Virtumonde / Vundo....?

Question

How can you tell if you have virtuemonde / vundo? My antivirus said I was infected with it but I wasn't getting any pop-ups or anything. When I ran the scan again later, it seems to have disapeared...porque? And still, no pop-ups...How can I tell I've got it? I also then downloaded and ran adaware, it found nothing...why? Can virtumonde hide like that? it doesn't seem to be doing anything anyway...was is it supposed to do apart from pop-ups? Sorry this is about 10 questions in one...

Answer 1

Hi there,

If your scanning your PC using a reputable anti-virus engine and its coming back clean, you should be right. You may want to check the registry to see if its there or not. You can find more details on the following link which specifies what registry entry you should be looking at.

http://www.jigsawboys.com/2008/08/16/how...

Good luck!

Answer 2

My antivirus said I was infected with it but I wasn't getting any pop-ups - are you sure it was your antivirus ?

Virtumonde / Vundo does not hide (unless in a rootkit) .

There two things which could of happen.

1. you do have Virtumonde / Vundo & your not finding it.

2. A rogue program tried to get on your PC by stating you have Virtumonde / Vundo.

I would run the following to see if you have Virtumonde / Vundo.

http://www.bleepingcomputer.com/malware-...

http://www.superantispyware.com/

If these programs don't find Virtumonde / Vundo then you never had Virtumonde / Vundo & it was a rogue trying to get on your PC.

To made sure the rogue is not on your PC run this free program:

http://www.download.com/Malwarebytes-Ant...

Its very good at removing rogues.

Answer 3

Download and run virtumonde/vundo removal tool from http://www.geeksjunction.com/technical%2... to check whether your compute is infected.

Answer 4

It certainly sounds like you have been infected with some kind of malware. Unfortunately, if you find one infection, it is highly likely you have another one. A virus, trojan or worm are all different types of infections/malware and there are some great FREE programs that can help you.

First, clean up (delete) your cookies, temp files and temporary internet files. I prefer to use Ccleaner (available at www.filehippo.com) to do this, rather than the built-in DISK CLEANUP, as I feel it does a much more thorough job - for example, it will clean out the index files on your next reboot.

If you want to use Disk Cleanup, you can find it if you:

- Double-Click on My Computer to open it up

- RIGHT-click on your C: drive

- Choose PROPERTIES and then click on the DISK CLEANUP button

- When done, reboot your computer.

Delete these files daily or run Ccleaner every day right before you shut your computer down.

2 - You should also have a good anti-virus program to help protect your computer. AVG FREE is an excellent anti-virus program, which can be downloaded from www.download.com. You might also choose Avast or Avira, both also free programs from www.download.com.

3 -Since NONE of the anti-spyware/anti-adware programs are 100% accurate in finding and removing spyware, you need at least two programs which you will run one after the other, not at the same time.

There are three excellent free ones:

--Spybot, Search and Destroy

--Ad-Aware

--Spyware Blaster

All are available FREE from www.download.com

You will need to download, install, update (and IMMUNIZE in Spybot) and run them, one at a time. Be careful with the NAME of these programs - there are "look-alikes" with very similar names, that are in fact spyware themselves! Reboot after you install each one!

After this current infection is cleared up, be sure to run both of the above programs at least once a week if you are on the internet frequently and/or like to download music or files.

NOTE: Some infections prevent your from downloading the above programs. You may have to use a clean computer to download the programs and copy them to a thumb drive or CD. Then transfer the install files to the infected computer and run.

--Occasionally you will not be able to run these programs without being in SAFE MODE. To get there, reboot your computer and tap the F8 key, repeatedly until a menu comes up. You want to choose SAFE MODE WITH NETWORKING.

4 -You should also have a good firewall to help protect your computer. Zone Alarm makes a totally free version (watch you don't download the 30-day free trial of the paid version). You can download this from the manufacturer at www.zonelabs.com

Answer 5

Antivirus won;t remove it, You need to use an anti spyware to remove this trojan. You can find information and reviews on anti spywares at the link below.