Thread: AIM Virus - Virtumonde?
View Single Post
•
•
Join Date: Jul 2008
Posts: 3,083
Reputation: jholland1964 is a name known to all jholland1964 is a name known to all jholland1964 is a name known to all jholland1964 is a name known to all jholland1964 is a name known to all jholland1964 is a name known to all 
Solved Threads: 175
Moderator
Featured Poster
jholland1964 jholland1964 is offline Offline
Posting Sensei

Re: AIM Virus - Virtumonde?

 
0
  #3
Jan 16th, 2009
Reformat is extremely drastic. There is NO reason to reformat at this time.

Turn off the AIM program completely until the computer is deemed clean. It cannot spam if it isn't turned on.
There were multiple Trojans on the computer; Vundo(which is the same family of trojans as Virtumonde) Trojan.Spambot also known as Fake.Alert, Trojan.TinyDownloader705, Backdoor.Bot Trojan.Downloader.
Go to Start, Control Panel, Add/Remove and look for any or all of these listings:
* FunWebProducts
* My Web Search (Smiley Central or FWP product as applicable)
* My Way Speedbar (Smiley Central or other FWP as applicable)
* My Way Speedbar (AOL and Yahoo Messengers) (beta users only)
* My Way Speedbar (Outlook, Outlook Express, and IncrediMail)
* Search Assistant - My Way
*AskBar
UNINSTALL any of the above items found.
Reboot. Please be sure you are in NORMAL mode.
Please empty ALL TEMP files.
BOTH the MBA-M program and HJT must be run in Normal mode. They are meant to be run in NORMAL mode.
There is a new version of MBA-M, please do the update and then do a full scan with it again. Reboot the System.
AFTER you run the MBA-M then run the HJT.
Post back here with BOTH logs.
Last edited by jholland1964; Jan 16th, 2009 at 12:58 am.
Reply With Quote