[riflespinner88]

I have become infected with trojan-spy.HTML.smitfraud.c with the blue screen with the fatal error message. I can't download HJT because I can't access AOL (or anything else for that matter) x_x I get to the sign on screen and I will get a bunch of boxes that say "Ipconfig" and that it has performed an illegal action and will need to close. I close them but they keep coming up until it freezes and I am forced to CTRL+ALT+DEL AOL[which shows up as unresponsive]. This is really grrrrr, it wont even let me run AdAware. >.< Can anyone help me with this?

[Advertisements]

Welcome riflespinner88 to Geeks to Go!

I take it you are using another computer to post here then?

Can you download it there and transport it to the infected computer?

[g2i2r4]

Welcome riflespinner88 to Geeks to Go!

I take it you are using another computer to post here then?

Can you download it there and transport it to the infected computer?

[riflespinner88]

Yes but the problem is I can't run any program, I go to open it and it will say "___ has performed an illegal operation"

___ = program I'm trying to use

[g2i2r4]

Can you use taskmanager (ctrl+alt+del). Go to > applications > new task > browse.

[riflespinner88]

On my task manager it lists the running processes then it has end task, shutdown and cancel. Nothing else. Thanks for your cooperation so far, btw

[g2i2r4]

Can you use start - run to go to let's say c:\windows\system32?

[riflespinner88]

Yes I can

[g2i2r4]

Copy everything in the code box below and paste it into notepad. Go up to "File > Save As..." and click the drop-down box to change the "Save As Type" to "All Files". Save it as wininet.bat on your desktop.

dir %Systemdrive%\wininet.dll /a h /s > files.txt
start notepad files.txt

Copy the file to a transport disk.

Go to the infected computer.
insert the disk.
go to start - run
fill in:
a: (if that's were the disk is)

A:\wininet.bat
press enter.

Notepad will open. Save that file to your transport disk

Post the content of that file here in your reply.

I'll check back tomorrow (sorry).

[riflespinner88]

it says "cannot find the files.txt file. Do you want to create a new file?" and no matter what I say (yes/no) it just opens notepad and it's blank

[g2i2r4]

If it opens Notepad, can you go look for the files.txt?

Also try this on the infected computer:
Click Start, and then click Run.
In the Open box, type sfc /scannow, and then click OK.

[riflespinner88]

Nope, it's nowhere to be found and when I type that it tells me the command line is bad

[g2i2r4]

I'll sleep on it, get back to you tomorrow (sorry).

[riflespinner88]

NP Thanks for everything so far

[g2i2r4]

If it opens Notepad, can you go look for the files.txt?

Also try this on the infected computer:
Click Start, and then click Run.
In the Open box, type sfc /scannow, and then click OK.

Just to be sure, did you put a space between sfc and /scannow?


Can you try saving the wininet.bat to the desktop. Then try running it from there.

Can you boot in safe mode and actually do something there?
Just trying to find a way to get into that computer.

[riflespinner88]

yep I put the space...I'll try saving to the desktop and I haven't tried in safe mode yet either, I'll do it tomorrow.