Question about Computers & Internet

1 Answer

Virtumonde virus/spyware My Dell laptop which is running Norton Internet 2008 and Win xp is infected with the Virtumonde virus. How can I get rid of it? Thanjs

Posted by on

  • Hankl78 Jun 17, 2008

    Thank you. This seems to have solved the problem

×

1 Answer

  • Level 2:

    An expert who has achieved level 2 by getting 100 points

    Hot-Shot:

    An expert who has answered 20 questions.

    Corporal:

    An expert that has over 10 points.

    Mayor:

    An expert whose answer got voted for 2 times.

  • Expert
  • 45 Answers

One of the first things you can try is a program called Vundofix. (http://vundofix.atribune.org/). But in my experience it only removes about 60% of cases. Depending on your expertise, your comfort level with command line and how important your data on your computer is. You have a couple of options:
1. You could reformat your computer (This has the down side of removing all of your data and programs but is much faster and easier than the other fixes)
2. You could (with guidance ie.me) try to remove it yourself (This has the down side of being time consuming but will save all of your information and will have the satisfaction of a job well done)
3. Take it in to a professional (Virtuemonde is one of the top 3 infections I see everyday in my line of work)

Posted on Jun 15, 2008

1 Suggested Answer

6ya6ya
  • 2 Answers

SOURCE: I have freestanding Series 8 dishwasher. Lately during the filling cycle water hammer is occurring. How can this be resolved

Hi,
a 6ya expert can help you resolve that issue over the phone in a minute or two.
best thing about this new service is that you are never placed on hold and get to talk to real repairmen in the US.
the service is completely free and covers almost anything you can think of (from cars to computers, handyman, and even drones).
click here to download the app (for users in the US for now) and get all the help you need.
goodluck!

Posted on Jan 02, 2017

Add Your Answer

Uploading: 0%

my-video-file.mp4

Complete. Click "Add" to insert your video. Add

×

Loading...
Loading...

Related Questions:

1 Answer

Virus-worms


Try to download and install AVG Free at http://free.avg.com/us-en/download.prd-afg. Very good free anti-virus. Note they do have a paid version as well, but usually the free version is good enough.

I also recommend downloading and installing spybot from download.com. Its very good at identifying and removing spyware. You will need to run it monthly.

Mar 26, 2010 | Symantec Norton AntiVirus 2008: Windows

4 Answers

Virus MS AntiSpyware 2009


HI,

Your PC has been effected with spyware.You can try using a spyware software like webroot 2008 to remove this.

This is the only solution to fix this thing.

Dec 30, 2008 | Computers & Internet

2 Answers

How do you remove Virtumonde from Windows XP? I have tried malwarebytes and Ad Adware both with no success. I use Avast 5.0 which didn't catch it and Spybot S & D doesn't even spot it as a virus. This...


As far as free tools, you will want to try VundoFix and/or VirtumundoBegone.

VirtuMonde manual removal instructions:
Kill VirtuMonde processes:
kopCFEWV.exe
castlecops[1].exe
unknown.exe
svci.exe
psdrv.exe
rasrun.exe
nwonknu.exe
editpad.exe
quicken.exe
winhost.exe
editpad.exewindowsupd2.exe
quicken.exe
winhost.exe
windowsupd2.exe
Delete VirtuMonde files\folders and unregister dll’s:
opnnljj.dll
cbxxywx.dll
nnnmmlk.dll
vtuspmn.dll
mllkk.dll
sstrs.dll
awtqqnl.dll
kopCFEWV.exe
gf1.0.0.2
castlecops[1].exe
ddcbabx.dll
iifddby.dll
2chkdsk
pmnlk.dll
SbCIe02b.dll
ssttr.dll
geebc.dll
pmnno.dll
jtr0079me.dll
hrj6051se.dll
unknown.exe
svci.exe
psdrv.exe
rasrun.exe
nwonknu.exe
cidrules.dll
rulesak.dll
lspak.dll
editpad.exe
quicken.exe
winhost.exe
unknown.exewindowsupd2.exe
svci.exe
psdrv.exe
rasrun.exe
nwonknu.exe

Remove VirtuMonde registry values (keys and subkeys):
MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\nnnmmlk
59B5C788-4D95-4610-B1ED-AD9DC7CD86E0
05029E1B-4C41-4681-8F7F-2AEC346136F4
01ABD624-98FE-4B37-81F2-4E5B41799B6B
1FB63E52-4D6E-48C1-A08F-F630FE50F337
5A4A2D56-931A-4733-9121-033A2D95A274
3F82D203-999F-4FF4-9F07-5F9EBFCCE20F
22E58089-6DB5-45D9-BF87-6C8975246D26
F73AF695-229D-4549-B1A0-20DA99A81F19
F00EFDF5-0042-4F5E-9F20-C688409CF918
B2030C9A-DE59-457D-A042-D827AD69C8F3
9CF8EE9B-0B2E-464A-9700-D7B46142BD99
SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\ssttr
SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\pmnno
662BB3E3-204F-44FA-A827-143B8AB4B036
C78658B2-CDE5-4FD1-B73B-B9FF478DBE54
B763C083-57E0-4993-B058-13008952DF68
Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ddcbabx
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\A05DA7E0-383C-4E99-A72A-742050A152A2
A05DA7E0-383C-4E99-A72A-742050A152A2
Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\iifddby
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\6148028B-D532-4417-8C0B-5A4A0B745393
6148028B-D532-4417-8C0B-5A4A0B745393
D38439EC-4A7F-42b4-90C2-D810D7778FDD
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\pmnlk
2FCAB754-0535-470E-8F80-BACB6CA1ACC1
83B28A74-640D-48F4-9F51-E80EED7CC7E0
Software\Microsoft\Internet Explorer\Explorer Bars\83B28A74-640D-48F4-9F51-E80EED7CC7E0
D714A94F-123A-45CC-8F03-040BCAF82AD6
Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ssttr
22B271AB-3D0A-4CCB-8AD9-DD08183C356A
68616403-4FFB-4B19-B360-0B0B1F55D5EC
Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\pmnno
1B34D3EC-4AC7-41EC-ACC8-C9A2C0CBA2E5
D01C9902-73AF-47FF-B784-05FDB6604FCF
HKEY_LOCAL_MACHINE\software\targetsoft
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce\*catw
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\windowsupd
HKEY_LOCAL_MACHINE\software\microsoft\windowsnt\currentversion\winlogon\notify\psdrv
HKEY_LOCAL_MACHINE\software\microsoft\windowsnt\currentversion\winlogon\notify\catw
HKEY_CURRENT_USER\software\microsoft\windowsupd
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce\*winlogon
13589181-4f0d-4553-b9f8-b4b72172c139
HKEY_LOCAL_MACHINE\software\targetsoftHKEY_CLASSES_ROOT\atlevents.atlevents
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce\*catw
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\windowsupd
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psdrv
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\catw
HKEY_CURRENT_USER\software\microsoft\windowsupd
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce\*winlogon
HKEY_CLASSES_ROOT\clsid\{13589181-4f0d-4553-b9f8-b4b72172c139}
HKEY_CLASSES_ROOT\atlevents.atlevents

Mar 19, 2010 | Dell Dimension 3000 PC Desktop

2 Answers

Can you please help me get connected to the internet on my laptop. I am connected on all other 4 computers that share the same wireless. I picked up a nasty spyware that erased Norton and will not allow me...


Try rebooting in "safe mode".That virus probably didn't delete your virus protection,just hid it.
http://www.computerhope.com/issues/chsafe.htm#03
Follow this link on how to get into Safe Mode.Then run your virus protection in deep scan to get rid of the nasty.

Feb 23, 2010 | Computers & Internet

1 Answer

Zlob and virtumonde


The Virtumonde or Vundo Trojan is a Trojan Horse Virus that is one of the most popular and deadly viruses infecting computers these days. It is a widely-spread trojan that shows a large amount of unsolicited pop-up advertisements and also silently downloads harmful files from the internet.

The virus is responsible for decreasing the amount of virtual memory available on your computer and it can considerably slow down the performance of your PC. That is not to mention all the other dangerous forms of activity it can spread across your Computer, such as installing more viruses adware, malware, spyware, and also Stealing private information such as passwords and credit card numbers.

Now If you are looking for a way to completely remove the Virtumonde virus from your computer then you've come to the right place. This page is dedicated to help you remove the virtumonde virus. It will run you through exactly what a Vundo Trojan is, where it comes from, how it effects your computer and how to completely remove it from your computer for good

Jul 15, 2009 | Computers & Internet

1 Answer

Spyware


if you go to yahoo and serch for the yahoo antivirus download it will download and u can use it anytime it shows up as a blue shield on your serch bar

Aug 19, 2008 | Computers & Internet

1 Answer

OH NO!! I got infected with Norton Antivirus 2009!


Well, one thing.
This virus is more of something to play with your head, more then it is destructive.
What is is trying to get you to do, is believe that you are infected with something really bad, and they found it, but if you buy the full version of their program, it will fix it. Problem is, they don't have a product, they just want your credit card and bank information. (It's an ID theft scam)

Here's a couple of links that will tell you how to remove it.

http://hubpages.com/hub/XP-Antivirus

http://www.windowsvistaplace.com/xp-antivirus-2008-removal-instructions-xp-antivirus-2008/spyware-removal


Aug 17, 2008 | Compaq Armada M700 Notebook

6 Answers

Antivirus xp 2008


in order to uninstall the anti virus from your system you need to visit the vendors site of your anti virus and download uninstaller and run the same. You can also visit download.com or gur.in to get uninstaller tools

Jul 21, 2008 | Dell Dimension 2400 PC Desktop

1 Answer

Pop up showing System Error. it reads Your system is infected with a dangerous virus----Note- strongly recommend to install Antispyware to clean system and avoid total crash of your computer. click OK to...


WINANTIVIRUSPro2008 spyware at its worst.

here are some removal options:

http://www.removeonline.com/remove-winantivirus2008-org-winantivirus2008-removal-instructions/

http://www.xp-vista.com/spyware-removal/win-antivirus-2008-removal-instructions

http://www.virtumonde.net/Winfixer/winfixer_removal.html

Sorry to tell you, but removal can be a pain

Jul 16, 2008 | Computers & Internet

1 Answer

I have a multi machine licence for norton 2008, but cannot get it to load on my main PC. It seems to be infected by a programme that emulates virus protection and spyware protection software warnings,...


your system is infected by malware, plz download aacleaner from lavasoft.com, and spybot from majorgeeks, both are free.then scan your pc with both of them

May 06, 2008 | Computers & Internet

Not finding what you are looking for?
Computers & Internet Logo

Related Topics:

30 people viewed this question

Ask a Question

Usually answered in minutes!

Top Computers & Internet Experts

Les Dickinson
Les Dickinson

Level 3 Expert

18384 Answers

kakima

Level 3 Expert

102366 Answers

David Payne
David Payne

Level 3 Expert

14161 Answers

Are you a Computer and Internet Expert? Answer questions, earn points and help others

Answer questions

Manuals & User Guides

Loading...