When I was infected with "virtuemonde", I had AVG running on my computer. AVG did not detect it. Adaware did and could not remove it.
I downloaded spy bot search and destroy and it detected even more then adaware, and I again tried to remove it and a few others (smityfraud or something like that). Spy bot S&D did remove all except "virtuemonde".
I then ran trend micro house call, and something shut down firefox while it was running.
I called dell for customer support and a rep logged onto my computer remotely and messed with some stuff, after a hour, he said the computer need to be completely formatted and windows reinstalled. The problem is, I am a student in college and bought Microsoft Office through a download program (no backup disk) and if I format my computer, I will lose Microsoft office (which I use for college) and have to buy it again. So I am not thrilled about formatting the HD.
So I then read somewhere that PC Tools Spyware Doctor w/Antivirus could remove virtuemonde and the "rootkits", so I tried a free trail of it, and it said it removed it (which it also detected some other programs and removed them too), but like Spybot S&D, it removed everything BUT virtuemonde.
So then I did some more research and heard that Webroot Antivirus w/Anti spyware was really good, so I bought a new version of that and updated it and ran a full sweep. It detected virtuemonde and attempted to remove it, then a warning popped up saying "virtuemonde is attempting to replicate itself using active x... etc, do you want to block it?" in which I replied "yes". Webroot also blocked a bunch of websites that my computer was trying to access. Since the installation of webroot, and a few full sweeps, my computer has speed up a lot, and is now down to ONE repeating virtuemonde. It says the memory is clean when sweeping, but finds virtuemonde in the registry, the files are also all clean. Even though webroot quarantines virtuemonde each time, and I have gone and deleted the quarantine files, it still always detects one more virtuemonde in the registry with every new scan. Again, things seem to be under control for the most part now that Webroot is running on my PC, but it can't seem to get rid of this last virtuemonde in the registry.
Also, I removed the other antispyware programs before installing the next program, so they don't conflict with each other, so now only Webroot Antivirus with Anti-Spyware is on my computer.
Any help would be greatly appreciated!
Edited by blinn79, 25 January 2009 - 03:41 AM.