I just got infected with VirtuMonde this morning. Spybot seemed to have get rid of various versions (after 2 or 3 scans) but it seems I still have a pb.
I got this tuvTkkiJ.dll in my /WINDOWS/system32 folder. I had a very hard time(KillBox ineffective) getting rid of it but it's gone now.
Still, I can't enable Windows Automatic Update, so I guess something's still wrong.
After running Spybot, I tried :
- SmitFraudFix (nothing found)
- DrWeb Cureit (both express and complete scan did not find anything)
- VundoFix (nothing found)
- VirtumundoBeGone (it identified the above mentioned .dll as potentially Virtumonde and sucessfully removed it)
- FixVundo (nothing found)
I ran accross the web to find any suggestion for my problem and found a thread in here where somebody had a very similar problem. The solving involved using OTscanit, but I have no clue how to use it (I downloaded also ComboFix, but did not dare to use it for the same reason)
BTW, I'm using XP Professional on a lenovo T60 laptop.
Any help would be greatly appreciated,
Edited by Tohan, 22 October 2008 - 11:42 AM.