security warning replaces wallpaper

I got a security warnig that in IE at 0026:C0011E36 in UXD VMM<0!> + 00010E36
a trojan-spy HTML.Snitfraud.c has caused an error. ( In snitfraud that mat be
an m ) System can not function in normal mode.
This warning replaced my wall paper and all anti virus, and anti spyware
programs don't find it. Also find file can't find it. Nothing moves this
security warning. I am using IE 6 and win98SE. When I try to install IE6
again the system says it is waiting for a reboot. Reboot does not effect this
message.
Does anyone know how to fix the error in ie?

Hi Snitfraud problem,

It sounds like the trojan that TrendMicro calls TROJ_DLOAD.H:
http://www.trendmicro.com/vinfo/viru...AD%2EH&VSect=T
Click on the Solution tab for removal instructions.



Regards,

--
Patti MacLeod
Microsoft MVP - Windows Shell/User

"Snitfraud problem" <Snitfraud > wrote in
message news:2BE8F76C-DE11-405E-B82E-...
> I got a security warnig that in IE at 0026:C0011E36 in UXD VMM<0!> +
00010E36
> a trojan-spy HTML.Snitfraud.c has caused an error. ( In snitfraud that mat
be
> an m ) System can not function in normal mode.
> This warning replaced my wall paper and all anti virus, and anti spyware
> programs don't find it. Also find file can't find it. Nothing moves this
> security warning. I am using IE 6 and win98SE. When I try to install IE6
> again the system says it is waiting for a reboot. Reboot does not effect
this
> message.
> Does anyone know how to fix the error in ie?

Hi,
I have tried this solution numerous times and am unable to to delete and
change the fields in the regedit part. Every time I do this and reboot it
shows back up??? Any ideas?

thanx, dan

"Patti MacLeod" wrote:

> Hi Snitfraud problem,
>
> It sounds like the trojan that TrendMicro calls TROJ_DLOAD.H:
> http://www.trendmicro.com/vinfo/viru...AD%2EH&VSect=T
> Click on the Solution tab for removal instructions.
>
>
>
> Regards,
>
> --
> Patti MacLeod
> Microsoft MVP - Windows Shell/User
>
> "Snitfraud problem" <Snitfraud > wrote in
> message news:2BE8F76C-DE11-405E-B82E-...
> > I got a security warnig that in IE at 0026:C0011E36 in UXD VMM<0!> +
> 00010E36
> > a trojan-spy HTML.Snitfraud.c has caused an error. ( In snitfraud that mat
> be
> > an m ) System can not function in normal mode.
> > This warning replaced my wall paper and all anti virus, and anti spyware
> > programs don't find it. Also find file can't find it. Nothing moves this
> > security warning. I am using IE 6 and win98SE. When I try to install IE6
> > again the system says it is waiting for a reboot. Reboot does not effect
> this
> > message.
> > Does anyone know how to fix the error in ie?
>
>
>

Hi dan,

Not having ever dealt with this trojan, I can't offer you any "first-hand"
advice.......but I CAN point you to a detailed fix that was provided by
Lawrence Abrams, MS MVP Windows-Security:
http://www.bleepingcomputer.com/foru...FY-t17258.html

If you continue to have problems with smitfraud (or other malware), I would
highly recommend registering and posting at a forum that is dedicated to
malware information and removal. Here are a few that you could choose from:

http://www.bleepingcomputer.com/foru...urity-fc8.html

http://forum.aumha.org/index.php?c=1...d6e74bffc49305

http://www.cybertechhelp.com/forums/...splay.php?f=25



Regards,

--
Patti MacLeod
Microsoft MVP - Windows Shell/User

"dan podufal" <dan > wrote in message
news:A25CDC13-0C79-4CCC-BD02-...
> Hi,
> I have tried this solution numerous times and am unable to to delete and
> change the fields in the regedit part. Every time I do this and reboot it
> shows back up??? Any ideas?
>
> thanx, dan
>
> "Patti MacLeod" wrote:
>
> > Hi Snitfraud problem,
> >
> > It sounds like the trojan that TrendMicro calls TROJ_DLOAD.H:
> >
http://www.trendmicro.com/vinfo/viru...AD%2EH&VSect=T
> > Click on the Solution tab for removal instructions.
> >
> >
> >
> > Regards,
> >
> > --
> > Patti MacLeod
> > Microsoft MVP - Windows Shell/User
> >
> > "Snitfraud problem" <Snitfraud > wrote
in
> > message news:2BE8F76C-DE11-405E-B82E-...
> > > I got a security warnig that in IE at 0026:C0011E36 in UXD VMM<0!> +
> > 00010E36
> > > a trojan-spy HTML.Snitfraud.c has caused an error. ( In snitfraud that
mat
> > be
> > > an m ) System can not function in normal mode.
> > > This warning replaced my wall paper and all anti virus, and anti
spyware
> > > programs don't find it. Also find file can't find it. Nothing moves
this
> > > security warning. I am using IE 6 and win98SE. When I try to install
IE6
> > > again the system says it is waiting for a reboot. Reboot does not
effect
> > this
> > > message.
> > > Does anyone know how to fix the error in ie?
> >
> >
> >