virtumonde

a HijackThis Expert forum (NOT here please) so they can SEE what is going on inside your computer. HJT is a very powerful tool and only advanced users should use it.

Please post your HJT logs in one of the following HJT forums:

- http://castlecops.com/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html
- http://forums.spywareinfo.com/index.php?showforum=18
- http://forums.subratam.org/index.php?showforum=7

Attention: You have to register to be able to post your HJT log !!


HijackThis download locations:
http://castlecops.com/zx/Merijn/hijackthis.zip
http://www.spywareinfo.com/~merijn/files/HijackThis.exe
http://www.spywareinfo.com/~merijn/files/hijackthis.zip
http://downloads.subratam.org/hijackthis.zip

It is important that you run HijackThis.exe in its own folder so the backup files that HijackThis creates will not be accidentally deleted.

Open 'My Computer', then double-click to open C:\ (or the drive letter that your Windows is installed on)
In the menu bar, click File-->New-->Folder.
That will create a folder named New Folder, which you can rename to "HJT" or "HijackThis". Now you have C:\HJT\ or C:\HijackThis\ folder. Put your HijackThis.exe there, and double click to run it.

Click 'Scan' button. Click 'Save log' button. Save the 'hijackthis.log' in your desktop. Copy and paste the content of 'hijackthis.log' and post the log file in any forums that offers HijackThis analysis.

Most of what it lists will be harmless, so do not fix anything yet.

BEFORE you post your HJT log - it would be appreciated if you would :

Download and install the following programs, If they're not on your computer, yet:
- AdAware SE : http://www.lavasoftusa.com/support/download/
- Spybot 1.4: http://www.safer-networking.org/en/mirrors/index.html
- CCleaner: http://www.ccleaner.com/ccdownload.php
Download CWShredder: http://www.intermute.com/products/cwshredder.html
and put it in it's own folder, f.e. 'C:\CWShredder' or C:\Program Files\CWShredder'
- Microsoft AntiSpyware Beta:
http://www.microsoft.com/athome/security/spyware/software/default.mspx


Please be PATIENT - For those of you looking for assistance with HJT logs, please be patient. The experts are really swamped with requests to have logs reviewed etc. If they do not get with you immediately it only means they are helping someone else. Remember they do this free of charge and in their spare time so please be patient.

have a look here:

http://wiki.castlecops.com/Malware_Removal:_Virtumundo