Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Spyware/smitfraud Trojan?


  • Please log in to reply
5 replies to this topic

#1 Wojtus77

Wojtus77

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:02:21 PM

Posted 15 April 2006 - 01:36 PM

Hi everyone. Im having a problem with my desktop. I read the forum posts on the topic of the Smitfraud Trojan and followed its steps to remove it. I thought I had succeeded, but now I simply have a white screen with my icons on my desktop. When I right click on it and press properties I get some information about something called "warnhp". WHen I click on source I get the following information::

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<!----
***** This file is automatically generated by Microsoft Windows *****
--------><HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1252"></HEAD>
<BODY
style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none"
bottomMargin=0 bgColor=#004e98 leftMargin=0 background="" topMargin=0
rightMargin=0>
<DIV
style="LEFT: 0px; WIDTH: 1024px; POSITION: absolute; TOP: 0px; HEIGHT: 768px"><IMG
style="LEFT: 0px; WIDTH: 100%; POSITION: absolute; TOP: 0px; HEIGHT: 100%" cache
src="file:///C:/Documents%20and%20Settings/Owner/Local%20Settings/Application%20Data/Microsoft/Wallpaper1.bmp">
</DIV><IFRAME id=0
style="Z-INDEX: 10004; BACKGROUND: none transparent scroll repeat 0% 0%; LEFT: 0px; WIDTH: 1024px; POSITION: absolute; TOP: 1px; HEIGHT: 737px"
name=DeskMovrW marginWidth=0 marginHeight=0 src="file:///C:/WINDOWS/warnhp.html"
frameBorder=0 subscribed_url="" resizeable=""> </IFRAME>
<OBJECT id=ActiveDesktopMover
style="LEFT: 0px; VISIBILITY: hidden; WIDTH: 0px; POSITION: absolute; TOP: 0px; HEIGHT: 0px; container: positioned; zIndex: 5"
classid=clsid:72267F6A-A6F9-11D0-BC94-00C04FB67863></OBJECT>
<OBJECT id=ActiveDesktopMoverW
style="Z-INDEX: 10003; LEFT: -1px; VISIBILITY: hidden; WIDTH: 1026px; POSITION: absolute; TOP: 0px; HEIGHT: 739px; container: positioned"
classid=clsid:72267F6A-A6F9-11D0-BC94-00C04FB67863></OBJECT> 
</BODY></HTML>


Can anyone help me get rid of this thing? I cant change any of my desktop settings and its really becoming quite bothersome. I have trial versions of registryfix, registry mechanic, xoftspy, ewido anti-malware, killbox.exe, panda activescan, and smitrem on my computer. Are those gonna help at all? I have the software for Spy Sweeper and Norton Anti-Virus. What can I do to rid my computer of this pest?

THank you very much!

BC AdBot (Login to Remove)

 


#2 ThorXP

ThorXP

  • Banned
  • 880 posts
  • OFFLINE
  •  
  • Local time:02:21 PM

Posted 15 April 2006 - 01:50 PM

Well, Here is a place that will help you get rid of this current problem: http://www.help2go.com/Tutorials/Spyware_I...SpyJack-F).html

If you keep going from one problem to another problem one right after another like this is the second one and there might be more to follow, personally I think your system is over infected. One suggestion is to quit using these trial versions of everything (They go out of date and do not work properly) and get rid of the stuff from Symantec (Norton) It leaves a lot to be desired unless you like paying for being infected.

If you still have problems with virus, worms, trojans and spyware after running the fix above I would suggest (I know I am going to get in trouble here for this) backup all of your data and then reformat and reinstall Windows and start from scratch. I would then suggest installing Service Pack 2 and a good free firewall, and good anti-spyware programs. believe me you do not have to spend money to be covered. I do not and I am covered very nicely.

#3 ThorXP

ThorXP

  • Banned
  • 880 posts
  • OFFLINE
  •  
  • Local time:02:21 PM

Posted 15 April 2006 - 02:23 PM

Here is a list of anti-spyware programs and some firewalls that are free as far as I know and are good programs to use as long as you keep their data bases upto date.

Lavasoft Ad-Aware SE Personal Edition
http://www.lavasoftusa.com/support/download/

AntiVirŪ PersonalEdition Classic = http://www.free-av.com/

AVast Anti-Virus = http://www.avast.com/

AVG Grisift Download Page = http://free.grisoft.com/freeweb.php/doc/2/lng/us/tpl/v5

Microsoft Windows Defender
http://www.microsoft.com/athome/security/s...re/default.mspx

SpywareBlaster = http://www.javacoolsoftware.com/spywareblaster.html

RootkitRevealer = http://www.sysinternals.com/Utilities/RootkitRevealer.html

CCleaner is a freeware system optimization and privacy tool
http://www.ccleaner.com/

ewido anti-malware download = http://www.ewido.net/en/download/

Safety.Net = Firewall has to be setup right but it is great and free better than ZoneAlarm Free
http://www.netveda.com/consumer/safetynet.htm#top

SpyBot Search & Destroy - Anti-Spyware
http://security.kolla.de/index.php?lang=en&page=download

windows washer
http://www.webroot.com/wb/products/windowwasher/index.php

ZoneAlarm
http://www.zonelabs.com/store/content/home.jsp

Outpost Firewall
http://www.agnitum.com/download/outpostfree.html

MRU Blaster = http://www.javacoolsoftware.com/index.html

#4 acklan

acklan

    Bleepin' cat's meow


  • Members
  • 8,529 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Baton Rouge, La.
  • Local time:12:21 PM

Posted 15 April 2006 - 02:50 PM

We have an excellent self help section here. Go to this topic and follow the instructions.

How To Remove The Smitfraud / Psguard / Virtualmaid

If you need help on removing other malware please look here first. Spyware Removal Guides & Self-Help and Reading Room
"2007 & 2008 Windows Shell/User Award"

#5 ThorXP

ThorXP

  • Banned
  • 880 posts
  • OFFLINE
  •  
  • Local time:02:21 PM

Posted 15 April 2006 - 04:11 PM

Hello acklan I like those areas and have and will visit them some more, loaded with information. I thank you very much. I have a feeling we have talked before but can not remember where. :thumbsup:

#6 acklan

acklan

    Bleepin' cat's meow


  • Members
  • 8,529 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Baton Rouge, La.
  • Local time:12:21 PM

Posted 15 April 2006 - 04:30 PM

We have but I can't remeber either. To many post :thumbsup: . We have lots of great stuff. If you have any ideas why don't you write a mini-How to. They are located in the Operating Sytem Section of the forum. We always need help.
"2007 & 2008 Windows Shell/User Award"




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users