![]() | Do you have pop-ups or your computer infected with trojan or spyware ? Learn how to ask us for help, click here! |
Smitfraudfix – free tool for remove Desktop Hijack malware
Smitfraudfix is a free program written by S!Ri, that removes desktop hijack malware and rogue antispyware programs:
AdwarePunisher, AdwareSheriff, AlphaCleaner, Antispyware Soldier, AntiVermeans, AntiVermins, AntiVerminser, AntivirusGolden, AVGold, BraveSentry, MalwareWipe, MalwareWiped, MalwaresWipeds, MalwareWipePro, MalwareWiper, PestCapture, PestTrap, PSGuard, quicknavigate.com, Registry Cleaner, Security iGuard, Smitfraud, SpyAxe, SpyCrush, SpyDown, SpyFalcon, SpyGuard, SpyHeal, SpyHeals, SpyLocked, SpyMarshal, SpySheriff, SpySoldier, Spyware Vanisher, Spyware Soft Stop, SpywareLocked, SpywareQuake, SpywareKnight, SpywareSheriff, SpywareStrike, Startsearches.net, TitanShield Antispyware, Trust Cleaner, UpdateSearches.com, Virtual Maid, VirusBlast, VirusBurst, Win32.puper, WinHound, Brain Codec, DirectVideo, EliteCodec, eMedia Codec, FreeVideo, Gold Codec, HQ Codec, iCodecPack, iMediaCodec, Image ActiveX Object, IntCodec, iVideoCodec, JPEG Encoder, Key Generator, Media-Codec, MediaCodec, MMediaCodec, MovieCommander, MPCODEC, My Pass Generator, PCODEC, Perfect Codec, PowerCodec, PornPass Manager, PornMag Pass, PrivateVideo, QualityCodec, Silver Codec, SiteEntry, SiteTicket, SoftCodec, strCodec, Super Codec, TrueCodec, VideoAccess, VideoBox, VidCodecs, Video Access ActiveX Object, Video ActiveX Object, VideoCompressionCodec, VideoKeyCodec, VideosCodec, WinAntiSpyPro, WinMediaCodec, X Password Generator, X Password Manager, ZipCodec
How to use Smitfraudfix:
Download Smitfraudfix from here and save it to your desktop. When file has finished downloading you will now see SmitfraudFix icon on your desktop similar to the one below.
SmitfraudFix Icon
Reboot your computer in Safe Mode by doing the following steps:
- Restart your computer
- After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
- Instead of Windows loading as normal, a menu should appear similar to shown below.

Windows Advanced Options Menu – Select Safe Mode - Select the first option, to run Windows in Safe Mode.
Now you can start using Windows in Safe mode.
Double-click SmitfraudFix icon that is residing on your desktop. You may see a screen similar to the one below.

Security Warning
Windows is issuing “Security Warning” prompt, this is normal and safe. Cick on the Run button to continue. If you are using Windows Vista, and receive UAC prompt asking if you would like to continue running the program, you should press the Continue button.
When SmitfraudFix first starts you will see a credits screen. Press Enter and you will now see a menu as shown in the screen below.

SmitfraudFix Menu
Select 2 and hit Enter. SmitfraudFix will now start cleaning your computer. This procedure can take some time, so please be patient.

SmitfraudFix Cleaning Process
When Smitfraudfix has finished cleaning process, it will automatically start the Disk Cleanup program and you will see a screen as shown below.

Disk Cleanup
You will be prompted: Do you want to clean the registry ? Answer Y (yes) and hit Enter in order to clean registry keys associated with malware.
When the Disk Cleanup step is done, you will see a red screen stating Computer will reboot now. Close all applications. Press Enter.
When reboot is completed, a log will open in Notepad.
Note: if you are still having problems, then I would recommend that you follow the instructions and post your logs in the spyware removal forum. Myantispyware team will help you.
April 13, 2006 on 3:09 am | In Free Software | 70 Comments |70 Comments »
RSS feed for comments on this post. TrackBack URI
Leave a comment
My Anti Spyware - Free antispyware programs and Spyware Removal Instructions.












Please help. When I download the software the file process.exe is not there. What am I doing wrong?
Comment by Avril — June 27, 2006 #
just have checked archive:
81408 Jun 13 09:58 GenericRenosFix.exe
53248 Jun 5 2003 Process.exe
24576 Jan 13 2005 Reboot.exe
16384 Mar 7 22:45 restart.exe
572215 Jun 24 13:33 SmitfraudFix.cmd
288417 Apr 27 17:49 SrchSTS.exe
42496 Jan 9 10:36 swreg.exe
40960 Jan 9 10:36 swsc.exe
Comment by Patrik — June 27, 2006 #
cool
Comment by chris — June 29, 2007 #
OH…MY GOD…..IT’s GONE!!!!!!!!!!!!!!!!!!,THANK YOU SO MUCH!!!!!!!!
Comment by susan — August 6, 2007 #
My desktop has been hijacked for over a year with a bright red screen and the flashing message “Danger Spyware”. I’ve tried a half-dozen programs to remove it to no avail – until now!! This one worked like a charm! My sincere thanks for your good work!
Comment by Jason — September 15, 2007 #
thanks
Comment by sajid — October 9, 2007 #
Vielen Dank für dieses Removal Tool.
Thanks so much.
It was so easy to drop out that Beast from Destop.
Comment by Alexander — October 13, 2007 #
THANKS IN ADVANCE
Comment by TIM HULTQUIST — December 15, 2007 #
very good
Comment by rafael — January 31, 2008 #
DUDE!!!!!!!
u r my god……….i shall bow to thee for eternal servitude hehe thnx a lot dude this is lyk the best software it wrks nd PPL i have struggled a lot tryin 2 find a software that wrks nd this 1 WORKS…i use google for my advanced level project nd when it suddenly got hijacked thats when i got pissed .IOU a lot man …….tc cya……….
Comment by Thivaharan — February 5, 2008 #
Excellent tool. Hats off to you guys. Such simple steps and still so efefctive. It just cleaned up my laptop of spyware in minutes. Thanks a lot.
Comment by Anup Sharma — February 13, 2008 #
thx
im so happy now after i cleaned my laptop with ur help
i was really worrying what that was, but now i can play on my computer again
thx again guys
Comment by A really happy boy — February 19, 2008 #
Excellent job. You guys are simply geniuses. I am up and running!
Comment by Oliver Shibendi — March 19, 2008 #
None of the downloanding links are working right now, because at the end of the downloading process appears a message [Cannot copy SmitfraudFix.exe: Access is denied]. Furthermore, I connected to the french FTP site through command-line interface and even though the ftp states that the file was downloaded successfully, the file SmitfraudFix.exe doesnt appear anywhere in the disk.
Comment by Akhbar — April 5, 2008 #
2 Akhbar, just checked download Smitfraudfix.zip, Link is ok.
Comment by Patrik — April 5, 2008 #
Just want to say a VERY VERY big thankyou to you whoever you are! One note, however in windows xp, you have to work out which icon to click….. But work it out folks… its worth it!!! this damn toolbar has gone!!!!! and the unending ads for damn security packages…..
Comment by dave — April 25, 2008 #
Thank u
Comment by rahul — April 26, 2008 #
Thank you so much. That thing was painful
Comment by Mark NZ — April 28, 2008 #
i hope this works.
Comment by JR LaRue — April 28, 2008 #
Will see how this will work
Comment by drago espic — May 1, 2008 #
I was trying to solve this problem for over 3 hours until i came across ur site!!! Thanks for the program, wish i found it earlier!!
Comment by Bhavin — May 4, 2008 #
WOW!!! You are amazing!!!
Overjoyed!!
I will be ever so grateful!!!!
Thank you so FRIGGIN\\\’ MUCH!!!
MMMMMwwwwaaaaaa!!!!
Comment by KaTy — May 6, 2008 #
hi guys what simple technology for such complicated malware , your software did in minutes what other so call spyware cleaners could not do ,, and this ie antivirus is a really fast spreading virus , but thanks to you no other spyware can touch my computer or others , hope every innocent person attacked with amlicious ware sees your website for guidance thank you guys and keep rocking.
Comment by tharani — May 9, 2008 #
This didn’t fix mine like it did others. My desktop is now ‘hidden’ by a file folder. It takes up the entire desktop area and I can’t access my actual desktop, which is just behind it. I right click on this ‘desktop’ and check the properties and only get the properties of that file. All icons sit on top of this false desktop, but I can’t access my actual desktop no matter what I do.
Comment by Sarah — May 9, 2008 #
Oh my goodness! You are so great! I have been bothered for almost a week by this hijacker and tried several anti-spyware removers but to no avail! This is so so great! It’s gone…I can’t believe it! You’re the best!
Comment by Anton — May 13, 2008 #
WOW!
I spent hours doing on line virus scans, Ad-aware SE, spybot, and our corporate Symantec A/V and NOTHING found the infection. I was getting ready to format the PC and re-install windows when I came across this and it got rid of the infection in minutes!
Thank you so much the I.T. world needs more people like you!
Comment by Chris — May 14, 2008 #
Thank You!
I can\’t believe the other anti-virus couldn\’t detect it but this could. You\’re an ace! Thanks again~
Comment by Drake — May 15, 2008 #
Sorry, not found
Comment by Pat — May 28, 2008 #
Pat, whats “not found” ?
Comment by Patrik — May 28, 2008 #
thanks a lot bro!!!!!!!!!
its awesome man!!!!!!!
Comment by harman — June 8, 2008 #
Please help my laptop running Vista had trojan DNSChanger.AD on it
I have tried to remove it a variety of ways suggested here using fixwareout and then smitfraudfix.
The problem is when trying to run fixware out i get the prompts but nothing happens?
When running smitfraud i get a red window appear with access is denied then press anykey prompt, again nothing happens?
Comment by David — June 15, 2008 #
David, please read How to use Spyware Removal Forum
I`ll help you
Comment by Patrik — June 15, 2008 #
Thanks a lot the fix worked like a dream….
Comment by Dewey — August 4, 2008 #
I don’t have words to praise!!!!!!
It is simply brilliant!!!
I had tried hundreds of antyvirus,spamcleaners & cleaning methods,but none had solved my problem.
But this software worked in my first attempt..
I rate it the most powerful software…
Thank U man..
Comment by Vivekananda Swaroop — August 13, 2008 #
Great dude! thanks a lot it solved my problem,
Comment by suman — August 20, 2008 #
Norton detected this as a virus when I unzipped it?? ???
Comment by Rick — August 22, 2008 #
process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a “RiskTool”. It is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between “good” and “malicious” use of such programs, therefore they may alert the user.
Comment by Patrik — August 23, 2008 #
I have used the tool and it works perfectly.my desktop has beenr released after using this utility.apricated
Comment by hemant — August 23, 2008 #
I have removed smitfraud files using various means including the …Fix.exe program. Despite this the computer continues to run painffully slow and the wallpaper remains blue. What next?
Comment by Bohdanw — August 23, 2008 #
Bohdanw, please read these instructions: How to use Spyware Removal Forum
Comment by Patrik — August 23, 2008 #
hi patrik.
All is going well until the 2nd stage.
When I click yes to Do you want to clean the registry? I get an error message that says “Registry Editing has been disabled by your Administrator”
Can you help?
Comment by chris — August 30, 2008 #
chris, looks like spyware blocked it. Please read these instructions: How to use Spyware Removal Forum. I will help you.
Comment by Patrik — August 31, 2008 #
my son’s PC always boots up with a blue background in Windows and black background in safe mode. There’s no icons of any sort and the only thing I can call up is task manager. So ‘smitfraudfix’ might work if I download it but how do make it work in this environment? please help.
Comment by Fadil Pedic — August 31, 2008 #
I`ve changed links, from zip to exe file.
Dwonload SmitfraudFix.exe and try to run using TaskManager.
Comment by Patrik — August 31, 2008 #
Im 50, a stay at home mom and even I could follow your directions. You guys are my hero’s. Thanks a million!
Comment by Jennifer — September 4, 2008 #
Man this really works thanks!!!!!!11
Comment by CRO — September 6, 2008 #
Thank you! Thank you!
It’s all gone, and am now clean.
It’s the best spyware cleaner ever so far. Previously, I could not remove the AntiSpyCheck with Ad-Aware.
It’s just too good and easy to use and clean.
Once again, thank you so much. You saved my laptop.
Comment by Tang — September 6, 2008 #
Great dude! thanks a lot it solved my problem
u are the saviour.
Comment by mnover — September 9, 2008 #
Finally!
Great work guys..
thumbs up.. hated this thing…
Thanks.
Comment by Mia — September 14, 2008 #
Thanks AV2010 was driving me nuts and I had to Mozilla or Chrome as IE was wrecked. After running this program all is repaired and running superfast as well as a bonus feature/ I had tried numerous programs.
Comment by Keath — October 10, 2008 #
I had that damned red dot with the x and I tried using your instructions which worked till the second step where I enter 2 and then hit enter. It kept freezing up with your blue message about not being associated with whatever. Anyway, I ran it in regular mode and it worked that way. So far no problems. Thank you so much for this software and for not charging for it. Im sure Im not the only one who probably couldnt afford it.
Comment by katnip — October 11, 2008 #
This seems to have worked! Thank you SO SO much!!
Comment by fustyluggz — October 16, 2008 #
thank u very much
Comment by AMit — November 4, 2008 #
I cant get it to do anything, i double click on it and nothing…what am i doing wrong please? I even saved it to the desktop to find easily but nothing works. :*(
Comment by Zordana — December 17, 2008 #
Zordana, please follow these steps.
Comment by Patrik — December 17, 2008 #
thank u
Comment by giman0 — December 21, 2008 #
Thank you so much, it worked and I got rid of fake trojan alerts
Comment by Sasa — December 22, 2008 #
Thank you for removing fake trojan alerts
Comment by Sasa — December 22, 2008 #
The Fake Windows Security popup thats been bugging me for weeks has now gone.Thank you for your help.
Comment by Trevrev — June 5, 2009 #
The smitfraudfix.exe prompts an open with window. why?
Comment by john — August 25, 2009 #
thank dud………..
Comment by mak — September 29, 2009 #
Malwarebytes reports that I have Hijack.Desktop
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ForceActiveDesktopOn (Hijack.Desktop)
Cleans it but comes back on reboot….help!!!!
Comment by Sri — October 14, 2009 #
I had the bad smit with tool at the end and this removed it and cleaned al the system.
Comment by Ramiro Janer — October 14, 2009 #
Sri, probably your PC is infected with hidden trojan. Ask for help in our Spyware removal forum.
Comment by Patrik — October 15, 2009 #
I can’t say enough! Thanks heaps! Simple even I could clean those damn things! You’ve saved me a lot! THANKS!! bookmark this site !Geoff
Comment by Geoff — November 2, 2009 #
Hi, i couldn’t open my system in safemood pls help.I have same problem
Comment by harish — February 12, 2010 #
harish, what is “same” problem ?
Comment by Patrik — February 13, 2010 #
Hi!
After utilizing smithfraudfix, how do I remove it from my PC?
(I am not very pc savvy.)
Thanks beforehand.
Lode
Comment by Lode — April 8, 2010 #
Lode, the program don`t have an uninstall procedure. You need manually remove smitfraudfix.exe.
Comment by Patrik — April 8, 2010 #
Thank you.
Comment by Lode — April 10, 2010 #