Win32/Adware.Virtumonde Threat Level: Win32/Adware.Virtumonde威胁级别：

Win32/Adware.Virtumonde is a fake threat that appears in popups and desktop warnings by Win32/Adware.Virtumonde是一张假的威胁出现在桌面上弹出和警告 fake antispyware假反间谍 XP-Guard. XP的卫队。

“WARNING! “警告！ Spyware detected on your computer!间谍软件检测您的电脑！ Install an antivirus or spyware remover to clean your computer.安装防病毒或间谍软件卸妆清洁您的计算机。
Warning!警告！ Win32/Adware.Virtumonde Win32/Adware.Virtumonde
Warning!警告！ Win32/privacyremover.M64.” Win32/privacyremover.M64 。 “

Is Win32/Adware.Virtumonde dangerous?是Win32/Adware.Virtumonde危险？ Win32/Adware.Virtumonde might have been a serious threat, once upon a time. Win32/Adware.Virtumonde可能是一种严重的威胁，从前。 Now, Win32/Adware.Virtumonde's biggest danger is scaring you into wasting $39.95-$79.95 on现在， Win32/Adware.Virtumonde最大的危险是浪费吓唬你到39.95美元， 79.95美元上 XP-Guard 2.1 XP的卫队2.1 . 。

You're not really infected with Win32/Adware.Virtumonde — you're infected with scamware that you need to remove.你不是真的感染Win32/Adware.Virtumonde -你感染scamware ，你需要删除。

I'll show you how to get rid of Win32/Adware.Virtumonde and XP-Guard 2.1, for free.我会告诉你如何摆脱Win32/Adware.Virtumonde和XP -卫队2.1 ，是免费的。

Do You Have Win32/Adware.Virtumonde?您有Win32/Adware.Virtumonde ？

When you're infected with badware — whether it's Win32/Adware.Virtumonde, spyware, adware, a Trojan, or a virus — there are a few key symptoms.当你感染了恶意软件-无论是Win32/Adware.Virtumonde ，间谍软件，广告软件，木马，或病毒-有几个关键的症状。 Have you noticed…你注意到...

• Slow computer performance : It just takes one parasite like Win32/Adware.Virtumonde to slow your computer dramatically. 电脑的性能降低 ：这只是需要一个寄生虫一样Win32/Adware.Virtumonde放慢您的计算机显着。 If your PC takes longer than usual to reboot, or if your Internet connection is unusually slow, you may be infected with Win32/Adware.Virtumonde.如果您的电脑需要花费较长的时间比平常要重新启动，或如果您的互联网连接异常缓慢，您可能会感染Win32/Adware.Virtumonde 。
• New desktop shortcuts or switched homepage : Badware like Win32/Adware.Virtumonde may change your Internet settings to redirect your homepage to another site. 新的桌面快捷方式或切换网页 ：恶意软件一样Win32/Adware.Virtumonde可能会改变您的互联网设置您的主页重定向到另一个网站。 Badware can even add desktop shortcuts to your PC.恶意软件甚至可以添加桌面快捷方式到您的PC 。
• Annoying popups : Badware can bombard your computer with popup ads, even when you're not online. 恼人的弹出 ：恶意软件可以轰炸电脑弹出式广告，即使您不在线。 Through these popups, you may be tricked into downloading more spyware.通过这些弹出，您可能会欺骗用户下载更多的间谍软件。

How to Remove Win32/Adware.Virtumonde Manually如何删除Win32/Adware.Virtumonde手动

Before we get started, you should backup your system and your registry, so it'll be easy to restore your computer if anything goes wrong.在我们开始使用，您应该备份您的系统和你的注册表，因此它会很容易将计算机还原如果任何事情都会发生错误的。

To remove Win32/Adware.Virtumonde manually, you need to delete Win32/Adware.Virtumonde files.要删除Win32/Adware.Virtumonde手动，您需要删除Win32/Adware.Virtumonde文件。 Not sure不知道 how to delete Win32/Adware.Virtumonde files如何删除Win32/Adware.Virtumonde档案 ? ？ Click here点击这里 , and I'll show you. ，我会向您显示。 Otherwise, go ahead and…否则，继续进行并...

Block Win32/Adware.Virtumonde sites: 座Win32/Adware.Virtumonde网站：

Stop Win32/Adware.Virtumonde processes: 停止Win32/Adware.Virtumonde过程：

Remove Win32/Adware.Virtumonde registry values: 删除Win32/Adware.Virtumonde注册表值：

Get rid of Win32/Adware.Virtumonde files: 摆脱Win32/Adware.Virtumonde文件：

Get rid of Win32/Adware.Virtumonde folders: 摆脱Win32/Adware.Virtumonde文件夹：

Note: In any Win32/Adware.Virtumonde files I mention above, “%UserProfile%” is a variable referring to your current user's profile folder. 注：在任何Win32/Adware.Virtumonde档案我提到上述情况， “ ％ UserProfile ％ ”是指一个变量的当前用户的配置文件文件夹。 If you're using Windows NT/2000/XP, by default this is “C:\Documents and Settings\[CURRENT USER]” (eg, “C:\Documents and Settings\JoeSmith”). 如果您使用Windows NT/2000/XP ，这是默认的“ C ： \的Documents and Settings \ [当前用户] ” （例如，有“ C ： \的Documents and Settings \ JoeSmith ” ） 。 If you have any questions about manual Win32/Adware.Virtumonde removal, go ahead and leave a comment. 如果您有任何疑问 ， 手册Win32/Adware.Virtumonde清除，请尽管发表评论。

How Do You Remove Win32/Adware.Virtumonde Files?如何在删除Win32/Adware.Virtumonde文件？

Need help figuring out how to delete Win32/Adware.Virtumonde files?需要帮助搞清楚如何删除Win32/Adware.Virtumonde文件吗？ While there's some risk involved, and you should only manually remove Win32/Adware.Virtumonde files if you're comfortable editing your system, you'll find it's fairly easy to delete Win32/Adware.Virtumonde files in Windows.虽然有一些风险，你应该只手动删除Win32/Adware.Virtumonde文件如果您已经满意编辑您的系统，你会发现它很容易Win32/Adware.Virtumonde文件删除Windows中。

How to delete Win32/Adware.Virtumonde files in Windows XP and Vista: 如何删除Win32/Adware.Virtumonde文件在Windows XP和Vista ：

1. Click your Windows Start menu, and then click “ Search .”按一下您的Windows 开始菜单，然后单击“ 搜索 ” 。
2. A speech bubble will pop up asking you, “ What do you want to search for? ” Click “ All files and folders .”讲话泡沫会弹出问你， “ 你要什么 ， 寻找 ？ ”点击“ 所有文件和文件夹 。 ”
3. Type a Win32/Adware.Virtumonde file in the search box, and select “ Local Hard Drives .”键入一个Win32/Adware.Virtumonde文件在搜索框中，然后选择“ 本地硬盘驱动器 。 ”
4. Click “ Search .” Once the file is found, delete it.单击“ 搜索 ” 。一旦找到该文件，删除它。

How to stop Win32/Adware.Virtumonde processes: 如何制止Win32/Adware.Virtumonde过程：

1. Click the Start menu, select Run .单击开始菜单中，选择运行 。
2. Type taskmgr.exe into the the Run command box, and click “ OK .” You can also launch the Task Manager by pressing keys CTRL + Shift + ESC .键入taskmgr.exe进入运行命令框中，单击“ 确定 ” 。您也可以启动任务管理器，按下键按Ctrl + Shift + ESC键 。
3. Click Processes tab, and find Win32/Adware.Virtumonde processes.单击进程选项卡 ，找到Win32/Adware.Virtumonde进程。
4. Once you've found the Win32/Adware.Virtumonde processes, right-click them and select “ End Process ” to kill Win32/Adware.Virtumonde.一旦找到了Win32/Adware.Virtumonde过程中，右键单击并选择“ 结束进程 ”杀Win32/Adware.Virtumonde 。

How to remove Win32/Adware.Virtumonde registry keys: 如何删除Win32/Adware.Virtumonde注册表项：

Because your registry is such a key piece of your Windows system, you should always backup your registry before you edit it.因为您的注册表是一个关键的Windows系统，您应该总是备份注册表之前，对其进行修改。 Editing your registry can be intimidating if you're not a computer expert, and when you change or a delete a critical registry key or value, there's a chance you may need to reinstall your entire system. Make sure your backup your registry before editing it.修改您的注册表可以恐吓如果您不是计算机专家，以及当您更改或删除一个关键的注册表项或值，有机会你可能需要重新安装整个系统。 请确保您的备份你的注册表之前编辑。

1. Select your Windows menu “ Start ,” and click “ Run .” An “ Open ” field will appear.选择Windows菜单“ 开始 ” ，并点击“ 运行 ” 。 “ 开放 ”领域将会出现。 Type “ regedit ” and click “ OK ” to open up your Registry Editor.键入“ 注册 ” ，然后单击“ 确定 ”打开你的注册表编辑器。
2. Registry Editor will open as a window with two panes. 注册表编辑器将打开一个窗口，两个窗格。 The left side Registry Editor's window lets you select various registry keys, and the right side displays the registry values of the registry key you select.左边的注册表编辑器的窗口，您可以选择不同的注册表项，并在右边显示的注册表值的注册表项，您选择。
3. To find a registry key, such as any Win32/Adware.Virtumonde registry keys, select “ Edit ,” then select “ Find ,” and in the search bar type any of Win32/Adware.Virtumonde's registry keys.为了找到一个注册表项，如任何Win32/Adware.Virtumonde注册表项，选择“ 修改 ” ，然后选择“ 查找 ” ，并在搜索栏键入任何Win32/Adware.Virtumonde的注册表项。
4. As soon as Win32/Adware.Virtumonde registry key appears, you can delete the Win32/Adware.Virtumonde registry key by right-clicking it and selecting “ Modify ,” then clicking “ Delete .”尽快Win32/Adware.Virtumonde注册表项出现时，您可以删除注册表项的Win32/Adware.Virtumonde右键单击它并选择“ 修改 ” ，然后点击“ 删除 ” 。

How to delete Win32/Adware.Virtumonde DLL files: 如何删除Win32/Adware.Virtumonde DLL文件：

1. First locate Win32/Adware.Virtumonde DLL files you want to delete.首先找到Win32/Adware.Virtumonde DLL文件要删除。 Open your Windows Start menu, then click “ Run .” Type “ cmd ” in Run, and click “ OK .”打开你的Windows 开始菜单，然后单击“ 运行 ” 。键入“ cmd ”在运行，单击“ 确定 ” 。
2. To change your current directory, type “ cd ” in the command box, press your “ Space ” key, and enter the full directory where the Win32/Adware.Virtumonde DLL file is located.若要变更您的当前目录，输入“ cd ”命令中，按您的“ 空间 ”键，并输入完整的目录下的Win32/Adware.Virtumonde DLL文件的位置。 If you're not sure if the Win32/Adware.Virtumonde DLL file is located in a particular directory, enter “ dir ” in the command box to display a directory's contents.如果您不能确定如果Win32/Adware.Virtumonde DLL文件位于一个特定的目录，输入“ 目录 ”中的命令框中显示目录的内容。 To go one directory back, enter “ cd .. ” in the command box and press “ Enter .”去一个目录后，进入“ 的CD .. ”命令中的方块，然后按“ Enter ”键。
3. When you've located the Win32/Adware.Virtumonde DLL file you want to remove, type “ regsvr32 /u SampleDLLName.dll ” (eg, “regsvr32 /u jl27script.dll”) and press your “ Enter ” key.当您找到Win32/Adware.Virtumonde DLL文件要删除，输入“ regsvr32 / ü SampleDLLName.dll ” （例如， “ regsvr32 / ü jl27script.dll ” ） ，然后按你的“ Enter ”键。

That's it.就是这样。 If you want to restore any Win32/Adware.Virtumonde DLL file you removed, type “regsvr32 DLLJustDeleted.dll” (eg, “regsvr32 jl27script.dll”) into your command box, and press your “Enter” key.如果你想恢复任何Win32/Adware.Virtumonde DLL文件删除，输入“ regsvr32 DLLJustDeleted.dll ” （例如， “ regsvr32 jl27script.dll ” ）到您的命令中，并按下您的“ Enter ”键。

Did Win32/Adware.Virtumonde change your homepage? 没有Win32/Adware.Virtumonde更改您的主页？

1. Click Windows Start menu > Control Panel > Internet Options .单击Windows 开始菜单 > “ 控制面板 ” > Internet选项 。
2. Under Home Page , select the General > Use Default .在首页中， 选择一般“使用默认 。
3. Type in the URL you want as your home page (eg, “http://www.homepage.com”).输入您想要的网址为您的主页（例如， “ http://www.homepage.com ” ） 。
4. Select Apply > OK .选择套用“确定 。
5. You'll want to open a fresh web page and make sure that your new default home page pops up.您要打开一个新网页，并确保您的新默认主页弹出。

Win32/Adware.Virtumonde Removal Tip Win32/Adware.Virtumonde去除提示

Is your computer acting funny after deleting any Win32/Adware.Virtumonde files?是您的计算机上删除后，代理有趣任何Win32/Adware.Virtumonde文件吗？ I recommend using a program like我建议使用一个程序一样 File Recover文件恢复 from PC Tools.从PC工具。 File Recover saves deleted files that otherwise can't be recovered by Windows operating sytem.文件恢复删除的文件保存，否则不能恢复Windows操作系统体系。

Want to save time finding Win32/Adware.Virtumonde files?想节省时间找到Win32/Adware.Virtumonde文件吗？ Download Spyware Doctor Spyware Doctor的下载 , let it find the Win32/Adware.Virtumonde files for you, and then manually delete Win32/Adware.Virtumonde files. ，让它找到Win32/Adware.Virtumonde文件你，然后手动删除Win32/Adware.Virtumonde文件。

How Did You Get Win32/Adware.Virtumonde?你是如何开始Win32/Adware.Virtumonde ？

Wondering how Win32/Adware.Virtumonde ended up on your PC?想知道如何Win32/Adware.Virtumonde结束在你的电脑？ If you're infected with Win32/Adware.Virtumonde or other badware, perhaps you were using…如果你感染了Win32/Adware.Virtumonde或其他有害软件，也许你正在使用...

• Freeware or shareware : Did you download and install shareware or freeware? 免费软件或共享 ：在您下载并安装共享软件或免费？ These low-cost or free software applications may come bundled with spyware, adware, or programs like Win32/Adware.Virtumonde.这些低成本或免费的软件应用程序可能会捆绑间谍软件，广告软件或程序一样Win32/Adware.Virtumonde 。 Sometimes adware is attached to the free software to “pay” developers for the cost of creating the software, and more often spyware is secretly attached to free software to harm your computer and steal your personal and financial information.有时广告是重视自由软件“支付”开发商的成本创造了软件和间谍软件往往是秘密附加到免费软件，以损害您的计算机和窃取您的个人信息和财务信息。
• Peer-to-peer software : Do you use a peer-to-peer (P2P) program or other application with a shared network? 点对点软件 ：您使用的是点对点（ P2P ）的程序或其他应用程序共享的网络？ When you use these applications, you put your system at risk for unknowingly downloading an infected file, including applications like Win32/Adware.Virtumonde.当您使用这些应用程序，你把你的系统风险的不知不觉下载受感染的文件，其中包括应用软件，如Win32/Adware.Virtumonde 。
• Questionable websites : Did you visit a website that's of questionable nature? 可疑网站 ：你访问的网站的有问题的性质？ When you visit malicious sites that are fishy and phishy, badware may be automatically downloaded and installed onto your computer, sometimes including applications like Win32/Adware.Virtumonde.当您访问恶意网站，这些鱼和phishy ，恶意软件可能会自动下载并安装到您的电脑，有时包括应用软件，如Win32/Adware.Virtumonde 。 I recommend you use Firefox web browser, if you don't already.我建议你使用Firefox Web浏览器，如果您还没有。

Understanding Win32/Adware.Virtumonde了解Win32/Adware.Virtumonde

If you're infected with Win32/Adware.Virtumonde, you should know what you're fighting.如果你感染了Win32/Adware.Virtumonde ，你应该知道你在战斗。 I'll explain some definitions related to Win32/Adware.Virtumonde.我要解释一些有关的定义Win32/Adware.Virtumonde 。

Win32/Adware.Virtumonde May Be Rogue Anti-Spyware Win32/Adware.Virtumonde可被流氓反间谍软件

Rogue anti-spyware refers to anti-spyware/antivirus software of questionable value.流氓反间谍软件是指软件的疑问anti-spyware/antivirus价值。 Rogue anti-spyware may not be proven to protect your computer from spyware, may popup fake alerts or create many false positives about your PC being infected, or may use scare tactics to try to get you to purchase the application.流氓反间谍软件可能无法证明，保护您的计算机免受间谍软件，可能会弹出假警报或建立许多误报关于你的电脑被感染，或可能会使用恐吓战术，试图让你购买申请。 Rogue anti-spyware software may be installed by a Trojan, come bundled with other software, or install itself through web browser security holes.流氓反间谍软件可能会安装一个木马，捆绑其它软件，或安装本身通过网页浏览器的安全漏洞。 While it is fairly rare, some rogue anti-spyware is created and distributed by known spyware or adware companies, and the rogue anti-spyware may install spyware or adware itself.虽然这是相当罕见，一些流氓反间谍软件是创造和分配的已知间谍软件或广告软件的公司，和流氓反间谍软件可能会安装间谍软件或广告软件本身。

Often when you're infected with rogue anti-spyware like Win32/Adware.Virtumonde, you'll see a false popup security alert like this:往往当你感染了流氓反间谍一样Win32/Adware.Virtumonde ，您会看到一个虚假的弹出安全警报这样的：

Rogue Anti-Spyware Tactics 流氓反间谍软件策略

Typically, rogue anti-spyware such as Win32/Adware.Virtumonde has one or more of the qualities listed below, which is why rogue anti-spyware is considered anti-spyware software of questionable value.通常情况下，流氓反间谍软件，如Win32/Adware.Virtumonde有一个或多个下面列出的素质，这就是为什么流氓反间谍软件被认为是反间谍软件的可疑值。

• False positives/fake alerts : Rogue anti-spyware may produce a large number of false positives or use fake alerts, noting that your computer is infected with spyware parasites or other threats that do not really exist. 假阳性/假警报 ：流氓反间谍软件可能会产生大量的误报或使用假警报，并指出您的计算机感染间谍软件或其他寄生虫的威胁并不真的存在。
• Copycat looks : Rogue anti-spyware may copy the look and feel of other legitimate or rogue anti-spyware applications. 模仿期待 ：流氓反间谍软件可以复制的外观和感觉的其他合法或流氓反间谍软件应用程序。 Often, rogue anti-spyware applications may appear as close clones of other rogue anti-spyware software.通常情况下，流氓反间谍软件应用程序可能会出现接近克隆其他流氓反间谍软件。
• High pressure marketing : Rogue anti-spyware may use scare tactics or other aggressive advertising and marketing tactics to try to trick you into buying the rogue anti-spyware application. 高压营销 ：流氓反间谍软件可能会使用恐吓或其他攻击性的广告和营销策略，试图欺骗您购买流氓反间谍软件应用程序。 Often, rogue anti-spyware may produce false positives and fake alerts about your computer being infected.通常情况下，流氓反间谍软件可能会产生假阳性和假提醒您的计算机被感染。
• Poor detection/scan reporting : Rogue anti-spyware may produce poor reports when it scans your PC. 穷人检测/扫描报告 ：流氓反间谍软件可能会产生贫困的报告时，它会扫描您的电脑。 For example, rogue anti-spyware may say your computer is infected 11 parasites, but not specify which spyware parasites or what type of parasites.例如，流氓反间谍软件可以说您的计算机感染11寄生虫，但没有具体说明这些间谍寄生虫或哪种类型的寄生虫。 Rogue anti-spyware may also report that your PC is infected with SafeAndClean, but not tell you which related files, DLLS, etc. were found on your computer.流氓反间谍软件也可能会报告说你的电脑感染了SafeAndClean ，但不告诉你哪些相关文件， DLL的，等被发现在您的计算机上。
• Weak scanning/detection : Rogue anti-spyware may not only poorly report on computer infection, but rogue antispyware may also poorly scan your PC. 弱扫描/检测 ：流氓反间谍软件不仅会很差计算机感染报告，但流氓反间谍软件还可以扫描你的电脑不好。 Rogue anti-spyware may skip over important folders and files of your computer that should be scanned to detect spyware.流氓反间谍软件可能会跳过了重要的文件夹和文件的计算机，应该扫描检测间谍软件。

Did Win32/Adware.Virtumonde use these tactics to trick you into buying Win32/Adware.Virtumonde?没有Win32/Adware.Virtumonde使用这些策略来欺骗您购买Win32/Adware.Virtumonde ？

Win32/Adware.Virtumonde May Be a Trojan Win32/Adware.Virtumonde可能是一个木马

Trojans install themselves secretly onto your computer, most often through your downloading a simple email attachment (often Trojans pose as harmless pictures).木马安装自己偷偷到您的电脑，通常是通过您下载一个简单的电子邮件的附件（通常木马程序伪装成无害的照片） 。 Most Trojans are able to gain complete control over your PC after installation.大多数木马能够完全控制你的电脑安装后。 With this control, the Trojan and the hacker behind it may change your system settings, delete important files, steal your passwords, and watch your computer acitivity.与此对照，该木马程序和黑客背后可能会改变您的系统设置，删除重要文件，窃取您的密码，并观看您的计算机活性。

Infection Methods of Win32/Adware.Virtumonde and Other Trojans 感染方法Win32/Adware.Virtumonde和其他木马

Most Trojans infect your computer by tricking you into launching an infected file.大多数木马感染您的计算机通过引诱你进入启动受感染的文件。 This poisoned file could disguised as a small file, such as a jpeg or other email attachment, or it might be downloaded via a website or FTP.这中毒档案可以伪装成一个小文件，如JPEG或其他电子邮件附件，或可能是通过网站下载或FTP 。

• Email: Your PC may be infected with a Trojan when you download infected email attachments, or sometimes even when you simply open an email. 电子邮件：您的电脑可能感染了病毒感染时，您下载的电子邮件附件，或有时甚至当您只需打开一封电子邮件。 Many Trojans exploit security holes in Microsoft Outlook.许多特洛伊木马程序利用的安全漏洞在Microsoft Outlook中。 You may be able to reduce your chances of getting infected by a Trojan by using a spam-blocking software.您可以降低您的机会感染了特洛伊木马病毒利用的垃圾邮件拦截软件。
• Websites: Your PC may be infected with a Trojan when you visit a rogue site. 网站：您的电脑可能感染了木马，当您访问一个恶意网站。 Many Trojans exploit security holes in Internet Explorer web browser so that by simply visiting a website you may unknowingly download a Trojan.许多特洛伊木马程序利用的安全漏洞在Internet Explorer网络浏览器，这样，只需访问某个网站您可能不知不觉地下载一个木马程序。
• Open ports: If your computer runs programs that provide file-sharing functions - such as AOL Instant Messenger (AIM), MSN Messenger, and more - you may open your computer up to vulnerabilities. 打开端口：如果您的计算机运行的程序提供文件共享功能-如AOL的即时通讯（目的） ， MSN Messenger和更多的-您可以打开您的计算机的漏洞。 Using file sharing through these applications may create a network that gives attackers the opportunity to remotely access your computer.使用文件共享，通过这些应用程序可能会创建一个网络，使攻击者有机会能够远程访问您的计算机。