PDA

View Full Version : Smitfraud-C toolbear888



Trevor B
2007-06-21, 18:50
I keep getting this pop up in spybot scans even though everything else left over from a Virtumonde infection has been removed!

HKEY_USERS\S-15-21-2118653275-3477910567-1226574955-1005\Software\Microsoft\aldd

I have tried to remove it using fix.reg method but windows will not allow it.

Can you assist?

Yodama
2007-06-22, 08:55
hello Trevor B,

there may be still other Virtumonde files that have not been detected during the scan, please attach a complete Spybot S&D report to your next post.

Trevor B
2007-06-22, 13:59
hello Trevor B,

there may be still other Virtumonde files that have not been detected during the scan, please attach a complete Spybot S&D report to your next post.

OK, I ran a spybot scan to post for you and it does not show up now!

Did I need to do a reboot for the fix to work?
I have run spybot, AVG and HJT and the file is now not there! Does this mean I am finally clear of this infection? Nothing is being detected!

Yodama
2007-06-26, 08:34
hi,

to be on the sure side we need to create a Spybot S&D log file to have a look at settings not covered by Hijackthis.

Please switch Spybot S&D to the advanced mode and navigate to tools - view report, check all boxes and click on view report. You can then export the report to a file which you can attach to your next post.