I just recovered from an unfortunate infection of Virtumonde. After using Spybot S&D, HijackThis! and both VirtuMundoBeGone and VundoFix I thought I've removed everything, BUT there's still something in here...

Every time I open up a new browser - after a couple of seconds another browser window pops up with some sort of add.

These are examples of the pop-up windows (links): DO NOT CLICK THEM.


Hover to See
www.ambercoastcasino.com...

Any other suggestions of Spyware removers I can give a go? (I have nothing against Firefox, I just prefer IExplorer, so let's skip the "I have Firefox and never have any problems" option )


[edit on 14-7-2008 by Gemwolf]

[edit on 14-7-2008 by Gemwolf]

I had the exact same problem the other week, but i didn't get the pop ups, I just got a virus warning come through on my Avira anitvir virus proggy.

I thought i had completely removed the virtuemonde previously, and to all intent, I had.

But it came back after 3 or 4 days of me removing it which i found highly unusual.

I looked through the file sets and system and the virus that antivir displayed...

And you'll never guess what it was that apparently had completely downloaded and re-installed another version of virtuemonde...

It was VUNDOFIX....

I couldn't believe it ..I uninstalled that and made sure it was gone, but the virus itself stuck..

So instead of messing around with all the programmes and going through all the hassle again, i backed all my important stuff up and wiped the drive and re-installed windows.

Saved a bit of bother. gave the drive a complete clean start and installed all my main major progs..

Lot less bother too..

reply to post by Extralien

---

Hmmm. Not good news. Actually I just completed a full wipe and restore (thus the reason my PC was open to attacks - I didn't get round to installing anti-spyware yet...) for the second time in two weeks. Seeing that it takes me about two days to get my system back to the way it was, I would rather find some alternatives before going through all of that, again... But thanks nonetheless.

If you've not done this...

When i download things like spybot, psygate firewall, A-squared, Iobit defrag, avira antivir .... etc etc.. I make sure they are all in one folder, then I burn the actuall instalation files onto a disk.

Then, if I ever need to de a sweep/clean/windows install, I have all the important files ready to install too...before i even connect to the net... this way my system is up and ready with all its protection before I begin to get any windows updates and do all the other boring mundane stuff like getting all the bookmarks and saved passwords back into firefox...

Why don’t you reformat then reinstall. Get all the updates and get things the way you like them. Then make an image onto a separate partition. Then next time you can put your computer back like it was before any problems in about 15 minutes. I usually have 3 partitions, one for the OS, one for backup files and one for the recovery image.

What sites are you guys going to and clicking on to get these viruses ?

I've only ever had one virus on my computer and that was because of unwittingly clicking a link to somewhere. Since then I've had no problems and I'm careful on what I click combined with Ad-Aware, Spybot, Spyware Blaster & Spyware Guard and crappy Norton AV/Firewall

Here is what you do!

I had the same problem with a more leathal virus!

However I reformatted......

Here is what you do

Download spybot and Ad-aware 2008 (both free)

Run win in safe mode

run spybot

restart computer in safe mode after spybot completes

disable system restore

run spybot second time

restart computer after spybot completes

run adaware 2008

update windows

restart

run spybot and adaware for final cleanup!

enable system restore.....

Hope that helps!

Spybot
Adaware 2008

Oh, and doing a registry scan wouldn't be a bad idea as well!

I dont have any links as I only get viruses once every 3 years or so....

Thanks. I'll give it a go. I've been co-existing with the bugger since the initial problem, and made my peace with FireFox. Still don't like it, but it gets the job done.

Oh and one more thing!

If you are using firefox, then go ahead and download their No-scripts add on!

Its a fantastic tool!

However it can be extremely annoying as you have to allow all the java graphics on sites to be shown. But its well worth it!

addons.mozilla.org...

Mozilla can explain it better!

Good luck with the nasty pop ups!

I suspect they are 'Zombies', hiding a copy in the Hive under a hidden and weird name.

Then, even though you remove from your current registry, they resurrect.

Very hard to get rid of; good luck.