trojan-spy.html.smitfraud.c

Discussion in 'other security issues & news' started by nohsasesw, Jun 15, 2005.

Thread Status:
Not open for further replies.
  1. nohsasesw

    nohsasesw Registered Member

    Joined:
    Jun 15, 2005
    Posts:
    3
    whenever i turn my computer on, it says

    security warning
    a fatal error in ie has occured at 0028:c0011e36 in vxd vmm<01> +
    00010e36. error was caused by trojan-spy.html.smitfraud.c

    * system can not function in normal mode.
    please check you security settings.

    * scan your pc with any avaliable antivirus / spyware remover
    program to fix the problem.

    it says on the blue background.
    i cant click the start button and all dat thing on the bottom.
    also i cant use internet explore, ad-aware, aim, etc.
    i think its a sum sort of virus.
    how can i fix it? please help me! i no u guys r really good!

    *also i have hijackthis, killerbox(?), adaware downloaded.
    but i can't install hijackthis. the computer would not let me.
    it also says (if im trying to run killerbox)
    "window cannot find '(the address of the killerbox)'. make sure you typed the
    name correctly, and then try again. to search for a file, click the start button,
    and click search again."
    and plus, i cannot click the start button and all those things on the bottom!
    what can i do if i cant run anything? i cant even post a hijackthis log...
     
  2. snowbound

    snowbound Retired Moderator

    Joined:
    Feb 18, 2003
    Posts:
    8,723
    Location:
    The Big Smoke
  3. nohsasesw

    nohsasesw Registered Member

    Joined:
    Jun 15, 2005
    Posts:
    3
    well.. i want to try all that..
    but they tell me to run killerbox and other programs.
    and my computer would not let me.
    it would just say that it cannot find the program.
    that is the major problem i have.
    do you no anything about that?
    it seems like no other people have that kind of problem..
     
  4. snowbound

    snowbound Retired Moderator

    Joined:
    Feb 18, 2003
    Posts:
    8,723
    Location:
    The Big Smoke
    I have never had to use killbox so iam unfamiliar with it but just be patient as i'm sure someone will happen along with the info u need.


    snowbound
     
  5. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,330
    Location:
    Netherlands
    Hi nohsasesw,

    Can you check for the presence of these files?

    C:\wp.exe
    C:\bsw.exe
    C:\WINDOWS\popuper.exe
    C:\WINDOWS\System32\helper.exe
    C:\WINDOWS\System32\intmonp.exe
    C:\WINDOWS\System32\ole32vbs.exe
    C:\WINDOWS\system32\msole32.exe
    C:\WINDOWS\System32\shnlog.exe
    C:\WINDOWS\System32\intmon.exe
    C:\WINDOWS\System32\msmsgs.exe <= Be carefull, there is a legitimate file with that name in another location.

    If you see any of them running stop the process using Taskmanager.
    The paths are based on the most comonly used versions of Windows, but could be different on your system.

    Keep us posted.

    Regards,

    Pieter
     
  6. nohsasesw

    nohsasesw Registered Member

    Joined:
    Jun 15, 2005
    Posts:
    3
    i cant find any of the files up there.
    whats wrong with my computer? lol
     
  7. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,330
    Location:
    Netherlands
  8. I've never posted here before but I just wanted to thank you for these fixes for the smitfraud virus. I've been at it for several hours stretched over 4 or 5 days and it is SOOO GREAT to have that bugger gone and my desktop!!!!
     
  9. ahh80

    ahh80 Registered Member

    Joined:
    Jul 16, 2005
    Posts:
    1
    hi mate im new and well i cant dl anything or a would can u plz tell me how to fix this
     
  10. snapdragin

    snapdragin Administrator

    Joined:
    Feb 16, 2002
    Posts:
    8,415
    Location:
    Southern Ont., Canada
    Hi ahh80,

    You can find removal instructions for Trojan-Spy.HTML.Smitfraud.c and variants here: https://www.wilderssecurity.com/showthread.php?t=75890

    There are also similar removal instructions (below) at bleeping computers, and if you still need assistance, you can post a Hijackthis lot in their HijackThis Logs and Analysis forum:

    http://www.bleepingcomputer.com/for...itfraud_Quicknavigate_VirtualMaid-t17258.html

    You can try an on-line virus scan first (after reading through the above instructions at the two links) and see if you are able to download the required tools and fixes. If not, then you will have to use another computer and save the fixes to a floppy disk, then post your HijackThis log at either bleeping computers, or one of the other forums that do HijackThis analysis listed below:

    http://www.spywareinfoforum.com/
    http://castlecops.com/forums.html
    http://gladiator-antivirus.com/forum
    http://forums.net-integration.net/index.php
    http://www.geekstogo.com/forum/index.php
    http://forums.tomcoyote.org/

    Whichever one you choose to go to, please be sure to read and follow their posting policy and guidelines required for posting of HijackThis logs.

    Regards,

    snap
     
Loading...
Thread Status:
Not open for further replies.