drillvoice

Recently our computer has come to be pretty much inoperable.

It boots finely, but once at the home screen, any attempt to open a folder or even 'My Computer' is greeted with a message saying that such an action is impossible due to 'Data Execution Prevention', which also often causes the message that 'Windows explorer has performed an illegal operation.'

It is possible to get into and use IE from a shortcut on the taskbar, but IE also tends towards illegal operations.

The computer already had installed Spybot Search and Destroy as well as Lavasoft's Ad-Aware 2007, Windows Defender and AVG Antivirus. The computer runs Windows XP with SP2.

From these it seems as if the computer is affected by something by the name of virtumonde. I think there are two types:

The version detailed here ( http://www.symantec.com/security_res...914-4108-99)is less nasty, and I don't think it is the one- I ran their scanning tool and it didn't detect it.

I suspect that it is actually the virtumonde detailed here:
http://www.auditmypc.com/virtumonde-remove.asp

Find the DSS log attached to this post.

Thank you for any help.

Attached Files

extra.txt (17.8 KB, 5 views)

Go The Power

Hello and welcome to TSF

To make sure that you are clear of Virtumonde.....

I would recommend that you go here; read and follow the instructions very carefully; then, post all the requested logs and information; as instructed, to here. (Just click on the coloured links.)

Once done, please be patient, as the Security Team Analysts are usually very busy; one of them will answer your request as soon as they can.


Good luck

Please also remember DO NOT post your logs in this thread, please start a new thread here. (Just click on the coloured link.) and post the logs.

Kind regards.