please… been working at this for a while. I’ve got the same problem a Lee indicated on 10.19.07

    Posted by kart | March 2, 2008, 5:05 pm
  86. Don’t know how i got infected?, But this stopped it in it’s tracks. Spent hours trying to get rid of, this took less than ten minutes.
    Thank you very much,
    Hope you have a great day
    From OZ

    Posted by Hairs | March 2, 2008, 7:18 pm
  87. Worked fine for me! No more pop ups!

    Thanks guys.

    JM

    Posted by James Mowry | March 8, 2008, 3:16 pm
  88. I think this has worked for me, so far looks clean anyway.

    For those of you with a BLANK DESKTOP after cleanup, this is what to do:
    - Control Panel
    - Display
    - Desktop tab
    - Customize Desktop button
    - Web tab
    - Delete anything that doesn’t say “My Current Homepage”, and uncheck that box if it’s ticked

    Your desktop should return (basically it leaves Active Desktop turned on but pointing to a blank file)

    Posted by Amy | March 9, 2008, 11:05 am
  89. it cant seem to work! after i finnish restarting it seem to be fine BUT AFTER A FEW MINUTES MY WALLPAPER AUTOMATICALLY CHANGE BACK TO THE VIRUS WALLPAPER AGAIN D: i need help. PLEASE.

    Posted by stupid | March 12, 2008, 2:40 am
  90. I was infected by Media Tube Codec.exe and could successfully get rid of all the crap using this tool. It worked great, simple to use and fast. Thanks a lot!!

    Posted by Smeagol | March 12, 2008, 5:44 am
  91. This worked for me, even though I didn’t think it would. Thanx Guys!

    Posted by Rudi | March 12, 2008, 8:34 pm
  92. thanks for the tool - it was solved in minutes.. well done

    Posted by Zack Zizou | March 13, 2008, 12:27 pm
  93. ANY HELP PLEASE? D:

    Posted by stupid | March 14, 2008, 9:56 am
  94. Hi,

    I’ve downloaed this program and before I use it, I just want to make sure it will help me with my problem.

    I’ve got that yellow triangle thing in my notifaction area of the task bar saying that I have some “Spyware.Cyberlog-X” but that’s just because of the smit fraud ware right?

    Also, in the same area, I have this little blue shield shaped thing, with a white question mark on it, and it changes to a red shield with an X an it.

    Will this program fix all those?

    Posted by Brendan | March 14, 2008, 6:12 pm
  95. Oh, and also, the yello triangle is giving me some system performance monitor warning, saying my system performance has slowed down by 47% and my internet connection speed has decreased by 39%.

    Posted by Brendan | March 14, 2008, 6:14 pm
  96. Follow the steps precisely, and it works like a charm.

    Posted by Todd | March 18, 2008, 12:16 pm
  97. thanx guys. you guys are simply awesome. you saved me some money for the best job. God richly bless you and your site.

    Posted by Jesse Jenkins | March 18, 2008, 4:52 pm
  98. WOW!!!!!WOW!!!!! THIS STUFF WORKS I WAS VERY HESITANT TO TRY BUT I DID IT WORKED WONDERS!!!! GOT RIDE OF THAT F*****G YELLOW TRIANGLE QUICK AND EASILY MUST TRY THE REAL DEAL THANKS SiRi

    Posted by TOKOOLFORSKOOL | March 23, 2008, 10:31 pm
  99. awesome. it works great!!!! cleaned up the mess for me………..

    Posted by sathya | March 24, 2008, 9:41 am
  100. I really thank this tool’s author, it helped me remove the spyware I had in my PC. I’ll donate and encourage all those who have used this tool to do the same.

    Thanks

    Posted by Daniel | March 24, 2008, 7:35 pm
  101. March 28,2008-Just to let you know I battled this thing for 2 days and with your fix it was gone in less than 10 minutes. The file I kept getting was trojandownloader.XS. This was first time I experienced this as both Norton Internet Security and Spyware doctor would not get rid of it. Again thanks a million and the donation is on the way

    Posted by Dale H Bunce | March 27, 2008, 1:16 pm
  102. I can’t download the file. I can not get rid of this malware…..

    Posted by mocca | March 31, 2008, 6:48 pm
  103. Thanks for you help guys. Your handy little program broke the Trojan horses back which is alllllriightt by me!! Thanks again.

    Posted by Happy camper | April 1, 2008, 10:52 pm
  104. I was trying to remove this Trojan with 5 different removal programs and nothing, this is working. Thanks!

    Posted by Jole | April 2, 2008, 7:45 pm
  105. Thanks so much for a great removal tool. Worked like it was suppose to without all the crap. Saved me about 3 hours. Donation on it’s way. Thanks for the help

    Posted by Rip N Shred | April 3, 2008, 1:38 am
  106. Thanks so much for this great utility. After dozens of unsuccesful attempts to remove JS/Downloader.Agent via three different “reputable” antivirus products, things were getting pretty hot around my desk!…but your utility worked just as it should and its back to the jelly bean jar with a happy face again.
    Thanks so much :-) Happy to make a donation…Outstanding!

    Posted by Sha | April 4, 2008, 5:19 am
  107. Thank you so much. My computer became infected last night in a way that “Asecureforum” kept becoming my homepage. Also had the 7.1 virus toolbar. I had just about given up hope I’d ever be able to use my computer normally again. Then i found your site. I was very nervous at this point about who I can trust so I crossed my fingers, followed the instructions and it worked! I CANNOT thank you enough!

    Posted by Frustrated for Hours | April 4, 2008, 10:55 am
  108. instructions where in dutch. did not work

    Posted by Chris Browning | April 4, 2008, 11:24 am
  109. I’m having pop up issues, fake “windows security system center” popups, and fake “your computer has been infected with spyware” popups from the taskbar at the bottom of my screen. i believe my problem is “trojandownloader.xs” . i tried this and it did not work. any suggests? pleasseee help. i’m a student with several research papers due…

    Posted by Julia | April 6, 2008, 9:35 pm
  110. Thank,so much for your help!!!
    I tried every other method of getting rid of that darn trojan and nothing seemed to work. I am a college student, so money is kinda tight right now, but I hope my thanks is enough ;^)

    Posted by JKN | April 7, 2008, 3:34 am
  111. After following these instructions, I am still having issues with removing the SPM/LX Trojan. Please help!!!

    Posted by Bruce | April 8, 2008, 12:36 am
  112. Also, I did not receive the request to delete the wininet.dll file in step 9

    Posted by Bruce | April 8, 2008, 12:50 am
  113. fantastic thanks removed it from my laptop in sec’s … good work keep it up.

    Posted by Dave Uk | April 8, 2008, 1:34 pm
  114. thnks - rebooted in normal mode (on accident) and everything was fine after reboot - i was sweating during that countdown!!! amazing and thank you

    Posted by moon | April 14, 2008, 12:10 am
  115. i ran smithfraudfix on my vista comp and so far so good no popups no warnings none of the crap that was going on i thank you for this great fix i will donate..thanks again

    Posted by prchulo1 | April 15, 2008, 6:21 pm
  116. just checking the thing out. I hope it works.

    Posted by mirth | April 16, 2008, 2:55 am
  117. has the smitfraudfix download site been removed? i clicked on the link and typed it directly into the toolbar and IE comes up with an error message saying it can’t find the site…please help! i just did a scan on my computer and found 12 viruses!!

    Posted by Julie | April 16, 2008, 7:51 pm
  118. They say the best things in life are free the best thing in life in the computer world is “smitfraudfix”,this is a great job..thanks alot,keep up the good works..i cant believe people are paying the leaders in virus protection and it cannot help people…SIRI god bless you all..and b4 you part this world..pass on the knowledge…the future will need you…

    Posted by mario | April 17, 2008, 1:54 pm
  119. Thanks, gracias, me ha ayudado bastante.

    Posted by Chambito | April 18, 2008, 10:53 pm
  120. I wasnt able to do anything because of all the pop-ups i had. i tried a few different things but this is the only one that worked and so far i have no problems. Thanks so much!

    Posted by bt85 | April 19, 2008, 6:19 pm
  121. I cant express all my gratitute in words. my computer was infected seriously. i was in deep trouble and tension. somehow i searched in internet and found this page and i have no other chance than to believe this. and i tried and bingo. everything clear. i am thanking you million times from the bottom of my hearts.

    Posted by subha | April 20, 2008, 8:38 am
  122. Great Tool for trojan horses. Thanks for a very useful tool.

    Posted by Online Coupon Codes | April 21, 2008, 11:19 pm
  123. “I’m having pop up issues, fake “windows security system center” popups, and fake “your computer has been infected with spyware” popups from the taskbar at the bottom of my screen. i believe my problem is “trojandownloader.xs” . i tried this and it did not work. any suggests? pleasseee help. i’m a student with several research papers due…”

    just like julia, i have the same prob

    Posted by Tom | April 22, 2008, 3:49 am
  124. me too im infected with a fake security alert (worm.win32.netbooster) I cannot delete the files that goes to my pc that i didnt know it. It installed a program that i didnt do it like spyware and malware protection, privacy protector,and my computer icon change name into error cleaner. Many times i was deleted the two icon (spyware and malware protection, privacy protector) but it seems annoying me a lot. Everytime i rebooted my pc theres always a pop up on my screen. Many of my software programs that infected by this virus and it will not run anymore. Im tired of fixing it, can you please help me dear home user like me. Can you pls email me or IM me at >>deadoralive_11@yahoo.com thanks in advance…. :-s :-*

    Posted by joey | April 27, 2008, 4:47 pm
  125. This works ive tried this along with Avast in the safe mode. This works
    Gr8. Thnx!

    Posted by sriram | May 1, 2008, 3:57 am
  126. Hi,I’ve got AVG.
    It detected 2 viruses-JS/Downloader Agent and Exploit.
    I put them in the AVG virus vault.
    I then tried to remove by following your instructions for Smitfraudfix BUT:

    When it gets to the DISK CLEANUP stage-CLEANING UP DRIVE -C.
    It doesn’t clean up anything-no green lights to show progress-just completely blank?
    It then asks if I want to clean registry-Yes i say and it then gives me a written record/report BUT no mention of dll file referred to??

    I’ve followed instructions twice now AND STILL BOTH VIRUSES IN MY AVG VAULT.
    ARE they dangerous or what?
    How can I PLEASE get rid of them??
    Happily make a donation to remove them.
    I’m clueless about computers so ‘idiot’s guide’ needed.

    Regards

    lam

    Posted by Lam | May 8, 2008, 11:20 pm
  127. I can’t run SmitFraudFix on my computer. I have windows wp home edition. When I run the program, the cmd window just blink at screen and a new floder is create on desktop. but that screen with options don’t really appears on the screen.My computer is infected by trojandownloader.xs. Any help is welcome. Thanks.

    Posted by luc_ls | May 11, 2008, 8:05 pm
  128. SiRi,

    When I hear of a friend’s or co-worker’s system being virused it affects me the same way as when I see a car vandalized or ugly graffiti on a building…it motivates me to try and help. I’ve had pretty good luck over the years; after retrieving the owner’s personal files (for safekeeping) I’d much rather try to stimulate the fault and methodically work to eliminate the problem as opposed to just giving up & performing the default ‘nuke & pave’ XP/NTFS reinstallation.

    Even so, after spending a significant amount of time this past weekend and not making any headway (the system originally had a virus removed a while back, but the current problem was that a legit copy of MS Office 2003 wouldn’t install due to the MSI installer’s inability to delete certain keys in the registry) I was ready to quit fighting the inability to set the permissions on problem registry keys and just wipe the drive, reinstall XP, and copy the owner’s files back over.

    I changed the problem definition a bit and googled registry keys can’t delete permissions office virus, hit a web page describing a problem similar to mine, with a link to your Smitfraudfix.

    After a full weekend of MS KB articles, endless clean scans, etc, with no joy, I figured I had nothing to lose, installed Smitfraudfix, and Voila! I was finally able to reinstall Office without a hitch.

    Your willingness to share your expertise via code saved me several hours rebuilding my friend’s system from scratch. I can’t reciprocate with code, but if you ever need a carburetor rebuilt (a lost art) I will be more than happy to repay the favor.

    All the best!

    db mellor

    Posted by dbm | May 13, 2008, 3:43 am
  129. Downloaded but when I double click in safe mode it will not run. Any suggestions?

    Posted by Michael | May 18, 2008, 7:16 pm
  130. Thanks Siri. This was a big help. I ran this along with AVG and spybot and got rid of all the pop ups. I still have two issues that have not been resolved;

    1. Virus Alert! on system clock
    2. hard drive is not shown in My computer but I can browse to it

    Has anyone been left with these issues? Any advice?

    Thank you.

    Posted by TK | May 29, 2008, 1:50 pm
  131. works for zinaps! thanks!!!!

    Posted by robbie | June 1, 2008, 5:48 am
  132. Downloaded but when I double click in safe mode it will not run. Any suggestions, that can help, My computer is infected by trojandownloader.xs. Thx!!!

    Posted by AK | June 1, 2008, 11:39 am
  133. Downloaded but when I double click in safe mode it will not run. Any suggestions, that can help, My computer is infected by cyberlog - x

    Posted by Regina | June 1, 2008, 8:40 pm
  134. sorry i cant download why can u email to me..help

    Posted by Hamid | June 2, 2008, 11:48 am
  135. could not run in ’safe mode’, so i tried it in normal mode (hope i don’t regret that later), and it worked! no more ’security toolbar 7.1′ !!! no more bs alerts! thank you so much.

    Posted by Joseph | June 2, 2008, 2:23 pm
  136. I had the same problem running the SmitfraudFix.exe on WinXP in safe mode. I ran SmitfraudFix.exe and nothing would happen… So I renamed the file to Smit.exe and it worked.

    Posted by Mike | June 2, 2008, 9:13 pm
  137. work like a charm, thanx

    Posted by nobody | June 3, 2008, 7:02 am
  138. It has worked great but my internet speed is still low as before but comp is running fast.

    Internet dloading speed is still low.

    plse help.[:(]

    Posted by raunz | June 3, 2008, 9:12 am
  139. I may be stupid or something, but I can’t actually seem to find the place to download this thing. Could you please help me?

    Posted by Josh | June 3, 2008, 4:46 pm
  140. thanx…seems to have worked well

    Posted by karps | June 4, 2008, 3:41 pm
  141. Thanks for the renaming hint.
    Also, it would not launch when i clicked on the administrator icon, but it did launch when i clicked the other choice upon boot up in safe mode

    Posted by gary | June 5, 2008, 12:30 am
  142. Excellent job. Thank you for your program.

    Posted by Vlad | June 10, 2008, 7:38 pm
  143. Cyberlog X totaled my PC completely. Disables start menu, disables task manager, hides icons, my computer, etc. At the last stage it changed my wallpeper into his own virus wallpaper LOL. If you ask me, only format C: /u can solve this. You can’t even visit a website, downloading software, running it, etc is totally impossible.

    Posted by Klimy | June 12, 2008, 10:34 pm
  144. If you have a problem with the disappearing desktop after the 1st run of smitfraudfix: just ctrl+alt+del then File/New Task(Run) and browse for wherever you put the smitfraudfix.exe. That worked for me.

    Posted by ray | June 14, 2008, 4:29 am
  145. Please please help…I have been trying for hours to get this trojandownloader.xs off my computer. It has disabled my task manager and for some reason made a bunch of my files/programs think that they open with the Paint program. When I downloaded and tried to run the SmitFraudFix it gives an error message of “C:\Documents and Settings\April K\Local Settings\Temporary Internet Files\Content.IE5\XI3FIZF7\SmitfraudFix[1].exe Paint cannot read this file. This is not a valid bitmap file, or its format is not currently supported.”

    It gave the same error no matter what anti-virus program I tried to use or program I try to open. I’ve also tried in safe mode…How do I fix this??? :(

    Posted by April | June 15, 2008, 1:00 am
  146. My husband laptop has a blue screen that directs him to a website to download spymaxx and antispyStorm2008. pops up that says were being attacked are poping up and when clicked on sends us to the website i spoke of above. system restore will not work or spydoctor. we tried this software and nothing helped. any suggestions.

    Posted by Jamie | June 17, 2008, 6:03 am
  147. Oh, man…Thank you, thank you, thank you!!! It works just as it is written. I have very sensitive data on my computer, and I must say I was very afraid when red biohazard screen showed up! This is awsome! Thanks again. Don’t know however, how it passed NOD32 and Ad-Aware???

    Cheers
    Majki

    Posted by Majki | June 19, 2008, 7:15 am
  148. AMAZING!!!

    Posted by Jane | June 19, 2008, 7:20 am
  149. Didnt work for me..i have a zinaps spyware problem…..n i still get those annoying pop up alerts….!! thnks anyways!!

    Posted by Geo | June 21, 2008, 5:11 am
  150. First of all thanks a million for an effective program. I must say this program is far superior to expensive useless programs. Spyware, malware, etc removal software is big business. Now I know why big software companies never create a program as effective as this one. The answer is GREED, I even think they create some of the infection software. Thank you guys, you saved my life.

    Guard-O

    Posted by Guardo | June 28, 2008, 7:27 pm
  151. Hi, after i start windows in safe mode i double click the smitfraudfix icon on my desktop and when it open it ask me to enter any key to continue but when i press any key it froze, help please.

    Posted by Angel Baez | June 29, 2008, 12:05 am
  152. I’ve been battling a virus for 2 days now and after trying Ad-Aware, CCleaner, and AVG and removing many many critical errors, i stumbled upon this site. Many popups have been saying i have errors, mainly it seems trojandownloader.xs, some more trojans ex:(trojanhorsegeneric9.arkp), lots of pop-ups from (CoolWebSearch -including : minmgnt.exe, win32e.exe, internet.exe, avpcc.dll). Also when i restart my computer, an error screen pops up and says “error loading C:\Windows\system\system32\wuadojol.dll”.

    I saved smitfraudfix on my desktop and tried to restart my computer in safe mode. after pushing enter on the Safe Mode option it then asked me what operating system (of which there was only the choice of Windows XP) and i selected it and pushed enter. Here is where it didnt work, instead of starting up my computer, a long list came up listing basically everything in Drivers directory:

    multi(0)disk(0)rdisk(partition(1)WINDOWS\system32\DRIVERS\ (im going to list a few of the files listed after drivers. . . \ACPI.sys, \WMILIB.SYS, \pci.sys, \isapnp.sys, \viaide.sys, \pciidex.sys, \MountMgr.sys, \ ftdisk.sys, \dmload.sys, \dmio.sys, \partmgr.sys, \volsnap.sys, ect. ect. . . ect there were only a few that werent in drivers sect, they were in windows\apppatch\drvmain.sdb and windows\fonts\vgaoem.fon

    I ran it out of safe mode, and tried going into safe again after that, but got the same thing. How can i get it to go into safe mode when this is happening?

    Also: Upon restart, i still get the window to come up saying error loading C:\WINDOWS\system32\wuadojoi.dll —– is there any way to make sure i have all the correct register files? or just download some kind of package that fixes or replaces these sys32 pieces? thanks for the help though so far, at least i feel like im getting somewhere lol!

    Posted by Pauly | July 1, 2008, 3:29 pm
  153. oh wanted to add though, it did unlock my taskbar as well as make my avg/ad-aware bring up no more objects!! and what are the rest of the options for? like “search and clean DNS Hijack?”

    Posted by Pauly | July 1, 2008, 4:02 pm
  154. hi…i tried enter a safe mode after restarting and f8 but no option as safe mode was open for me….
    i dont know what to do…
    thand
    ori

    Posted by ori | July 2, 2008, 9:03 pm
  155. I installed the smitfraudexe file, did steps 1-8 and 10 successfully, but did not get a step 9-”replace infected file” prompt, please help be4 this virus eats my PC alive!

    Posted by Bryan | July 2, 2008, 9:49 pm

Post a comment

FeedBacks