Virtumondi? Anyone heard of this infection?

A co-worker just advised me that his daughter's computer is infected with some spyware "virtumondi ". Windows Defender (?? don't know this program) apparently finds and removes it, but it is self-infesting/self-reinstalling with each reboot.

Unfortunately, I can't post a HJT log, but anyone have any general ideas one how to remove it? I googled it but couldn't find any real info.

 

There is an automated fix for this infection. Simple anti-spyware tools are unable to deal with the removal.

You can pass these instructions to your friend, but be advised, it's also very likely that other malwares are installed, thusly they may still be infected with other things. The fix is simple.

Please download VundoFix.exe to your desktop.

• Double-click VundoFix.exe to run it.
• Put a check next to Run VundoFix as a task.
• You will receive a message saying vundofix will close and re-open in a minute or less. Click OK
• When VundoFix re-opens, click the Scan for Vundo button.
• Once it's done scanning, click the Remove Vundo button.
• You will receive a prompt asking if you want to remove the files, click YES
• Once you click yes, your desktop will go blank as it starts removing Vundo.
• When completed, it will prompt that it will shutdown your computer, click OK.
• Turn your computer back on.
• Please post the contents of C:\vundofix.txt and a new HiJackThis log.

 

Thank you. I forwarded the info on. Hopefully it works!