Trojan-spy.html.smitfraud.c

Question

My home pc has been infected with Trojan-spy.html.smitfraud.c. When I run anti-spyware and anti-virus programs, the trojan is not detected, so it can't be removed. I cannot view webpages when I go online, so I don't know how to download anything to help me fix this problem. Please, pretty please, help me!!!   :womansad:   Tracy

ky331 · Answer

go to another machine (friend's, work, etc.)   Download the latest version of HJT(hijackthis) (version 1.99.1) from http://majorgeeks.com/download3155.html it's a small file, and will fit on a floppy.   bring the floppy back to your infected machine.   you must create a separate folder and place it there.... people commonly use C:\HJT.   Note:  do *NOT* use a TEMP folder, nor a DESKTOP folder, as HJT will be generating log files and backup files in the folder from which it is run... you risk accidentally losing these if you use a TEMP folder, and you will generate extreme clutter if you use a DESKTOP folder. The file above comes as a compressed .ZIP file... you have to UNzip it (hopefully, you have an UNzip utility built into your Windows Explorer). After Unzipping, double click on HiJackThis.EXE Click on  Do a System Scan and Save a LogFile This will automatically open NotePad copy this file to a floppy, and transfer it over to the GOOD machine. Copy the entire file from NotePad:  EDIT/SelectAll, EDIT/Copy Then go to the new forum dedicated for HiJack This logs (**NOT** back here), and  PASTE the results there: http://forums.us.dell.com/supportforums/board?board.id=si_hijack Be sure to include a detailed description of any problems/errors/warnings you are encountering. Hopefully, one of the HJT experts will get to it as quickly as possible.   WARNING:  HiJack This is a VERY POWERFUL tool.  Do *NOT* do anything else (in particular, do NOT use it to delete any entries) until you are advised to do so!!   Improper use of this tool can severely damage your system.   Message Edited by ky331 on 05-17-2005 03:02 PM

sheeta728 · Answer

hi there..

i have the same problem as you

but it's funny...i am not able to run Start or anything on the desktop at all.

People have been telling me i have to install this and that, but the problem it...

since I am not able to access to anything at all..how can i run the relevant application

or software?I tried to run safe mode..but same problem...

I found an article..suggesting me to go to Task Manager -> Process and delete

a file called WP.exe...........and..............I CAN'T FIND THIS FILE..

i wonder why..

my problem is same as other..i get the same msg..blue screen msg..so on..

but ppl can click stuff on their desktop and i can't

then..i can't find the file called WP.exe too..

anyone can help me with this problemm

million thx!!

jeffreysyn · Answer

I am having the same problem.

However, I got my explorer.exe and iexplore.exe back by doing the following:

delete these from your registry (AS ALWAYS, MAKE A BACKUP FIRST IF YOU ARE NOT SURE WHAT YOU ARE DOING)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsft\Windows NT\CurrentVersion\Image File Execution Options\iexplorer.exe

Now, I at least I can work to remove Trojan-spy.html.smitfraud.c.

Good luck

Jeff

Virus & Spyware

Trojan-spy.html.smitfraud.c

Was this post helpful?