"Gaz" <gazter@msn.com> wrote in message
news:5f1oq6F39nhpuU1@mid.individual.net...
> Probably not entirely unexpected, but witnessed a PC today, with vista
> premium, that was infected with a smitfraud variant.....
>
> Smitfraudfix, my favourite quickfix for such variants wouldnt work on
> vista... Whatever the variant was, it completely locked up explorer
> resulting in a looping crash of explorer windows, in both safe mode and
> normal. Only way around was to launch system restore and take it back,
> thankfully that worked...
>
> Gaz
>

First time you've seen that ?

Vista RC1 (beta) I infected it on purpose on my test machine, which I use
only for infection and removal (to stay in practice).

I infected it with smithfraud three months ago, first off with all the
warnings from Google and vista, you gotta be pretty dense to get it infected
but I digress.

When I infected Vista with SF the system would not even boot into safe mode
(like the one you were working on), the only thing I could do to get it
working again was to pull the drive and scan it with XP with the tools
loaded up.

no restore tried,
Note: my sound card drivers did the same thing, (boot loop) they have since
released an update that allowed my sound card to work.

Clark