From: "Glenn Meadows" 

Thanks, that's essentially what I did, just did it in a normal boot, did
the Remove on Reboot (had to manually type the path to the folder, as it
didn't show up in Explorer at all, no matter what I did).  Rebooted, ran
HJT again, the same keys came up, but said "File Missing", so
deleted the keys there, now letting Spybot do it's thing once again.

Haven't checked yet, but this box also will NOT allow the Security Center
to run, nor the Windows Firewall service.  He does have the full AOL
software installed, his Dad gets AOL service for free, so they use AOL as
an ISP. Not sure if the AOL software replaces those functions.  Might have
to dig thru Group Policy to see if somthing is a miss there though.

--

Glenn M.
"Robert Comer"  wrote in
message news:vdbh335prrtvqiqaatp0kviv0f9h0lrvmg{at}4ax.com...
> Get Hijackthis, boot into safe mode and then use the misc tool "delete
> file on reboot" to delete the file that's locked, reboot, then run
> spybot and it should cleanup the leavings.
>
> --
> Bob Comer
>
>
> On Wed, 2 May 2007 10:15:45 -0500, "Glenn Meadows"
>  wrote:
>
>>The last bugger I'm fighting is smitfraud-c.  Spybot S/D sees it, says it
>>has to run on reboot to kill it, which it does, except when it runs on
>>reboot, it can't remove it...
>>
>>Any suggestions?

--- BBBS/NT v4.01 Flag-5