Just for everyone's information, Smitfraud.C is Spybot S&D's name for a type of Vundo/Conhook infection. I wish they would call it something else because it is confusing. Smitfraud is a generic description of any application/trojan that hijacks the desktop to give fake warnings that you are infected or have errors and need to download their program to fix it, only telling you later you have to pay for the fix. Vundo is associated with the rogue app Winfixer, among others, but it is a completely different infection from what is more commonly known as Smitfraud and SmitfraudFix is not designed to fix it.
As oldf@rt mentioned, if McAfee is blocking something, and knowing how Vundo works, you still have some of it active on your system--it may be crippled but at this point I believe it is best to submit a HijackThis log. Plus, as usual, Vundo is changing around some how it works so general malware scanners have a hard time keeping up.
Please click on the following link and follow all the relevant instructions for precleaning and getting a log posted:Preparation Guide For Use Before Posting A Hijackthis Log
If you have any problems or questions at all about the Prep Guide or getting a log posted don't hesitate to post back in this topic about it. But please DO NOT post your log in this topic, start a new one in the logs forum. There is a link in the prep guide that will open a new topic in the correct forum for you, if you miss it, here it is again: start a new topic in the HijackThis Logs and Analysis Forum
When you get your log posted in the correct forum, please be patient--there are a lot of logs to look at and a lot of people in the process of being helped, but someone will get with you as soon as possible. You can post your link to your log back here and it would be a good idea to post a link to this topic, along with a description of the problem, in your new log thread.
Edit to add:
SmitfraudFix is designed to fix variants of the Zlob trojan and a few others types, but not Vundo.
Edited by Papakid, 12 July 2007 - 08:04 PM.
Added more info