PDA

View Full Version : Spybot Can't Kill Virtumonde



Gscorp
2008-05-29, 22:22
Spybot finds Virtumonde and fixes it and then it keeps coming back. Sorry for the dumb question, but I'm not sure how to provide you guys with the complicated information logs for my problem--do i get the "Hijackthis" thing first? And then that generates the log? Thank you in advance.
Greg

drragostea
2008-05-30, 00:25
Looks like you got the persistent Virtuemonde trojan. Sorry to hear that. Post a new thread with your Hi-jack thread. A malware removal volunteer will help you ASAP.
------
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download
-----
Download the Hijack this program. Further instructions will be provided once you post a thread.
-------------------------------------------------------------------------------------------------
Consider posting in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum and having someone take a look at your system.

If you decide to have an experienced malware removal specialist assist you, please follow the procedure in this link to run scans and produce a HijackThis log: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) ( http://forums.spybot.info/showthread.php?t=288).
-------

But first, read the BEFORE YOU POST. Good luck and welcome to the forums.

Gscorp
2008-05-30, 01:08
Thanks for responding. I attached the hijackthis log to this post. Please let me know what I should do next.
Greg

drragostea
2008-05-30, 01:18
Sorry if I didn't make it clear. I'm not "authorized" to help you with this problem, lols. To make it simple: I cannot help you. Not only is the wrong place to post it, I can't help you.
------------------
Consider posting in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum and having someone take a look at your system.

If you decide to have an experienced malware removal specialist assist you, please follow the procedure in this link to run scans and produce a HijackThis log: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) ( http://forums.spybot.info/showthread.php?t=288).
---------------
Read the BEFORE YOU POST, and then post a log in the Malware Forums. You should be able to find it with no problems.

Yodama
2008-05-30, 08:18
To fix Virtumonde you will need to restart the computer and let Spybot S&D scan and fix again.
To make sure that Virtumonde does not persists, you should reboot the computer after the second scan and fix procedure again. If there are still traces of Virtumonde found at that point please create a full Spybot S&D log by right clicking on the results screen and select to save the full report to a file.
Email this report file to detections@spybot.info with a reference to this thread.