Problem : cant able to get rid of Virtualmonde trojan

redhat_newbie · 17-04-2008 09:10PM #1

Hello lads,

My laptop is running Vista Ultimate SP1, some how it is affected by Virtualmonde trojan. Whenever IE7 is launched, couple of websites relating to spyware detection open up in New Window and followed by pop ups.

1) Running latest version of f-secure : It could not find this
2) Ran Spybot search & destroy: it said it removed the trojan, but still it exists
3) Tried One care live : it cleared the trojans and asked to restart

when I restarted spybot showed some registry activities done by
cmds and BNC4xxxx which pointed to C:\Users\john\appdata\local\temp\japaya.dll

Tried to clear up the temp directory, but was unable to do that, as it was used up by some application.

Any help to get rid of this trojan, would be highly appreciated.

Cheers

Sherifu · 17-04-2008 09:15PM

You could try to follow this.

redhat_newbie · 21-04-2008 02:13AM

Thanks Sherifu, but it did not work.
I tried that and after the reboot again cmds service popped again on the Spybot search & Destroy and it was connected with some appmonde.dll present in the
c:\Users\john\local\appdata\appmonde.dll.

So finally i had to re-install Vista again and backed up my registry with spybot.

I hope everything will be fine from now onwards.

Cheers for the swifty help.

Problem : cant able to get rid of Virtualmonde trojan

Comments