Virtumonde - GoFuckYourself.com

Barefootsies · 12-01-2008, 02:31 PM

How in the FUCK do you get rid of this piece of shit?

I have tried everything, all afternoon, trying to get rid of this. Cleaning out registry, safe mode, S&D, cleaners, SmithFraud, HiJackThis, Java update, removing programs.

Fucking driving me nuts.

It is at the point I am almost going to clean out the HD with a format to get rid of it. Fucking madness!

Sosa · 12-01-2008, 02:39 PM

One of the worst ones out there. It was a bitch to remove most of the time when I was working at a computer repair shop. There is a walk through on some of the tech sites that you have to pay for. Can't remember exactly which one I used back then though.

Barefootsies · 12-01-2008, 02:42 PM

Quote:

Originally Posted by Sosa

One of the worst ones out there. It was a bitch to remove most of the time when I was working at a computer repair shop. There is a walk through on some of the tech sites that you have to pay for. Can't remember exactly which one I used back then though.

Yes it is.
Been working on this shit for a few hours now.

S&D scans over and over keep finding it. Claim to remove it. Still there.
Cleaned registry. Deleted this and that.
Updated java.
Tried various guides, and walk throughs. None worked.
Tried Hijack this, and posted in forums. Still nothing.
Nod, and many other programs, and still there.

I've turned off restore, done safe mode, and can't seem to get it.

Fucking insane.

HorseShit · 12-01-2008, 02:52 PM

http://housecall.trendmicro.com

Tjeezers · 12-01-2008, 03:38 PM

*

Click Start
*

Click Run
*

Type 'regedit'
*

Click ok to open the registry editor
*

Navigate to the following key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
\CurrentVersion
*

In the right hand panel, search and locate the entries with the value “WindowsUpd” or “SysUpd”
*

Delete the entries WindowsUpd” or “SysUpd”
*

Navigate to the following keys:
HKEY_CURRENT_USER\ Software\Microsoft\WindowsUpd
HKEY_CURRENT_USER\ Software\Microsoft\SysUpd
*

Exit the Registry editor
*

Open a Dos command prompt window
For Windows NT/2000?XP: start>run cmd
For Windows 95/98/Me: start>run> command
*

Enter this command: regsvr32/u%WinDir%\system 32\cidrules.dll
*

Reboot your computer
*

Look for, find, and delete all of the following files from the System Directory: windowsupd2.exe and cidrules.dll

---------------

Tip, always ask Google... and you might get the best tips ever
http://www.google.com/search?hl=en&q...earch&aq=f&oq=

Or ask it the geeks

http://www.geekstogo.com/forum/How-t...ib-t91765.html

Machete_ · 12-01-2008, 03:44 PM

http://www.bleepingcomputer.com/malw...ndo-virtumonde

Barefootsies · 12-01-2008, 04:58 PM

Quote:

Originally Posted by ebus_dk

http://www.bleepingcomputer.com/malw...ndo-virtumonde

That one I tried.

Just got done running MS program. It cleaned all but two. Now just need to find those two.

Barefootsies · 12-01-2008, 04:59 PM

Quote:

Originally Posted by Sex2Have

*

Click Start
*

Click Run
*

Type 'regedit'
*

Click ok to open the registry editor
*

Navigate to the following key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
\CurrentVersion
*

In the right hand panel, search and locate the entries with the value ?WindowsUpd? or ?SysUpd?
*

Delete the entries WindowsUpd? or ?SysUpd?
*

Navigate to the following keys:
HKEY_CURRENT_USER\ Software\Microsoft\WindowsUpd
HKEY_CURRENT_USER\ Software\Microsoft\SysUpd
*

Exit the Registry editor
*

Open a Dos command prompt window
For Windows NT/2000?XP: start>run cmd
For Windows 95/98/Me: start>run> command
*

Enter this command: regsvr32/u%WinDir%\system 32\cidrules.dll
*

Reboot your computer
*

Look for, find, and delete all of the following files from the System Directory: windowsupd2.exe and cidrules.dll

---------------

Tip, always ask Google... and you might get the best tips ever
http://www.google.com/search?hl=en&q...earch&aq=f&oq=

Or ask it the geeks

http://www.geekstogo.com/forum/How-t...ib-t91765.html

Normally I do not like going into the registry, but it's that, or re-format.

CuriousToyBoy · 12-02-2008, 03:32 AM

Quote:

Originally Posted by Barefootsies

How in the FUCK do you get rid of this piece of shit?

I have tried everything, all afternoon, trying to get rid of this. Cleaning out registry, safe mode, S&D, cleaners, SmithFraud, HiJackThis, Java update, removing programs.

Fucking driving me nuts.

It is at the point I am almost going to clean out the HD with a format to get rid of it. Fucking madness!

Is that the trojan created by MyVirtualCard / PayMonde so they could just keep on fucking people over?

neonliquid · 12-02-2008, 03:36 AM

http://www.auditmypc.com/virtumonde-remove.asp

RenegadeCash Mark · 12-02-2008, 03:37 AM

Quote:

Originally Posted by CuriousToyBoy

Is that the trojan created by MyVirtualCard / PayMonde so they could just keep on fucking people over?

LMAO, good call.

The Duck · 12-02-2008, 03:53 AM

Try http://www.superantispyware.com/download.html should be able to remove it.

grumpy · 12-02-2008, 05:55 AM

drama queen, just clear your registry

tranza · 12-02-2008, 07:13 AM

I hate these stuffs too...

Barefootsies · 12-20-2008, 07:35 AM

I had that same thing. It was a few strains of the virtumonde. It was a bitch to get rid of.

I tried all kinds of programs to get rid of it. S&D would find it, but could not seem to get rid of it. I had the restoral turned off. Ran in regular and safe mode. Always found it, but could not get rid of it.

I tried NOD32, S&D, adaware, SmiFraudFix, HiJack This, and countless other programs. It had me busy for an afternoon.

In the end, M$'s removal tool, or whatever it is that you have on your PC now. That removed it first (ran twice). I then ran some program called, registry cleaner, and that worked (ran twice). Lastly ran S&D and that removed it what was left. Ran it a second time to be sure. All gone.

Turned restore back on.

Darkcrni · 12-20-2008, 08:14 AM

Ok, liesten here, REINSTALL!!!

Fletch XXX · 12-20-2008, 08:29 AM

Quote:

Originally Posted by Barefootsies

In the end, M$'s removal tool, or whatever it is that you have on your PC now. That removed it first (ran twice). I then ran some program called, registry cleaner, and that worked (ran twice). Lastly ran S&D and that removed it what was left. Ran it a second time to be sure. All gone.

what is this magic MS tool you keep referring to?

I am not sure what you mean by it already being on my machine... I downloaded a free microsoft malware tool from their site and it doesnt do anything, it basically opens then closes...

what is the tool you refer to?

Fletch XXX · 12-20-2008, 08:35 AM

fucking crazy, ive downloaded, and tried to run this multiple times, it just opens then closes...

http://www.microsoft.com/security/ma...e/default.mspx

12-01-2008, 02:31 PM	#1
Barefootsies Choice is an Illusion Industry Role: Join Date: Feb 2005 Location: Land of Obama Posts: 42,635	Virtumonde How in the FUCK do you get rid of this piece of shit? I have tried everything, all afternoon, trying to get rid of this. Cleaning out registry, safe mode, S&D, cleaners, SmithFraud, HiJackThis, Java update, removing programs. Fucking driving me nuts. It is at the point I am almost going to clean out the HD with a format to get rid of it. Fucking madness! __________________ Should You Email Your Members? Link1 \| Link2 \| Link3 Enough Said. "Would you rather live like a king for a year or like a prince forever?"

12-01-2008, 03:38 PM	#5
Tjeezers Webmaster Industry Role: Join Date: Mar 2007 Location: BP4L - NL/RO Posts: 16,567	* Click Start * Click Run * Type 'regedit' * Click ok to open the registry editor * Navigate to the following key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows \CurrentVersion * In the right hand panel, search and locate the entries with the value “WindowsUpd” or “SysUpd” * Delete the entries WindowsUpd” or “SysUpd” * Navigate to the following keys: HKEY_CURRENT_USER\ Software\Microsoft\WindowsUpd HKEY_CURRENT_USER\ Software\Microsoft\SysUpd * Exit the Registry editor * Open a Dos command prompt window For Windows NT/2000?XP: start>run cmd For Windows 95/98/Me: start>run> command * Enter this command: regsvr32/u%WinDir%\system 32\cidrules.dll * Reboot your computer * Look for, find, and delete all of the following files from the System Directory: windowsupd2.exe and cidrules.dll --------------- Tip, always ask Google... and you might get the best tips ever http://www.google.com/search?hl=en&q...earch&aq=f&oq= Or ask it the geeks http://www.geekstogo.com/forum/How-t...ib-t91765.html __________________ Enroll in the SWAG Affiliate Asian Live Cam Program and get 9 free quality linkbacks from my network! Wanna see how old school I am? Look at this! All my Cam Review Sites are here! Last edited by Tjeezers; 12-01-2008 at 03:42 PM..

12-02-2008, 03:36 AM	#10
neonliquid Confirmed User Join Date: Feb 2008 Location: Texas Posts: 329	http://www.auditmypc.com/virtumonde-remove.asp __________________ Fully Coded Wordpress Themes - $25 My Portfolio \| Premade Toons - $25 each - ICQ: 411554070

12-02-2008, 03:53 AM	#12
The Duck Adult Content Provider Industry Role: Join Date: May 2005 Location: Europe Posts: 18,243	Try http://www.superantispyware.com/download.html should be able to remove it. __________________ Skype Horusmaia ICQ 41555245 Email [email protected]

12-02-2008, 05:55 AM	#13
grumpy Too lazy to set a custom title Join Date: Jan 2002 Location: Holland Posts: 9,870	drama queen, just clear your registry __________________ Don't let greediness blur your vision \| You gotta let some shit slide icq - 441-456-888

12-01-2008, 02:39 PM	#2
Sosa In Tushy Land Join Date: Oct 2002 Location: Nebraska Posts: 40,149	One of the worst ones out there. It was a bitch to remove most of the time when I was working at a computer repair shop. There is a walk through on some of the tech sites that you have to pay for. Can't remember exactly which one I used back then though.

12-01-2008, 02:52 PM	#4
HorseShit Too lazy to set a custom title Join Date: Dec 2004 Posts: 17,513	http://housecall.trendmicro.com

12-01-2008, 03:44 PM	#6
Machete_ WINNING! Industry Role: Join Date: Oct 2002 Posts: 14,579	http://www.bleepingcomputer.com/malw...ndo-virtumonde

12-02-2008, 07:13 AM	#14
tranza ICQ: 197-556-237 Join Date: Jun 2003 Location: BRASIL !!! Posts: 57,559	I hate these stuffs too... __________________ I'm just a newbie.

12-20-2008, 07:35 AM	#15
Barefootsies Choice is an Illusion Industry Role: Join Date: Feb 2005 Location: Land of Obama Posts: 42,635	I had that same thing. It was a few strains of the virtumonde. It was a bitch to get rid of. I tried all kinds of programs to get rid of it. S&D would find it, but could not seem to get rid of it. I had the restoral turned off. Ran in regular and safe mode. Always found it, but could not get rid of it. I tried NOD32, S&D, adaware, SmiFraudFix, HiJack This, and countless other programs. It had me busy for an afternoon. In the end, M$'s removal tool, or whatever it is that you have on your PC now. That removed it first (ran twice). I then ran some program called, registry cleaner, and that worked (ran twice). Lastly ran S&D and that removed it what was left. Ran it a second time to be sure. All gone. Turned restore back on. __________________ Should You Email Your Members? Link1 \| Link2 \| Link3 Enough Said. "Would you rather live like a king for a year or like a prince forever?"

12-20-2008, 08:14 AM	#16
Darkcrni Confirmed User Join Date: Jun 2007 Location: Right Around The Corner Posts: 1,704	Ok, liesten here, REINSTALL!!!

12-20-2008, 08:35 AM	#18
Fletch XXX GFY HALL OF FAME DAMMIT!!! Join Date: Jan 2002 Location: that 504 Posts: 60,840	fucking crazy, ive downloaded, and tried to run this multiple times, it just opens then closes... http://www.microsoft.com/security/ma...e/default.mspx __________________ Want an Android App for your tube, membership, or free site? Need banners or promo material? Hit us up (ICQ Fletch: 148841377) or email me fletchxxx at gmail.com - recent work - About me