Topic: Virtumonde Adware/Virus
Mac60's photo
Fri 11/09/07 12:26 PM
Has anyone else gotten infected with Virtumonde?

If so, how did you get rid of it? I've tried all kinds of spyware scans, but I've still got it?

I'll pay 1 million dollars for a solution.

dchatwin's photo
Fri 11/09/07 12:36 PM
Windows Defender? That keeps me clean of all things yucky!! No need to pay me if it works..I'm just nice like that....glasses

dchatwin's photo
Fri 11/09/07 12:36 PM
Awww crap...I just noticed ur name..do you have a mac?

Mac60's photo
Fri 11/09/07 12:40 PM
Ran that once to no avail.

And this is really my own fault. I let my 12 yr old use the computer after I let the A/V subscription expire.
Live and learn..

No, not a Mac. XP SP2.


dchatwin's photo
Fri 11/09/07 12:44 PM
Well crap! Are you sure it's a spyware issue? I used to use this program a long time ago that's free...I think it's like.."Adware"..or something like that? I could be wrong but it still scanned and got rid of spyware. I used that for years as well as AVG antivirus. Well I'll keep thinkin of stuff man grumble

Mac60's photo
Fri 11/09/07 12:52 PM
I've tried:

Ad-Aware
Spybot
...detects and removes what Virtumonde it finds, but it
still comes back.
Windows Defender
Norton A/V

Symantec has a tool for removing it, but I get C++ Runtime errors when i run the tool.

AYak420's photo
Fri 11/09/07 12:52 PM
I had this problem for before, I used a program called FXVMonde to finally remove the thing.

Mac60's photo
Fri 11/09/07 01:01 PM
FXVMonde worked for you, huh? Drat, because that's the thing I downloaded from Symantec that generates the C++ Runtime errrors when I launch it.

Wiitard's photo
Fri 11/09/07 01:41 PM
How did you get it so we can all avoid getting it?

Mac60's photo
Fri 11/09/07 02:10 PM
I let my 12 yr old use the computer AFTER I let the anti-virus subscription expire. Who knows what she did.

Wiitard's photo
Fri 11/09/07 02:14 PM
Well, what kinds of web sites does a 12 year old go to?

Is there a way to check your browsers history and deductively figure it out?

Virtumonde is a Trojan btw, and you will need an anti-virus program (updated) to get rid of it. The people who are behind Virtumonde are @$$holes and update it constantly to keep it from being wiped out by anti-virus stuff.

no photo
Fri 11/09/07 02:26 PM
First, try Housecall: http://www.trendsecure.com/portal/en-US/tools/security_tools

Then you follow these instructions: http://www.spywareremove.com/removeVirtuMonde.html

Also, get HiJackThis and use it to kill the DLLs listed in the above link.

If all else fails, you can always do a complete rebuild of your system.

Wiitard's photo
Fri 11/09/07 02:34 PM
rebuilds are fun anyway!

Mac60's photo
Fri 11/09/07 02:54 PM
Thanks, Spider. I'll try those steps.


Mac60's photo
Thu 12/06/07 08:30 PM
It's finally gone! After many scans of many anti-spyware programs and many fruitless hours searching the net for the answer, Virtumonde is gone from my computer.

Turns out, I had the answer fairly early on but didn't realize it. Windows Defender is a free anti-spyware program available from Microsoft. The key is- when Virtumonde is detected, specify the action to take as REMOVE, not Quarantine. If you've specified Quarantine in a previous scan, go into "Quarantined items" and REMOVE it from there.

I am so happy, I could just sh_t.

KingPayne's photo
Thu 12/06/07 11:48 PM
i have and that stuff sucks bad. housecall is a good one

Mac60's photo
Fri 12/07/07 05:34 AM

i have and that stuff sucks bad. housecall is a good one


Yes. I discovered Housecall during my ordeal. Found other things, but not the Virtumonde. It is so great to have a computer again that works like it should.