Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Trojan-spy.HTML.smitfraud.c


  • This topic is locked This topic is locked

#1
riflespinner88

riflespinner88

    New Member

  • Member
  • Pip
  • 8 posts
I have become infected with trojan-spy.HTML.smitfraud.c with the blue screen with the fatal error message. I can't download HJT because I can't access AOL (or anything else for that matter) x_x I get to the sign on screen and I will get a bunch of boxes that say "Ipconfig" and that it has performed an illegal action and will need to close. I close them but they keep coming up until it freezes and I am forced to CTRL+ALT+DEL AOL[which shows up as unresponsive]. This is really grrrrr, it wont even let me run AdAware. >.< Can anyone help me with this?
  • 0

Advertisements


#2
g2i2r4

g2i2r4

    retired HiJack Helper

  • Retired Staff
  • 5,080 posts
Welcome riflespinner88 to Geeks to Go!

I take it you are using another computer to post here then?

Can you download it there and transport it to the infected computer?
  • 0

#3
riflespinner88

riflespinner88

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
Yes but the problem is I can't run any program, I go to open it and it will say "___ has performed an illegal operation"

___ = program I'm trying to use
  • 0

#4
g2i2r4

g2i2r4

    retired HiJack Helper

  • Retired Staff
  • 5,080 posts
Can you use taskmanager (ctrl+alt+del). Go to > applications > new task > browse.
  • 0

#5
riflespinner88

riflespinner88

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
On my task manager it lists the running processes then it has end task, shutdown and cancel. Nothing else. Thanks for your cooperation so far, btw :tazz:
  • 0

#6
g2i2r4

g2i2r4

    retired HiJack Helper

  • Retired Staff
  • 5,080 posts
Can you use start - run to go to let's say c:\windows\system32?
  • 0

#7
riflespinner88

riflespinner88

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
Yes I can
  • 0

#8
g2i2r4

g2i2r4

    retired HiJack Helper

  • Retired Staff
  • 5,080 posts
Copy everything in the code box below and paste it into notepad. Go up to "File > Save As..." and click the drop-down box to change the "Save As Type" to "All Files". Save it as wininet.bat on your desktop.

dir %Systemdrive%\wininet.dll /a h /s > files.txt
start notepad files.txt


Copy the file to a transport disk.

Go to the infected computer.
insert the disk.
go to start - run
fill in:
a: (if that's were the disk is)

A:\wininet.bat
press enter.

Notepad will open. Save that file to your transport disk

Post the content of that file here in your reply.

I'll check back tomorrow (sorry).
  • 0

#9
riflespinner88

riflespinner88

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
it says "cannot find the files.txt file. Do you want to create a new file?" and no matter what I say (yes/no) it just opens notepad and it's blank
  • 0

#10
g2i2r4

g2i2r4

    retired HiJack Helper

  • Retired Staff
  • 5,080 posts
If it opens Notepad, can you go look for the files.txt?

Also try this on the infected computer:
Click Start, and then click Run.
In the Open box, type sfc /scannow, and then click OK.
  • 0

Advertisements


#11
riflespinner88

riflespinner88

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
Nope, it's nowhere to be found and when I type that it tells me the command line is bad
  • 0

#12
g2i2r4

g2i2r4

    retired HiJack Helper

  • Retired Staff
  • 5,080 posts
I'll sleep on it, get back to you tomorrow (sorry).
  • 0

#13
riflespinner88

riflespinner88

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
NP Thanks for everything so far
  • 0

#14
g2i2r4

g2i2r4

    retired HiJack Helper

  • Retired Staff
  • 5,080 posts

If it opens Notepad, can you go look for the files.txt?

Also try this on the infected computer:
Click Start, and then click Run.
In the Open box, type sfc /scannow, and then click OK.

View Post

Just to be sure, did you put a space between sfc and /scannow?


Can you try saving the wininet.bat to the desktop. Then try running it from there.

Can you boot in safe mode and actually do something there?
Just trying to find a way to get into that computer. :tazz:
  • 0

#15
riflespinner88

riflespinner88

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
yep I put the space...I'll try saving to the desktop and I haven't tried in safe mode yet either, I'll do it tomorrow.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP