please help me remove virumonde [Archive]

bmfb1980

2008-01-13, 04:47

I haven't had a virus or any problems in 15 years on a PC because I am careful. Yesterday I accidentally hit "enter" on a file that I was going to delete... and bam.

Now I can't get rid of this thing.

PLEASE tell me how! I have no idea what to do or where to go. I am using spybot, adaware and trendmicro's housecall just to keep the infection from spreading but it's an ongoing battle.

I reinstalled XP to no avail :( I'm thinking I'll just reformat and go with that, since I already wasted 10 hours reinstalling all the support software only to have that damn worm come back....

km2357

2008-01-13, 08:21

Hello and welcome to Safer Networking Forums.

My name is km2357 and I will be helping you to remove any infection(s) that you may have.

Since I am still in training, I have to let experts check the content of my fixes before I post them so please be patient.

I will be giving you a series of instructions that need to be followed in the order in which I give them to you.

If for any reason you do not understand an instruction or are just unsure then please do not guess, simply post back with your questions/concerns and we will go through it again.

Please do not start another thread or topic, I will assist you at this thread until we solve your problems.

Lastly the fix may take several attempts and my replies may take some time but I will stick with it if you do the same.

I will be back as soon as possible with your first instructions!

Step # 1: Download and Run HijackThis
Download HJTInstall.exe (http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe) to your Desktop.

Doubleclick HJTInstall.exe to install it.
By default it will install to C:\Program Files\Trend Micro\HijackThis .
Click on Install.
It will create a HijackThis icon on the desktop.
Once installed, it will launch Hijackthis.
Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
Copy/Paste the log to your next reply please.

Don't use the Analyse This button, its findings are dangerous if misinterpreted.
Don't have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

Step # 2: Make an uninstall list using HijackThis
To access the Uninstall Manager you would do the following:

1. Start HijackThis
2. Click on the Config button
3. Click on the Misc Tools button
4. Click on the Open Uninstall Manager button.
5. Click on the Save list... button and specify where you would like to save this file. When you press Save button a notepad will open with the contents of that file. Simply copy and paste the contents of that notepad here on your next reply.

Step # 3 Post Logs

In your next post/reply, I'd like to see the following:

1. HiJackThis Log
2. Uninstall List

If you can't fit all the logs into one post/reply, then use multiple posts/replies to get all the logs in.