Post a Comment On: my ramblings | expressions

Crap! My computer was hit by a trojan last night. I've run ad-aware, HijackThis!, McAfee Anti-Virus, and other Spy sweeper, and the stupid trojan is still in my system! Although those spy-cleaning software has removed some malware - I still have the problem: My wallpaper has been removed and replaced with a blue screen with the following message.

A fatal error occured at 0028:COO11E36 in VXD VMM (01)+ OOO10E36. Error was caused by trojan -spy. html.smitfraud.c

System cannot function in normal mode. Please check your settings.

Furthermore, my desktop settings are disabled and I am unable to get rid of the blue screen. Not only that, I can't get my taskbar to function and my system resources read that it's at 100% usage!

Crap! To look for a solution, I've look high and low on the net and there seem to be no definite solution. Here's what I've got;

Aliases
Trojan-Spy.HTML.Smitfraud.c (Kaspersky Lab)
is also known as:
Phish-BankFraud.eml.a (McAfee), Trojan Horse (Symantec), Trojan.Bankfraud (Doctor Web), HTML.Phishing.Bank-1 (ClamAV), Trj/Citifraud.A (Panda), HTML/Smithfraud.gen (Eset)

I've placed Trojan-Spy HTML Smitfraud.c in Symantec’s search engine and it came up with another name. Joke.smitfraudoid.

It seems the Joke Program alters or interrupt the normal behavior of your computer, creating a general distraction or nuisance. Joke programs generally do not themselves engage in the practice of gathering or distributing information from the user's computer

I eventually found out that program is also called SpSehjfix109 and has be around since about 2001! Sheessh.. There are many aliases for this Trojan. Must be some kinda super spy trojan! It seems that the basic recommendation is to run all the anti-malware programs and and antivirus programs that you have.

FRUSTRATION!!!

Anyways, I've spent hours trying to get rid of the trojan with various tools mentioned above but with no avail. Finally, I just formatted my hd and reinstalled Windows XP. I've managed to backup most of my stuff before the format but I've got lotsa apps I need to install. Sighh..

Currently, I've managed to get Streamyx up again and still in the process of recovering all my stuff.. double sighh...!

Stupid trojan! I've noticed that the trojan exploits a security hole in windows and thus if you have not 'hotfix' your windows, better do so or else, you'll end up like me.

Lesson learnt!