Omega Magnus Tech Notes

SmitFraudFix: Removing Malware / Viruses 

(commonly mispelled: smithfraudfix or smithfraudfix.exe)

Designed and Maintained by: S!Ri - all credits to him.

 | Down Load Site | Down Load: SmitFraudFix.exe | 

This tool removes Desktop Hijack malware: AdSmithFraudFix - (SmithFraudFix) Removing Malware / Viruses warePunisher, AdwareSheriff, AlphaCleaner, Antispyware Soldier, AntiVermeans, AntiVermins, AntiVerminser, AntiVirGear, AntivirusGolden, AVGold, BraveSentry, IE Defender; MalwareWipe, MalwareWiped, MalwaresWipeds, MalwareWipePro, MalwareWiper, PestCapture, PestTrap, PSGuard, quicknavigate.com, Registry Cleaner, Security iGuard, Smitfraud, SpyAxe, SpyCrush, SpyDown, SpyFalcon, SpyGuard, SpyHeal, SpyHeals, SpyLocked, SpyMarshal, SpySheriff, SpySoldier, Spyware Vanisher, Spyware Soft Stop, SpywareLocked, SpywareQuake, SpywareKnight, SpywareSheriff, SpywareStrike, Startsearches.net, TitanShield Antispyware, Trust Cleaner, UpdateSearches.com, Virtual Maid, Virus Protect Pro, VirusBlast, VirusBurst, VirusRay, Win32.puper, WinHound, Brain Codec, DirectAccess, DirectVideo, EliteCodec, eMedia Codec, EZVideo, FreeVideo, Gold Codec, HQ Codec, iCodecPack, iMediaCodec, Image ActiveX Object, Image Add-on, IntCodec, iVideoCodec, JPEG Encoder, Key Generator, Media-Codec, MediaCodec, MMediaCodec, MovieCommander, MPCODEC, My Pass Generator, Online Image Add-on, Online Video Add-on, PCODEC, Perfect Codec, PowerCodec, PornPass Manager, PornMag Pass, PrivateVideo, QualityCodec, Silver Codec, SiteEntry, SiteTicket, SoftCodec, strCodec, Super Codec, TrueCodec, VideoAccess, VideoBox, VidCodecs, Video Access ActiveX Object, Video ActiveX Object, Video Add-on, VideoCompressionCodec, VideoKeyCodec, VideosCodec, WinAntiSpyPro, WinMediaCodec, X Password Generator, X Password Manager, ZipCodec…

It removes some of the most very agressive malware / viruses that most any other removers can not.

Things to note:

1. This should only be used by a profesional and backup the computer completely before trying to use it.

2. It can in some cases break a profile - causing the desktop not to work - that usually only happens when ” Clean “ is used on a computer without needing to use it.

3. The program “Clean” component should be ran in safe mode, after you have completed a complete scan and removal of malware by something like Ewido Malware Scanner  and verified with the “Search” feature of SmitFraudFix that you have infected files needed to be fixed with it.

4. Current version on writting this article - it does not support Vista - as of yet..

If you feel you need to use this program, below is instructions:  ( Use at your own risk ! )

1. Down Load File: leave window open to review the instructions from them.  | Down Load Site | Down Load: SmitFraudFix.exe | 

2. Save File to desktop or easy to find location.

3. Double Click on - SmitFraudFix.exe - it looks like a yellow sign

4. Choose option #1 - Search: by hiting “number 1” and “Enter” key.

5. Notepad should open after completion of scan - reniew report to see if you have any problems.

6. Do not use any of the other options, unless the report says you have an infected files.  Otherwise you could damage your computer system!

7. If infected files are found, reboot the computer to safe mode. (before the Windows icon appears, tap the F8 key continually until option boot screen appears.)

8.  Double-Click SmitFraudFix.exe

9. Select option #2 - Clean: by hiting “number 2” and “Enter” key.

10. When prompted: Do you want to clean the registry? Answer “Y” for yes and hit “Enter” key.

-  This will remove the Desktop background and clean the windows registry keys associated with the infection.

- It will the check the wininet.dll if it is infected.  If infected file is found: Answer “Y” for Yes and hit “Enter” key.

- A reboot may be needed to finish the cleaning process.  - report can be found at C:\rapport.txt

Once rebooted go to control panel - Display and change the background to what ever you like if necessary.

Optional:

• To restore Trusted and Restricted site zone, select 3 and hit Enter.
• You will be prompted: Restore Trusted Zone ? answer Y (yes) and hit Enter to delete trusted zone.

Note: process.exe of the SmitFraudFix.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a “RiskTool”; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between “good” and “malicious” use of such programs, therefore they may alert the user.  So do not stop the process of “preocess.exe” during the Cleaning of the infected files, repair, and scan.

*** We keep a list of free antivirus / spyware programs, online scanners and so forth at: Free Antivirus Programs and Utilities