Virtumonde problem here, too...

[karnor]

I have used Spybot S&D to remove it several times, disconnected from the internet, restarted, etc. Sometimes it shows that it's clean, but now it's still showing it's infected although Spybot said it was corrected. I used RegAlyzer to go in and delete the registry key it referred to with more luck, but it's still showing up.

Any help would be appreciated.

 

[karnor]

don't know if it's any help or not...

but while looking at the resident log, it showed several files "user allowed" which was impossible because no one was at home at the time. I recognize some of these files from the 10 pages that I downloaded last week from Spybot of registry keys, etc. to search for and destroy.

 

[Shaba]

Hello karnor

Please see this next

Please follow the instructions in the above thread and then start a fresh topic with the logs required.

Regards.