I believe I have the virus w32.myzor.fk@yf. We got it a about a week ago, but I wasn't sure if it was the real thing, or just a hoax. So for two days, I did nothing and ignored it. Then things starting happening, and I did some research and found that it was very real. I only hope that my ignorance hasn't caused further problems with my computer. I googled the virus and found out how to get rid of it, which included downloading Spy Sweeper, and smitfraudfix.cmd, and rebooting in safe mode, but after downloading the programs and saving them both to the desktop, Spy Sweeper was the only one that appeared in safe mode. So, I don't know what to do. Can someone help me out please?

Thank you Bluefish! One tiny thing- when I downloaded ATF Cleaner and ran it, I forgot to uncheck history. I hope that isn't too major....

Here is the requested log:

Attached Files

hijackthis1.log (12.1 KB, 6 views)

Can anyone help me please? I know there has to be a way to get rid of it...

Hya Nbigler. Can you also post the Ewido log?


Run HijackThis and place a check beside each of the following:

Now first close all windows and browsers other than HiJackThis , then click fix checked and close HijackThis.

Reboot youre pc.



Download SmitfraudFix (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.

Then boot up in safemode (hit f8 when booting up)

Once in Safe Mode, open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 and hit Enter to create a report of the infected files. The report can be found at the root of the system drive, usually at C:\rapport.txt

Please post that log to youre next reply , plus a new HJT log , and the Ewido log please.

Hi, I think I must be doing something wrong when I try to download SmitfraudFix. I right click, save target as, and then find it on the desktop, open it, and extract it to the desktop, but when I reboot in safe mode, neither of those files are there. What am I not doing right?

Ok, I figured out what I was doing wrong. I wasn't logged in as the right user. But, now that I've found it, when I click on the .cmd file, its telling me that I have to extract ALL of the files contents. But I am. When I unzip the file to extract it, the first is a folder smitfraudfix/. After that, there is 8 programs, one of them being named smitfraudfix.cmd. When I extract the first, when I reboot in safe mode, the entire folder is empty. When I extract the folder named smitfraudfix.cmd, it tells me to extract all the contents. I'm not sure whats going on, but here is my HJT log and Ewido:

Attached Files

	hijackthis1.log (11.7 KB, 0 views)
	Report-Scan-20060706-120728.txt (18.1 KB, 1 views)