Vundo!.grb Trojan issue

[IrishGilly151]

Yesterday I picked this up and noticed a significant system slowdown, frequent IE popups, and my McAfee would alert me about every 5 minutes that it found the trojan and deleted a .dll file.

I went through the 8 step process and everything seems to be back to normal but just wanted to post the logs to make sure all is well. Thanks so much for your help!

Sean

 

[mflynn]

SuperAntiSpyware (SAS) is all that worked for you and made the improvement1

But you only ran Malwarebytes AntiMalware (MBAM) looked at the screen and exited. You must elect to clean and click to actually remove the Malware. This is evidenced by the "No action taken" in the log.

So..

Another run indicated!
OK there were found/removed items in SAS so we need to run again as the first run likely exposed things that were not even seen the first time.

So another run SAS Quick Scan will likely find more. So UPDATE run again.

Then UPDATE and run MBAM and remove all this time.

Get me the logs.

Mike

 

[IrishGilly151]

OK, ran them both again. I'm pretty sure I did remove about 30 some odd infected files using MBAM the first time, but maybe not. Here are the logs...

 

[mflynn]

OK good job!

Still some remainders so ....

Another run indicated!
OK there were found/removed items in both MBAM and SAS so we need to run again as the last run likely exposed things that were not even seen then.

So another run Quick Scan with both MBAM and SAS will likely find more. So UPDATE run again. Attach logss. We are looking for clean logs.

Mike

 

[IrishGilly151]

Both scans found no results. Good to go?

 

[mflynn]

You in a hurry?

You do not want to shortcut this, believe me!

But almost to be sure do the below...

Download SDFix to Desktop.

http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

On Desktop run SDdFix It will run (install) then close.

Then reboot into Safe Mode

As the computer starts up, tap the F8 key several times.

On the Boot menu Choose Safe Mode.

Click thu all the prompts to get to desktop.

At Desktop
My Computer C: drive. Double-click to open.

Look for a folder called SD Fix. Double-click to enter SD Fix.

Double-click to RunThis.bat. Type Y to begin.

SD Fix does its job.

When prompted hit the enter key to restart the computer

Your computer will reboot.

On normal restart the Fixtool will run again and complete the removal process then say Finished,
Hit the Enter key to end the script and load your desktop icons.

Once the desktop is up, the SDFix report will open on screen and also be saved to the SDFix folder as Report.txt.
Attach the Report.txt file to your next post.
=========================================
Download ComboFix

NOTE: If you have had ComboFix more than a few days old delete and re-download.

Get it here: https://www.techspot.com/downloads/5587-combofix.html
Or here: http://subs.geekstogo.com/ComboFix.exe

Double click combofix.exe follow the prompts.

Install Recovery Console if connected to the Internet!

When finished, it will open a log.
Attach the log and a new HJT log in your next reply.

Note: Do not click combofix's window while its running. That may cause it to stall.

Mike