TechSpot

Vundo -- help please -- 8 steps question

By loudcherokee
Mar 25, 2009
  1. Vundo -- *update* logs attached

    Hello,

    I've just found out that I have a vundo infection, and my Mcafee cannot remove it. Through google, I found this site.

    I've read through and printed the 8 steps, and I am ready to begin, but i have a question about the CCleaner program.

    The checkboxes in the applications folder---is checking these boxes going to remove these programs? Will i need to download and re-install these programs after running the Ccleaner program?

    I just wanted to make sure what this program is doing before I get started.

    Thank you,

    LC
     
  2. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

  3. loudcherokee

    loudcherokee TS Rookie Topic Starter

     
  4. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

    Well according to that SuperAntiSpyware log you have re-visited sites with "ZEDO Ad Serving" Malware

    You will need to run all scans again as you have re-infected yourself (including doing CCleaner first

    It is possible that the real fault is your browsing habits. Where exactly do you go? I ask this because even if support clean your infection, it may be a waste of time as you might just re-infect yourself again :suspiciou
     
  5. loudcherokee

    loudcherokee TS Rookie Topic Starter

    I havn't visited any more sites. My browser home page is yahoo.com, and upon opening my browser, i open my bookmarks list, and then come straight to this site.

    I wonder if my girlfriend used the computer this morning :mad: I know she frequents facebook, myspace, and yahoo mail. She also accessed a site called "appointments plus" for her work.

    LC
     
  6. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

    Here's a further 8-Steps: (bassically making 16 in whole :D)

    Download the following 4 tools, and print these instructions

    1. Download VundoFix; Trojan.Vundo Removal Tool; VirtumundoBeGone and ComboFix.
    2. Go Offline - pull the cable network, turn off wireless card, turn off your modem.
    3. Restart computer and press F8 to run Windows in Safe Mode
    4. Run VundoFix.. Click on the Scan for Vundo. Scanning will begin, which takes a long time. In the white box will display the names of infected files. After the scan is complete click Remove Vundo, removal will begin. Confirm by clicking Yes. The application should ask for permission to restart your computer - click Yes. Start Windows in Safe Mode again.
    5. Run FixVundo. Click Start, and then follow the instructions. It should be noted that this application can deal only with older mutations Vundo (Virtumonde).
    6. Run VirtumondoBeGone. Click Continue and wait for the report.
    7. Run ComboFix. Then, in the two windows that appear click Yes, and start scanning and removal of any Vundo (Virtumonde) infection. During this operation, you are not allowed to move the mouse or perform other actions. After the scan is complete, program will show a text file - a report from the program's action.
    8. Restart computer and run Windows normally.

    But here's the one we ask you to do before doing anything else:
    UPDATED 8-step Viruses/Spyware/Malware Preliminary Removal Instructions

    I'd say do both :grinthumb
     
  7. loudcherokee

    loudcherokee TS Rookie Topic Starter

    Question :

    for this step --
    7. Run ComboFix. Then, in the two windows that appear click Yes, and start scanning and removal of any Vundo (Virtumonde) infection. During this operation, you are not allowed to move the mouse or perform other actions. After the scan is complete, program will show a text file - a report from the program's action.

    My computer screensaver automatically turns on after about 10 minutes. should I disable this function before going forward?

    LC
     
  8. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

    Yes

    Sorry for the delay in responding by the way.

    But whilst I'm replying I may as well add something else I feel strongly about

    Uninstall your McAfee Antivirus
    Then run the McAfee Removal Tool

    Install Avira free AntiVirus

    Obviously "McAfee" has not saved you from this infection, nor is it a good Antivirus software anyway !
     
  9. loudcherokee

    loudcherokee TS Rookie Topic Starter

    no problem at all for the slow response. I appreciate you taking the time to help me.

    I'm off to do the 8 steps again, and then the new 8 steps. I suspect this will take some time, so it may be tomorrow before I post updated logs. I'll try to keep the girlfriend off the computer in the meantime.

    LC
     
  10. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

    That's fine :)

    Pretty sure doing the above 99% (if not all) Malwares will be removed
    Oh I always recommend Avira Antivirus as the best one to use :grinthumb
     
  11. loudcherokee

    loudcherokee TS Rookie Topic Starter

    Updated logs are now complete. The java was successfully installed this time. Also, i did not get the error windows with startup that I received the first time (pinazilo.dll and lsse.exe ??).

    Everything seems to be running smoothly. I have not performed the additional 8 steps at this time. I will probably need to do this on Saturday, when I can make sure the g/f doesn't use the computer. She'll need it tomorrow morning for her email and work applications.
     
  12. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...