Virtumonde Help

You will need to tell me exactly what is being reported as I am not seeing any malware in your logs. I need the exact path. Attach a log if you have it.

 

Exact path would be something like:
C:\Windows\system32\amdpcom32.dll
or
C:\Users\%username%\Desktop\D.lnk

The program should give you a way to save the log which should show what the infected file (s) are. Or you can copy and paste them into notepad and attach that to your next reply.

 

How do you know it is reporting Virtumonde? Yes, the log is clean as were your other logs. So what is being reported that you are "seeing" while it runs?

 

Are you sure those are not files that it is protecting you from? Virtumonde.dll, Virtumonde.sdn, Virutumonde.sci means nothing unless it gives you a "path" to the file in question. The name itself means nothing.

 

Yes, you are malware free. For some educational assistance, I suggest you post in the software forum for any questions you have regarding that program. They will be more than happy to answer any questions you may have.

If you are not having any other malware problems, it is time to do our final steps:

1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
   
   • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
   • "%userprofile%\Desktop\combofix" /uninstall
     
     • Notes: The space between the combofix" and the /uninstall, it must be there.
     • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
4. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
5. Go to add/remove programs and uninstall HijackThis.
6. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
7. If you are running Vista, Windows XP or Windows ME, do the below:
   
   • Refer to the cleaning procedures pointed to by step 6 of the READ ME for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
   • Then reboot and Enable System Restore to create a new clean Restore Point.
8. After doing the above, you should work thru the below link:
   
   • How to Protect yourself from malware!