PDA

View Full Version : Advice



Necrons_2
2008-08-25, 02:33
Hello, yesterday i had discovered that my computer has been infected with some spyware and was wonding if i could get some advice about it. Spybot S&D has discovered that i probably have been infected with Virtumonde (and another piece of spyware that I cannot remember that name of at this point( something with a C variant)). However after trying nemerous times using spybot to remove these i have been unsucessful and have developed futher symptons, now I am unable to log in properly as my userinit.exe will not run properly and have been for some time experiencing trouble with the control panel which I have recently found out is another sympton of the secondary peice of software.

in short, symptons include:
blue windows '98-2000 background.
control panel crashing/not opening
userinit.exe corrupted/enountering problems (because of this i fear that i will not be able to run HJT(although i am unsure if it will run in safe mode))

For the record, i have read the before you post threds in the malware removal forum, the thread on file sharing(which i have been doing recently(also norton has had pop-ups alerting me that i have been attempted to be attacked during the time of downloading on uTorrent)).

If I should've just posted this in the malware removal forum if it could be moved i would appreciate it, and thank you in advance to anyone who helps me.

drragostea
2008-08-25, 02:36
Hello Necrons. This sounds like a nasty malware infection. From your symptoms, it sounds like Virtumonde and SmitFraud.C. The malware may disable the Control Panel and change your desktop background with a BSOD (fake) or to a rogue wallpaper such as "WARNING! Your computer is infected!". It's just a tactic to scare you.
--
Consider posting in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum and having someone take a look at your system.

If you decide to have an experienced malware removal specialist assist you, please follow the procedure in this link to run scans and produce a HijackThis log: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) ( http://forums.spybot.info/showthread.php?t=288).
--
Good Luck.