Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Recurring Problem With Virtumonde Adware

  • Please log in to reply
1 reply to this topic

#1 dirtbiker


  • Members
  • 1 posts
  • Local time:05:29 AM

Posted 30 June 2007 - 12:51 PM

Hello, I'm new here. As with other folks who have posted here, I came upon this forum and thought I'd give it a try.

I have an XP Home Edition SP1 running the latest Microsoft updates and latest Java (updated after being infected by spy/adware). I have ZoneAlarm, McAffee, AOL Spyware Protection & Spy Sweeper running in the background.

Somehow I got infected with several spy/adware trojans and I was able to get rid of most of them, but VIRTUMONDE seems to be detected, but never permanently removed.

VIRTUMONDE appears to keep recurring and I think I've traced it to when I open a new IE window. When that happens, the Privacy settings are reset to allow all cookies even though it was set to block cookies. If I open a copy of another IE window from an already opened IE window, the settings remain unchanged. So I believe the actual opening of a new IE window is when this malware gets activated.

Any help would be greatly appreciated. I've opened a ticket with the makers of Spy Sweeper, but haven't gotten a reply from them yet.


BC AdBot (Login to Remove)


#2 buddy215


  • Moderator
  • 13,505 posts
  • Gender:Male
  • Location:West Tennessee
  • Local time:06:29 AM

Posted 30 June 2007 - 01:51 PM

Removal instructions in link below.

Super Antispyware has success removing it, also.
Install Super Antispyware. Run it in safe mode. Allow it to quarantine whatever it finds.

Post a Hijack This log in the Hijack This Forum by following the directions in the link below if the programs above have not removed ALL malware. DO NOT post the log in this forum.
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users