Vundo/ Virtumonde Infection among others

Discussion in 'Malware Help (A Specialist Will Reply)' started by monalisa, Jan 12, 2009.

  1. monalisa

    monalisa Private E-2

    Hello,

    I completed the recommended steps. Looks like laptop is still infected. Pls take a look at the attached logs.
    Thanks.
    Monalisa
     

    Attached Files:

  2. monalisa

    monalisa Private E-2

    Here is the combofix log.
     

    Attached Files:

  3. monalisa

    monalisa Private E-2

    I understand that I shouldn't repeat posts, but I am writing again only after waiting for a few days.

    Can someone pls review my logs and help me get rid of the vundo and virtumonde infections?

    Any help is truly appreciated.

    Thanks.

    Monalisa
     
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Actually the "bump" cost you more time. We are extremely busy at the moment but do get to everyone as they come up in the queue.

    You need more ram:
    Code:
    Total Physical Memory    512.00 MB    
    Available Physical Memory    100.60 MB
    
    Run this: Disable/Remove Windows Messenger to remove Windows Messenger. Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.

    Please disable all anti-virus and anti-spyware programs while we do the following ( be sure to re-enable when we are finished):


    Run C:\MGtools\analyse.exe by double clicking on it. (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    NOTE: HJT may popup an error about the AppInit_DLLs line. Ignore it and click OK to continue.

    After clicking Fix, exit HJT.

    Now Copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. Then attach the new C:\MGlogs.zip file and tell me how things are running.
     
  5. monalisa

    monalisa Private E-2

    Hi,

    I followed the steps and attached is the log. Pls suggest what next to do.
    THanks.
    Monalisa
     

    Attached Files:

  6. monalisa

    monalisa Private E-2

    Pls ignore the previous msg in this thread - inadvertantly I replied to this old post - I wanted to post all my logs separately for a new set virus issues thats plaguing my laptop now.
     
  7. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Are you saying that the MGLog that you attached is not for the computer we were working on in January and you never came back to finish?
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds