virtumonde
in [Windows XP Users]
|
Prev: File Encryption
Next: Ever growing file count
From: Robert on 10 Mar 2010 10:29 Is anyone familiar with Virtumonde? When I run Spybot I notice a lot of it on my machine, but Spybot does not alert me to a problem. It merely shows it's presence. I have also run Adaware with no alerts and none from Avast. I have gone to google with it, but the feedback I get there states it is a troublesome problem and for a large fee I can get rid of it. However, I have not been 'highjacked', bothered with popups ( I have a blocker) nor have I noticed any changes to my OS (XP). Does anyone know if Virtumonde will eventually turn into a problem (if it hasn't already) and do you know of an inexpensive way to get rid of it. Using XP, Avast, Adaware, Spybot and an anti-popup blocker. Thanks for your help. Robert
From: Auric__ on 10 Mar 2010 11:09 On Wed, 10 Mar 2010 15:29:18 GMT, Robert wrote: > Is anyone familiar with Virtumonde? When I run Spybot I notice a lot of > it on my machine, but Spybot does not alert me to a problem. It merely > shows it's presence. I have also run Adaware with no alerts and none > from Avast. I have gone to google with it, but the feedback I get there > states it is a troublesome problem and for a large fee I can get rid of > it. However, I have not been 'highjacked', bothered with popups ( I > have a blocker) nor have I noticed any changes to my OS (XP). Does > anyone know if Virtumonde will eventually turn into a problem (if it > hasn't already) and do you know of an inexpensive way to get rid of it. > > Using XP, Avast, Adaware, Spybot and an anti-popup blocker. According to Wikipedia, "Virtumonde" is just another name for the Vundo trojan: http://en.wikipedia.org/wiki/Virtumonde I would *guess* that this needs to be handled by your antivirus. Make sure it's up to date. -- Where is your savior now?
From: Nil on 10 Mar 2010 14:10 On 10 Mar 2010, "Robert" <robertpq(a)comcast.net> wrote in alt.windows-xp: > Is anyone familiar with Virtumonde? When I run Spybot I notice a > lot of it on my machine, but Spybot does not alert me to a > problem. It merely shows it's presence. I have also run Adaware > with no alerts and none from Avast. I have gone to google with it, > but the feedback I get there states it is a troublesome problem > and for a large fee I can get rid of it. However, I have not been > 'highjacked', bothered with popups ( I have a blocker) nor have I > noticed any changes to my OS (XP). Does anyone know if Virtumonde > will eventually turn into a problem (if it hasn't already) and do > you know of an inexpensive way to get rid of it. > Using XP, Avast, Adaware, Spybot and an anti-popup blocker. I find that Spybot is prone to a lot of false positives. Some of them seem to be that it finds remnants of previously cleaned malware. That's not to say that you're NOT infected - Virtumonde is tenacious and hard to get off the system. I don't find Ad-Aware to be all that accurate either. I would scan the system with a couple of other spyware finders - I like Malwarebytes Anti-Malware and SuperAntiSpyware. You may get a clearer picture that way. Look closely at what Spybot has found. Are they actual files on the disk, or registry entries?
From: sandy58 on 22 Mar 2010 05:33 On Mar 10, 4:29 pm, "Robert" <rober...(a)comcast.net> wrote: > Is anyone familiar with Virtumonde? When I run Spybot I notice a lot of it > on my machine, but Spybot does not alert me to a problem. It merely shows > it's presence. I have also run Adaware with no alerts and none from Avast. > I have gone to google with it, but the feedback I get there states it is a > troublesome problem and for a large fee I can get rid of it. However, I > have not been 'highjacked', bothered with popups ( I have a blocker) nor > have I noticed any changes to my OS (XP). Does anyone know if Virtumonde > will eventually turn into a problem (if it hasn't already) and do you know > of an inexpensive way to get rid of it. > > Using XP, Avast, Adaware, Spybot and an anti-popup blocker. > > Thanks for your help. > > Robert VirtumundoBeGone http://www.geekstogo.com/forum/How-to-remove-Winfixer-Virtumonde-Msevents-Trojan-vundo-ATLDistrib-t91765.html Vundofix http://www.geekstogo.com/forum/VundoFix-file100.html Vundofix2 Please delete any copy of vundofix you already have then download http://www.atribune.org/downloads/VundoFix2.exe If I remember correctly, I left the icons for the "removers" on the desktop when opening in SafeMode and all went well. Good luck, Robert.
From: Robert on 24 Mar 2010 11:19
Sandy, Thank you for the links. Will try them when I get a chance to fully d/l and run them (tho 4 the 3rd one I get a "does not exist" page, will look into). I think i just have remnants, but am not sure. Am anxious to get them gone, at any rate. Thanks again, Sandy, for the help and suggestions. Robert "sandy58" <aleckie68(a)googlemail.com> wrote in message news:feb565e4-35f3-4c4e-b1d5-69b40c58cace(a)t20g2000yqe.googlegroups.com... On Mar 10, 4:29 pm, "Robert" <rober...(a)comcast.net> wrote: > Is anyone familiar with Virtumonde? When I run Spybot I notice a lot of it > on my machine, but Spybot does not alert me to a problem. It merely shows > it's presence. I have also run Adaware with no alerts and none from Avast. > I have gone to google with it, but the feedback I get there states it is a > troublesome problem and for a large fee I can get rid of it. However, I > have not been 'highjacked', bothered with popups ( I have a blocker) nor > have I noticed any changes to my OS (XP). Does anyone know if Virtumonde > will eventually turn into a problem (if it hasn't already) and do you know > of an inexpensive way to get rid of it. > > Using XP, Avast, Adaware, Spybot and an anti-popup blocker. > > Thanks for your help. > > Robert VirtumundoBeGone http://www.geekstogo.com/forum/How-to-remove-Winfixer-Virtumonde-Msevents-Trojan-vundo-ATLDistrib-t91765.html Vundofix http://www.geekstogo.com/forum/VundoFix-file100.html Vundofix2 Please delete any copy of vundofix you already have then download http://www.atribune.org/downloads/VundoFix2.exe If I remember correctly, I left the icons for the "removers" on the desktop when opening in SafeMode and all went well. Good luck, Robert. |