virtumonde smitfraud remnant help pls

Status
Not open for further replies.
J

joeblunt

New member
Hey folks. I've mostly removed the traces of virtumonde and smitfraud using vundo smitfraudfix ccleaner in safe mode. Online ca scan comes up clean. Am concerned that my AVG software may have become compromised. Spybot keeps coming up with bots from time to time as I use my pc.

There is a reappearing rundll startup call:
[icq.com] rundll32.exe "C:\WINDOWS\system32\tahwvorw.dll",forkonce

I'm attaching my scanner HJ log and installed programs list.

Any help you can provide would be real swell!!
 
Hey folks. I've mostly removed the traces of virtumonde and smitfraud using vundo smitfraudfix ccleaner in safe mode. Online ca scan comes up clean. Am concerned that my AVG software may have become compromised. Spybot keeps coming up with bots from time to time as I use my pc.

There is a reappearing rundll startup call:
[icq.com] rundll32.exe "C:\WINDOWS\system32\tahwvorw.dll",forkonce

Any help you can provide would be real swell!!

Tashi: I've run through the before you post steps so pls keep my thread open.
 
Last edited by a moderator:
tashi said:
Please do not start another topic just to say you will be posting. ;)

Thanks.
Click to expand...

I started a new topic to ask for help as you indicated that any threads with a reply were overlooked. I'm doing my best to follow your rules. Please help me by helping me get help.

Thanks, Joe
 
virtumonde smitfraud remnant

I've mostly removed the traces of virtumonde and smitfraud using vundo smitfraudfix ccleaner in safe mode. Online ca scan comes up clean. Spybot keeps coming up with bots from time to time as I use my pc. Safe mode scans and fixes work for awhile and then the stuff just comes back.

There is a reappearing rundll startup call:
[icq.com] rundll32.exe "C:\WINDOWS\system32\tahwvorw.dll",forkonce

Please help.
 
Last edited by a moderator:
joeblunt said:
I'm doing my best to follow your rules. Please help me by helping me get help.
Click to expand...
"BEFORE you POST"(READ this Procedure before Requesting Assistance)
  • When the scan is finished, the "Scan" button will change into a "Save Log" button.
  • Click that, save the log somewhere, and copy/paste (no attachments) into your (Click --> ) own new topic
    a) The HJT log
    b) The on-line Anti Virus scan log/report
Click to expand...
Once you have done that, a helper can assist you when available. Thanks.
 
Status
Not open for further replies.
Back
Top