Re: security warning replaces wallpaper



dan podufal
07-09-2005, 10:36 PM
Hi,
I have tried this solution numerous times and am unable to to delete and
change the fields in the regedit part. Every time I do this and reboot it
shows back up??? Any ideas?

thanx, dan

"Patti MacLeod" wrote:

> Hi Snitfraud problem,
>
> It sounds like the trojan that TrendMicro calls TROJ_DLOAD.H:
> http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ%5FDLOAD%2EH&VSect=T
> Click on the Solution tab for removal instructions.
>
>
>
> Regards,
>
> --
> Patti MacLeod
> Microsoft MVP - Windows Shell/User
>
> "Snitfraud problem" <Snitfraud problem@discussions.microsoft.com> wrote in
> message news:2BE8F76C-DE11-405E-B82E-737B3FCE8527@microsoft.com...
> > I got a security warnig that in IE at 0026:C0011E36 in UXD VMM<0!> +
> 00010E36
> > a trojan-spy HTML.Snitfraud.c has caused an error. ( In snitfraud that mat
> be
> > an m ) System can not function in normal mode.
> > This warning replaced my wall paper and all anti virus, and anti spyware
> > programs don't find it. Also find file can't find it. Nothing moves this
> > security warning. I am using IE 6 and win98SE. When I try to install IE6
> > again the system says it is waiting for a reboot. Reboot does not effect
> this
> > message.
> > Does anyone know how to fix the error in ie?
>
>
>

Patti MacLeod
07-09-2005, 10:36 PM
Hi dan,

Not having ever dealt with this trojan, I can't offer you any "first-hand"
advice.......but I CAN point you to a detailed fix that was provided by
Lawrence Abrams, MS MVP Windows-Security:
http://www.bleepingcomputer.com/forums/How_to_remove_the_Smitfraud_or_Wpexe_WindowsFY-t17258.html

If you continue to have problems with smitfraud (or other malware), I would
highly recommend registering and posting at a forum that is dedicated to
malware information and removal. Here are a few that you could choose from:

http://www.bleepingcomputer.com/forums/Security-fc8.html

http://forum.aumha.org/index.php?c=12&sid=dfe03976f4d1a18e3ed6e74bffc49305

http://www.cybertechhelp.com/forums/forumdisplay.php?f=25



Regards,

--
Patti MacLeod
Microsoft MVP - Windows Shell/User

"dan podufal" <dan podufal@discussions.microsoft.com> wrote in message
news:A25CDC13-0C79-4CCC-BD02-E89BA79F46C6@microsoft.com...
> Hi,
> I have tried this solution numerous times and am unable to to delete and
> change the fields in the regedit part. Every time I do this and reboot it
> shows back up??? Any ideas?
>
> thanx, dan
>
> "Patti MacLeod" wrote:
>
> > Hi Snitfraud problem,
> >
> > It sounds like the trojan that TrendMicro calls TROJ_DLOAD.H:
> >
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ%5FDLOAD%2EH&VSect=T
> > Click on the Solution tab for removal instructions.
> >
> >
> >
> > Regards,
> >
> > --
> > Patti MacLeod
> > Microsoft MVP - Windows Shell/User
> >
> > "Snitfraud problem" <Snitfraud problem@discussions.microsoft.com> wrote
in
> > message news:2BE8F76C-DE11-405E-B82E-737B3FCE8527@microsoft.com...
> > > I got a security warnig that in IE at 0026:C0011E36 in UXD VMM<0!> +
> > 00010E36
> > > a trojan-spy HTML.Snitfraud.c has caused an error. ( In snitfraud that
mat
> > be
> > > an m ) System can not function in normal mode.
> > > This warning replaced my wall paper and all anti virus, and anti
spyware
> > > programs don't find it. Also find file can't find it. Nothing moves
this
> > > security warning. I am using IE 6 and win98SE. When I try to install
IE6
> > > again the system says it is waiting for a reboot. Reboot does not
effect
> > this
> > > message.
> > > Does anyone know how to fix the error in ie?
> >
> >
> >


Re: security warning replaces wallpaper