Virtumonde.prx

[szilvasi]

Could you please help me out of my misery. My PC is infected with Virtumonde.prx at least Spybot tells so and certainly can't get rid of the infected files.

I' ve studied some earlier posts and request on the same problem, yet I'm afraid I still need a step-by-step guide on what to do.

Thank you for your help.
Best regards,
Szilvasi

sorry, if it's not the right way to request assistance

[ken545]

Hello szilvasi

Welcome to Safer Networking.

Please read Before You Post (http://forums.spybot.info/showthread.php?t=288)
That said, All advice given by anyone volunteering here, is taken at own risk.
While best efforts are made to assist in removing infections safely, unexpected stuff can happen.
It is advisable that you back up your personal data before starting any clean up procedure.

Download Trendmicros Hijackthis (http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe) to your desktop.

Double click it to install
Follow the prompts and by default it will install in C:\Program Files\Trendmicro\Hijackthis\Highjackthis.exe
Open HJT Scan and Save a Log File, it will open in Notepad
Go to Format and make sure Wordwrap is Unchecked
Go to Edit> Select All.....Edit > Copy and Paste the new log into this thread by using the Post Reply and not start a New Thread.

DO NOT have HijackThis fix anything yet. Most of what it finds will be harmless or even required.

[szilvasi]

Thank you Ken55. The combined use Spybot and another spyremover solved my problem, maybe not forever, but Virtumonde.prx files and registry have disappeared when running either scans. Also my Internet Explorer is not redirected any more.

Is it worth installing what you recommended and posting the search log anyway?

Thank you again.
Best regards:
Szilvasi

[ken545]

Hello,

I would, almost 99.999999% of people that think they fixed the problem did not.

Ken :)