Smitfraud-C toolbear888

[Trevor B]

I keep getting this pop up in spybot scans even though everything else left over from a Virtumonde infection has been removed!

HKEY_USERS\S-15-21-2118653275-3477910567-1226574955-1005\Software\Microsoft\aldd

I have tried to remove it using fix.reg method but windows will not allow it.

Can you assist?

[Yodama]

hello Trevor B,

there may be still other Virtumonde files that have not been detected during the scan, please attach a complete Spybot S&D report to your next post.

[Trevor B]

hello Trevor B,

there may be still other Virtumonde files that have not been detected during the scan, please attach a complete Spybot S&D report to your next post.

OK, I ran a spybot scan to post for you and it does not show up now!

Did I need to do a reboot for the fix to work?
I have run spybot, AVG and HJT and the file is now not there! Does this mean I am finally clear of this infection? Nothing is being detected!

[Yodama]

hi,

to be on the sure side we need to create a Spybot S&D log file to have a look at settings not covered by Hijackthis.

Please switch Spybot S&D to the advanced mode and navigate to tools - view report, check all boxes and click on view report. You can then export the report to a file which you can attach to your next post.