Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Virtumondo
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Other forums
- :
- Tech Help - Software/Hardware etc
- :
- Virtumondo
Virtumondo
30-03-2008 8:53 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Does anyone know where this virus comes from? I have had a spate of call outs with it, and removing it was always quite easy until yesterday when my detector failed to find one file, and removal was nigh on impossible. I always seem to find it on PCs used by teenagers, and if I knew where it came from, I'd be able to stop it.
1 REPLY 1
Re: Virtumondo
30-03-2008 9:09 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Quote Characteristics -
This is not a virus or trojan. It is an application that generates extra pop-up ads while using Internet Explorer.
This kind of application generally comes bundled with another program, which usually discloses the fact that it is ad-supported.
The main executable of the application is likely to be using the filename SYSUPD.EXE or WINDOWSUPD.EXE. Once installed a Registry key is typically used to hook system startup. One of the following is likely to be present:
* HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
\Run "SysUpd" = (path/filename to adware)
* HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
\Run "WindowsUpd" = (path/filename to adware)
Users who would like to check for the presence of potentially unwanted programs on their system should run the command line scanner with the /PROGRAM switch.
Also see http://forums.spybot.info/showthread.php?t=1107 for the difficult version
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page