cant get rid of virtumonde...

[shmisaac]

Hi I've run the spybot scan several times and removed virtumonde on every occasion but it keeps coming back, even in periods of minutes. I've tried disconnecting my computer from the internet, ran the scan, removed it and rebooted. But it still comes back, wondering if you could help.

[ken545]

Hello shmisaac

Welcome to Safer Networking.

You need to read this, don't know how you missed it???

Please read Before You Post (http://forums.spybot.info/showthread.php?t=288)
That said, All advice given by anyone volunteering here, is taken at own risk.
While best efforts are made to assist in removing infections safely, unexpected stuff can happen.

Download Trendmicros Hijackthis (http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe) to your desktop.

Double click it to install
Follow the prompts and by default it will install in C:\Program Files\Trendmicro\Hijackthis\Highjackthis.exe
Open HJT Scan and Save a Log File, it will open in Notepad
Go to Format and make sure Wordwrap is Unchecked
Go to Edit> Select All.....Edit > Copy and Paste the new log into this thread by using the Post Reply and not start a New Thread.

DO NOT have HijackThis fix anything yet. Most of what it finds will be harmless or even required.