Help with Smitfraud-C, Virtumonde, virtumonde.generic and virtumonde.sci

[easca]

Thanks. I tried for a few minutes but I couldn't find it. Do I just go through all of my files?

Unfortunately, I'll be out of town until Saturday, so I won't be able to try again until I get back home.

Thanks again for all of your help.

[pskelley]

This is the first time I have tried this manual removal, I know the files are bad because combofix and MBAM target this infection, see the google:
http://www.google.com/search?hl=en&q...earch&aq=f&oq=

Perhaps when you have more than "a few minutes" you can look closer at the instructions. This is tough to remove but few infected member are having the issues you are running any tool?

Enjoy your trip

[easca]

I spent a while longer looking through the directions on the sites google turned up, but it isn't really working. I did a windows search for the files you listed, as one site recommended, but that turned up nothing. So unless the files are all hidden, I don't think they're there. And if they are all hidden, I don't know how to find them. I think I'm going to take the computer in some place and have scan it for me, because this has gotten a bit over my head. I really appreciate all of your help, though.

[pskelley]

Thanks for the feedback, here is some information that may help you avoid this in the future.

Some good information for you:
http://users.telenet.be/bluepatchy/m...wcomputer.html
http://www.microsoft.com/windowsxp/u...s/mcgill1.mspx

Here is some great information from experts in this field that will help you stay clean and safe online.
http://users.telenet.be/bluepatchy/m...revention.html
http://forums.spybot.info/showthread.php?t=279
http://russelltexas.com/malware/allclear.htm
http://forum.malwareremoval.com/viewtopic.php?t=14
http://www.bleepingcomputer.com/forums/topict2520.html
http://cybercoyote.org/security/not-admin.shtml

http://www.malwarecomplaints.info/

Thanks...pskelley
Safer Networking Forums
http://www.spybot.info/en/donate/index.html
If you are reading this information...thank a teacher,
If you are reading it in English...thank a soldier.

http://users.telenet.be/bluepatchy/m...oes/Links.html