Sangeetha

Does anyone know a way to get rid of the trojan "yourieprotect.com"
I tried the hijack this and didn't see the file
also have run trend micro online scan and cleaned the system also adaware and spybot and nortons antivirus on the system locally. I have also turned off system restore so that it doesn't come back that way.

I have also taken the HD out of the machine and placed in a second clean machine and removed any infections, actually I did this first

anyone know for sure what file in hijack this i should be looking for and or any other suggestions..

i have also cleaned out the internet files, cookies and history

Sangeetha

show us the log please, it should confirm whether it is smitfraud or not, my hunch tells me that it's smitfraud.

Please download SmitfraudFix:
SmitFraudFix
Extract the content (a folder named SmitfraudFix) to your Desktop.
Next, please reboot your computer in Safe Mode by rebooting the computer,
and repeatedly tapping the F8 key as the pc starts. Choose "Safe Mode" from
the options listed.

Once in Safe Mode, open the SmitfraudFix folder again and double-click
smitfraudfix.cmd

Select option #2 - Clean by typing 2 and press "Enter" to delete infected
files.

You will be prompted : "Registry cleaning - Do you want to clean the
registry?" answer "Yes" by typing Y and press "Enter" in order to remove
the Desktop background and clean registry keys associated with the
infection.

The tool will now check if wininet.dll is infected. You may be prompted to
replace the infected file (if found); answer "Yes" by typing Y and press
"Enter".

The tool may need to restart your computer to finish the cleaning process;
if it doesn't, please restart it into Normal Windows.
A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply.
The report can also be found at the root of the system drive, usually at C:\rapport.txt

Note: process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.