virtumonde virus/spyware
 

What a pain in the ass this thing is, any one else ever been infected? I dont know how it got me but its a nightmare to remove.

Any adult site i visit I get an AFF popup, go figure.

AFF Ipo :)

whats the affiliate id the ftc loves threads like these

malwarebytes to start

who knows, looks encrypted

http://adultfriendfinder.com/p/regis.../&site=ffadult

Yes. It is a real pain to get rid of.
I have had it twice. First time, it took maybe half a day to get rid of 2-4 hours.
Next time, was gone in an hour. Just a lot of waiting for programs to run.

Affiliate ID: p62151c
WG

i've had it 3 fucking times - dude you are in for a long day - it can be wiped off your computer if you have at least half a day to deal with it - if not, re-format and re-install.

http://www.gofuckyourself.com/showth...ght=virtumonde

my thread about it.

No one piece of anti-spyware will clean that shit up - you need to follow this guide
every step - don't skip any of them

in the end CombiFix will get it - but you still need to run the rest first - i think anyway - i wanted it gone so bad that i figured i better follow the steps exactly because these geeks seem to really know their spyware shit

even after it's all gone you'll still find some remnants in your registry - they are harmless remnants

http://forums.majorgeeks.com/showthread.php?t=35407

It struck another one

i hope this "affiliate" goes to internext. Prepare the lynch mob

I'm not sure exactly How I had gotten rid of it but I've had it LOL Spybot, adaware and AVG were all I had to use if I remember right. I Know I used HJT too but that mainly kills startup shit you don't want.

format + reinstall imho

i run an 80g C drive - ghosted, all data is on other harddrives and offline backups

I rebuild my C drive many times a year, whenever i suspect a problem, whenever I visit 'one of those sites', or once a month whether it needs it or not

tip: get to know your running processes (task manager)

no virii for me

Its pretty easy to remove after you figure out how the damn thing works

Turn off system restore (it will keep installing from there)

Restart into safe mod - scan with other scanners and this one also - http://secured2k.home.comcast.net/to...undoBeGone.exe

Fuckin AFF...

Where does it originate? ie... how did you get it?

I really wish I knew! i was reading online that it exploits the latest version of java or something like that.

just get a mac jordan, done and done.