Virtumonde spyware

[jll]

Hi,
Somewhere along my surfing, I picked up Virtumonde. MS Spyware scan detects
it and says it removes it but nothing happens. A2 Squared also detects it
and says it removes it but nothing happens. MS shows the spyware as
C:windows\system32\sstqo.dll. If I try to delete it manually, a message
crops up that says it's in use by another program and can't be deleted. I
tried in safe mode and it will not budge. I tried a couple online scanners
plus my own virus program and they don't detect it. How can I get rid of
this thing?
Thanks,
jll
addy is fake

 

[Malke]

Hi,
Somewhere along my surfing, I picked up Virtumonde. MS Spyware scan
detects it and says it removes it but nothing happens. A2 Squared also
detects it and says it removes it but nothing happens. MS shows the
spyware as C:windows\system32\sstqo.dll. If I try to delete it
manually, a message crops up that says it's in use by another program
and can't be deleted. I tried in safe mode and it will not budge. I
tried a couple online scanners plus my own virus program and they
don't detect it. How can I get rid of this thing?
Thanks,
jll
addy is fake

You can go through these malware removal steps:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

You will probably have to go as far as running HijackThis and posting
your log on one of the HJT forums (links are at the website above).

Malke

 

[jll]

Malke, Great stuff. I'm going to try Process explorer and Killbox and let
you know how I made out.
Thanks,
jll