help with trojan-spy.HTML.smitfraud.c!!!!

Question

the background of my computer is a blue screen with the trojan warning. can someone please help me get rid of it? i am running XP and have tried using ad-aware, hijackthis, spyware doctor and spybot but none of them seem to work. thanks in advance for any help...

ky331 · Answer

Download the following reg file by clicking on the link and choosing Save. Save this file to your Desktop.

Smitfraud Fix Reg File
When it is finished downloading, double-click on the smitfraud.reg file on your Desktop. When it asks if you want to merge the information, allow it to do so.
Reboot and you can now change your desktop properties back to the way you want to. If you have trouble with some settings, click on the Themes tab in the display settings and change the theme to Windows XP to use the default settings.

this is only a first step.... see if it helps any ... and then we can proceed further.

Message Edited by ky331 on 05-11-2005 12:28 PM

ky331 · Answer

i see you've already posted a log in the HJT forum... that being the case, it would be wise for you to wait for someone from there to reply with a more-specific fix.   it's entirely possible they will advise you to do what i've just suggested... but they may take a different approach, and i don't want to interfere with anyone there.

kev12 · Answer

I was following your fix for the blue screen of death(trojan-spy.html.smitfraud.c). Per your advice, I got rid of the blue screen. You mentioned this was only the first step....Can you continue with the solution to get rid of the trojan-spy.html.smitfraud.c virus?(my symptoms are that my email is trying to send many messages; my anti-viris is creating 'cannot send' message windows'

ky331 · Answer

kev12,

(first, let me point out that it's generally preferable to start a new thread for your question.... it happened that I was still "subscribed" to follow this 2-month-old message.... but periodically, I remove notifications on older messages, so it could have been that I would never has seen your posting....)

since malware (including viruses/trojans &etc) are continually changing, the best thing for you to do is generate and post a HiJackThis (HJT) log, and get individualized help based on the results:

Download the latest version of HJT(hijackthis) (version 1.99.1) from

http://majorgeeks.com/download3155.html

you must create a separate folder and place it there.... people commonly use C:\HJT. Note: Please do *NOT* use a TEMP (temporary) folder, *NOR* your DESKTOP, as HJT will be generating log files and backup files in the folder from which it is run... you risk accidentally losing these if you use a TEMP folder, and you will generate extreme clutter if you use your DESKTOP.

The file above comes as a compressed .ZIP file... you have to UNzip it (hopefully, you have an UNzip utility built into your Windows Explorer. If for any reason, you're unable to UNzip it, you can download the already-unzipped .EXE file from http://downloads.malwareremoval.com/HijackThis.exe )

After Unzipping, double click on HiJackThis.EXE

Click on Do a System Scan and Save a LogFile

This will automatically open NotePad

Copy the entire file from NotePad: EDIT/SelectAll, EDIT/Copy

Then go to the new forum dedicated for HiJack This logs (**NOT** back here), and PASTE the results there:

http://forums.us.dell.com/supportforums/board?board.id=si_hijack

Be sure to include a detailed description of any problems/errors/warnings you are encountering.

Hopefully, one of the HJT experts will get to it as quickly as possible.

WARNING: HiJack This is a VERY POWERFUL tool. Do *NOT* do anything else (in particular, do NOT use it to delete any entries) until you are advised to do so!! Improper use of this tool can severely damage your system.

Please note: The procedure as worded above has been carefully edited over time, so as to expedite the process of helping people. Nevertheless, it seems that many individuals try to be "creative", and make some variations. It really would be to your benefit if you follow these directions EXACTLY as stated... because certain changes on your part can result in slowing-down the help process.

Specifically, the following are 3 very common BAD deviations which will cause delays:

a) BAD: using an older/outdated version of HiJackThis...

The experts only work with the current version. So if you make a post with an older version, you'll simply be advised to get the latest version, re-run it, and re-post your log.

b) BAD: using a TEMP directory or your DESKTOP for HJT....

Some experts may insist you move HJT before they'll begin working with you. Others will start the repair process, advising you to move HJT as one of the very first steps. Failure to do so can result in losing potentially critical information. So please, just use the suggested C:\HJT directory, rather than try to be creative.

c) BAD: posting your log in the wrong forum...

if you post your log back here, in the Virus/SpyWare forum, it will "sit idly", either until the forum moderator gets around to move it for you... or until you decide to repost your log... in the HiJackThis forum.

abefromfl · Answer

I HAD THIS SMITWARE PROBLEM.Smitware with a Black screen. Tried many things from different websites.THE SOLUTION is spend the $40. and BUYXSOFTSPY from Paretologic, rated 9.8 out of 10 by CNET and many other reviews.IT IDENTIFIED 8 problems other programs could not find or repair AND FIXED EVERYTHING IN FIVE MINUTES.

ky331 · Answer

abe,   i cannot speak with any authority about xsoftspy... it may indeed work great.... but that's NOT the point here.   smitfruad (and literally TONS of other malware programs) are running rampant on the internet... and most of these can be fixed, for FREE, with a bit of patience (well, sometimes a great deal of patience) and free help from the experts here in the DELL HiJackThis forum.  No one is gonna force anyone to go there for help.   And I've seen many people who were skeptical about whether there machine would ever get fixed.   But the success rate, for those who choose to follow up, has been impressive.   If you'd rather pay for malware programs (some of which are so 'sleezy' that they install themselves only in order to be able to demand a 'ransom' from you ---- and i'm NOT making this accusation against xsoftspy, but against 'scumware' in general), feel free to spend your money as you see fit.

Alx2480 · Answer

OK I agree with both but ABE I give it up to you man u saved my office laptop, thanx for your words of wisdom... Tried alot of different spyware programs and XsoftSpy really has the fix for this particular prob... I did the scan and the first thing that was detected was that file you dont know how happy that made me :D thanx again:smileyvery-happy:

orngtiktak · Answer

what should we do if we cannot get past the blue screen of death? the computer begins to start, it gets to the welcome screen, we are running xp home,  and then the death screen comes and we cannot do anything except shut the computer off by holding the power button.  we tried starting the computer in safe mode but it does the same thing. please help.

orngtiktak · Answer

somehow we got it to the welcome screen where the choices were administrator and the name we created, we picked the one we created and it brought up a box 'cmd.exe' and now we dont know where to go from here, every suggestion assumes we can get onto the internet and to the desktop.  if i were to download the files on a different computer and burn them onto a cd, would i be able to intstall them that way?  i just dont know exactly what commands i would need, it has been many years since i have used dos commands.

Alx2480 · Answer

OK yea get the XSoftSpy program on CD (make sure you buy a copy because the trial version will do a scan but no delete option).   Once you start up your computer and possibly receive a windows error message ignore it and hold Alt+Ctrl and Delete and the Task Manager will pop up... first go to process tab and close iexplorer.exe. then on the Task Manager click on file and go to New Task (RUN) and from there browse for your CDROM drive and choose to install....  Everything from then on should run smoothly.   Goodluck!:smileyhappy:

abefromfl · Answer

AL280x Your welcome.

I agree with what the forum man said. They can hold you hostage. Mcaffee did that with me for a while before this happened. I spent a whole day with the free programs and got no where. The way I looked it I didnt want to spend another day on it when 40 bucks did the trick in five minutes. Anyway, my desktop is running much better. Take care. Abe

Virus & Spyware

help with trojan-spy.HTML.smitfraud.c!!!!

Was this post helpful?