Here's how I removed it, with some success from a Win 2000 Pro system:
Adaware seemed to remove it on boot etc. but still came back, so...
This crap from a 'company' called Smart Security appears thus:
Desktop hijacked & now viewed as a 'Web page' !WARNING you're in danger, Click here etc.
(Do NOT 'click here')
Teen F**k icon (on desktop & in start menu) P.S. THANKS FOR THAT, JUST WHAT MY WIFE & KIDS WANT TO SEE!
!Protect your Date icon (on desktop)
! Secure yourself icon (in start menu)
Explorer homepage set to about:blank taking you to 213.159.117.130
Task Manager Disabled
A tick 'Security' add on has appeared in desktop active Web options.
('Active Web' sorry M$, that really is just bloody ASKING FOR IT)
It is a complete front and very clever red herring to what's actually happening i.e.
an automatic p*** dialler to some high toll rate phone line. (you've been warned!)
If you're worried, DISCONNECT MODEM!
First off then, try....
CTRL-ALT-DEL 'Task Manager' button greyed out?
Or Start->Run TaskMgr.exe results in:
'Task Manager has been disabled by your administrator'
Hence: Start->Run: regedit.exe
Go here:
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VRESION\POLICIES\SYSTEM
Modifiy DisableTskMgr from a '1' to a '0'
exit regedit and hit CRTL-ALT-DEL, can now go to 'Task Manager'... Do so:
Processes tab, scroll to & select 125209.dlr & hit 'End Process'
Now to get rid of the desktop frig...
Get rid of ticked 'Security' option in desktop properties & do not view desktop as a web page.
Delete C:\Winnt\desktop.html
Right click desktop & hit refresh. Gone!
delete c:\125209.exe
delete 2 aforementioned icons on desktop & in start menu (right click, delete)
run SpySweeper to get rid of any ingrained regisrty / program hacks left over.
Reboot
After rebooting, hopefully Teen F**k etc icons gone, desktop OK
Go to Internet Explorer properties & reset homepage to your choice, not about:blank
Re-run Spysweeper
Run AdAware SE
Reboot
Fingers crossed, gone!