VirtuMonde, also known as Virtumonde.C, is an adware program that downloads and displays popup advertising for Winfixer, ErrorSafe, and Sysdefender. VirtuMonde may act like a keylogger, creating a DLL library that logs typed-in keystrokes and submit them to its preset website.

VirtuMonde Bad Behavior:

• VirtuMonde installs without your consent.
• VirtuMonde installs other types of spyware/adware.
• VirtuMonde may hijack, redirect and change your browser.
• VirtuMonde displays annoying popups while you surf the web.
• VirtuMonde compromises your privacy and security.
• VirtuMonde is difficult to uninstall.

SpyHunter’s FREE Spyware Scanner to detect VirtuMonde.

SpyHunter’s Free Spyware Scanner is for spyware detection purposes only. If SpyHunter’s spyware
scanner detects VirtuMonde on your PC, you’ve been infected with VirtuMonde and we suggest you buy the full-version of SpyHunter to remove VirtuMonde and other spyware threats.

VirtuMonde - Manual Removal Instructions:

WARNING: VirtuMonde manual detection and removal process is difficult. You’re required to access sensitive files in your machine. NOT recommended unless you’re an expert in this field.

VirtuMonde manual removal too hard? Run SpyHunter’s FREE VirtuMonde Scan Now!

Stop VirtuMonde system processes:

windowsupd2.exe
winhost.exe
quicken.exe
editpad.exe
nwonknu.exe
rasrun.exe
psdrv.exe
svci.exe
unknown.exe
castlecops[1].exe
kopCFEWV.exe
nnx22011.exe
ces005dr.exe
Windows_XP_SP2_Professional_Edition_Corporate_serial_number.txt[2].exe
Nero_Burning_Rom_Ultra_Edition_6.6.0.6_serial_number.txt[1].exe

Unregister VirtuMonde DLLs:

lspak.dll
rulesak.dll
cidrules.dll
hrj6051se.dll
jtr0079me.dll
pmnno.dll
geebc.dll
ssttr.dll
SbCIe02b.dll
pmnlk.dll
iifddby.dll
ddcbabx.dll
awtqqnl.dll
sstrs.dll
mllkk.dll
vtuspmn.dll
nnnmmlk.dll
cbxxywx.dll
opnnljj.dll
khfcdaw.dll
mljkkhf.dll
sstur.dll
tuvwuss.dll
ddcyx.dll
khfcdba.dll
ljjgedc.dll
rqrppon.dll
vtsts.dll
wvursqn.dll
xxyxwxv.dll
ssqqomk.dll
pmnnm.dll
ddcca.dll
vtsss.dll
urstr.dll
jkhhf.dll
mllmm.dll
rqron.dll
byxurqq.dll
rqrssro.dll
vtuts.dll
mljhghe.dll
sstqq.dll
jiinhuyb.dll
geeby.dll
awtqopm.dll
bndsrsqo.dll
mljjk.dll
awtttqr.dll
pmnlj.dll
hggdefc.dll
ssqqn.dll
ssqnolm.dll
gebyxuu.dll
tuvvsrp.dll
cbxussr.dll
khffefd.dll
efcdaab.dll
ddcaaxu.dll
tuvutus.dll
nnlmn.dll
hgggdbx.dll
opnnlmn.dll
awtqomn.dll
jkhfe.dll
byxvs.dll
xxyvspp.dll
byxxy.dll
mljgh.dll
ddaya.dll
ssqopqo.dll
iifcyab.dll
efcbbcc.dll
ssqpq.dll
opnlm.dll
urqollm.dll
ssqpono.dll
fccdbab.dll
nnlif.dll
ddcawvv.dll
pmnlmnk.dll
gebabcd.dll
vtutron.dll
iiffgfd.dll
mljiggd.dll
opnnopq.dll
yayxuus.dll
ddayy.dll
ddcabya.dll
mljgf.dll
mljighf.dll
ljjhgee.dll
opnkjjg.dll
opnlifg.dll
pmnnn.dll
winsrc.dll
wvwxv.dll
temlxopqgdk.dll

Remove VirtuMonde files:

windowsupd2.exe
winhost.exe
quicken.exe
editpad.exe
lspak.dll
rulesak.dll
cidrules.dll
nwonknu.exe
rasrun.exe
psdrv.exe
svci.exe
unknown.exe
hrj6051se.dll
jtr0079me.dll
pmnno.dll
geebc.dll
ssttr.dll
SbCIe02b.dll
pmnlk.dll
2chkdsk
iifddby.dll
ddcbabx.dll
castlecops[1].exe
gf1.0.0.2
kopCFEWV.exe
awtqqnl.dll
sstrs.dll
mllkk.dll
vtuspmn.dll
nnnmmlk.dll
cbxxywx.dll
opnnljj.dll
khfcdaw.dll
mljkkhf.dll
sstur.dll
tuvwuss.dll
ddcyx.dll
khfcdba.dll
ljjgedc.dll
rqrppon.dll
vtsts.dll
wvursqn.dll
xxyxwxv.dll
ssqqomk.dll
pmnnm.dll
nnx22011.exe
ces005dr.exe
ddcca.dll
vtsss.dll
urstr.dll
jkhhf.dll
mllmm.dll
rqron.dll
byxurqq.dll
rqrssro.dll
vtuts.dll
Windows_XP_SP2_Professional_Edition_Corporate_serial_number.txt[2].exe
Nero_Burning_Rom_Ultra_Edition_6.6.0.6_serial_number.txt[1].exe
mljhghe.dll
sstqq.dll
jiinhuyb.dll
geeby.dll
awtqopm.dll
bndsrsqo.dll
mljjk.dll
awtttqr.dll
pmnlj.dll
hggdefc.dll
cbgzgdqt
ssqqn.dll
ssqnolm.dll
gebyxuu.dll
tuvvsrp.dll
cbxussr.dll
khffefd.dll
efcdaab.dll
ddcaaxu.dll
tuvutus.dll
nnlmn.dll
hgggdbx.dll
opnnlmn.dll
awtqomn.dll
jkhfe.dll
byxvs.dll
xxyvspp.dll
byxxy.dll
mljgh.dll
ddaya.dll
ssqopqo.dll
iifcyab.dll
efcbbcc.dll
ssqpq.dll
opnlm.dll
urqollm.dll
ssqpono.dll
fccdbab.dll
nnlif.dll
ddcawvv.dll
pmnlmnk.dll
gebabcd.dll
vtutron.dll
iiffgfd.dll
mljiggd.dll
opnnopq.dll
yayxuus.dll
ddayy.dll
ddcabya.dll
mljgf.dll
mljighf.dll
904598c7
ljjhgee.dll
opnkjjg.dll
opnlifg.dll
pmnnn.dll
winsrc.dll
wvwxv.dll
temlxopqgdk.dll

Remove VirtuMonde registry values:

HKEY_CLASSES_ROOTatlevents.atlevents
13589181-4f0d-4553-b9f8-b4b72172c139
HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionrunonce*winlogon
HKEY_CURRENT_USERsoftwaremicrosoftwindowsupd
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowsntcurrentversionwinlogonnotifycatw
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowsntcurrentversionwinlogonnotifypsdrv
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionrunwindowsupd
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionrunonce*catw
HKEY_LOCAL_MACHINEsoftwaretargetsoft
D01C9902-73AF-47FF-B784-05FDB6604FCF
1B34D3EC-4AC7-41EC-ACC8-C9A2C0CBA2E5
MicrosoftWindows NTCurrentVersionWinlogonNotifypmnno
68616403-4FFB-4B19-B360-0B0B1F55D5EC
22B271AB-3D0A-4CCB-8AD9-DD08183C356A
MicrosoftWindows NTCurrentVersionWinlogonNotifyssttr
D714A94F-123A-45CC-8F03-040BCAF82AD6
SoftwareMicrosoftInternet ExplorerExplorer Bars83B28A74-640D-48F4-9F51-E80EED7CC7E0
83B28A74-640D-48F4-9F51-E80EED7CC7E0
2FCAB754-0535-470E-8F80-BACB6CA1ACC1
SoftwareMicrosoftWindows NTCurrentVersionWinlogonNotifypmnlk
D38439EC-4A7F-42b4-90C2-D810D7778FDD
6148028B-D532-4417-8C0B-5A4A0B745393
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks6148028B-D532-4417-8C0B-5A4A0B745393
MicrosoftWindows NTCurrentVersionWinlogonNotifyiifddby
A05DA7E0-383C-4E99-A72A-742050A152A2
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooksA05DA7E0-383C-4E99-A72A-742050A152A2
MicrosoftWindows NTCurrentVersionWinlogonNotifyddcbabx
B763C083-57E0-4993-B058-13008952DF68
C78658B2-CDE5-4FD1-B73B-B9FF478DBE54
662BB3E3-204F-44FA-A827-143B8AB4B036
SOFTWAREMICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYpmnno
SOFTWAREMICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYssttr
9CF8EE9B-0B2E-464A-9700-D7B46142BD99
B2030C9A-DE59-457D-A042-D827AD69C8F3
F00EFDF5-0042-4F5E-9F20-C688409CF918
F73AF695-229D-4549-B1A0-20DA99A81F19
22E58089-6DB5-45D9-BF87-6C8975246D26
3F82D203-999F-4FF4-9F07-5F9EBFCCE20F
5A4A2D56-931A-4733-9121-033A2D95A274
1FB63E52-4D6E-48C1-A08F-F630FE50F337
01ABD624-98FE-4B37-81F2-4E5B41799B6B
05029E1B-4C41-4681-8F7F-2AEC346136F4
59B5C788-4D95-4610-B1ED-AD9DC7CD86E0
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYnnnmmlk
E4EEFFED-93CD-4CF0-A0F3-50D139121FEE
8410970E-714C-4F14-AA6B-B3B2F3246827
82412A22-FFED-4A67-B37D-4127EBA1BB02
095514BB-363E-451D-9BAE-A054E51BD0B0
34FB86FC-74AC-4AC4-BACE-D9E929C6F9E3
41D495B7-9E31-4637-A0AC-5BB4C4F4E8C9
27534EA2-AF0A-4405-9143-8837572099BC
28DD5FA9-7526-4463-A548-BD2877B2710A
57D6708C-88E2-4CAB-9FA4-78BB8CA3A3C4
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks57D6708C-88E2-4CAB-9FA4-78BB8CA3A3C4
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYkhfcdaw
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYmljkkhf
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYtuvwuss
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYsstur
MicrosoftWindows NTCurrentVersionWinlogonNotifywvursqn
44218730-94E0-4b24-BBF0-C3D8B2BCE2C3
855879EC-968C-4480-976B-870669F5F95A
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYpmnnm
1f9137dc-0b86-43e1-a596-8b2b49125124
719C7140-463A-45CB-BA90-828B11FCF5A4
F9C57A10-3FFE-4E94-924E-264713738291
5A04F1F7-C0A5-41A1-8C23-7A96894B9002
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYkeycpl
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYddcca
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYvtsss
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYtuvvtut
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYgebbawt
MicrosoftWindows NTCurrentVersionWinlogonNotifypmnlk
35B868E9-614B-47BA-81F7-841B8B055247
F40114E6-51D4-4EE4-9F38-2E979AF84593
D6A00137-3F93-44D3-BBB8-A3BF01F57F0E
FA2C0BCD-918D-46C7-BD03-F96CAB3E164F
C3352FCD-CFE5-4F35-831A-19C68DDB7CF4
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYurstr
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYjkhhf
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYrqron
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYbyxurqq
53D52C90-6F7B-49D9-8102-7E5CF7F5C14F
B7672BAF-E9A3-49B6-86B2-C81719A18A4C
837B45D6-BF85-457D-AABF-6D2E7815F791
45B20293-5C68-4271-B4FD-F43A4075A2E3
89AD4D75-2429-462e-BD4E-443F233F6033
538DBDB9-C3BC-4ADA-AAA1-E6A6B3DB1E15
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYawtqopm
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYfccbccd
C4F4DBBD-4A4C-4B40-97DA-2FE06DBB2901
4E35C785-B803-471E-AF03-74BDE42EA65A
53ABEA8C-703F-4CC0-9EFB-97257CCB5E41
6980D6C1-F025-4067-B8B8-F12029EA0CD2
2AD3123A-16FF-404E-92E5-47128E40D281
CBD708EF-2ADC-47F4-BC1C-50E1A7AA4265
1B2E9329-C933-4A5D-908C-9A8251D1B7C6
9DC8B477-C55C-4373-953D-8913334A8D8B
A3DA48A6-8C7B-43CB-B31B-F28005EF8DFD
DA0053C8-1501-48C6-BD86-167AA3DEC119
2D04C025-C1A3-4DC1-81D8-A10EFEAFA699
90375CC7-C153-4D5C-B81D-C4011A3C16D3
B1F4D9B0-7300-408A-B70A-677CC7276EF6
429E0606-5905-4CCD-998A-9D2C29DE6F33
582C46EE-9E66-4DE0-92A5-34B971099C0C
6730A59E-FBA3-4EEC-B564-5F05EF8EF39C
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks837B45D6-BF85-457D-AABF-6D2E7815F791
MicrosoftWindows NTCurrentVersionWinlogonNotifyawtttqr
3385764C-85FC-45CC-B290-E97646306BB2
90624170-D668-409E-A2F5-C0710044760F
A93EE73A-8FEB-47CD-BDF1-E75A0B6BEF8C
232D2677-68EE-4FA1-B988-279EBC8969ED
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYgeebc
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYhggdefc
C408EC5B-CC5E-451D-B831-6DB83DA47244
634BBAB7-3F60-4426-944F-A62B9007F67F
AB30E818-2B0F-4336-BB29-35D245598EDB
01CD0B31-9154-45F2-9414-F5D64B74EAF6
200D0AAD-71B1-51C9-DDB0-092BA4662A54
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYssqnolm
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYgebyxuu
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYtuvvsrp
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYcbxussr
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYkhffefd
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYefcdaab
2ABAAC42-84DF-4C00-89DA-BC7EB2B0E70B
A288996D-94BC-4C73-8CC7-A20F8A435A98
46523B68-2656-4D4D-B415-20907B8E649A
F95B14B7-B316-49DA-972C-1225025AFB7A
AEBF6926-DBA6-4100-A838-1CED0169AB78
9D88DD0F-5C78-417D-9E48-DDE4BCC53E9F
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYawtrsss
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYddcaaxu
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYpmkjj
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYtuvutus
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYhgggdbx
6551122A-4DEB-4949-8ABF-72972775F028
88741C23-A892-4B7E-8F89-4A69CB12DA67
F9491793-47BB-4F3C-9B1A-08A8E4F88D0D
3FABB570-CFE9-43FB-82F4-F065466077B4
326F7029-5B4F-4D02-8D77-F16322C282C1
A47BD9A5-EF81-4E2D-B5D8-A5AF7099683E
817A8844-1AF6-4093-B74A-DD91676A179E
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYawtqomn
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYiifdcdd
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYxxyvspp
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYbyxxyay
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYqommlii
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYcbxvusr
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYopnlmjh
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYssqopqo
DB1F1927-3FFC-4313-82AD-6A75758E5D32
6A30EED0-7D3E-40AC-946D-CF769A3ACDF5
506602EA-3290-416C-84E7-B2B331D2DFA2
81182B58-0DB8-4671-A345-BD9B20E6FC72
6A061FA1-352D-4902-94FB-46BD37FD7FAF
259B6215-70A2-4789-9978-64CD33632682
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYurqollm
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYiifcyab
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYssqpono
MICROSOFTWINDOWS NTCURRENTVERSIONWINLOGONNOTIFYefcbbcc
9DEC