Help - virtumonde.dll - virus?

Bill9966

On Mon, 19 May 2008 23:03:07 GMT, (Bill9966) wrote:

>Help!!
>
>Yesterday while I was on the internet Nod32 gave me a message that it
>had quarantined a trojan. I did a succesful virus scan and then ran
>Spybot Search & Destroy. S&D detected some spyware I hadn't seen
>before - Virtumonde and Virtumonde.dll . It then required me to
>restart my computer to eliminate Virtumonde. dll.
>>
>>
I now undertand that I have the Vundo trojan. There is a web site
which offers freeware to fight just that trojan - .

Does anyone know if it is legit & effective? Also does anyone know why
95% of the time I can't access Google search or even get into the
Yahoo site. (a few times I did.)

BTW, Nod32 let this thing in and didn't even pick it up in a
subsequent scan. I then installed Norton which at least found it but
could only "partially resolve" it (Norton's phrase.) I wonder if
Norton would have kept it out.

Thanks to everyone who has been responding.

David H. Lipman

From: "Bill9966" <>


>>>
| I now undertand that I have the Vundo trojan. There is a web site
| which offers freeware to fight just that trojan - .
|
| Does anyone know if it is legit & effective? Also does anyone know why
| 95% of the time I can't access Google search or even get into the
| Yahoo site. (a few times I did.)
|
| BTW, Nod32 let this thing in and didn't even pick it up in a
| subsequent scan. I then installed Norton which at least found it but
| could only "partially resolve" it (Norton's phrase.) I wonder if
| Norton would have kept it out.
|
| Thanks to everyone who has been responding.

I will vouch for the author and the VundoFix utility.

It is completely legitimate and as very effective but... not 100% as there are always new
variants using new techniques. Atri is doing his utmost to keep up with the Vundo/Virtumonde
family of malware.


--
Dave

Multi-AV -

Bill9966

On Tue, 20 May 2008 11:16:58 +0200, "Lolo" <> wrote:

>any idea where you got infected?
>
>thanks
>

Yes. I was at a website that shows movies (not torrent downloads) You
just click and a movie comes on. I was at


It seemed like a harmless site. I watched one movie with no problems.
I then started watching "Tripping the Rift - the Movie" - the 4 part
version there. When I hit Part 4 that's when the trouble hit me.

David H. Lipman

From: "Bill9966" <>

| On Tue, 20 May 2008 11:16:58 +0200, "Lolo" <> wrote:
|
>> any idea where you got infected?
>>
>> thanks
>>
| Yes. I was at a website that shows movies (not torrent downloads) You
| just click and a movie comes on. I was at
| hxxp://www.free-tv-video-online.info/internet/movies/
|
| It seemed like a harmless site. I watched one movie with no problems.
| I then started watching "Tripping the Rift - the Movie" - the 4 part
| version there. When I hit Part 4 that's when the trouble hit me.

In the future, if you think a URL is malicious, obfuscate it such that it is NOT clickable
such as...

hxxp://www.free-tv-video-online.info/internet/movies/

or

h**p://www.free-tv-video-online.info/internet/movies/


--
Dave

Multi-AV -

Bill9966

On Tue, 20 May 2008 16:29:09 -0400, "Russg"
<> wrote:

>
>
>Above is a quick Google search, which may be
>helpful. You can try it (Spyhunter).
>
>Virtumonde has many versions and can be very
>difficult to remove.
>
>I don't know any more expert about malware
>removal than Mr. Lipman.
>
>Your question, can you restore your registry
>to an earlier, uninfected, state. That probably
>wouldn't work, as Virtumonde has changed
>a lot more than your registry. Of course,
>and I recommend it, if you made a complete
>image backup of your computer, you could
>format the drive and restore that. Such image
>backup software is Nero Backitup and Symantec
>Ghost. I believe XP Pro has backup software.
>
>Good Luck
>
I now undertand that I have the Vundo trojan. There is a web site
which offers freeware to fight just that trojan - .

Does anyone know if it is legit & effective? Also does anyone know why
95% of the time I can't access Google search or even get into the
Yahoo site. (a few times I did.)

BTW, Nod32 let this thing in and didn't even pick it up in a
subsequent scan. I then installed Norton which at least found it but
could only "partially resolve" it (Norton's phrase.) I wonder if
Norton would have kept it out.

Thanks to everyone who has been responding.

David H. Lipman

From: "Bill9966" <>


| I now undertand that I have the Vundo trojan. There is a web site
| which offers freeware to fight just that trojan - .
|
| Does anyone know if it is legit & effective? Also does anyone know why
| 95% of the time I can't access Google search or even get into the
| Yahoo site. (a few times I did.)
|
| BTW, Nod32 let this thing in and didn't even pick it up in a
| subsequent scan. I then installed Norton which at least found it but
| could only "partially resolve" it (Norton's phrase.) I wonder if
| Norton would have kept it out.
|
| Thanks to everyone who has been responding.

Yes, Atri's VundoFix is legitimate and effective.

Other utilities...

Malwarebytes Anti-Malware


Norman Vundo removal tool.



--
Dave

Multi-AV -