Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Infested w. Virtumonde, Mebroot, TDSServ, Spyware Guard 2008

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: Infested w. Virtumonde, Mebroot, TDSServ, Spyware Guard 2008

Unread postby Odd dude » December 18th, 2008, 1:59 am

My bad - had a syntax error.

I did not run Combofix /u yet.

GOOD :) :)

Right click upload.bat and choose edit, copy and paste this then save:
Code: Select all
@ECHO OFF
::
:: As requested in the following thread:
:: http://malwareremoval.com/forum/viewtopic.php?p=382225#p382225
::
:: Pleased to serve you :-)
::
::
::    ~ Odd dude
::
FOR %%G IN (


c:\qoobox\quarantine\c\windows\system32\awtUKabx.dll.vir



C:\Qoobox\Quarantine\C\windows\system32\sufabuwu.exe.vir
C:\Qoobox\Quarantine\C\windows\system32\tipenuno.exe.vir
C:\Qoobox\Quarantine\C\windows\system32\nulapawa.exe.vir
C:\Qoobox\Quarantine\C\windows\system32\zotemiso.exe.vir


) DO Zip.exe -Sq UploadThis %%G
Zip.exe -mq UploadThis %0

Then rerun upload.bat

It should work fine now...
Please upload the zip as instructed in my previous post.
Let me know you have uploaded the file and then you can run combofix /u

Thank you for being so cooperative. You are one of the most helpful users I have ever encountered :)
User avatar
Odd dude
Retired Graduate
 
Posts: 2819
Joined: May 18th, 2008, 11:16 am
Location: The Netherlands (GMT +1)
Advertisement
Register to Remove

Re: Infested w. Virtumonde, Mebroot, TDSServ, Spyware Guard 2008

Unread postby kstubbs » December 18th, 2008, 12:11 pm

That script worked & I uploaded the zip file per your instructions. I've got some errands to run now, so I'll uninstall ComboFix later today.

Thanks once again for all your help. Before this incident, I had no idea how sophisticated malware has grown. I have a lot of respect for people like you who fight it by developing countermeasures & guiding people like me through recovery.
kstubbs
Regular Member
 
Posts: 26
Joined: December 12th, 2008, 2:51 pm

Re: Infested w. Virtumonde, Mebroot, TDSServ, Spyware Guard 2008

Unread postby kstubbs » December 18th, 2008, 12:19 pm

One more question: can/should I also remove SmitfraudFix.exe and GMER?
kstubbs
Regular Member
 
Posts: 26
Joined: December 12th, 2008, 2:51 pm

Re: Infested w. Virtumonde, Mebroot, TDSServ, Spyware Guard 2008

Unread postby Odd dude » December 18th, 2008, 4:33 pm

Thanks once again for all your help. Before this incident, I had no idea how sophisticated malware has grown. I have a lot of respect for people like you who fight it by developing countermeasures & guiding people like me through recovery.

No problem :)

One more question: can/should I also remove SmitfraudFix.exe and GMER?

You can delete smitfraudfix.exe

Click start>run and copy and paste this:
Code: Select all
gmer_uninstall

Then click OK and delete gmer.exe
User avatar
Odd dude
Retired Graduate
 
Posts: 2819
Joined: May 18th, 2008, 11:16 am
Location: The Netherlands (GMT +1)

Re: Infested w. Virtumonde, Mebroot, TDSServ, Spyware Guard 2008

Unread postby kstubbs » December 20th, 2008, 5:02 pm

All done. Thanks for your lifesaving assistance, OD. I used the "Support Us" tab above to make a paypal donation to the site.
kstubbs
Regular Member
 
Posts: 26
Joined: December 12th, 2008, 2:51 pm

Re: Infested w. Virtumonde, Mebroot, TDSServ, Spyware Guard 2008

Unread postby Odd dude » December 21st, 2008, 5:02 am

No problem.

By the way, you should update your Adobe Reader. Yours is still version 7.
User avatar
Odd dude
Retired Graduate
 
Posts: 2819
Joined: May 18th, 2008, 11:16 am
Location: The Netherlands (GMT +1)

Re: Infested w. Virtumonde, Mebroot, TDSServ, Spyware Guard 2008

Unread postby askey127 » December 24th, 2008, 4:33 pm

kstubbs, this topic is now closed.

We are pleased we could help you resolve your computer's malware issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 13906
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA
Advertisement
Register to Remove

Previous

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 66 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware