Malware Infected Windows PCs

Lately, there has been a rash of PC infestations.  In the past week, I have personally worked on 4 Intel based PCs that had slowed down to a crawl or did not allow the user to be productive.

In reviewing their PCs, I noticed the “Trojan.Smitfraud” to be of abundant on these systems amongst other malicious software.

I personally feel these compromised systems are lethal weapons that can allow hackers to attack our infrastructure, other businesses or committee crimes.  Better software and usability measures need to be a priority.

I use Ultimate Boot CD for Windows to examine and repair these systems.  I find that it work well and does not use the Windows based OS to do its analysis.

Information on Trojan.Smitfraud can be found below:

Trojan.Smitfraud

Type	Malware
Type Description	Malware ("malicious software") consists of software with clearly malicious, hostile, or harmful functionality or behavior and that is used to compromise and endanger individual PCs as well as entire networks.
Category	Trojan
Category Description	Trojan is a general term for malicious software that is installed under false or deceptive pretenses or is installed without the user's full knowledge and consent. Most Trojans exhibit some form of malicious, hostile, or harmful functionality or behavior.
Level	High
Level Description	High risks are typically installed without user interaction through security exploits, and can severely compromise system security. Such risks may open illicit network connections, use polymorphic tactics to self-mutate, disable security software, modify system files, and install additional malware. These risks may also collect and transmit personally identifiable information (PII) without your consent and severely degrade the performance and stability of your computer.
Advice Type	Remove
Description	Trojan.Smitfraud is a group of programs that are used to download rogue security products and change the user's desktop to display false warnings that the computer is infected with spyware.
Add. Description	Trojan.Smitfraud downloads and installs programs that purport to scan for adware and spyware and typically display false reports of spyware in order to frighten the user into paying for the program.
Release Date
Last updated on	May 9 2008
File Traces
	%SYSTEM%\ adobepnl.dll
	%SYSTEM%\ ccc3.dll
	%system%\ cdromdrv32.dll
	%SYSTEM%\ dcvwaah.dll
	%SYSTEM%\ dpfwu.dll
	%SYSTEM%\ ekvrlfzz.exe
	%SYSTEM%\ fyhhxw.dll
	%SYSTEM%\ gqagksr.dll
	%SYSTEM%\ gtpbx.dll
	%system%\ hjfjhigjxe.dll
	%SYSTEM%\ ishost.exe
	%SYSTEM%\ ismini.exe
	%SYSTEM%\ ismon.exe
	%SYSTEM%\ isnotify.exe
	%SYSTEM%\ issearch.exe
	%SYSTEM%\ ixt0.dll
	%SYSTEM%\ okkmtv.dll
	%system%\ olechs32.dll
	%SYSTEM%\ oqabf.dll
	%SYSTEM%\ sbnudh.dll
	%SYSTEM%\ syycum.dll
	%SYSTEM%\ titiau.dll
	%SYSTEM%\ urroxtl.dll
	%SYSTEM%\ users32.exe
	%SYSTEM%\ veklo.dll
	%SYSTEM%\ vwlummc.dll
	%SYSTEM%\ wuwbxp.dll
	%SYSTEM%\ xxfgmy.dll
	%SYSTEM%\ zphnok.dll
	%windows%\ dpvtporsdq.dll
	asgp32.dll
	flashwindow.exe
	loader.exe
	main.exe
	reger.exe
	wow.dll
	zloader3.exe