My desktop has a message that I have spyware and names Trojan Spy.html.smitfraud.c
I cannot get rid of this message and when I try to go to properties to change my background, the options are not there.
Someone suggested reinstalling XP, but I am not sure that will clear everything up.
Here is my Hijack This log:
Logfile of HijackThis v1.99.1
Scan saved at 9:18:03 AM, on 04/26/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Starbldr\Sbmenu.exe
C:\Documents and Settings\Nicole\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://letgohome.com/sp.htm?id=9
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://letgohome.com/sp.htm?id=9
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://letgohome.com/hp.htm?id=9
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://letgohome.com/hp.htm?id=9
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://letgohome.com/hp.htm?id=9
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://letgohome.com...=31130123321003
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://letgohome.com/sp.htm?id=9
O2 - BHO: (no name) - {467FAEB2-5F5B-4c81-BAE0-2A4752CA7F4E} - C:\WINDOWS\System32\75626K~1.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM\AIM.EXE (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Microsoft AntiSpyware helper - {CCE261FC-FC20-4A77-B1BE-6225A1578E57} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {CCE261FC-FC20-4A77-B1BE-6225A1578E57} - (no file) (HKCU)
O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = SmithGC.local
O17 - HKLM\Software\..\Telephony: DomainName = SmithGC.local
O17 - HKLM\System\CCS\Services\Tcpip\..\{062A613F-7B99-4B56-AA46-4FD437D1AF9C}: NameServer = 68.62.160.5,68.62.160.6
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = SmithGC.local
O17 - HKLM\System\CS1\Services\Tcpip\..\{062A613F-7B99-4B56-AA46-4FD437D1AF9C}: NameServer = 68.62.160.5,68.62.160.6
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = SmithGC.local
O17 - HKLM\System\CS2\Services\Tcpip\..\{062A613F-7B99-4B56-AA46-4FD437D1AF9C}: NameServer = 68.62.160.5,68.62.160.6
O20 - AppInit_DLLs: vvpo92lfp7jh.dll
Edited by canole21, 26 April 2005 - 08:16 AM.