Posts Tagged ‘Malware’

Computer Infected with Smitfraud-C.MVPS, Zlob.Downloader.rid, Zlob.Downloader.vcd, Zlob.Downloader.dcc as well as numerous other programs.

February 8th, 2008

Problem

Computer Infected with Smitfraud-C.MVPS, Zlob.Downloader.rid, Zlob.Downloader.vcd, Zlob.Downloader.dcc as well as numerous other programs.
Keywords: Smitfraud-C.MVPS Solution, Smitfraud-C.MVPS, Zlob.Downloader.rid, Zlob.Downloader.vcd, How to Remove Zlob.Downloader.dcc, Smitfraud-C.MVPS removal, Zlob.Downloader.rid removal, Zlob.Downloader.vcd removal, Zlob.Downloader.dcc removal, Smitfraud-C crashes Spybot and Windows XP

Platform

Windows XP current service pack and all patche

Symptoms

The computers desktop wall paper was changed, popups would come up saying that there was malware on the computer and to click a link to purchase software to remove the malware. Many different errors would come up stating that there was an interenet attack in progress. One of the pieces of malware executed under explorer.exe and would take a large percentage of the available processor capacity. I initially installed spybot to determine what the malware was. It would find the malware listed above, but upon trying to clean the malware it would blue screen the computer and force a reboot. I attempted to clean it in multiple different ways and tried to shutdown the processes that it was using.

Fix

To fix this complete the following:
1. Download, install, and update spybot search and destroy.
2. Go to start -> run and type in “msconfig”
3. On the general tab choose diagnostic startup, click okay and then reboot.
4. You will now be running in limited functionality mode. Network and other functions like USB Devices will not work.
5. Start spybot and have it start scanning your computer
6. While spybot is scanning hit ctrl + alt + delte to either launch the task manager or give you the option to launch the task manager.
7. With the task manager up, go to the processes tab and find explorer.exe. Highlight this item and choose end process. Your desktop icons, and task bar will go away.
8. Once spybot finishes, choose to have all of the malware removed from the computer. It should now execute successfully and remove the malware.
9. Go to start -> run and type in “msconfig”. On the general tab choose normal click ok and then choose to restart the computer.
10. When the computer restarts, run spybot again as well as a full scan from an antivirus program. This should remove most of the virus.

These instructions might not remove the entire malware payload, but it will get your machine functional again to remove the remaining items.

Another good resource on this is : http://www.pchell.com/support/smitfraud.shtml This article has you download a lot of free software which you should use at your own risk. I have not used any of these programs and would recommend caution using products that are not developed by respectable sources.

Tags: , ,
Posted in Uncategorized | Comments (0)