Repair Tool of the Week: SmitFraudFix

SmitFraudFix is a free, stand alone utility designed to remove resilient hijack malware. There are many types of malware out there that your standard antivirus and antispyware products cannot remove because its files are in use or as soon as one of the malware files is deleted, another part recreates it.

I personally use this tool a lot when clients computers are infected with those fake antiviruses which are hard to remove (eg. VirusBlast, AntiSpyCheck, TitanShield Antispyware, WinAntiSpyPro etc). This tool is essential for any technician doing virus removal work. For a list of what it removes, read on.

This tool removes Desktop Hijack malware:

AdwarePunisher, AdwareSheriff, AlphaCleaner, AntiSpyCheck, Antispyware Soldier, AntiVermeans, AntiVermins, AntiVerminser, AntiVirGear, AntivirusGolden, AVGold, Awola, BraveSentry, IE Defender, MalwareCrush, MalwareWipe, MalwareWiped, MalwaresWipeds, MalwareWipePro, MalwareWiper, PestCapture, PestTrap, PSGuard,, Registry Cleaner, Security iGuard, Smitfraud, SpyAxe, SpyCrush, SpyDown, SpyFalcon, SpyGuard, SpyHeal, SpyHeals, SpyLocked, SpyMarshal, SpySheriff, SpySoldier, Spyware Vanisher, Spyware Soft Stop, SpywareLocked, SpywareQuake, SpywareKnight, SpywareRemover, SpywareSheriff, SpywareStrike,, TitanShield Antispyware, Trust Cleaner,, Virtual Maid, Virus Heat, Virus Protect, Virus Protect Pro, VirusBlast, VirusBurst, VirusRay, Win32.puper, WinHound, Brain Codec, ChristmasPorn, DirectAccess, DirectVideo, EliteCodec, eMedia Codec, EZVideo, FreeVideo, Gold Codec, HQ Codec, iCodecPack, IECodec, iMediaCodec, Image ActiveX Object, Image Add-on, IntCodec, iVideoCodec, JPEG Encoder, Key Generator, LookForPorn, Media-Codec, MediaCodec, MMediaCodec, MovieCommander, MPCODEC, My Pass Generator, NetProject, Online Image Add-on, Online Video Add-on, PCODEC, Perfect Codec, PowerCodec, PornPass Manager, PornMag Pass, PrivateVideo, QualityCodec, Silver Codec, SearchPorn, SiteEntry, SiteTicket, SoftCodec, strCodec, Super Codec, TrueCodec, VideoAccess, VideoBox, VidCodecs, Video Access ActiveX Object, Video ActiveX Object, Video Add-on, VideoCompressionCodec, VideoKeyCodec, VideosCodec, WinAntiSpyPro, WinMediaCodec, X Password Generator, X Password Manager, ZipCodec..

… and many others since new malware is often one of these with a new name like “WinAntivirus 2008″.

It is pretty straightforward to use, but if you need usage instructions you can read them here.




Download from Official Site

Bryce Whitty

About the Author

Bryce Whitty
More articles by me...
Bryce is an Australian computer technician and the founder of Technibble. He started his computer repair business when he was 17 years old and is still running it 9 years later. He is an avid traveller and spends at least a month of the year in another country.

Comments (9)

  • Aaron says:

    AVG detects this as dodgy, im guessing its because of the nature of what it does.

  • Avira finds it as dodgy too but it works well. I’d really like to know why they detect it.

    I always use SmitFraudFix in conjunction with ComboFix. Those 2 are a pretty strong combination. Aren’t they made by the same guy?

  • gunslinger says:

    Seems that many antivirus softwares flag this one, but they also flag hijack reader and some other useful tools.

  • Ron says:

    Its a great tool, been using it for over a year.

    Disable an antivirus on a clients machine when trying to disinfect them, and run from a CD so that your tools don’t get deleted before you disable the anti virus.

  • compudoc says:

    All av apps will find this as bad, but that is due to all it can do for you. I remove 2-3 smitfraud and vundo viruses a day using this and combo fix. combo fix actually works a little better with the newer varients going around lately. Just run these in safe mode back to back after a restart of course, then restart, remove combo fix and smitfraud, then run your antivirus apps and spyware programs. Ive done this technique for years and have removed 100% of the viruses ive faced without having to reinstall windows! by the way…tip: if combo fix or smitfraud wont run, rename it something else, then try again, works most every time. another tip, these programs will set your clock to 24 hr time and reset your desktop, thats normal.

  • I agree with “Computer Networking” and would add 2 more utilities that I have found to be a valuable asset in recovering from a Vundo variant…

    1. Smitfraudfix (essential)
    2. Combofix (essential)
    3. Superantispyware (essential) in safe mode to recover the task bar, win com, and file checking services (also good to just verify by running a quick scan to make sure everything has been cleaned by SFF and CF).
    4. Acronis Tru Image Home (on my personal laptop) has become a time saver in that I many times do not have the ‘time’ to do battle with Vundo personally so a quick RAPID Recover to the last image, has me back up and running in 4 minutes, while the rest of the image propagates… just my 2 cents…

  • Go to safe, DOWNLOAD AND RUN A MALWAREBYTES “FAST” SCANN TO REALLY stop the worst stuff. Download the cleaners of your choice…. REMOVE NORTON AND MCAFEE!!!!! They stink. REBOOT TO NORMAL

    Superantispyware free scann
    AVG 7.5 for XP < SP2
    AVG 8.0 FREE for SP2 or better….


  • NYJimbo says:

    Man do I love it when we get these new fix/repair/restore utils. Makes our lives so much easier.

    Just used smitfraudfix on a pc and it cleaned everything up.

  • Internet Age says:

    Wow, I’ll definitley try this one out. Thank you.