Forum Home
Press F1
 
Thread ID: 105904 2009-12-18 06:26:00 Help With Vitumonde Trojan Shortstop (632) Press F1
Post ID Timestamp Content User
840867 2009-12-18 06:26:00 This is probably old hat to most of you, but..........Spybot throws up Vitumonde Trojan which it cannot fix. What do you recommend? Shortstop (632)
840868 2009-12-18 06:51:00 try malwarebytes GameJunkie (72)
840869 2009-12-18 06:54:00 Disable system restore first then scan. Post a hijackthis log if you want Speedy Gonzales (78)
840870 2009-12-18 07:41:00 Download and run this file:
download.bleepingcomputer.com

It will kill any Trojan.vundo and Virtumonde processes so that you can open MBAM.

If MBAM installs but does not run then you will have to manually place a randomly named file into the MBAM folder(C:\program files\Malwarebytes' Anti-Malware\)
mbam.malwarebytes.org

Remember to turn system restore before attempting to remove.

If MBAM fails, then try VundoFix:
www.atribune.org

Blam
Blam (54)
840871 2009-12-18 07:50:00 Sorry, fundamental question - how do you turn off System Restore in Windows 7? Shortstop (632)
840872 2009-12-18 07:54:00 Before you start trying to clean anything make sure all your data that you cant afford to lose is backed up.

Just a warning:

I had a Vitumonde infection on a customers PC a few weeks back - if its the same sort there is no "cure" for it - the one I had attacked EVERY exe file in the PC, including any program trying to clean it out - by removing the infection (slaving the drive) it also destroyed most of the system files, only fix was a complete reinstall from fresh.
wainuitech (129)
840873 2009-12-18 07:58:00 That's cheering - computer is 6 days old! How do you tyurn System Restore off? Shortstop (632)
840874 2009-12-18 08:06:00 Right Click My Computer>properties>advanced system settings(left pane)>System Protection tab>Select each drive and change it to Off

Blam
Blam (54)
840875 2009-12-18 08:09:00 Right click on Computer ( either on desktop or start then computer on the right hand side) OR click start type in computer, and from the results right click it, ---properties / on the left, select "system protection" -- once it opens you will see your drive - select it - click on Configure - select Turn off.As shown in this picture (www.imagef1.net.nz)


Edited: hopefully you dont have the same sort of infection - there are many that go by the same name / family of infections - just be prepared if it is one of the real nasty ones.
wainuitech (129)
840876 2009-12-18 08:25:00 So did all that. Malwarebytes detected 2 infections which it removed - second scan was clean. Am I lucky or is there more to it? Shortstop (632)
1 2