TechSpot

Vundo!.grb Trojan issue

By IrishGilly151
Feb 18, 2009
  1. Yesterday I picked this up and noticed a significant system slowdown, frequent IE popups, and my McAfee would alert me about every 5 minutes that it found the trojan and deleted a .dll file.

    I went through the 8 step process and everything seems to be back to normal but just wanted to post the logs to make sure all is well. Thanks so much for your help!

    Sean
     
  2. mflynn

    mflynn TS Rookie Posts: 2,655

    SuperAntiSpyware (SAS) is all that worked for you and made the improvement1

    But you only ran Malwarebytes AntiMalware (MBAM) looked at the screen and exited. You must elect to clean and click to actually remove the Malware. This is evidenced by the "No action taken" in the log.

    So..

    Another run indicated!
    OK there were found/removed items in SAS so we need to run again as the first run likely exposed things that were not even seen the first time.

    So another run SAS Quick Scan will likely find more. So UPDATE run again.

    Then UPDATE and run MBAM and remove all this time.

    Get me the logs.

    Mike
     
  3. IrishGilly151

    IrishGilly151 TS Rookie Topic Starter

    OK, ran them both again. I'm pretty sure I did remove about 30 some odd infected files using MBAM the first time, but maybe not. Here are the logs...
     
  4. mflynn

    mflynn TS Rookie Posts: 2,655

    OK good job!

    Still some remainders so ....

    Another run indicated!
    OK there were found/removed items in both MBAM and SAS so we need to run again as the last run likely exposed things that were not even seen then.

    So another run Quick Scan with both MBAM and SAS will likely find more. So UPDATE run again. Attach logss. We are looking for clean logs.

    Mike
     
  5. IrishGilly151

    IrishGilly151 TS Rookie Topic Starter

    Both scans found no results. Good to go?
     
  6. mflynn

    mflynn TS Rookie Posts: 2,655

    You in a hurry?:D

    You do not want to shortcut this, believe me!

    But almost to be sure do the below...

    Download SDFix to Desktop.

    http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

    On Desktop run SDdFix It will run (install) then close.

    Then reboot into Safe Mode

    As the computer starts up, tap the F8 key several times.

    On the Boot menu Choose Safe Mode.

    Click thu all the prompts to get to desktop.

    At Desktop
    My Computer C: drive. Double-click to open.

    Look for a folder called SD Fix. Double-click to enter SD Fix.

    Double-click to RunThis.bat. Type Y to begin.

    SD Fix does its job.

    When prompted hit the enter key to restart the computer

    Your computer will reboot.

    On normal restart the Fixtool will run again and complete the removal process then say Finished,
    Hit the Enter key to end the script and load your desktop icons.

    Once the desktop is up, the SDFix report will open on screen and also be saved to the SDFix folder as Report.txt.
    Attach the Report.txt file to your next post.
    =========================================
    Download ComboFix

    NOTE: If you have had ComboFix more than a few days old delete and re-download.

    Get it here: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
    Or here: http://subs.geekstogo.com/ComboFix.exe

    Double click combofix.exe follow the prompts.

    Install Recovery Console if connected to the Internet!

    When finished, it will open a log.
    Attach the log and a new HJT log in your next reply.

    Note: Do not click combofix's window while its running. That may cause it to stall.

    Mike
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...