Home & Home OfficeBusinessPartnersClubAbout Security Stronghold

SmitFraud Removal: Remove SmitFraud Forever

Let our support team solve your problem with SmitFraud and repair SmitFraud right now!

Leave the detailed description of your SmitFraud problem in the form below. Our support team will contact you in several minutes and give a step-by-step instruction on how to fix SmitFraud problem. Please be specific. Do your best describing the problem. This will help us recommend right and complete SmitFraud problem removal solution.

Describe your problem here and we'll contact you in several minutes:

Warning:

1) We hate spam as much as you do. We will not share your email with any third party or publish it anywhere. Your email is used only to contact you and give you SmitFraud removal solution.
2) All fields of this form are obligatory.

Guaranteed Problem Solution	Threat's description and solution are developed by Security Stronghold security team. Let professionals make your problems solved now!
What is SmitFraud? Technical details of SmitFraud problem and SmitFraud removal tool Methods for manual SmitFraud removal Free download of a program that will solve your problem automatically Free instant professional support in solving SmitFraud error from our Security Support Team

Threat's profile

	Name of the threat: SmitFraud
	Command or file name: amzyfwuw.exe
	Threat type: Spyware
	Affected OS: Win32 (Windows 9x, Windows XP, Windows Vista)

SmitFraud intrusion method

SmitFraud copies its file(s) to your hard disk. Its typical file name is amzyfwuw.exe. Then it creates new startup key with name SmitFraud and value amzyfwuw.exe. You can also find it in your processes list with name amzyfwuw.exe or SmitFraud.

If you have further questions about SmitFraud, please fill in the form above and we'll contact you shortly.

» Download program to remove SmitFraud (SmitFraud Removal Tool)

How to fix SmitFraud

This problem can be solved manually by deleting all registry keys and files connected with SmitFraud, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by SmitFraud.

To get rid of SmitFraud, you should:

1. Kill the following processes and delete the appropriate files:

• Anti Spam.url
• antispylab-logo.gif
• Antivirus Test Online.url
• appmagr.dll
• as.gif
• asxbbx.dll
• as_header.gif
• atmclk.exe
• Big Tits.ico
• Big Tits.url
• Black Jack Online.url
• Blackjack.ico
• blue-bg.gif
• bolnyz.dll
• box_1.gif
• box_2.gif
• box_3.gif
• Britney Spears.ico
• Britney Spears.url
• bsw.bmp
• bsw.exe
• button_buynow.gif
• button_freescan.gif
• Buy Viagra Online.url
• buy-now-btn.gif
• Car Insurance.ico
• Cheap Cigarettes.ico
• Cheap Cigarettes.url
• Cheap Viagra.url
• close-bar.gif
• corner-left.gif
• corner-right.gif
• Credit Card.ico
• Credit Card.url
• Cruises.ico
• Currency Trading.ico
• Currency Trading.url
• CWS_iestart.exe
• dcomcfg.exe
• dcom_15.dll
• dcom_16.dll
• dcom_21.dll
• Defpia32.dll
• Diazepam.url
• dnefhw.dll
• download_box.gif
• drvsog.dll
• dvdcap.dll
• dxmpp.dll
• erxbx.dll
• exuc32.tmp
• facts.gif
• features.gif
• ff.tmp
• fhpd.dll
• fjdcy.dll
• footer.gif
• footer_back.gif
• footer_back.jpg
• Free XXX Sites List.url
• free-scan-btn.gif
• fyhhxw.dll
• guninst.exe
• gunist.exe
• h-line-gradient.gif
• header-bg.gif
• header_1.gif
• header_2.gif
• header_3.gif
• header_4.gif
• helper.exe
• hhk.dll.tcf
• higjxe.dll
• Home Loan.url
• hp***.tmp
• hp100.tmp
• htey.dll
• hvnwm.dll
• Hydrocodone.url
• hzclqhc.dll
• icima.dll
• idhsymom.exe
• imfdfcj.dll
• infected.gif
• intmon.exe
• intmonp.exe
• intxt.exe
• ioctrl.dll
• iqzv.dl
• ixt0.dll
• ixt2.dll
• Kdfdlh32.dll
• klja.dll
• lcch.dat
• ld****.tmp
• Lesbian Sex.ico
• LGONUI~1.EXE
• ll.exe
• local.html
• Lortab.url
• lut.dat
• lwpfwjb.dll
• main_back.gif
• Mhpcja32.dll
• mirarsearch_toolbar.exe
• MP3.ico
• mscornet.exe
• msctrl.exe
• msmsgs.exe
• msole32.exe
• mssearchnet.exe
• mswinb32.dll
• mswinf32.dll
• mswinf32.exe
• mswinup32.dll
• mswinxml.dll
• Msxq.exe
• Nbfgemln.exe
• Need Money.url
• Network Security.url
• netwrap.dll
• no-icon.gif
• nvctrl.exe
• oerucu.dll
• ofcukiz.dll
• ole32vbs.exe
• oleadm.dll
• oleadm32.dll
• oleext.dll
• oleext32.dll
• ongi.dll
• Online Betting.ico
• Online Betting.url
• Online Gambling.ico
• Online Security Center.lnk
• Online Security Center.url
• Online Shopping.url
• onlineshopping.ico
• oqipt.dll
• Oral Sex.ico
• Oral Sex.url
• ornzq.dll
• osaupd.exe
• page.htm
• param32.dll
• Party Poker.ico
• Party Poker.url
• perfcii.ini
• perflibs__
• Phentermine.ico
• phqghume.exe
• popuper.exe
• pop_up.dll
• Pornstars.ico
• Pornstars.url
• posem.dll
• qjrkvy.exe
• qrucmr.dll
• reg-freeze-box.gif
• reg-freeze-header.gif
• reger.exe
• reglogs.dll
• regperf.exe
• Remove Adware.url
• Remove Spyware.ico
• remove-spyware-btn.gif
• removeadware.ico
• repigsp.exe
• replmap.dll
• rf.gif
• rf_header.gif
• rmzdzx.dll
• runsrv32.dll
• runsrv32.exe
• sbnudh.dll
• scan_btn.gif
• screen.html
• searchdll.dll
• secure32.html
• Security Troubleshooting.lnk
• security-center-bg.gif
• security-center-logo.gif
• security_center_caption.gif
• sep_hor.gif
• sep_vert.gif
• sexpersonals.ico
• shdochop.dll
• shellgui32.dll
• shnlog.exe
• sites.ini
• sivudro.dll
• spacer.gif'
• Spam Filters.url
• Spyware Removal.url
• spyware-detected.gif
• spyware-sheriff-box.gif
• spyware-sheriff-header.gif
• Spywaresheriff.lnk
• star-grey.gif
• star_gray.gif
• star_gray_small.gif
• star_small.gif
• stickrep.dll
• suprox.dll
• svchop.exe
• svchosts.dll
• svcnt.exe
• Take It Here - Daily Updated Porn Links.url
• Take It Here - Free * TGP.url
• taskdir.dll
• taskdir.exe
• taskdir~.exe
• tconini.dat
• tctool.exe
• thlwin32.dll
• thn.dll
• ticads.exe
• ticont.dll
• tisa.cnf
• tisa.dll
• tool1.exe
• tool2.exe
• tool3.exe
• tool4.exe
• tool5.exe
• tpopup.ex
• true-stories.gif
• Trust Cleaner.lnk
• ts.gif
• ts_header.gif
• ttu.exe
• tu.exe
• twain32.dll
• twshmkfy.exe
• ucbrrt.dll
• ulztc.dll
• uninstDsk.exe
• uninstIU.exe
• uqzurtxt.exe
• us22[1].exe
• Valium.url
• vhywj.dll
• viagra.ico
• Vicodin.url
• Video Slots.url
• videoslots.ico
• voblaizdupla.exe
• voi271.exe
• voi640.exe
• w8673492.exe
• wallp2.exe
• warnhp.html
• warning-bar-ico.gif
• warning_icon.gif
• wbeconm.dll
• Web Detective.url
• wfkduei.dll
• wiatwain.dll
• win-sec-center-logo.gif
• winapi32.dll
• winbl32.dll
• windesktop.dll
• windesktop.exe
• windows-compatible.gif
• winflash.dll
• WinHound spyware remover.lnk
• winlfl32.dll
• winnook.exe
• wins32.dll
• winselect.exe
• win_logo.gif
• wldr.dll
• wp.bmp
• WP.EXE
• xenadot.dll
• ybnqslvs.exel
• yes-icon.gif
• yfysupa.dll
• yhbdupd.dll
• yubkinn.exe
• ywbicim.dll
• zlbw.dll
• zloader3.exe
• _plastilin_
• __delete_on_reboot__intel32.exe
• __delete_on_reboot__intmon.exe
• __delete_on_reboot__OLEADM.dll

Warning: you should delete only those files which checksums are listed as malicious. There may be valid files with the same names in your system. We recommend you to use SmitFraud Removal Tool for safe problem solution.

2. Delete the following malicious folders:

• C:\Program Files\virtual maid\
• docume~1\user\mydocu~1\fnts~1\
• C:\Program Files\mtgxt\
• C:\Windows\System\LogFiles\

3. Delete the following malicious registry entries and\or values:

• Key: CLSID\{7b55bb05-0b4d-44fd-81a6-b136188f5deb}

• Key: CLSID\{ffd2825e-0785-40c5-9a41-518f53a8261f}

• Key: TypeLib\{1E1B286C-88FF-11D2-8D96-D7ACAC95951F}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7b55bb05-0b4d-44fd-81a6-b136188f5deb}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A40D9D65-5C09-421A-AFF8-2160D7ABD4E7}
  Value: adware.srv32

• Key: CLSID\VMHomepage

• Key: CLSID\VMHomepage.1

• Key: Software\Classes\CLSID\{081669BA-EFC4-48C2-A8F4-874052D02553}

• Key: Software\Classes\CLSID\{145E6FB1-1256-44ED-A336-8BBA43373BE6}

• Key: Software\Classes\CLSID\{1D27320E-2DA2-41E2-A103-B5FD9D6A798B}

• Key: Software\Classes\CLSID\{B599C57E-113A-4488-A5E9-BC552C4F1152}

• Key: Software\Classes\CLSID\{C7EDAB2E-D7F9-11D8-BA48-C79B0C409D70}

• Key: Software\Classes\CLSID\{D56A1203-1452-EBA1-7294-EE3377770000}

• Key: Software\Classes\Interface\{C7EDAB2E-D7F9-11D8-BA48-C79B0C409D70}

• Key: Software\Classes\Typelib\{C7EDAB2E-D7F9-11D8-BA48-C79B0C409D70}

• Key: Software\Microsoft\Code Store Database\Distribution Units\{11120607-1001-1111-1000-110199901123}

• Key: Software\Microsoft\Internet Explorer\Extensions\{081669BA-EFC4-48C2-A8F4-874052D02553}

• Key: Software\Microsoft\Windows\Current Version\Uninstall\Internet Connection Update and HomeP KB234087

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objecta

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7caf96a2-c556-460a-988e-76fc7895d284}

• Key: Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{081669BA-EFC4-48C2-A8F4-874052D02553}

• Key: VMHomepage

• Key: VMHomepage.1

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{23FB5ADD-DA37-4a40-9FC0-B0E2384CDE92}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{724510c3-f3c8-4fb7-879a-d99f29008a2f}

• Key: CLSID\{00000000-C1EC-0345-6EC2-4D0300000000}

• Key: CLSID\{05a91164-3c96-47d6-aa74-2c855791b2d0}

• Key: CLSID\{0c7416f0-dd23-420f-97f5-aae352ea2bf1}

• Key: CLSID\{0F25878F-F8AE-5D5D-2BB7-31B5F803290D}

• Key: CLSID\{15DC7116-E58E-4395-A45A-A1C99B17C030}

• Key: CLSID\{17E02586-A91D-4A9D-A74E-187B05DFFE6F}

• Key: CLSID\{1BD98DFD-2DA9-4C54-85D7-BE03A0F9C487}

• Key: CLSID\{1C3B31AE-FD16-D2CE-43FF-DC4CD5C1BC5E}

• Key: CLSID\{1C94EA51-3800-4F08-B5DC-A5B67823FFEA}

• Key: CLSID\{1ca480cd-c0e5-4548-874e-b85b17905b3a}

• Key: CLSID\{20D1AF34-6E19-42D8-AF9F-BDFBE45C2454}

• Key: CLSID\{21E132C9-1F98-4151-BDAD-7D9B49C60A8E}

• Key: CLSID\{23CB9697-2835-45C5-8949-8A4E73AA70D4}

• Key: CLSID\{23F7AD29-F51A-4BA1-BE70-143B1CB25BD1}

• Key: CLSID\{24c60b9b-26b5-4201-9f7a-fb9219356ae9}

• Key: CLSID\{24E27EA9-FCF3-444F-BD80-20543BA5D946}

• Key: CLSID\{2513A321-CB50-4C5F-91C5-80342AFACFB1}

• Key: CLSID\{2520BA45-3D97-4864-82FF-F47F951727BA}

• Key: CLSID\{27150f81-0877-42e9-af13-55e5a3439a26}

• Key: CLSID\{2C59D5EC-6B91-4896-BD6F-5F121D87A7F8}

• Key: CLSID\{2F34E0E0-F0BB-477F-AFB8-509262FA0AD1}

• Key: CLSID\{315f73fc-a7b1-49e6-a3c4-cc00cf8a3fdb}

• Key: CLSID\{31F9B5A7-5B94-445D-922C-E97BF52F5FD7}

• Key: CLSID\{336ec37f-54bf-4f13-8237-03f64fa591e7}

• Key: CLSID\{35a88e51-b53d-43e9-b8a7-75d4c31b4676}

• Key: CLSID\{35ED274E-3F42-4A78-BBDC-3B7D73E85578}

• Key: CLSID\{3D74D140-F780-4AE3-8D6D-F8DC39107213}

• Key: CLSID\{3E01D51F-E9BD-4902-A0DE-2F4AA5A03092}

• Key: CLSID\{3e4155b8-5a4a-4e95-83b2-ab032da9acbc}

• Key: CLSID\{3e9b951e-6f72-431b-82cf-4a9fbf2f53bc}

• Key: CLSID\{4219EE52-DBFF-4620-B9E4-12BFC656D9E4}

• Key: CLSID\{49443D6E-CE4E-47A9-8DEB-F5774CE14984}

• Key: CLSID\{4da4616d-7e6e-4fd9-a2d5-b6c535733e22}

• Key: CLSID\{52034AD2-914C-4634-B375-9299631E5525}

• Key: CLSID\{55059d4f-a1ac-4837-ae07-4859101f598d}

• Key: CLSID\{5aaf6542-f4ba-4df4-873d-4902ecbe794c}

• Key: CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}

• Key: CLSID\{5bc82bdb-bc03-4671-9a78-3ef2b68449de}

• Key: CLSID\{5E8FA924-DEF0-4E71-8A82-A11CA0C1413B}

• Key: CLSID\{5FD68FB1-7D4C-4803-AB57-382E5CE342BC}

• Key: CLSID\{62E2E094-F989-48C6-B947-6E79DA2294F9}

• Key: CLSID\{62eb0924-19d2-4226-b4b9-8ad1f70904c1}

• Key: CLSID\{64ba30a2-811a-4597-b0af-d551128be340}

• Key: CLSID\{686a161d-5bd1-4999-8832-6393f41e564c}

• Key: CLSID\{6ab7158b-4bff-4160-ad7d-4d622df548cf}

• Key: CLSID\{6BBD6756-F9BA-4A7E-8C94-A801F740A608}

• Key: CLSID\{6c69e319-0d03-47da-997a-36586cbc53b3}

• Key: CLSID\{70fbd528-2d3c-4a00-9b8c-bbf441e534be}

• Key: CLSID\{724510c3-f3c8-4fb7-879a-d99f29008a2f}

• Key: CLSID\{736B5468-BDAD-41BE-92D0-22AE2DDF7BCB}

• Key: CLSID\{7702C521-76AE-42C0-A181-3B5A96C2EEF7}

• Key: CLSID\{77701e16-9bfe-4b63-a5b4-7bd156758a37}

• Key: CLSID\{77B2F8DE-CB3F-4B6B-839B-807DD1ADBA1C}

• Key: CLSID\{7a932ed2-1737-4ab8-b84d-c71779958551}

• Key: CLSID\{7ADDA344-1D36-4446-9F4B-B2351FB19EFD}

• Key: CLSID\{7D98221E-AF8F-4D29-8BB1-1DFABC288173}

• Key: CLSID\{84283b8a-9cbf-4fc0-9a72-d62913bbfd06}

• Key: CLSID\{89aef01d-d237-49c7-84dc-4e1904c1fd31}

• Key: CLSID\{8d83b16e-0de1-452b-ac52-96ec0b34aa4b}

• Key: CLSID\{8dc1f789-e073-4363-b40d-07376bc5ecc5}

• Key: CLSID\{8e99f990-b75a-4568-b3c8-24cbc8cbbfc1}

• Key: CLSID\{957BAB51-81FF-8195-F273-D7E286EA702F}

• Key: CLSID\{9746B450-6064-4EC8-9480-72A289AA2237}

• Key: CLSID\{9952355f-fefb-4764-bcd7-a993d03dd7e2}

• Key: CLSID\{9ae613a2-a13b-4379-8d0e-86a1a78476ec}

• Key: CLSID\{9B053E00-78D3-47AE-B763-60FF36FF2886}

• Key: CLSID\{a0aa3e4b-31cb-4ea2-9049-22b7f5b65edb}

• Key: CLSID\{a0c51615-738a-4542-801a-5af61614e182}

• Key: CLSID\{A1D9D3F0-8C2A-9A1D-A376-2CACFB10AB72}

• Key: CLSID\{A2C8F6B1-7C2A-3D1C-A3C6-A1FDA113B43F}

• Key: CLSID\{a566f298-05a6-4b3d-b672-da7c27316430}

• Key: CLSID\{AC1B4DA2-12FA-31F2-1A7D-CD2B14E6AD4E}

• Key: CLSID\{aea3d2df-2b2c-4d7b-81a0-d975c6dc088e}

• Key: CLSID\{aeabe83d-672b-4717-9154-45bd6283c610}

• Key: CLSID\{b0398eca-0bcd-4645-8261-5e9dc70248d0}

• Key: CLSID\{C13F6A43-3C5A-429A-87D5-3BBF60099CF0}

• Key: CLSID\{C1A2FDA2-1A5B-2A8F-F3A2-B22DA1A3C41D}

• Key: CLSID\{C1A2FDA2-2A5B-2C8A-F2A2-BA2DB3A2C31C}

• Key: CLSID\{c3786a8d-6426-4c29-a23f-f36e47b31e0c}

• Key: CLSID\{C5A40FCE-0A0F-40CA-985E-661C28B5B431}

• Key: CLSID\{C7F22879-7151-4C71-8C50-9557AFDA66C6}

• Key: CLSID\{C9FA1DC9-1FB3-C2A8-2F1A-DC1A33E7AF9D}

• Key: CLSID\{CA14EE13-ED15-C4A2-17FF-DA4D15C1BC5E}

• Key: CLSID\{CA5E7959-60B5-47B7-80AC-1606309733F3}

• Key: CLSID\{cbb430e6-5b1b-474a-9d7e-160d4fe74bea}

• Key: CLSID\{CD5E2AC9-25CE-A1C5-D1E2-DC6B28A6ED5A}

• Key: CLSID\{CEABF027-6CDC-4D47-ADF6-AC5D065826A6}

• Key: CLSID\{D1A2E7CD-F5C1-21A8-CA2C-13D0AC72D19D}

• Key: CLSID\{D81E2FC4-B0A2-11D3-21AC-07C04C21A18A}

• Key: CLSID\{e0103cd4-d1ce-411a-b75b-4fec072867f4}

• Key: CLSID\{e04408db-4812-4478-8d4d-e46edcffd3b6}

• Key: CLSID\{E0AA0493-C410-4CBD-B1DB-1723374FA8E0}

• Key: CLSID\{E2CA7CD1-1AD9-F1C4-3D2A-DC1A33E7AF9D}

• Key: CLSID\{e52dedbb-d168-4bdb-b229-c48160800e81}

• Key: CLSID\{e5b1e382-817e-4b74-8a96-ec78751e6acf}

• Key: CLSID\{E5D78BD8-3874-4AA0-9D45-CFB79382C484}

• Key: CLSID\{e9ccf15d-4c68-4b5a-9e9a-8e12e4bd39bd}

• Key: CLSID\{EA26CE12-DE64-A1C5-9A4F-FC1A64E6AC2E}

• Key: CLSID\{F365382D-CF21-45BA-80CF-B868C6ED9634}

• Key: CLSID\{f5947202-e9cb-4a72-88e7-22f2cbd2b124}

• Key: CLSID\{f79fd28e-36ee-4989-aa61-9dd8e30a82fa}

• Key: CLSID\{feac45db-84dc-4123-8b0d-4d9408fcf9ea}

• Key: Interface\{33F7B3AD-D729-460E-BC1B-12EE22A5BB63}

• Key: Interface\{5B12472E-E989-4A1C-8630-F30CBFD02065}

• Key: Interface\{636FF82A-830A-42EA-938B-6DC78B2AC30C}

• Key: Interface\{A55C3BA7-DB1E-4652-867E-055CEAFE8018}

• Key: NVideoCodek.Chl

• Key: ticont.KeysCollection

• Key: ticont.MyBHO

• Key: tisa.MyBHO

• Key: TrustIn.activator

• Key: TrustIn.activator.1

• Key: TrustIn.StockBar

• Key: TrustIn.StockBar.1

• Key: TypeLib\{0B553200-1AD6-4215-814C-644DC07D993A}

• Key: TypeLib\{42FC3840-020C-4E93-A34C-4DF1A6330FBB}

• Key: TypeLib\{6B5C7A80-8EA4-411C-A78D-35E7F08706A7}

• Key: Software\SNO2

• Key: Software\Classes\CLSID\{05a91164-3c96-47d6-aa74-2c855791b2d0}

• Key: Software\Classes\CLSID\{0c7416f0-dd23-420f-97f5-aae352ea2bf1}

• Key: Software\Classes\CLSID\{1C3B31AE-FD16-D2CE-43FF-DC4CD5C1BC5E}

• Key: Software\Classes\CLSID\{24c60b9b-26b5-4201-9f7a-fb9219356ae9}

• Key: Software\Classes\CLSID\{27150f81-0877-42e9-af13-55e5a3439a26}

• Key: Software\Classes\CLSID\{2C1CD3D7-86AC-4068-93BC-A02304BB8C34}

• Key: Software\Classes\CLSID\{315f73fc-a7b1-49e6-a3c4-cc00cf8a3fdb}

• Key: Software\Classes\CLSID\{336ec37f-54bf-4f13-8237-03f64fa591e7}

• Key: Software\Classes\CLSID\{35a88e51-b53d-43e9-b8a7-75d4c31b4676}

• Key: Software\Classes\CLSID\{3E01D51F-E9BD-4902-A0DE-2F4AA5A03092}

• Key: Software\Classes\CLSID\{3e4155b8-5a4a-4e95-83b2-ab032da9acbc}

• Key: Software\Classes\CLSID\{4da4616d-7e6e-4fd9-a2d5-b6c535733e22}

• Key: Software\Classes\CLSID\{55059d4f-a1ac-4837-ae07-4859101f598d}

• Key: Software\Classes\CLSID\{5aaf6542-f4ba-4df4-873d-4902ecbe794c}

• Key: Software\Classes\CLSID\{5bc82bdb-bc03-4671-9a78-3ef2b68449de}

• Key: Software\Classes\CLSID\{62eb0924-19d2-4226-b4b9-8ad1f70904c1}

• Key: Software\Classes\CLSID\{64ba30a2-811a-4597-b0af-d551128be340}

• Key: Software\Classes\CLSID\{686a161d-5bd1-4999-8832-6393f41e564c}

• Key: Software\Classes\CLSID\{6ab7158b-4bff-4160-ad7d-4d622df548cf}

• Key: Software\Classes\CLSID\{6c69e319-0d03-47da-997a-36586cbc53b3}

• Key: Software\Classes\CLSID\{70fbd528-2d3c-4a00-9b8c-bbf441e534be}

• Key: Software\Classes\CLSID\{736b5468-bdad-41be-92d0-22ae2ddf7bcb}

• Key: Software\Classes\CLSID\{84283b8a-9cbf-4fc0-9a72-d62913bbfd06}

• Key: Software\Classes\CLSID\{89aef01d-d237-49c7-84dc-4e1904c1fd31}

• Key: Software\Classes\CLSID\{8dc1f789-e073-4363-b40d-07376bc5ecc5}

• Key: Software\Classes\CLSID\{8e99f990-b75a-4568-b3c8-24cbc8cbbfc1}

• Key: Software\Classes\CLSID\{9952355f-fefb-4764-bcd7-a993d03dd7e2}

• Key: SOFTWARE\Classes\CLSID\{9ae613a2-a13b-4379-8d0e-86a1a78476ec}

• Key: Software\Classes\CLSID\{a0aa3e4b-31cb-4ea2-9049-22b7f5b65edb}

• Key: Software\Classes\CLSID\{a0c51615-738a-4542-801a-5af61614e182}

• Key: Software\Classes\CLSID\{A1D9D3F0-8C2A-9A1D-A376-2CACFB10AB72}

• Key: Software\Classes\CLSID\{A2C8F6B1-7C2A-3D1C-A3C6-A1FDA113B43F}

• Key: Software\Classes\CLSID\{a566f298-05a6-4b3d-b672-da7c27316430}

• Key: Software\Classes\CLSID\{AC1B4DA2-12FA-31F2-1A7D-CD2B14E6AD4E}

• Key: Software\Classes\CLSID\{aea3d2df-2b2c-4d7b-81a0-d975c6dc088e}

• Key: Software\Classes\CLSID\{aeabe83d-672b-4717-9154-45bd6283c610}

• Key: Software\Classes\CLSID\{b0398eca-0bcd-4645-8261-5e9dc70248d0}

• Key: Software\Classes\CLSID\{C1A2FDA2-1A5B-2A8F-F3A2-B22DA1A3C41D}

• Key: Software\Classes\CLSID\{C1A2FDA2-2A5B-2C8A-F2A2-BA2DB3A2C31C}

• Key: Software\Classes\CLSID\{c3786a8d-6426-4c29-a23f-f36e47b31e0c}

• Key: Software\Classes\CLSID\{C9FA1DC9-1FB3-C2A8-2F1A-DC1A33E7AF9D}

• Key: Software\Classes\CLSID\{CA14EE13-ED15-C4A2-17FF-DA4D15C1BC5E}

• Key: Software\Classes\CLSID\{cbb430e6-5b1b-474a-9d7e-160d4fe74bea}

• Key: Software\Classes\CLSID\{CD5E2AC9-25CE-A1C5-D1E2-DC6B28A6ED5A}

• Key: Software\Classes\CLSID\{D1A2E7CD-F5C1-21A8-CA2C-13D0AC72D19D}

• Key: Software\Classes\CLSID\{D81E2FC4-B0A2-11D3-21AC-07C04C21A18A}

• Key: Software\Classes\CLSID\{e0103cd4-d1ce-411a-b75b-4fec072867f4}

• Key: Software\Classes\CLSID\{e04408db-4812-4478-8d4d-e46edcffd3b6}

• Key: Software\Classes\CLSID\{E2CA7CD1-1AD9-F1C4-3D2A-DC1A33E7AF9D}

• Key: Software\Classes\CLSID\{e5b1e382 -817e-4b74-8a96-ec78751e6acf}

• Key: Software\Classes\CLSID\{EA26CE12-DE64-A1C5-9A4F-FC1A64E6AC2E}

• Key: SOFTWARE\Classes\CLSID\{feac45db-84dc-4123-8b0d-4d9408fcf9ea}

• Key: Software\Classes\CLSID\{f5947202-e9cb-4a72-88e7-22f2cbd2b124}

• Key: Software\Microsoft\Internet Explorer\Extensions\{E7C9AF76-A50A-423A-A5CA-88DB1A24CEAE}

• Key: Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{27150F81-0877-42E9-AF13-55E5A3439A26}

• Key: Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{686a161d-5bd1-4999-8832-6393f41e564c}

• Key: Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6BBD6756-F9BA-4A7E-8C94-A801F740A608}

• Key: Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{724510C3-F3C8-4FB7-879A-D99F29008A2F}

• Key: Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{736B5468-BDAD-41BE-92D0-22AE2DDF7BCB}

• Key: Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A19EF336-01D4-48E6-926A-FE7E1C747AED}

• Key: Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DA7FF3F8-08BE-4CAC-BC00-94D91C6AE7F4}

• Key: Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F365382D-CF21-45BA-80CF-B868C6ED9634}

• Key: Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFA}

• Key: Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF}

• Key: Software\AdwareDelete

• Key: Software\TrustIn Bar

• Key: Software\Classes\adobepnl.ADOBE_PANEL

• Key: Software\Classes\CLSID\{0F25878F-F8AE-5D5D-2BB7-31B5F803290D}

• Key: Software\Classes\CLSID\{1ca480cd-c0e5-4548-874e-b85b17905b3a}

• Key: Software\Classes\CLSID\{23CB9697-2835-45C5-8949-8A4E73AA70D4}

• Key: Software\Classes\CLSID\{2513A321-CB50-4C5F-91C5-80342AFACFB1}

• Key: Software\Classes\CLSID\{2520BA45-3D97-4864-82FF-F47F951727BA}

• Key: Software\Classes\CLSID\{2C1CD3D 7-86AC-4068-93BC-A02304BB8C34}

• Key: Software\Classes\CLSID\{31F9B5A7-5B94-445D-922C-E97BF52F5FD7}

• Key: Software\Classes\CLSID\{330A77C2-C15A-43B5-055C-B4E35EAED279}

• Key: Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}

• Key: Software\Classes\CLSID\{5E8FA924-DEF0-4E71-8A82-A11CA0C1413B}

• Key: Software\Classes\CLSID\{77701e16-9bfe-4b63-a5b4-7bd156758a37}

• Key: Software\Classes\CLSID\{957BAB51-81FF-8195-F273-D7E286EA702F}

• Key: Software\Classes\CLSID\{9B053E00-78D3-47AE-B763-60FF36FF2886}

• Key: Software\Classes\CLSID\{FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFA}

• Key: Software\Classes\CLSID\{FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF}

• Key: Software\Classes\HP

• Key: Software\Classes\HP.1

• Key: Software\Classes\Interface\{5FD68FB1-7D4C-4803-AB57-382E5CE342BC}

• Key: Software\Classes\Interface\{EF17C9F7-3ABD-48BA-BCD3-3ADD3C1B65E5}

• Key: Software\Classes\Serch_hook.transURL.1

• Key: Software\Classes\TypeLib\{159C2E41-9823-11D2-8DDC-D84A1B4ACD4D}

• Key: Software\Classes\TypeLib\{31F9B5A7-5B94-445D-922C-E97BF52F5FD7}

• Key: Software\Classes\TypeLib\{B8CE2641-0F08-43A1-8F28-3AE65B395CB3}

• Key: Software\Classes\TypeLib\{C13F6A43-3C5A-429A-87D5-3BBF60099CF0}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1ca480cd-c0e5-4548-874e-b85b17905b3a}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{23CB9697-2835-45C5-8949-8A4E73AA70D4}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2520BA45-3D97-4864-82FF-F47F951727BA}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27150f81-0877-42e9-af13-55e5a3439a26}
  Value: NoExplorer

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3bf1f86f-b1a8-489b-8d8b-43781d51411f}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3E01D51F-E9BD-4902-A0DE-2F4AA5A03092}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3e9b951e-6f72-431b-82cf-4a9fbf2f53bc}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4da4616d-7e6e-4fd9-a2d5-b6c535733e22}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5E8FA924-DEF0-4E71-8A82-A11CA0C1413B}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{686a161d-5bd1-4999-8832-6393f41e564c}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6BBD6756-F9BA-4A7E-8C94-A801F740A608}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7288c0bd-7f2f-4229-a0c4-3c90a6e2a881}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7a932ed2-1737-4ab8-b84d-c71779958551}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{893fad3a-931e-4e53-b515-b1426d63799b}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8d83b16e-0de1-452b-ac52-96ec0b34aa4b}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9B053E00-78D3-47AE-B763-60FF36FF2886}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b0398eca-0bcd-4645-8261-5e9dc70248d0}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e0103cd4-d1ce-411a-b75b-4fec072867f4}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e52dedbb-d168-4bdb-b229-c48160800e81}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e9ccf15d-4c68-4b5a-9e9a-8e12e4bd39bd}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F365382D-CF21-45BA-80CF-B868C6ED9634}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f79fd28e-36ee-4989-aa61-9dd8e30a82fa}

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Desktop Uninstall

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Internet Connection Update and HomeP KB234087

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\PSGUARD SPYWARE REMOVER

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\SpyTrooper

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\SpywareStrike

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\TICONT

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\TISA

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\WinHound spyware remover

• Key: Software\Microsoft\Windows\CurrentVersion\uuid

• Key: Software\Microsoft\Windows\Curre

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7fcf04b6-6354-47ef-b45e-a48268e92757}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{26C43C19-A1CE-456E-9CBF-77FFB9E92681}

• Key: Software\Microsoft\Windows\Current Version\Explorer\SharedTaskScheduler
  Value: {D56A1203-1452-EBA1-7294-EE3377770000}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
  Value: {8dc1f789-e073-4363-b40d-07376bc5ecc5}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
  Value: {0c7416f0-dd23-420f-97f5-aae352ea2bf1}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
  Value: {e5b1e382-817e-4b74-8a96-ec78751e6acf}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
  Value: {05a91164-3c96-47d6-aa74-2c855791b2d0}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
  Value: {6af69c4d-420a-4c95-b34f-e4635f84f53b}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
  Value: cholecyst

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
  Value: altmannsberger

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C06CDE53-5979-4242-BB88-E0834144B719}
  Value: altmannsberger

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
  Value: {24E27EA9-FCF3-444F-BD80-20543BA5D946}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
  Value: coursings

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
  Value: chrysenic

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
  Value: {89aef01d-d237-49c7-84dc-4e1904c1fd31}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
  Value: {e04408db-4812-4478-8d4d-e46edcffd3b6}

• Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winmmt32
  Value: DllName

• Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winmmt32
  Value: Impersonate

• Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winmmt32
  Value: Startup

• Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winmmt32
  Value: Shutdown

• Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winmmt32
  Value: Asynchronous

• Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winmmt32
  Value: DllName

• Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winmmt32
  Value: Impersonate

• Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winmmt32
  Value: Startup

• Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winmmt32
  Value: Shutdown

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{87185E78-A61B-4DB3-965A-3235BBD7A622}
  Value: Adware.Srv32

• Key: Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/Documents and Settings/User/Desktop/safe.tlb
  Value: {5526B4C6-63D6-41A1-9783-0FABF529859A}

• Key: Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/amm06.ocx
  Value: .Owner

• Key: Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/amm06.ocx
  Value: {5526B4C6-63D6-41A1-9783-0FABF529859A}

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\20x2p.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adulthell.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bin.wordsx.cc
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cc20foreva.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\crl.thawte.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\datingforlove.org
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dl.ad-ware.cc
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\e-finder.cc
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ewizard.cc
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\fast-look.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\free-spy-cam.net
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\fuck-fuck.org
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ga31.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\greg-tut.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\letgohome.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\love-catalog.net
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\makechoice.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\meetyourfriend.biz
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\msnprotection.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\new.8ad.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\s13.remove.cc
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\s2.kav.cc
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\t34rulit.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\terra.hcworld.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\toprefsys.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\tracking.allposters.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\u45.cx
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\u46.cx
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\u48.cc
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\v-224.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\veryeasysearch.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\visitfriend.net
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webpidor.biz
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\www.6o9.com
  Value: *

• Key: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\www.niger.ru
  Value: *

• Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon
  Value: Userinit

Warning: If value is listed for some registry entries, you should only clear these values and leave keys with such values untouched. We recommend you to use SmitFraud Removal Tool for safe problem solution.

Next threat: Agobot.mq »

Learn more about SmitFraud and amzyfwuw.exe »

« Back to catalog

Solution: 475