Virtumonde / vundo...?

Question

How can you tell if you have virtuemonde / vundo? My antivirus said I was infected with it but I wasn't getting any pop-ups or anything. When I ran the scan again later, it seems to have disapeared...porque? And still, no pop-ups...How can I tell I've got it? I also then downloaded and ran adaware, it found nothing...why? Can virtumonde hide like that? it doesn't seem to be doing anything anyway...was is it supposed to do apart from pop-ups? Sorry this is about 10 questions in one...

Answer 1

You can try using this tool and see if it finds anything:

http://vundofix.atribune.org/

Or you can use hijackthis to see if there are any suspicious processes running:

http://www.trendsecure.com/portal/en-US/...

Or you can use Listdlls like what this website shows:

http://bbayles.googlepages.com/antivundo...

Vundo usually manifests itself by not letting you browse certain pages. For example, I might be able to browse demonoid.com but not google