gallup

I find very little on Trojan vb.cec. Found by avg antivirus. Says connected to smiupdate.exe, which is part of smitfraudfix. Only other location of it is in a system restore folder. If smiupdate is a false positive (which it may not be) then why does it state this virus is part of it. Google search pretty much only finds a couple of entries from japan that don't translate well listing the entry with other entries and no info about it.

thanks for your info,
Mike

Glaswegian

Hi Mike

You could try the self help removal here. Or, if you're not comfortable with that, start here and follow the instructions.

http://www.techsupportforum.com/secu...sting-log.html

If you cannot complete any of the Steps, simply move on to the next one - remember to let the Analyst know about this when you post your logs.

Do not post your logs back in this thread - follow the guidance in the above link!

Please note that the Security Forum is always busy, so I would ask for your patience while waiting for a reply.

jimgreene

My AVG some how stopped functioning correctly and I repaired (an option to reinstall) AVG.
I then decided I should do a full virus scan just to be sure things were okay.
AVG reported smitfraudfix and smitupdate.exe as threats. (Note: there may be a t missing in the first post discussing smitupdate.exe).
AVG reported handling the threat appropriately.
The program is no longer in the folder I put it in last year about six or more months ago.
I used that program to eliminate a malware which could not be eliminated by any other freeware. I used it once and then just stored it.
So I thought maybe this is a false positive and found I have an old version.
I had SmitfraudFix 2.171 from April 07, so I now downloaded SmitFraudFix v2.274 today.
I then ran AVG again and it perceived the new SmitfraudFix as a threat and removed it.

I am no expert, but I feel this is a false positve situation.

Please note Smitfraud and SmitfraudFix are two different programs.

Glaswegian

Hi and welcome to TSF.

Yes, some AV's will call certain parts of programmes such as Smitfraudfix 'malware'. It's only certain parts - these parts are used to automatically close down things such as explorer.exe - this makes cleaning much easier. Smitfraudfix is clean.

gallup

this is the situation I was asking about, and mine was typed correctly as reported by AVG.
SmiUpdate.exe a part of Smitfraudfix and has been on my pc for a while. Just curious why it showed up now, perhaps some AVG update? I don't think I have anything to worry about.

tetonbob

A likely reason.

Me neither, as far as SmiUpdate.exe goes.

FYI, SmitfraudFix gets updated frequently, so there's no real need to keep it on your machine. Hopefully you only need it once anyway, to remove an infection. Then, hopefully, you don't get re-infected.