Virtumonde Help (log inside)

infinity13 · Sep 6, 2008

Have had it for a week or so, I don't get any of the popups telling me to buy new software or anything. I am really just unable to change my desktop, nothing else seems to be wrong minus some slowing at times but it may be me paranoid. My desktop is currently the "Windows warning message" telling me i've been infected with virtumonde.

O4 - HKLM\..\Run: [windows] C:\WINDOWS\\\\\\\\\\\\\\
Shows up but my windows folder has been opening at the start of my computer for about a year now and nothing has seemed to happen.

O4 - HKCU\..\Run: [svchost] C:\Windows\svchost.exe
I read that SVchost was supposed to be in my win32 folder meaning this would be in the wrong place and could be bad? I don't know for sure though.

O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
I've tried to delete this twice now, I never had AOL installed on this computer. When I bought it, it came with some kind of lame free trial but I deleted it yet this keep showing up.

I appreciate any and all help, if there is anyway for me to donate or help out after this is resolved I will. Thank you.

TimW · Sep 6, 2008

Welcome to Major Geeks!

Please uninstall HJT as it will be properly installed when you do the following:

Please follow the instructions in the below link and attach the requested logs when you finish these instructions.

If something does not run, write down the info to explain to us later but keep on going.

Do not assume that because one step does not work that they all will not.

READ & RUN ME FIRST. Malware Removal Guide

Note:

1. If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode. You can running steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

2. If you have problems downloading on the problem PC, download the tools on another PC and burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.

Log in or Sign up

Virtumonde Help (log inside)

infinity13 Private E-2

Attached Files:

hijackthis.log

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member