VirusHeat is the fake anti-spyware, or rogue antispyware program. This program uses deceptive means for installation and purpose, may display fake scan results. This program usually installed itself onto your PC without your permission, through Zlob Trojan, Virus, fake audio/video codecs.
Symptoms:
Add/Remove Programs control panel entry: VirusHeat 3.9, VirusHeat 4.3
The hijackthis shows:
O4 – HKLM\..\Run: [VirusHeat 3.9] “C:\Program Files\VirusHeat 3.9\VirusHeat 3.9.exe” /h
O4 – HKLM\..\Run: [VirusHeat 4.3] “C:\Program Files\VirusHeat 4.3\VirusHeat 4.3.exe” /h
For fix your problems, make follow steps:
Download CCleaner. Double click on the file for install.
Download SmitfraudFix (by S!Ri) Extract the content (a folder named SmitfraudFix) to your Desktop.
Go to Start > Control Panel > Add or Remove Programs and remove the following programs, if found: VirusHeat 3.9, VirusHeat 4.3
Download virusheat_fix.reg and save file to your Desktop.
Right clicking on the link and selecting Save Link As or Save File as, depending on your browser.
Double-click on the virusheat_fix.reg. When it asks if you would like to merge the information, press the Yes button and then the OK button when it is done.
Open the SmitfraudFix folder and double-click smitfraudfix.cmd.
Press the number 2 on your keyboard and the press the enter key to choose the option Clean (safe mode recommended).
You will be prompted : “Registry cleaning – Do you want to clean the registry ?“; answer “Yes” by typing Y and press “Enter” in order to remove the Desktop background and clean registry keys associated with the infection.
The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer “Yes” by typing Y and press “Enter”.
The tool may need to restart your computer to finish the cleaning process; if it doesn’t, please restart it into Normal Windows.
Run CCleaner.
Click Analyze button. After scan your system, click Run Cleaner.
Reboot your PC.
If you are still having problems with spyware after completing these instructions, it`s possible, then please follow the steps: How to use Spyware Removal Forum – MUST READ
Smitfraud is definelty bad stuff. The first time I came across this I had a ton of problems removing it. Now whenever I run into this I do a system restore first then run the free smitfraudfix tool and then run a full scan with Spyware Doctor. If you have Smitfraud I can gurantee you are infected with other threats as well and that is way you need to use other software besides just the smitfraud fix tool.