Virus found: Troj/Virtum-Gen

Tspherix · Jan 19, 2008

Hello! I really need some help. I run Tspherix computer Services, and I've found this Troj-Virtum/Gen crap on my clients laptop. It kills his IE and it runs and boots so slow.. couldn't remove it, and told him I'd get back to it asap after researching it more. A week or so later, and now its on MY Main Desktop and I can't remove it there either. Webroot Spy Sweeper Wont remove it.. Quarentine FAILED. Latest Spysweeper report:

Troj/Virtum-Gen
C:\WINDOWS\system32\lepgvwmt.dll
C:\WINDOWS\system32\lepgvwmt.dll
Troj/ChookDll-A
D:\System Volume Information\_restore\A0012969.dll

SpySweeper Quarantines 1 of the two lepgvwmts, and Ignores the restore thing.
How can I destroy these things???!!! and how do I get it off the laptop when That one seems really hopeless!? HELP!
(I've included a HijackThis scan txt)

DavidGP · Jan 20, 2008

Welcome to Majorgeeks!

As you likely already know is that malware is a massive pest these days and does its level best to hide itself in any number of places, So just a Hijackthis log will not show all the malware that can be on your PC, the full guide of our steps below has a few other logs that show alot of the malware on your PC and where they are located, so please follow the below to help us help you

Please follow the instructions in the below link and attach the requested logs when you finish these instructions.

READ & RUN ME FIRST. Malware Removal Guide

After these are attached our malware experts will review these to see if your OK, if not they will issue you some further removal instructions,

So logs that you will get to attach are:

MGlogs.zip (which has 5 logs inside it, including Hijackthis, just attach the whole Zip )
AVG log. ( Which is the report scan txt file )
Combofix logs.

http://img117.imageshack.us/img117/829/60272555mm4.jpg

Log in or Sign up

Virus found: Troj/Virtum-Gen

Tspherix Private E-2

Attached Files:

hijackthis note.txt

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member