PDA

View Full Version : Plz Help With Virtumonde!!!



darian_harris07
2007-06-24, 05:15
OKAY SO I AM HAVING A HARD TIME TRYING TO GET RID OF THIS. I TRIED SPYBOT 8x + AND IT NEVER REMOVES IT?!?! SO PLZ SOMEBODY HELP ME TO REMOVE THIS... ALSO EVERYTIME I START UP MY NOTEBOOK, I GET THIS MESSAGE THAT ASKS ME TO WORK OFFLINE OR TRY AGAIN, ITS ASKING LIKE SOME PROGRAM IS TRYING TO ACCESS THE INTERNET. I CHECKED AND ITS spoolsv.exe HOW DO I FIX THIS PROBLEM TOO :)... AND 1 MORE ?.. FOR ABOUT THE LAST 3 DAYS EVERYTIME I RUN SPYBOT, AT THE END WHERE IT SHOWS YOU THE SPYWARE, ITS SAYS SOMETHING LIKE MICRSOFT IE FIREWALL BYPASS AND MICROSOFT APP FIREWALL BYPASS?? IS SOMETHING BYPASSING MY FIREWALL, THAT IS CAUSING ALL THIS GRIEF??? - THANKS IN ADVANCE ;-)

pskelley
2007-06-24, 15:08
Welcome to Safer Networking, I wish to be sure you have viewed and understand this information. "BEFORE you POST" (READ this Procedure before Requesting Assistance)
http://forums.spybot.info/showthread.php?t=288
All advice given is taken at your own risk.
Please make sure you have read this information so we are on the same page.

spoolsv.exe is more than likely this: http://www.liutilities.com/products/wintaskspro/processlibrary/spoolsv/

What I would like you to do is this.

1) Turn off caps lock

2) Follow the directions I posted above, which are also posted at the top of the forum.

3) When it comes time to download HJT, use these instructions:
Download Trend Micro Hijack This™
http://hijack1.trend-braintree.com/hjt/eval/HijackThis.exe
Download it to your Program Files folder.
Doubleclick the HijackThis_V2.exe to start it.
Click "Do a System Scan and save a logfile"
This will create a HijackThislog.
Copy and paste the contents of the log in your next reply

4) Few programs can remove a Vundo infection, keep your computer offline as much as possible until we get it clean.

Thanks

pskelley
2007-07-02, 00:21
This topic is closed due to lack of a response.

Thanks