Virtumonde Infection

[kswilson33]

I picked up the Virtumonde trojan and (even though I thought I fixed it) I am still having problems. First, I ran Spybot multiple times. It kept finding and "fixing" the problem, but then on restart it would find the problems again and "fix" them. That didn't seem to work, so I found a forum (not this one) that had a page devoted to helping get rid of Virtumonde. It said to run vundofix.exe. That did not find anything after running it. The forum then said to run VirtumundoBegone in safe mode. That seemed to find something and fix it, but only for a while. When another pop up came, I ran search and destroy. That "fixed" the problem. I rebooted, and Spybot automatically ran again. It found no problems. I thought everything was ok, but it is acting up again now.

Long troubleshooting up there, but I am now looking for some professional help. Anyone out there willing to help me.

-Kevin

[tashi]

Hello,

In order for one of our volunteer helpers to advise you when available, please follow the procedure in this sticky to produce the HJT log.

"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

Do NOT run 'fixes' before helpers have analyzed the HJT log (http://forums.spybot.info/showthread.php?t=16806)

Then start a new topic with the HijackThis log and provide a link to this thread in your new topic.

This thread will then be closed as helpers look for members without a response.

Regards. :)