Printable View
Okay. So, I know that getting rid of trojans and malware is a pain when their files and components are already executed.
When I scanned, I had accumulated many more Virtumonde files than before, because I connected to the internet. Then when I restarted after a scan, it scanned again before it loaded any more processes or applications, even before the desktop.
Is there a way I can make that happen every bootup? It would be useful, it could help make getting rid of Virtumonde.prx files easier.
You can always set up Spybot-Search&Destroy to perform a scan during bootup (IMHO, is a pain because it'll become unnecessary). However, there is a easier way. If Virtumonde is not removed during normal boot, Spybot will prompt you to scan and remove it during reboot.
If not, you can always scan in Safe Mode (disconnected from the Internet).
If the situation becomes very annoying, you can always request help for free in the Malware Removal Forums.
I can give you the directions, but I would like to know your response first.
Start Spybot, put into Advanced mode (Click on mode, click on advanced,click on Yes to next dialogue). Then click on Settings, then Settings again, then scroll down through the settings until you come to the System Start Group. Click on Automatically run program at system startup. See attached screen shot.Quote:
Originally Posted by Zero V2
As drragostea says, this will very quickly become a significant pain, and once you have cleaned up your PC, and providing you have an effective firewall, effective antivirus and Spybot's protection you shouldn't need to scan each time you boot up.
Hope this helps
Yes, well, the whole thing is that with that checked, it doesn't actually start before every other process. What I liked about it when it did it by itself was that it started before everything else booted up, and held them from doing so until it was done. Having it checked, however, makes it boot up after everything else.Quote:
Originally Posted by Greyfox
Yeah, tonight I'll post a log. I hope you guys can help me this time. Thank you, I'll get back shortly.
Zero V2:
What version of Spybot - Search & Destroy are you running (Spybot » Help » About)?
If you are not running Spybot 1.6.0.30 or above, consider upgrading. The downloads are located here:
- Mirror selection - The home of Spybot-S&D!
http://www.spybot.info/en/mirrors/index.html
If you are running Spybot 1.6.0.30 or above, there are two things that you can try to get rid of the things that Spybot-S&D is having difficulty removing:
- Try to run Spybot the next time you reboot.
- Go into Spybot > Mode > Advanced mode > Settings > Settings > look for "System start" (located half way down the page).
- Check the option: "Run program once at next system startup".
- Reboot the system.
Note: The "Run program once at next system startup" adds a startup entry to the RunOnce registry key which will start Spybot before other startup entries in the normal Run registry key.
- Run Spybot in Safe mode.
- Reboot your system in Safe mode and run Spybot-S&D.
If Spybot still fails to correct the problem, consider posting in the Malware Removal forum and having someone take a look at your system.
If you decide to have an experienced malware removal specialist assist you, please follow the procedure in this link to run scans and produce a HijackThis log:
After you have completed the required scans and produced the requested logs, start your own thread in the Malware Removal forum, making sure to post the HijackThis log produced from the above instructions.[/QUOTE]