HERP

[Devek]

Don't apologize, just learn what to do and get used to it.

Keep a backup of all your stuff and be prepared to reinstall a lot in your lifetime is all.

For the record you can't delete rootkit protected filed in safe mode. The funny part is that you can't even see the files that store the rootkit itself :wink: If you can't see the files than a virus scanner can't see them either. Trying to fix it is a waste of everyones time.

(You could delete a specific file by loading the drive onto another computer that isn't infected.. but I question if that is a safe thing to do. You could also delete the file by putting in your windows installation CD and going into its "recovery mode". It won't remove the rootkit from your machine though and the file you deleted will be back whenever the rootkit decides to put it back )

[Akanei]

http://img.photobucket.com/albums/v660/ ... /cazzi.jpg

Can't fix it, it asks to run at start up and it still can't fix it then.

Well, that'd possibly explain your pop up error. I'm assuming you get no changes to your desktop similar to a BSOD? Normally that's what smitfraud tries to do, while attempting to get you to download false-spyware for money. If you're not getting the BSODs, then that's likely why explorer.exe is crashing, since it's not able to change your desktop to do so.

Anyway, to remove that, use this:

http://siri.geekstogo.com/SmitfraudFix.php

[Volken]

http://siri.geekstogo.com/SmitfraudFix.php

Looked promising, didn't work. I guess it's too old

[Akanei]

K. Let's try a different direction, then:

-Download Hijackthis from here

-Rename hijackthis.exe to scanner.exe

-Scan and post the scan results.

I'll try and get back to this as soon as I can, need sleep.

[Devek]

Youth is wasted on the young :/

[Volken]

I was looking around for a newer version of SmitfraudFix and I stumbled on VundoFix, completely fixed my computer in 2 minutes. Thanks Akanei :D

[frozenx]

Don't have time to read the thread but didn't see it mentioned when I skimmed,

Click "Start"
Click "Run"
type "msconfig"
go ot the start up tab
uncheck all the boxes
restart pc
see if it still pops up, if it doesn't; do msconfig again and enable a few check boxes at a time.

EDIT nevermind u fixed it =P

[Akanei]

I was looking around for a newer version of SmitfraudFix and I stumbled on VundoFix, completely fixed my computer in 2 minutes. Thanks Akanei :D

Oh, nice. Was gonna eventually move on to that. Hahaha

[Devek]

Smitfraud is fixed..

But what about the program that installed smitfraud itself? It is usually a secondary infection downloaded and installed by the main virus...

If it makes you feel comfortable that anything you type on that computer is probably being recorded or it is being used to send lots of spam knock yourself out. Just don't enter any creditcard numbers on that machine if you enjoy your money