virtumonde virus/spyware - GoFuckYourself.com

Pipecrew · 01-03-2009, 12:59 PM

What a pain in the ass this thing is, any one else ever been infected? I dont know how it got me but its a nightmare to remove.

Any adult site i visit I get an AFF popup, go figure.

seeandsee · 01-03-2009, 01:01 PM

AFF Ipo

SmokeyTheBear · 01-03-2009, 01:02 PM

whats the affiliate id the ftc loves threads like these

brand0n · 01-03-2009, 01:03 PM

malwarebytes to start

Pipecrew · 01-03-2009, 01:13 PM

Quote:

Originally Posted by SmokeyTheBear

whats the affiliate id the ftc loves threads like these

who knows, looks encrypted

http://adultfriendfinder.com/p/regis.../&site=ffadult

Barefootsies · 01-03-2009, 01:13 PM

Yes. It is a real pain to get rid of.
I have had it twice. First time, it took maybe half a day to get rid of 2-4 hours.
Next time, was gone in an hour. Just a lot of waiting for programs to run.

WiredGuy · 01-03-2009, 01:41 PM

Affiliate ID: p62151c
WG

Mutt · 01-03-2009, 01:46 PM

i've had it 3 fucking times - dude you are in for a long day - it can be wiped off your computer if you have at least half a day to deal with it - if not, re-format and re-install.

Fletch XXX · 01-03-2009, 01:50 PM

http://www.gofuckyourself.com/showth...ght=virtumonde

my thread about it.

Mutt · 01-03-2009, 01:51 PM

No one piece of anti-spyware will clean that shit up - you need to follow this guide
every step - don't skip any of them

in the end CombiFix will get it - but you still need to run the rest first - i think anyway - i wanted it gone so bad that i figured i better follow the steps exactly because these geeks seem to really know their spyware shit

even after it's all gone you'll still find some remnants in your registry - they are harmless remnants

http://forums.majorgeeks.com/showthread.php?t=35407

Sosa · 01-03-2009, 01:57 PM

It struck another one

Pipecrew · 01-03-2009, 02:05 PM

Quote:

Originally Posted by WiredGuy

Affiliate ID: p62151c
WG

i hope this "affiliate" goes to internext. Prepare the lynch mob

farkedup · 01-03-2009, 02:15 PM

I'm not sure exactly How I had gotten rid of it but I've had it LOL Spybot, adaware and AVG were all I had to use if I remember right. I Know I used HJT too but that mainly kills startup shit you don't want.

u-Bob · 01-03-2009, 02:41 PM

format + reinstall imho

CrkMStanz · 01-03-2009, 02:50 PM

Quote:

Originally Posted by u-Bob

format + reinstall imho

i run an 80g C drive - ghosted, all data is on other harddrives and offline backups

I rebuild my C drive many times a year, whenever i suspect a problem, whenever I visit 'one of those sites', or once a month whether it needs it or not

tip: get to know your running processes (task manager)

no virii for me

ztik · 01-03-2009, 03:01 PM

Its pretty easy to remove after you figure out how the damn thing works

Turn off system restore (it will keep installing from there)

Restart into safe mod - scan with other scanners and this one also - http://secured2k.home.comcast.net/to...undoBeGone.exe

germ · 01-03-2009, 08:00 PM

Fuckin AFF...

PersianKitty · 01-03-2009, 08:02 PM

Where does it originate? ie... how did you get it?

Pipecrew · 01-03-2009, 08:11 PM

Quote:

Originally Posted by PersianKitty

Where does it originate? ie... how did you get it?

I really wish I knew! i was reading online that it exploits the latest version of java or something like that.

Thurbs · 01-03-2009, 09:29 PM

just get a mac jordan, done and done.

01-03-2009, 12:59 PM	#1
Pipecrew Master of Gfy.com Industry Role: Join Date: Feb 2002 Posts: 14,887	virtumonde virus/spyware What a pain in the ass this thing is, any one else ever been infected? I dont know how it got me but its a nightmare to remove. Any adult site i visit I get an AFF popup, go figure.

01-03-2009, 01:01 PM	#2
seeandsee Check SIG! Industry Role: Join Date: Mar 2006 Location: Europe (Skype: gojkoas) Posts: 50,945	AFF Ipo __________________ BUY MY SIG - 50$/Year Contact here

01-03-2009, 01:02 PM	#3
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	whats the affiliate id the ftc loves threads like these __________________ hatisblack at yahoo.com

01-03-2009, 01:03 PM	#4
brand0n been very busy Join Date: Nov 2002 Location: the queen city Posts: 26,983	malwarebytes to start __________________ want to buy this spot for cheap? it is of course for sale. long term deals are always the best bet. brand0n/ at/ a o l dot commies.

01-03-2009, 01:13 PM	#6
Barefootsies Choice is an Illusion Industry Role: Join Date: Feb 2005 Location: Land of Obama Posts: 42,635	Yes. It is a real pain to get rid of. I have had it twice. First time, it took maybe half a day to get rid of 2-4 hours. Next time, was gone in an hour. Just a lot of waiting for programs to run. __________________ Should You Email Your Members? Link1 \| Link2 \| Link3 Enough Said. "Would you rather live like a king for a year or like a prince forever?"

01-03-2009, 01:41 PM	#7
WiredGuy Pounding Googlebot Industry Role: Join Date: Aug 2002 Location: Canada Posts: 34,473	Affiliate ID: p62151c WG __________________ I play with Google.

01-03-2009, 01:46 PM	#8
Mutt Too lazy to set a custom title Industry Role: Join Date: Sep 2002 Posts: 34,431	i've had it 3 fucking times - dude you are in for a long day - it can be wiped off your computer if you have at least half a day to deal with it - if not, re-format and re-install. __________________ I moved my sites to Vacares Hosting. I've saved money, my hair is thicker, lost some weight too! Thanks Sly!

01-03-2009, 01:50 PM	#9
Fletch XXX GFY HALL OF FAME DAMMIT!!! Join Date: Jan 2002 Location: that 504 Posts: 60,840	http://www.gofuckyourself.com/showth...ght=virtumonde my thread about it. __________________ Want an Android App for your tube, membership, or free site? Need banners or promo material? Hit us up (ICQ Fletch: 148841377) or email me fletchxxx at gmail.com - recent work - About me

01-03-2009, 01:51 PM	#10
Mutt Too lazy to set a custom title Industry Role: Join Date: Sep 2002 Posts: 34,431	No one piece of anti-spyware will clean that shit up - you need to follow this guide every step - don't skip any of them in the end CombiFix will get it - but you still need to run the rest first - i think anyway - i wanted it gone so bad that i figured i better follow the steps exactly because these geeks seem to really know their spyware shit even after it's all gone you'll still find some remnants in your registry - they are harmless remnants http://forums.majorgeeks.com/showthread.php?t=35407 __________________ I moved my sites to Vacares Hosting. I've saved money, my hair is thicker, lost some weight too! Thanks Sly!

01-03-2009, 01:57 PM	#11
Sosa In Tushy Land Join Date: Oct 2002 Location: Nebraska Posts: 40,149	It struck another one

01-03-2009, 02:15 PM	#13
farkedup Confirmed User Join Date: Nov 2007 Location: Kalamazoo, MI Posts: 2,490	I'm not sure exactly How I had gotten rid of it but I've had it LOL Spybot, adaware and AVG were all I had to use if I remember right. I Know I used HJT too but that mainly kills startup shit you don't want. __________________ -- QUOTE ME IT MAKES ME FEEL SPECIAL --

01-03-2009, 02:41 PM	#14
u-Bob there's no $$$ in porn Industry Role: Join Date: Jul 2005 Location: icq: 195./568.-230 (btw: not getting offline msgs) Posts: 33,063	format + reinstall imho

01-03-2009, 03:01 PM	#16
ztik Confirmed User Industry Role: Join Date: Aug 2001 Location: Nomad Posts: 5,196	Its pretty easy to remove after you figure out how the damn thing works Turn off system restore (it will keep installing from there) Restart into safe mod - scan with other scanners and this one also - http://secured2k.home.comcast.net/to...undoBeGone.exe __________________ .

01-03-2009, 08:00 PM	#17
germ ( o Y o ) Industry Role: Join Date: Oct 2002 Posts: 3,108	Fuckin AFF...

01-03-2009, 08:02 PM	#18
PersianKitty Meow Media Inc. Industry Role: Join Date: Jul 2001 Location: In the valley of the sun, cactus, tacos, tequila, and nod Posts: 7,785	Where does it originate? ie... how did you get it? __________________ Wondering what webmaster programs PK uses? Check them out here!

01-03-2009, 09:29 PM	#20
Thurbs The Thrilla in Manila Join Date: Sep 2004 Location: Thurbs' Lagoon, Christmas Island Posts: 4,785	just get a mac jordan, done and done.