There are several standalone scrubber programs for Virtumonde. I keep
one on my stick drive just in case. I think Virtumonde is using your
network to jump between your computers. As you scrub one, the others
reinfect it. One sure-fire way to kill your bug is to disconnect your
network, DBAN each computer, then reload Windows and test for the bug
before you reconnect your network. Be sure to scan your system backups
as well, if you possess any. These bugs can be very persistent. Only
when all four computers test clean several passes in a row would I even
consider reconnecting any of them to a network. One stray bug left over
will propagate quickly. Hope this helps out.

-------- Original Message --------
Subject: [PCBUILD] virtumonde??
From: alan smith <[log in to unmask]>
Date: Sun, September 05, 2010 9:11 pm
To: [log in to unmask]

This program is a problem ( to put it politely? ) So far it has 3
designations, .sdn  .dll .sci
I have 2 main computers, a tower, an IBM desktop & 2 small Compaq
desktops. All are running XPpro sp2. I use Spybot S&D and when I checked
their spies etc. the name
virtumonde appears! Yet when they do a scan, they go right past it! I
was going to use the IBM to clean the drive from my tower, but when I
ran a Spybot scan, Virtumonde was there too, so I used a Compaq to do
the cleaning? I went into SAFE mode & ran KASPERSKY's
boot disk. No luck. Then I tried RKILL.exe, & .com, & .scr AND .pif. all
in safe mode, but no luck!  I even tried to find it in the registry as
listed by PC!Clean. Still no luck! Tonight I did a
Spybot scan & watched the folders, all 1,282,000 of them & Virtumonde
took up half of my 
"C" drive which has 31.25Gb which has 4.25Gb clear. When my tower
didn'tclean, I checked the IBM & it's in there too. I made 7 passes with
Heidi's ERASER & installed XPpro again plus the extra programs that I
use. Well !!  Guess who showed up?? Virtumonde!! I'm about ready to go
to LINUX  !! Has anyone had this much trouble with this program AND was
it solved?????? Thank you for your support.  Al Smith





 PCBUILD maintains hundreds of useful files for download
 visit our download web page at:
 http://freepctech.com/downloads.shtml

                         PCBUILD's List Owners:
                      Bob Wright<[log in to unmask]>
                        Mark Rode<[log in to unmask]>