well, I tried every which way, ie: as Admin (tells me it's missing a process.exe file and shuts down), just double-clicking on it (then a 1st blue window appears and write access denied 10-15 times in a row, then open another window, the two windows merge into one blue screen again telling me to press any touch, then I choose 1, press start, it goes for a second with the same access denied story, shuts and this log appears in the folder I got from the zip file)
of course all my programs were off, then I rebooted, same results, then I remembered I had the maudit windows firewall on, so I got it off (which is another issue of mine, I can't seem to find a good enough firewall for vista, but I guess let's concentrate on the problem at hand for now ) and tried again, then rebooted once more, tried again, same results all around…
I'm getting kinda desperate with this, I mean I even wrote to some random guy that belongs to the website in the popup, but he obviously doesn't know what I'm talking about, and now my computer is being used more often to be fixed than to do what I need it for this last week, highly annoying !
Now, this popup window is not too bad as popup goes, but 1st, there's no way I'll leave this on and 2nd it's just too annoying not to try and eradicate it forever !
I'll keep following instruction, but it's getting crazy than such a small thing gets so tenacious, I don't know what else to describe, if it comes from the key, it looks clean now, the other computer's doing alright now too, but the thing is many people put their keys in the other computer and no one has this problem as far as I know.
if there's anything I can try to describe that'd help you let me know.
Now I'm a bit on a mission to kill this thing off my laptop
open the SmitfraudFix folder and double-click smitfraudfix.cmdPress "4" and then to check for updates.
Don't forget to allow SmiUpdate.exe access through your firewall.
Once it has updated, or if there are no updates available, continue with the scan, "option 1", with these instructions below.
2) Double click SmitfraudFix.exe - this will open a Command Window and also create the SmitfraudFix folder on your Desktop. Once you have read the information, "press any key to continue…"
Press "1" and then to start the search process.
When the fix has completed, a text file, rapport.txt, will open with the results in - Copy and paste this report into your next reply.
A copy of the report can be found in the root of your drive, eg: Local Disk C: or partition where your operating system is installed.
For most, this file can be found by double-clicking My Computer and then Local Disk (C:)
NOTE : do not select any other option number if #1 will not run
ok, no updates available, then the other thing is I don't seem to have SmitfraudFix.exe file, I have SmitfraudFix.cmd (at least I believe it is, it says windows command script file), so if I go from there and assume you are talking about the same file with just a different name, the same thing as before happens.
I'm baffled, didn't we run this one in the past ?
looked everywhere and didn't see a report log, maybe I should explain that I got a zip file from the link you gave me, as opposed to an exe file, this creates the filder on my desktop, I downloaded the zip file twice and ran it again, just to be sure
seems ISP's just have a group of 'local' numbers - that's one of them…so Smitfraud Fix didn't come up with it either, the autorun.inf is put there by Flash Disinfector…
we won't give up just yet then…we'll bring out the serious tools…
please do this
Download Dr.Web CureIt to the desktop:
Doubleclick the drweb-cureit icon to start the program.
press start
Allow the program to run the initial express scan
This will scan the files currently running in memory. If something is found, click the YES button when it asks you if you want to cure it. This is only a short scan. Note: A pop up may appear during this phase suggesting you purchase their program - click the X at the top right corner of this pop-up to close it.
Once the short scan has finished, check the Complete scan box on the left side, even if nothing was found on the initial scan.
Then click the small green arrow button on the right under the Dr.Web Antivirus picture to start the complete scan. (This scan will take several hours)
During this complete scan - if Dr.Web finds an infection a window will pop up requesting your attention. Select the Cure button.
Note:(If the file cannot be cured, Dr.Web will automatically delete the file)
Once the scan is complete, on the menu bar, click file and choose report list.
Save the report to your desktop. The report will be called DrWeb.csv
Note:this report will need to be renamed to Dr.Web.txt in order to post it on the forum.
Close Dr.Web Cureit.
Please post the Dr.Web.txt report in your next reply
ok, this is a huge log, it won't even fit in 2 posts
in any case, you might not even see anything because this is a 2nd scan I had to do after the computer crashed during the first one
during this previous one more stuffs got uncovered and one even got deleted
Now I've been trying to fit the whole log in here for the last hour or so and it seems I might need something like 8 posts to fit it here, if you need it full I can send it or upload it somewhere and send you the link, for now I'm guessing this will have to do
Scan statistics
—————————————————————————–
Scanned: 1525
Infected: 0
Modifications: 0
Suspicious: 0
Adware: 0
Dialers: 0
Jokes: 0
Riskware: 0
Hacktools: 0
Cured: 0
Deleted: 0
Renamed: 0
Moved: 0
Ignored: 0
Scan speed: 2474 Kb/s
Scan time: 00:02:40
—————————————————————————–
as I said, the first attempt got more stuffs and I can't remember what kind of file it erased, some inlog.something but I can't be sure, I didn't expect a computer crash so didn't pay much attention to it…
well, so far so good, but this thing has a tendency to popup after a lil' while, especially when I don't expect it anymore
Good idea for the zip, I'm so tired I didn't think about it
here you go: 📎CureIt.zip
I let you know if anything happen, do you need a HJT log ?
If not one of my Malware Expert colleagues came up with a solution: (thanks Tomk)
Install a Hosts File
A Hosts file will prevent your computer from any known malware and spyware sites by redirecting the connection request to 127.0.0.1, which is your local address. You may download the MVPS Hosts File by clicking >> HERE <<.
Note: Be sure to follow the instructions to disable the DNS Client service before installing a custom hosts file.
Aaaaaaargh, it wasn't gone.
I tried to put such an host file in the past, following the protection advices from this site, but I must not have understood properly how to manage coz I kinda made a mess of things, not because of the DNS control thingy, but I'm just not sure how this all should work, but ok, I think it'd be the best solution, I'll try again. I'll let you know how it went along with a fresh HJT log, okay, let's do this then
ps, I now notice this window seems to come mostly from one website, it came from others different one before, but lately, only this one website does it, don't know if it means anything ?
✨ Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI
I tried to put such an host file in the past, following the protection advices from this site, but I must not have understood properly how to manage coz I kinda made a mess of things, not because of the DNS control thingy, but I'm just not sure how this all should work, but ok, I think it'd be the best solution, I'll try again. I'll let you know how it went along with a fresh HJT log, okay, let's do this then
ps, I now notice this window seems to come mostly from one website, it came from others different one before, but lately, only this one website does it, don't know if it means anything ?