Can't remove adware.virtmonde application

Discussion in 'ESET NOD32 Antivirus' started by Bilopete, Jul 3, 2008.

Thread Status:
Not open for further replies.
  1. Bilopete

    Bilopete Registered Member

    Joined:
    Jul 3, 2008
    Posts:
    2
    Location:
    Rockhampton
    Hi everyone,

    I am having a REAL hard time trying to get rid of a dll file which nod32 keeps finding on startup Nod32 offers the opportunity to remove or rename the dll but even after selecting each option the adware comesback on the next bootup. Nod32 states there is adware.virtumonde application in the winlogin.exe file located in the c:\windows\win32 folder.

    So far I have used highjack this to find whcih dll files are causing the problem. The two troublesome files in the c:\windoes\win32 folder are wvUnolI.dd and iifcDwVL.dll.

    I have tried removing these two files using undll but to no avail. I believe the winlogin.exe file is just repropigating the two files.

    I have also tried removing thes files using vundofix.exe and trying to remove the file while in safe mode....nothing seems to work!

    I need advice / assistance on how to rid this adware file from my system without having to reinstall windows.
     
    Bilopete, Jul 3, 2008
    #1
  2. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    6,567
    Location:
    New York City
    Thankful, Jul 3, 2008
    #2
  3. zer0l0gic

    zer0l0gic Registered Member

    Joined:
    May 7, 2008
    Posts:
    52
    zer0l0gic, Jul 3, 2008
    #3
  4. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,456
    Try using Undll to remove the offending dlls.
     
    Marcos, Jul 4, 2008
    #4
  5. CrimsonAvenger

    CrimsonAvenger Registered Member

    Joined:
    Oct 2, 2005
    Posts:
    18
    I had a case of thse recently. I booted to recovery console and just deleted the offending DLLs.
     
    CrimsonAvenger, Jul 4, 2008
    #5
  6. Bilopete

    Bilopete Registered Member

    Joined:
    Jul 3, 2008
    Posts:
    2
    Location:
    Rockhampton
    Many many many thanks for this suggestion. It took three hours to scan but there are no more pop-ups and anoying nod32 threat screens!

    Out of all the programs I tried, this free program did the trick!

    Cheers

    Bilopete


     
    Bilopete, Jul 4, 2008
    #6
  7. zer0l0gic

    zer0l0gic Registered Member

    Joined:
    May 7, 2008
    Posts:
    52
    :D Glad I could be of assistance!
     
    zer0l0gic, Jul 4, 2008
    #7
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...