Thread: "Interface not supported"? You have been hacked! Read this!    

If you are coming across a POL error after the play button about interface not supported, you may have the most recent "bug". Firstly search your PC for smart.dll. If you find this, see The Fix: below.

i was helping a friend and came across this in her hijackthis log as

O20 - Winlogon Notify: Fly - C:\WINDOWS\SYSTEM32\smart.dll

seemed quite suspicious so i loaded up a process scanner and came across it hooking ffxi and no other exes. after removing it, the interface error stopped.


Code:
==================================================
Module Name : smart.dll
Base Address : 0x013C0000
Module Size : 0x0000C000
Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Description : Framebuffer Display Driver
Company : Microsoft Corporation
Product Name : Microsoft? Windows? Operating System
Modified Date : 5/26/2008 11:07:07 AM
File Size : 35,840
Filename : C:\WINDOWS\system32\smart.dll
File Attributes : A
==================================================



The fix:

Download HiJackThis ( http://www.trendsecure.com/portal/en-US ... s/download ) and save to desktop.

Reboot in safe mode: Spam F8 while rebooting and choose safe mode.

Once in safe mode: Start > Run > type cmd > hit ok.

In command prompt type: regsvr32 /u C:\WINDOWS\SYSTEM32\smart.dll

Hit enter.

Once in safemode run hijackthis, choose perform a system scan.

Look for O20 - Winlogon Notify: Fly - C:\WINDOWS\SYSTEM32\smart.dll

Check it, hit fix checked.

Browse to C:\WINDOWS\SYSTEM32\smart.dll and delete the file. If the file does not delete, try restarting in normal mode and deleting it.

Reboot normally, run HiJackThis for smart.dll, it seemed to not reinstall itself tho.


mod edit: attention-grabbing title

Originally Posted by buttson

i was unable to delete the dll even in safe mode (says its in use). however it is gone from hijackthis on a fresh reboot. still cant delete the actual file though.

do you use aim? id like to help you a bit further so i can make the main post alittle more in depth

Thanks for the info!

If I may suggest, it may be a good idea to insert an "account possibly compromised" warning or something similar in your topic. This topic looks like a fix of a random technical issue when the issue is much more serious.

Before any of you start freaking out, smart.dll is also a file used by Windowblinds (a skinning program for windows xp and vista that allows advanced modification of the GUI) So before you freak out and start screwing up your programs, ensure you are deleting the correct thing...

Interesting, I also got that pop up when I started FFXI after a restart (system crash). Did a search for smart.dll and noticed that it was created 3 days ago. Wife's computer also has the file that was also made three days ago albeit at a different time. Looks like its time to clean and change password on 360 before its too late.

Edit: I have not installed any programs recently but I do visit somepage.com often with firefox but no protective extensions (noscript and such).

Originally Posted by ShinseiRyu

firefox but no protective extensions (noscript and such).

That's like fucking an AIDS infected whore with a teabag as a condom.

I appreciate this post. This happened to me only recently, followed the steps, and its gone now.

Only have one in the Windowblinds system folder (the one in documents and settings, not the program files location) so this should be fine, right?

Happened to a few people in my LS recently, so I told them to reformat cause I'd heard about the recent hackings. Thanks for the info about this virus/bug/whatever^^

Originally Posted by Tajin

Edit: Of course changing passwords periodically should be the norm, but meh who is gonna steal my gimp elf ._.

You'd be surprised...

Originally Posted by calinz

Only have one in the Windowblinds system folder (the one in documents and settings, not the program files location) so this should be fine, right?

I did a search, and I came up with smart.dll being in the "Program Files" folder of Windowblinds. (Not the system/doc folder).

Is this the same thing/file as mentioned in the OP?

edit: nevermind, this isn't the same file as mentioned in the OP.

"WindowBlinds 3.x SmartBar plugin" (smart.dll)

When I do the cmd part I'm getting some load library failed. Any ideas ?