Remove Adware.Virtumonde

Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus download

Home / Spyware Encyclopedia / Adware.Virtumonde

Adware.Virtumonde Technical Details

Category

Adware

Discovered

10/22/2005 22:06:00 PM

Modified

5/8/2008 14:55:00 PM

Threat Level

Critical

Description

Adware are programs that facilitate delivery for advertising content to the user and in some cases gather information from the user's computer, including information related to Internet browser usage or other computer habits. They can take up your computers resources and are largely responsible for the countless popup ads you receive on the web. Adware is often bundled with or embedded within freeware programs like such as clocks, messengers, alerts, weather, and so on.

Summary

The hosts file was updated with the following url-to-ip mappings : N/A
The following http urls were started : N/A
Generated smtp traffic : N/A
There was a new connection established with a remote irc server : N/A
The following hidden entries created : N/A
The following internet connection was established: N/A

When the Adware is executed, it creates the following files:

Name	Version	Publisher	Signature (MD5)	File Size (in Bytes)
..\Windows\rayiou.exe
..\dxcdmns.dll			86c05eae2203f1688c5fa51497d5be24
..\emando operator \application.xml			4db04be3fd917b26d42ebdf1e30e046c
..\fe955c48d4b34269bc3d65b33668cde5.rul
..\fe955c48d4b34269bc3d65b33668cde5.sta
..\ajohizyz.dll			3e5e5bd74e0a3cfd9b2d214b3c30afd2	106496
..\emando operator \application.xml			5814b732f389cba8541b52602a5be5b7
..\vobalklw.dll			3e5e5bd74e0a3cfd9b2d214b3c30afd2	106496
..\zsjspehg.dll			3e5e5bd74e0a3cfd9b2d214b3c30afd2	106496
..\New Folder\AF06A164.DLL			f8b906517b363c74058c10d79bbfb4b6
..\brjqzfne\rvzbpyfh.dll			3e5e5bd74e0a3cfd9b2d214b3c30afd2	106496
..\bstonwhs\nyfqdufk.dll			9d3340be3a387a66d94ec2857b2613b6	57344
..\emando operator \configurator.exe			2d7c01eff6b957b567da4af6d45efae4
..\emando operator\kagi.dll			c9b6924795100eae1643054038eb3929
..\emando operator\operator.exe			7bd96d5cb46d17523d38d2e9b32204de
..\emando operator \remoteassistance.exe			db7c9457398e3ef38f842ec203ad1716
..\emando operator\tips.xml			074cef283c66e32f1872b827a658fcf6
..\emando operator\viewer.exe			9fa4625ea90c1f8c05c98f4ef4a6bf24
..\intcodec\zcodec.exe			FF808E55129964B2F7A562A497C53F07
..\internet explorer\hosejucu.dll
..\Internet Explorer\RAVDHMON.exe
..\Internet Explorer\RAVGJMON.exe
..\Internet Explorer\ravwdmon.exe
..\Internet Explorer\RAVWLMON.exe
..\MSN Gaming Zone\hore.dll

When the Adware is executed, it creates the following Registry entries:

•	..\software\classes\clsid\{0a99a153-e4a0-4124-9dbe-afadc0c902b6}
•	..\software\classes\clsid\{13db404e-7384-44d1-8599-5f5fa28d7e2c}
•	..\software\classes\clsid\{199a9160-6921-4ef3-9420-1183394ca92f}
•	..\software\classes\clsid\{3ce12841-9438-48a0-9da9-d3d2d3d562cc}
•	..\software\classes\clsid\{3e2b23d2-bda7-4ee8-b6bd-ee7d456cea1e}
•	..\software\classes\clsid\{3e71dc86-4a5c-4c71-a185-ebe9ac2eb607}
•	..\SOFTWARE\Classes\clsid\{3fe36807-69ed-45d1-b9be-85c0e3f75b6a}
•	..\software\classes\clsid\{42e05dad-6844-4cd9-b1b9-162c40998129}
•	..\software\classes\clsid\{4a85f02a-ccd3-4e96-9bb1-7ace7d0b9c23}
•	..\software\classes\clsid\{733ff030-a692-4f6e-95c9-687db25f5aed}
•	..\software\classes\clsid\{7cb093ac-11df-46d5-9343-ce4bd90c159c}
•	..\software\classes\clsid\{8bb41b95-1684-40a4-908d-5014a06f99f6}
•	..\software\classes\clsid\{9d0dd920-4d2b-415e-be87-ed636287c7ec}
•	..\software\classes\clsid\{a5b00a5b-073e-4246-aff0-ccae0d5bf6d1}
•	..\software\classes\clsid\{bd6cd737-34e1-4864-8697-83ec081f1989}
•	..\software\classes\clsid\{c5e0119c-aa53-40c7-9d34-8d988a3f85fb}
•	..\software\classes\clsid\{c7eb62d2-5c2d-4358-92de-94cc31aebcd2}
•	..\SOFTWARE\Classes\CLSID\{E291663A-2D6F-4B56-B9DF-AE239AEF6A5B}
•	..\software\classes\clsid\{e65dd8e2-1005-4d44-952e-016bedb01b62}
•	..\software\classes\clsid\{e93df90f-73c6-4d77-96ee-b6adf94c075d}
•	..\software\classes\clsid\{ee292fcc-cc4f-4062-bc7c-8a10b37e6402}
•	..\software\classes\clsid\{fbc71038-4c3e-444f-a456-49080bb16de0}
•	..\SOFTWARE\Classes\CLSID\{FC148228-87E1-4D00-AC06-58DCAA52A4D1}
•	..\software\classes\dosspecfolder.dosspecfolder.1
•	..\software\classes\infodocreader.infodocreader.1

Recommendation to remove Adware.Virtumonde

Spyware Detector can remove Adware.Virtumonde, and thousands of other Spyware definitions, automatically and instantly. Click here to download Spyware Detector and scan for free.

	Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.

	Speed up your computer and increase browsing performance by deleting Spyware & Adware

	Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.

	Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.

Testimonials

Information Desk

	Spyware & Adware Categories we scan

	List of Spyware & Adware we remove


	Submit a Threat Submit a threat to be reviewed by our research team Submit a Threat