trojan-spy.html.smitfraud.c

whenever i turn my computer on, it says

security warning
a fatal error in ie has occured at 0028:c0011e36 in vxd vmm<01> +
00010e36. error was caused by trojan-spy.html.smitfraud.c

* system can not function in normal mode.
please check you security settings.

* scan your pc with any avaliable antivirus / spyware remover
program to fix the problem.

it says on the blue background.
i cant click the start button and all dat thing on the bottom.
also i cant use internet explore, ad-aware, aim, etc.
i think its a sum sort of virus.
how can i fix it? please help me! i no u guys r really good!

*also i have hijackthis, killerbox(?), adaware downloaded.
but i can't install hijackthis. the computer would not let me.
it also says (if im trying to run killerbox)
"window cannot find '(the address of the killerbox)'. make sure you typed the
name correctly, and then try again. to search for a file, click the start button,
and click search again."
and plus, i cannot click the start button and all those things on the bottom!
what can i do if i cant run anything? i cant even post a hijackthis log...

 

Hello nohsasesw.

Welcome to Wilders.

Have u read through this whole thread?

https://www.wilderssecurity.com/showthread.php?t=75245

Also here,

https://www.wilderssecurity.com/showthread.php?p=482983#post482983



snowbound

 

well.. i want to try all that..
but they tell me to run killerbox and other programs.
and my computer would not let me.
it would just say that it cannot find the program.
that is the major problem i have.
do you no anything about that?
it seems like no other people have that kind of problem..

 

I have never had to use killbox so iam unfamiliar with it but just be patient as i'm sure someone will happen along with the info u need.


snowbound

 

Hi nohsasesw,

Can you check for the presence of these files?

C:\wp.exe
C:\bsw.exe
C:\WINDOWS\popuper.exe
C:\WINDOWS\System32\helper.exe
C:\WINDOWS\System32\intmonp.exe
C:\WINDOWS\System32\ole32vbs.exe
C:\WINDOWS\system32\msole32.exe
C:\WINDOWS\System32\shnlog.exe
C:\WINDOWS\System32\intmon.exe
C:\WINDOWS\System32\msmsgs.exe <= Be carefull, there is a legitimate file with that name in another location.

If you see any of them running stop the process using Taskmanager.
The paths are based on the most comonly used versions of Windows, but could be different on your system.

Keep us posted.

Regards,

Pieter

 

i cant find any of the files up there.
whats wrong with my computer? lol

 

Can you download and rightclick http://metallica.geekstogo.com/smitfraud.reg
Confirm you want to merge it with the registry.

Do the same for http://www.kellys-korner-xp.com/regs_edits/exefix.reg

Reboot and let me know if it was any help.

Regards,

Pieter

 

I've never posted here before but I just wanted to thank you for these fixes for the smitfraud virus. I've been at it for several hours stretched over 4 or 5 days and it is SOOO GREAT to have that bugger gone and my desktop!!!!

 

hi mate im new and well i cant dl anything or a would can u plz tell me how to fix this

 

Hi ahh80,

You can find removal instructions for Trojan-Spy.HTML.Smitfraud.c and variants here: https://www.wilderssecurity.com/showthread.php?t=75890

There are also similar removal instructions (below) at bleeping computers, and if you still need assistance, you can post a Hijackthis lot in their HijackThis Logs and Analysis forum:

http://www.bleepingcomputer.com/for...itfraud_Quicknavigate_VirtualMaid-t17258.html

You can try an on-line virus scan first (after reading through the above instructions at the two links) and see if you are able to download the required tools and fixes. If not, then you will have to use another computer and save the fixes to a floppy disk, then post your HijackThis log at either bleeping computers, or one of the other forums that do HijackThis analysis listed below:

http://www.spywareinfoforum.com/
http://castlecops.com/forums.html
http://gladiator-antivirus.com/forum
http://forums.net-integration.net/index.php
http://www.geekstogo.com/forum/index.php
http://forums.tomcoyote.org/

Whichever one you choose to go to, please be sure to read and follow their posting policy and guidelines required for posting of HijackThis logs.

Regards,

snap