Help With VirtuMundo

Please do not double post in forums. You should only post one message in one forum and work your problem there. We have procedures that must be followed before posting HJT logs and they are supposed to be attachments. These procedures are given below but I do not believe it is a malware problem and you do not have a Virtumundo problem.

Please follow the steps below:

- Now run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

The only item in your log I question why you have is:
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch

 

Just have HijackThis fix that single R1 line but do not click Fix until all browsers are closed.

Is your PC working okay?