This virus is reported to record your keystrokes and randomly displays advertisements. This virtumonde.c Trojan will create a DLL (Dynamic Link Library) to facilitate the recording of your keystrokes and communicates with a website located on the internet.
Virtumonde.C attaches to explorer.exe, goes memory resident and verifies that it's running (the virus that is). If for some reason Virtumonde.c is stopped, the memory resident program will fire it back up.
The virus also writes to cookies on the infected computer and may visit more than one internet site. The part that makes VirtuMonde.c tricky is that it's a memory resident and writes to a file that spyware removal programs can't erase.
How I removed Virtumonde Completely from My System
Then I tried Spyware Doctor and it also removed only some parts of virtumonde.
Finally I take up with the Spybot. Spybot Search and Destroy scans the computer and removes the parts left by kaspersky and Spyware Doctor.
So what all you have to do is.
1. Download latest virus scanners like Kaspersky Internet Security, PC tool's Spyware Doctor and Spybot Search and Destroy ( with latest updates ).
2. Now Disconnect the computer from internet and other network connections.
3. Then scan the system first with Kaspersky then with Spyware Doctor and finally with Spybot. (It is now said that Spybot can completely remove all variations of Virtumonde trojan from an infected system)
1. Know more about virtumonde and removal - go here
2. Wikipedia Article on Virtumonde
3. Windows live one care scan