Read this WEB page before attempting this fix:

http://noahdfear.geekstogo.com/

The following was copied from the WEB page to give you a flavor of the problem:

Welcome to noahdfear’s page! 

SmitRem is a tool I created to remove the Trojan-Spy.HTML.Smitfraud.c malware infection and it’s variants, AntivirusGold, PSGuard Spyware Remover, SpySheriff, Spy Trooper, SpyAxe, Security Toolbar, WinHound and SpywareStrike. 
These infections are known as Desktop Hijackers and make many unwanted changes to a user’s computer.
-----
The WEB page has a link to PandaSoftware as being the best to fix this:

http://www.pandasoftware.com/activescan/activescan.asp?Language=2&Country=63&Partner=1&Ref=EN-PR-AS-107

-----
The WEB site uses a program called “process.exe”.  The “process.exe” program is  located in the “includes\smitRem” folder.  The following WEB link describes the program:
http://www.beyondlogic.org/solutions/processutil/processutil.htm

-----
The process would be to copy the “smitRem” folder to your desktop and run the “Runthis.bat” files there.  Should have admin privileges and be logged into the infected user from a “safe boot” (F8 on startup).