| VirtuMonde removal| Spyware VirtuMonde Information |
|---|
Name: VirtuMonde
Category: Adware
Date: 2004-01-25
Dangerous: Yes |
VirtuMonde or widely known as Virtumonde.C is an adware application. It also acts like a keylogger - it creates a DLL library that logs typed-in keystrokes and submit them to its preset website. It also overwrites cookies with its own affiliate ids, this way it steals money from hard working webmasters.
This Adware is also known as: Spyware/Virtumonde, Virtumonde.C
>> Delete VirtuMonde automatically - Download Spyware Doctor
| VirtuMonde Removal Instructions |
|---|
Kill the following processes nwonknu.exe, svci.exe, rasrun.exe, psdrv.exe, svci.exe, unknown.exe, windowsupd2.exe | Unregister the following DLLs and reboot cidrules.dll in Windows\system32\
| Delete these registry entries HKEY_CLASSES_ROOT\atlevents.atlevents
HKEY_CLASSES_ROOT\clsid\{13589181-4f0d-4553-b9f8-b4b72172c139}
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce\*winlogon
HKEY_CURRENT_USER\software\microsoft\windowsupd
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\catw
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psdrv
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\windowsupd
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce\*catw
HKEY_LOCAL_MACHINE\software\targetsoft
| Remove the following files nursar.dat, nwonknu.exe, rasrun.exe, unknown.exe, vrdsp.bak1, vrdsp.bak2, vrdsp.dat, vrdsp.tmp, windowsupd2.exe.
svci.exe in Documents and Settings\UserName\local settings\temp\
psdrv.exe, vrdsp.ini in Windows\inf\
cidrules.dll, svci.exe in Windows\system32\
| Remove the following directories Documents and Settings\UserName\local settings\temp\bs5657.tmp
Documents and Settings\UserName\local settings\temp\vupd
Program Files\earn
Windows\temp\bs5e310.tmp
|
Bookmark VirtuMonde page
|