Virtumonde & Smitfraud-C.

[The Warden]

Hi. I am a victom of Virtumonde and Smitfraud-C. and cannot remove them with a Spybot sweep. Spybot identifies them and cleans them, but they immediately return. I have run Spybot (advanced mode) in normal Windows operating mode and in Safe Mode. Same results for both. I am running Windows XP.

These programs have made my web access almost impossible to get on line.

Anyone's help on how to remove these will be greatly appreciated.

Thank you very much!

[drragostea]

Consider posting in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum and having someone take a look at your system.

If you decide to have an experienced malware removal specialist assist you, please follow the procedure in this link to run scans and produce a HijackThis log: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) ( http://forums.spybot.info/showthread.php?t=288).

--------------------------------------------
Note:

If you have lost your Internet connection on the infected computer, or otherwise cannot post from that machine; you can download HJT to a clean PC if one is available.

1. Upload to infected machine
2. Place HJT into own folder
3. Run HJT on the infected PC and post the log you produce using the clean PC.

---------------------------------------------

Good luck.

[Zenobia]

Now who's got the extra-speedy keyboard. :D:

Please follow instructions above,The Warden. :)

[The Warden]

Got it. Re directing thread now and will read and follow instructions for help. Thank you!!

[Zenobia]

Good luck in malware removal. :)

[drragostea]

Now who's got the extra-speedy keyboard. :D:

Don't want to bump or anything (add something unnecessary), but that quote always got a :laugh: from me.

[memmons111]

I have the same issues with these virus'. Spybot won't clean them. I have run McAfee and Adaware and neither has addressed these bad-boys. Need help.

[Zenobia]

You could ask for help in malware removal.

The procedures are here:
http://forums.spybot.info/showthread.php?t=288
Please read and follow them,as they help you to have all the required info,which will help avoid delays.

Malware removal:
http://forums.spybot.info/forumdisplay.php?f=22

[Ruleout]

i had the same problem with virmundo. it kept coming back. but now it's gone. open spybot. click search for update. click search and destroy. when it's finished, you will have list of viruses including virmundo. click fix problems. after that exit spybot. disconnect your internet by unplugging the network cable or disabling the network card. restart your computer. when start up is complete, connect your internet by plugging in your network cable or enabling your network card. that's it. it works. good luck!