Requesting help with Vundo. Logs attached.

By Pilwiz
Dec 5, 2008
Topic Status:
Not open for further replies.
  1. I have been dealing with what I believe is a variant of the Vundo trojan for the past week or so. I have tried getting rid of it on my own to no avail, there is always one file that seems to remain and recreate the other files with random names.

    My scans from Malwarebytes have turned up with files titled "Vundo" and "BHO.H."

    The symptoms I have been dealing with are slowdown (particularly when using search functions and upon reboot/startup) as well as constant pop-ups advertising rogue programs. Sometimes I will be unable to access a site at all unless I try multiple times. I have tried "VundoFix" and oddly enough, no results turned up at all.

    I completed the 8-step process for removal, and I will now attach my logs. Any help would be greatly appreciated. Thanks!
  2. rf6647

    rf6647 TechSpot Maniac Posts: 931

    Observation: More progress is needed.
    • Your logs show found but unanswered items - React to unanswered items appearing in scan logs
    • NO Action’ - Remove Selected when offered by MBAM
    • 'Delete on Reboot’ - Restart the computer after concluding the scan

    Continue with guide.
    Successive scans are used to uncover additional infections, since masking is common with many infestations. When a tool reports something it can not clean, that's when the strategy calls for a stronger scan program​
    • Update both MBAM & SAS. Rerun them both.

    • This effort is complete when logs report NO infections/threats, or reporting something it can not clean.
      • Typically extra repeat scans are not needed
      .
    • Posts logs. Report progress & what changes are observed. Include logs that found infections.
  3. Pilwiz

    Pilwiz Newcomer, in training Topic Starter

    Hm. I thought I had them both updated, but I guess I didn't. Anyway, here's the new logs. It seems to be clean. Let me know if there's anything else I should do. Thanks.
  4. rf6647

    rf6647 TechSpot Maniac Posts: 931

    You're clean. In the fiirst round of logs, I reacted to 'delete on reboot', and assumed reruns were needed. I took a shortcut and asked for reruns. Sorry if that took unnecessary effort.
  5. Pilwiz

    Pilwiz Newcomer, in training Topic Starter

    No no, there was no problem at all. I feel dumb for having so much trouble with this for the past week when all I needed to do was update my Malwarebytes and SAS. =P Thanks again for the assistance.
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.