Gotta nasty adware bug

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by MadBrewer, Sep 22, 2005.

  1. MadBrewer

    MadBrewer Private E-2

    Howdy all
    this is my firstpost so bear with me. My fathers computer has a an adware bug that I can't get rid of. it comes up on his norton as Adware.VirtuMonde. I have followed all the instructions from Norton, downloaded the removal tool, and tried the manual removal instructions. But I can't find the offending files and registry keys that it says I should remove. I have turned off system restore, and shown the hidden file still nothing. I have downloaded Highjack This. and at least one of the files does show up there. could someone take a look at my Highjack This log and advise.

    Respectfully
    MadBrewer
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Yes! You do have Virtumundo problems along with MyWay Search Assistent. You will have to follow the steps given in our READ ME FIRST sticky thread and then we can help you. Or you can try doing it yourself using the below thread as a guide (see message # 8):

    http://forums.majorgeeks.com/showthread.php?t=71695

    Your Vundo lines are:
    O2 - BHO: MSEvents Object - {827DC836-DD9F-4A68-A602-5812EB50A834} - C:\WINDOWS\Cursors\cateula.dll
    O20 - Winlogon Notify: cateula - C:\WINDOWS\Cursors\cateula.dll
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds