Does Virtumonde infect data files?

[ToprakA]

Hello All:

I just had to rebuild a friend's computer. Although Spybot would catch the infections, with the next reboot they would come back.

Before doing a clean install of the XP, we backed all her MS Office (word, excel, power point) and Adobe Elements files on CD's.

Would these data files be OK? Does Virtumonde / Vundo infect these files?

Thanks

[ken545]

Hello

Welcome to Safer Networking.

Please read Before You Post
While best efforts are made to assist in removing infections safely, unexpected stuff can happen. It is advisable that you back up your important data before starting any clean up procedure. Neither Safer Networking Forums nor the Analyst providing the advice may be held responsible for any loss.


There are infections that will infect those files but depending on exactly what you where infected with I really cant say. Have you copied back those files to the rebuilt computer, if so run this scan

• Download random's system information tool (RSIT) by random/random from here and save it to your desktop.
• Double click on RSIT.exe to run RSIT.
• Click Continue at the disclaimer screen.
• Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

[ken545]

Due to inactivity, this thread will now be closed.

If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a new HijackThis log with a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.