This page is all about a tool called SmitFraudFix. The tool is quite old and works only on Windows XP and Windows 2000 systems. SmitFraudFix was created to remove desktop hijacking virus and rogue security programs.

Disclaimer: This program is no longer supported by the developer. Therefore, this article is offered “as is” and will no longer be updated.

SmitFraudFix is a tool created to remove various desktop hijackers, adware and malware installed by Zlob family of Trojans.

Note: This is the legitimate SmiFraudFix Removal Created by SiRi. The rogue program was called SmitFraud Fix Tool created to confuse computer users.


Operating System:
Windows 2000/XP

SmitfraudFix is free, but you can contribute financially to the development of this program by sending a donation to the Author.

Download Here: (Discontinued)

Removal Procedure:

Important: Please print this procedure as we have to close any open windows during the cleanup process later.

1. Download SmitFraudFix by SiRi and save to your Desktop

2. Reboot your computer in SafeMode.

  • Restart your computer
  • Just before the computer begins to startup and before loading Windows press F8
  • A selection menu should appear
  • Select the line that says “Safe Mode
  • At logon prompt, log in as the usual user.
  • During Windows Start process it will prompt you if you would like to continue running in SafeMode, press Yes
  • You should now see your Desktop but in a low resolution mode only.
  • Make sure no other application or windows is open.

3. Double-click on the Smitfraudfix.exe file which you downloaded earlier on your desktop. Press any key when the credit screen displays to proceed to removal procedure.

4. A selection menu will be displayed as shown in image below.


5. Press 2 on your keyboard, then Enter, to execute the selection – Clean (SafeMode Recommended)
6. It will begin to scan and clean your system thoroughly.
7. After that process, it will then run a Disk Cleanup tool to remove any unwanted files on your computer. It may take some time to complete this process.

8. After Disc Cleanup, it will show another prompt:

Do you want to clean the registry? (y/n). Press the Y button and then press the Enter to begin cleaning your registry.

9. This tool will also check if your wininet.dll is infected and will prompt:
Replace infected file? Press Y and then Enter to replace you wininet.dll with the clean version.

10. A reboot may be needed to complete the process. It will reboot your computer automatically, if not please restart your computer manually.

11. It will generate the report that can be found at the root of the system drive, usually at C:\rapport.txt. Keep this log file for your future reference.

Note: This tool removes Desktop Hijack malware: AdwarePunisher, AdwareSheriff, AlphaCleaner, Antispyware Soldier, AntiVermeans, AntiVermins, AntiVerminser, AntivirusGolden, AVGold, BraveSentry, MalwareWipe, MalwareWiped, MalwaresWipeds, MalwareWipePro, MalwareWiper, PestCapture, PestTrap, PSGuard,, Registry Cleaner, Security iGuard, Smitfraud, SpyAxe, SpyCrush, SpyDown, SpyFalcon, SpyGuard, SpyHeal, SpyHeals, SpyLocked, SpyMarshal, SpySheriff, SpySoldier, Spyware Vanisher, Spyware Soft Stop, SpywareLocked, SpywareQuake, SpywareKnight, SpywareSheriff, SpywareStrike,, TitanShield Antispyware, Trust Cleaner,, Virtual Maid, VirusBlast, VirusBurst, Win32.puper, WinHound, Brain Codec, DirectVideo, EliteCodec, eMedia Codec, FreeVideo, Gold Codec, HQ Codec, iCodecPack, iMediaCodec, Image ActiveX Object, IntCodec, iVideoCodec, JPEG Encoder, Key Generator, Media-Codec, MediaCodec, MMediaCodec, MovieCommander, MPCODEC, My Pass Generator, PCODEC, Perfect Codec, PowerCodec, PornPass Manager, PornMag Pass, PrivateVideo, QualityCodec, Silver Codec, SiteEntry, SiteTicket, SoftCodec, strCodec, Super Codec, TrueCodec, VideoAccess, VideoBox, VidCodecs, Video Access ActiveX Object, Video ActiveX Object, VideoCompressionCodec, VideoKeyCodec, VideosCodec, WinAntiSpyPro, WinMediaCodec, X Password Generator, X Password Manager, ZipCodec…
Disclaimer: This is a self-help guide. Use it at your own risk. can not be held responsible for problems that may occur by using this information.


  1. james eric lirio

    what a very precise tool here! it really worked on my puter! thanks a million times to your tool! thank god too i found your site! yep thats right chirag sharma, i cant browse and change my wallpaper too,.. :( soo sad. pls help us…

  2. latha

    My computer is not goin to safe else can i run smitfraudfix then? pls help

  3. Van

    My Computer won’t go in safe mode either, and it won’t let me pull up the Smithfraudfix either in regular mode. I need help

  4. Vladimir

    My respect to creator. Very good and smart instrument.
    Thanks for free.

  5. Dorothy

    My husbandsPC was infected with awareremover. It wormed its way into the HOST files, redirected IE to it’s advertisement and would not open any desktop icons. Spy Hunter only caught 2 of it’s files and since he did not have the HOST protection turned on, SH did not recognize the threat.

    I used my clean laptop to download your program to a USB flash drive and got it onto his computer. IE is finally back and everything seems normal but I still see awareremover in the HOST files of SH. Not sure about that one.

    Thanks for this program. :)

  6. Adam

    It seems like it should work well enough, but the trojan I have (Trojan SPM/LX) prevents me from opening the desktop icon; or, rather, when I try, it asks me what program I want to use to open it. I find the SmitFraudFix one, but when I click it, the program shuts itself down and brings up the error report prompt. How would I go about opening the program?

  7. Taimonn

    Sou brasileiro cara!!
    Aqui deu certooo!!
    Muito obrigadoo

    Abraços e sucesso

  8. Sean

    So whenever I try to run SmitFraudFix it simply says “path not found” and then after “Deleting infected files” it gives me some message but then the window disappears before I can read it and I’m forced to restart my computer because I can’t get anything working. Anyone know why SmitFraudFix can’t seem to get past that step and/or how to fix this? The trojan on my computer has been tormenting me.

  9. Ton


  10. Uchiha

    My computer is affected by TrojanSPM/LX and my desktop background has also turned into some warning message audio is not working and irritating msgs pop-up.
    I followed everything u said in the safe mode everything happened expect that winnet.dll thing. it dint ask me at all for its replacement.. Please help me.

  11. Gina

    It won’t let me download it. The trojan thing (the box with the red circle and white X) pops up and tells me its contaminated. Some one help me figure this out . . . I’m desperate.

  12. Adrian

    OMG i seriously love who ever made this product. I just donated 20 dollars because of how fast it was and how much it saved my life! Thank you!!!

  13. mike denham

    i have the trojanspm/lx and now when it gets to the user login i click it then it shows my wallpaper then it takes me back to the user page. i have tried safe mode but it dont work. how can i get around this

  14. Brian

    I got the Trojan SPM/LX thing on my daughters Dell desktop w/ xp operating system. I researched and downloaded Smithfraudfix.exe with my laptop, thumb drive loaded and transfered to desktop on infected desktop. Booted in safe mode sucessfully. When I try to run your fix I get “warning Application cannot be executed. The file is infected. Please activate your antivirus software. HELP PLEASE!

  15. Brian

    I tried renaming it and running as smit.exe with same result.

  16. Jeff

    I’ve used smitfraud in the past and its run fine

    but on my new laptop its not workin.

    Im running vista and when i Select 2 and hit Enter to delete infect files.

    It freezes and i dont get to the next step of:
    You will be prompted: Do you want to clean the registry ? answer Y (yes)

    it says killing process….
    then it flases a few more lines to quick to see and then nothing. it goes away and just hangs with a black screen

  17. jeff

    when i Select 2 and hit Enter to delete infect files.

    before it freezes it says:

    killing process….
    Path not found – C:\windows\system32\drivers\etc
    Winsock2 fix…
    Generic Renos Fix…
    Deleting Infected files…

    Then the cmd box disappears and it freezes

  18. john

    When I try to run SmitfraudFix the dos window flashes open then closes can’t see it to follow the directions, running xppro whatever I’v got has changed the clock to milatary time

  19. Rodger Harris

    Windows 8.1 my screen goes blue and I still have the ads

Leave a Comment

Your email address will not be published. Required fields are marked *

Please support this website. Kindly hit LIKE button below and continue browsing the site.