This thread's last reply is from February 23, 2008, 11:44 AM UTC. Software, malware, and removal-tool
advice below may be out of date — treat specific steps and download links with caution.
random/random
When posting your logs please post them directly into the reply. Do not attach them.
Please download SmitfraudFix (by S!Ri)
Double-click SmitfraudFix.exe.
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.
**If the tool fails to launch from the Desktop, please move SmitfraudFix.exe directly to the root of the system drive (usually C:), and launch from there.
Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consulting/proc...processutil.htm
Post back with the smitfraudfix log and a new HijackThis log
earole
Thanks for your reply. Sorry I didn't mention that I used Smitfraud as well. Eventually I just went back to a restore point from last month & it worked. I guess the registry entries were deleted.
I was quite surprised but pleasantly so.
Thanks anyway for your help