original symptons… a bing and flash in the system tray saying you are infected buy our product…
anyone had any problems with this, spybot search and destroy found it but cant remove, it shows me where the registry has been changed in 7 places, these look like independant threads in the registry so would it be safe to delete these
Smitfraud-C.: User settings (Registry change, nothing done)
HKEY_USERS\S-1-5-21-391817516-1801199130-2644095920-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\awmdabest.com*!=W=4
Smitfraud-C.: User settings (Registry change, nothing done)
HKEY_USERS\S-1-5-21-391817516-1801199130-2644095920-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\s13.tempx.cc*!=W=4
Smitfraud-C.: User settings (Registry change, nothing done)
HKEY_USERS\S-1-5-21-391817516-1801199130-2644095920-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains rackhits.cc*!=W=4
Smitfraud-C.: User settings (Registry change, nothing done)
HKEY_USERS\S-1-5-21-391817516-1801199130-2644095920-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains racktraff.cc*!=W=4
Smitfraud-C.: User settings (Registry change, nothing done)
HKEY_USERS\S-1-5-21-391817516-1801199130-2644095920-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\vparivalka.com*!=W=4
Smitfraud-C.: User settings (Registry change, nothing done)
HKEY_USERS\S-1-5-21-391817516-1801199130-2644095920-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\vv7.al.57e.net*!=W=4
Smitfraud-C.: User settings (Registry change, nothing done)
HKEY_USERS\S-1-5-21-391817516-1801199130-2644095920-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\win-eto.com*!=W=4
any help would be appreciated, how would i go about deleting getting rid of these as i have found they are trackers.
Bully