Results 1 to 2 of 2

Thread: New Victim: Virtumonde - et. al. fix request

  1. #1
    Junior Member
    Join Date
    Feb 2008

    Default New Victim: Virtumonde - et. al. fix request

    Dear S&D Forum,

    I consider myself moderately computer literate, but probably a newbie in this crowd. I have a WinXP PC and I’ve used the personal version of Spybot S&D over the past year or so with great results. Thank you for a great product. Together with Lavasoft’s Ad-Aware and Avast Aniti-Virus as well as the regular XP updates, it has kept my PC relatively problem-free… until now. It’s probably my fault but last night I decided to have my first go at “torrent downloading” (I’m still working out what that is exactly). My motivation was to get an old TV show for research purposes. BitZip by Miro looked like a decent client. In the process I found HiDownload with keygen by CORE that I wanted to test for saving streaming media files. But that’s when my problems started. I’ve tried using S&D several times but each time I re-scan to “fix problems” it crashes.

    Below is the S&D printout that I made before trying to fix problems for the nth-time. Will you please help me?

    Virtumonde: [SBI $42352499] User settings (Registry key, nothing done)
    Virtumonde: [SBI $47E741CD] Settings (Registry key, nothing done)
    Virtumonde: [SBI $7342F9D9] Settings (Registry key, nothing done)
    Virtumonde.Dll: [SBI $5573B661] Library (File, nothing done)
    AdRevolver: [SBI $4CDCC3D5] Tracking cookie (Internet Explorer: Majsan) (Cookie, nothing done)
    AdRevolver: [SBI $4CDCC3D5] Tracking cookie (Internet Explorer: Majsan) (Cookie, nothing done)
    DoubleClick: [SBI $4CDCC3D5] Tracking cookie (Internet Explorer: Majsan) (Cookie, nothing done)
    HitBox: [SBI $4CDCC3D5] Tracking cookie (Internet Explorer: Majsan) (Cookie, nothing done)
    HitBox: [SBI $4CDCC3D5] Tracking cookie (Internet Explorer: Majsan) (Cookie, nothing done)
    Tradedoubler: [SBI $4CDCC3D5] Tracking cookie (Internet Explorer: Majsan) (Cookie, nothing done)
    BurstMedia: [SBI $4CDCC3D5] Tracking cookie (Firefox: default) (Cookie, nothing done)
    BurstMedia: [SBI $4CDCC3D5] Tracking cookie (Firefox: default) (Cookie, nothing done)
    Common Dialogs: [SBI $4CDCC3D5] History (2 files) (Registry key, nothing done)
    MS Office 9.0: [SBI $4CDCC3D5] Recently used files (14 files) (Directory, nothing done)
    C:\Documents and Settings\Majsan\Application Data\Microsoft\Office\Recent\
    Log: [SBI $4CDCC3D5] Activity: COM+.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Activity: SchedLgU.Txt (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Activity: imsins.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Activity: OEWABLog.txt (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Install: comsetup.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Install: Directx.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Install: ocgen.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Install: setupact.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Install: setupapi.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Install: setuplog.txt (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Install: svcpack.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Install: wmsetup.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Install: DtcInstall.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Shutdown: System32\wbem\logs\mofcomp.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Shutdown: System32\wbem\logs\setup.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Shutdown: System32\wbem\logs\wbemcore.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Shutdown: System32\wbem\logs\wbemess.lo_ (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Shutdown: System32\wbem\logs\wbemess.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Shutdown: System32\wbem\logs\wbemprox.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Shutdown: System32\wbem\logs\wbemsnmp.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Shutdown: System32\wbem\logs\winmgmt.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Shutdown: System32\wbem\logs\wmiadap.log (Backup file, nothing done)
    Log: [SBI $4CDCC3D5] Shutdown: System32\wbem\logs\wmiprov.log (Backup file, nothing done)
    Cookie: Cookie (290) (Cookie, nothing done)
    Cache: Cache (8035) (Cache, nothing done)
    History: History (1376) (History, nothing done)
    Cookie: Cookie (697) (Cookie, nothing done)
    --- Spybot - Search & Destroy version: 1.5.2 (build: 20080128) ---
    2008-01-28 blindman.exe (
    2008-01-28 SDDelFile.exe (
    2008-01-28 SDMain.exe (
    2007-10-07 SDShred.exe (
    2008-01-28 SDUpdate.exe (
    2008-01-28 SDWinSec.exe (
    2008-01-28 SpybotSD.exe (
    2008-01-28 TeaTimer.exe (
    2005-10-03 unins000.exe (
    2008-02-14 unins001.exe (
    2008-01-28 Update.exe (
    2008-01-28 advcheck.dll (
    2007-04-02 aports.dll (
    2005-05-31 borlndmm.dll (
    2005-05-31 delphimm.dll (
    2007-11-17 DelZip179.dll (
    2008-01-28 SDFiles.dll (
    2008-01-28 SDHelper.dll (
    2008-01-28 Tools.dll (
    2005-05-31 UnzDll.dll (
    2005-05-31 ZipDll.dll (
    2008-02-13 Includes\ (*)
    2007-11-06 Includes\Beta.uti (*)
    2008-02-13 Includes\ (*)
    2007-12-26 Includes\ (*)
    2008-02-13 Includes\ (*)
    2008-02-13 Includes\ (*)
    2008-02-13 Includes\ (*)
    2008-02-13 Includes\ (*)
    2008-02-13 Includes\ (*)
    2008-02-13 Includes\ (*)
    2004-11-29 Includes\ (*)
    2008-02-13 Includes\ (*)
    2008-02-13 Includes\ (*)
    2007-10-24 Includes\ (*)
    2008-02-13 Includes\ (*)
    2008-02-13 Includes\ (*)
    2008-01-09 Includes\ (*)
    2008-02-13 Includes\ (*)
    2008-02-13 Includes\ (*)
    2008-02-13 Includes\ (*)
    2007-11-06 Includes\Tracks.uti
    2008-02-13 Includes\ (*)
    2008-02-13 Includes\ (*)
    2007-12-24 Plugins\TCPIPAddress.dll

  2. #2
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005


    Consider posting in the Malware Removal forum and have someone take a look at your system.

    If you decide to have an experienced malware removal specialist assist you, please follow the procedure in this link to run scans and produce a HijackThis log:
    After you have completed the required scans and produced the requested logs, start your own thread in the Malware Removal forum, making sure to post the logs produced from the above instructions.

    Getting an answer is one thing, learning is another.

    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts