Norton Internet Security / Norton AntiVirus

[xgmx]

I seem to have a Trojan horse on my computer.  Spybot Search & Destroy can't remove it, and it keeps adding more spyware (that's what msmsn.exe does, or atleast what Spybot S&D says it does).  I have tried to remove it several times with Spybot S&D but to no avail, I even tried it with the Spybot S&D computer restarted scan, but it still couldn't remove it.


[b]problem[/b]
Problem: Smitfraud-C.generic
Files: Executable (c:\windows\system32\msmsn.exe)


[b]file information[/b]
Company:
Product: Smitfraud-C.generic
Threat: Trojan
Description: Smitfraud-C.generic is a collection of generic rules for the detection of Smitfraud-C, which installs itself without user consent, fakes legit software, downloads and installs additional malware and/or trojan horses.


[b]screenshot[/b]
[URL=http://metroidprime2.zoomshare.com/files/msmsn.bmp][IMG]http://metroidprime2.zoomshare.com/files/msmsn.bmp[/IMG][/URL]

[Dieselman743]

Well you have yet to provide the info on what Norton product your using. Spybot is past its prime and is pretty worthless in todays world. SuperAntiSpyware and Malware Bytes are far superior. So whatr version of Norton are you using? Have you run a full scan yet?

[Phil_D Norton Fighter]

Hi xgmx,

Please let us know which Norton Product and version (year) you are using and which operating system and service pack.

Thanks.

Edit: duplicate request for information posted at the same time as Dieselman743.

Message Edited by Phil_D on 11-30-2008 12:00 PM

[Quads]

Hi

If you have no luck with the products stated in the above messages.

This infection

"b]problem[/b]

Problem: Smitfraud-C.generic

Files: Executable (c:\windows\system32\msmsn.exe)"

Try Smitfraudfix  from http://www.softpedia.com/get/Antivirus/SmitfraudFix.shtml

Run in Safe Mode

Quads 

[Tech0utsider]

Spybot S&D only detects a certain variation of Smitfruad. It may be detecting another strain, however it cannot remove it because it can only detect and remove one paticular strain.

And, be sure to disable TeaTimer when running any of the applications suggested. TeaTimer may block some of the functionalities of the recommended applications, which could render them useless. 

And I suggest using ComboFix. 

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

[Quads]

Hi 

BE CAREFUL with Combofix as I have seen peoples OS damaged slightly afterwards, there is a disclaimer and warning like

 "ComboFix is an extremely powerful tool and you should not be using Combofix unless instructed to do so by a Malware Removal Expert. It is a powerful tool intended by its creator to be "used under the guidance and supervision of an expert", NOT for private use. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again."

Just making you aware.

Quads 

[Tech0utsider]

He could try a repair install which should wipe out most of the malware.