Virtumonde and possibly other issues

[pskelley]

KASPERSKY ONLINE SCANNER REPORT
Friday, November 16, 2007 5:26:47 PM

Number of infected objects: 6

C:\Program Files\Trend Micro\AntiVirus 2007\Quarantine\ <<< delete the contents of that quarantine folder, all six items are in there.

Delete the tools we used during the cleanup, you may keep ATF-Cleaner if you wish.

http://www.microsoft.com/windowsxp/u...s/mcgill1.mspx

Here is some great information from experts in this field that will help you stay clean and safe online.
http://users.telenet.be/bluepatchy/m...revention.html
http://forums.spybot.info/showthread.php?t=279
http://russelltexas.com/malware/allclear.htm
http://forum.malwareremoval.com/viewtopic.php?t=14
http://www.bleepingcomputer.com/forums/topict2520.html
http://cybercoyote.org/security/not-admin.shtml

Thanks...pskelley
Safer Networking Forums
http://www.spybot.info/en/donate/index.html
If you are reading this information...thank a teacher,
If you are reading it in English...thank a soldier.

[tychrome22]

So I made a little mistake. Well a little bit bigger than a little mistake. I accidentally restored my computer to the way it was this morning. The instructions given on the website were different than it was in system restore. I couldn't seem to change the settings for some reason. So it looks like all it did was it put back on that last file we were working on. I went ahead and used vundofix on it so I hope it is clean again. I'm not at home otherwise I would post an HJT log. When I do get back what would you like me to post. A fresh HJT log and a Kaspersky scan? Thanks.

[pskelley]

I really don't know, I was going to ask if you had System Restore turned off? You should not, a bad System Restore point is better than no System Restore point in an emergency. If you turned an infected System Restore off and then restored that infected point, then yes, you would reinfect yourself.

I have no way of knowing what you have done from here. Since the last Kaspersky scan was clean except for those six quarantine items, a Kaspersky scan should be clean. I do not need to see a clean scan results.

Thanks

[tychrome22]

Well what happened was it restored me to this morning at 1:16 AM. So still ahs a trace of the infection. Would you like me to just post a HJT log as soon as I can?

[pskelley]

Like I said, I really can tell nothing from here, I would suggest you run a Kaspersky scan, the results should tell you.

[tychrome22]

Ok thank you so much. As soon as I can I'll post a Kaspersky report. And then once I'm clean I'll do what you suggested and have that website run a free report. Thank you again your a life saver.

[tychrome22]

After my slightly stupid mistake the Kaspersky scan came back clean.
This is the link to my pcpitstop review.
http://www.pcpitstop.com/pcpitstop/Summary.asp

[tychrome22]

http://www.pcpitstop.com/pcpitstop/S...conid=18928001

[pskelley]

Neither link takes me to your test results, here is that forum:
http://pcpitstop.invisionzone.com/index.php?showforum=6
and a example of a test results link: http://www.pcpitstop.com/pcpitstop/S...LSSWUW9UVSPFLV

Thanks

[tychrome22]

Sorry about that. Here is the link:
http://www.pcpitstop.com/techexpress...ESSW3B3UVS6Y9V