Virtumondo

Discussion in 'Malware Help (A Specialist Will Reply)' started by zorfox, Apr 14, 2006.

  1. zorfox

    zorfox Private E-2

    Hi,

    I have had Virtumondo for quite a while (according to Microsoft AntiSpyware), I never did anything about it because it only seemed to pop up when opening Internet Explorer which I don't use. However now whenever I run Ad-Aware (which never noticed it before) the computer crashes after finding 1 Module. I don't know for certain if this is due to Virtumondo but I will try anything. There are no ill symptoms besides this but I don't like the idea of there being something on my computer I can't get rid of.

    Attached is my HijackThis log. I would appreciate it much if someone could help me get rid of this.

    The windows\repair\msvccmd.dll file seems to be the root of the trouble but I can't get rid of it. I even restarted in Safe Mode w/ Command prompt, and it still said that the file was 'in use.' Microsoft Antispyware reports it as part of the infection.

    Thank you.
     

    Attached Files:

    zorfox, Apr 14, 2006
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    Please do not post HijackThis logs without having run the READ & RUN ME sticky thread as required. HijackThis is the last step not the first step. Also covered in the sticky threads (which should have been read before posting) is Virtumonde removal steps.

    Run this ---->>> Virtumonde aka Trojan Vundo Removal -

    And attach the VundoFix log.
     
    chaslang, Apr 14, 2006
    #2
  3. zorfox

    zorfox Private E-2

    Sorry about that. I looked at the thread just now and I will do this as soon as I can get on a decent network (I just cant download anything larger than a few KB right now.)

    Also I will be unable to run Ad-Aware (as this is the very problem-- it crashes after finding one item. Incidentally before a few days ago, it would only detect Tracking Cookies, never a Module.) Also I will not run Windows Defender; I tried this yesterday, and it found Virtumondo, but when I allowed it to clean it didn't go away.) I already ran Microsoft Malicious Software Removal (oddly it found nothing even though there is clearly something.)

    Until I can get on a good network I will try to ignore the problem. It's not that bad an infection, I jsut don't like that there's anything on here that is even potentially dangerous.

    Thanks again.
     
    zorfox, Apr 15, 2006
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I'm not sure what you mean by a decent network???

    VundoFix is not that large. It is around 78 k. Get it and run the steps. It will help.
     
    chaslang, Apr 15, 2006
    #4
  5. zorfox

    zorfox Private E-2

    It worked! Thank you so much! I couldn't find the VundoFix logfile but I ran Ad-Aware and it doesn't crash, and IE doesn't produce pop-ups.

    Thanks again.
     
    zorfox, Apr 15, 2006
    #5
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Make sure you follow the steps in the below because you had more malware problems to fix.

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.
    • Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
    • Make sure you check version numbers and get all updates.
    • Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.
    • After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:
    • When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)
      • Bitdefender
      • Panda Scan
      • HijackThis
    .
     
    chaslang, Apr 16, 2006
    #6

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds