Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Help Please! Possible Malware/trojan That Freezes My Pc

  • Please log in to reply
1 reply to this topic

#1 spacegirl


  • Members
  • 7 posts
  • Local time:05:43 AM

Posted 25 January 2008 - 02:14 AM


My computer freezes every time an alert pops up on my machine. The message says that my computer is being attacked by a possible virus or spyware. I noticed 3 new icons on my desktop which reappear everytime I remove it, when I restart.
When I click on properties it shows me that they are links to html files, but they appear as Error Cleaner, Privacy Protector and Spyware and Protection on my desktop. I cannot clean the registry quick enough as the machine freezes within in 2 minutes after starting the machine. Should I just reformat? I'm using norton antispy, anti phish, internet and firewall security. I can't do a scan either.

Thx in advance.

Mod Edit: Topic moved to more appropriate forum~ TMacK

Edited by TMacK, 25 January 2008 - 02:30 AM.

BC AdBot (Login to Remove)


#2 rookie147


  • Members
  • 5,321 posts
  • Local time:11:43 AM

Posted 25 January 2008 - 05:56 AM

Reformatting is not necessary, we should be able to remove the malware on your system - generally doing that is a last resort when there is no way of clearing up the computer completely.
Please print off a copy of these instructions, and also save them to a Notepad file on your desktop, so they are easily accessible.
We are going to boot into Safe Mode later in the fix, and there is no internet access.

Download SmitfraudFix (by S!Ri)
Open the file and it will extract the contents (a folder named SmitfraudFix) to your Desktop.

Reboot your computer into Safe Mode.
This is done by rebooting Windows and pressing F8 at boot/Windows startup, usually right after the beep.
Then select Safe Mode from the list.
Make sure you choose the option without Networking Support.

Once in Safe Mode, open the SmitfraudFix folder again.
Double-click smitfraudfix.cmd.
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.
You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.
The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".
The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.
A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply.
The report can also be found at the root of the system drive, usually at C:\rapport.txt
Warning : running option #2 on a non infected computer will remove your Desktop background.

Please include rapport.txt in your next reply.

If you are pleased with the service I have offered, you may like to consider making a donation. Posted Image
Posted Image

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users