I cant remove : adWare.Win32.Virtumonde.jp...!

H

headstrong

Expert Member
Joined
May 10, 2006
Messages
1,099
Reaction score
0
Hi Guys

I have tried nod32 / Spybot S & D / Zone alarm and i still cannot remove the above mentioned adWare!!!

Any suggestions on how to remove it?

Thanks
 
http://www.superantispyware.com/supe...freevspro.html
I believe this may help:

Install it and double-click the icon on your desktop to run it.
· It will ask if you want to update the program definitions, click Yes.
· Under Configuration and Preferences, click the Preferences button.
· Click the Scanning Control tab.
· Under Scanner Options make sure the following are checked:
o Close browsers before scanning
o Scan for tracking cookies
o Terminate memory threats before quarantining.
o Please leave the others unchecked.
o Click the Close button to leave the control center screen.
· On the main screen, under Scan for Harmful Software click Scan your computer.
· On the left check C:\Fixed Drive.
· On the right, under Complete Scan, choose Perform Complete Scan.
· Click Next to start the scan. Please be patient while it scans your computer.
· After the scan is complete a summary box will appear. Click OK.
· Make sure everything in the white box has a check next to it, then click Next.
· It will quarantine what it found and if it asks if you want to reboot, click Yes.

Let me know how this helped.
 
Last edited:
My usual way is to use 2 tools from sysinternals.com:
1 - Process Explorer : To get the location of the worm's exe's ( there will be more than 1 exe keeping it alive )

2 - Autoruns : To stop the files from being launched at windows startup.

I use process explorer to get the filenames of the processes running, they're easy to spot, they're not "Microsoft" processes, and if you try to kill them, they just re-appear. I then write down the names and locations of the executables.

I then boot to safe-mode, and delete the executables, and any other files that are created, (search by file-date). Then I use autoruns and remove anything that I don't know from the system startup procedures.

Then I boot normally, and check what's running with Process Explorer again.

There you go .. clean as a whistle.
 
used to have that

i just used AVG then updated, restarted, scanned, then deleted

updating is real important hey
 
I wrote a long post about this some time back.
Some tools that come to mind:
Killbox
HiJackThis
Silent Runners.vbs
Process monitor

Get the location of the exe and then nail it with Killbox. Also make sure you're IE&Explorer extensions are clean. Also consider cleaning out the system restore folder.

If you not to technically minded then just do an online scan.

@Stoke: You'll like Killbox. That thing can nail ANYTHING irrespective of whether the exe is running or not. One could probably wipe the entire OS while its running.
 
Thanks guys! I manged to remove the problems thanks to your recommendations!!
 
This is a really nasty one - the last time i was infected by it, it was a new version of malware which only Avast detected. :(
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X