Computing.Net > Forums > Security and Virus > Trojan.Vundo repeatedly found

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Trojan.Vundo repeatedly found

Reply to Message Icon

Name: AgentX2007
Date: March 14, 2007 at 15:26:57 Pacific
OS: Windos XP Pro
CPU/Ram: P4 2.80Ghz/512 MB
Comment:

Norton has repeatedly detected a virus Trojan.Vundo in multiple files. They are always *.dll or *.exe. The naming of the files seems to be random letters and/or numbers. It quarantines them but the virus keeps showing up on restart or after several hours. My best guess is that there is another virus which is replacing the files as it detects that they have been removed from my system. Any Idea how to track down what is doing this since norton is not locating it.



Sponsored Link
Ads by Google

Response Number 1
Name: jabuck
Date: March 14, 2007 at 15:41:51 Pacific
Reply:

Please download VundoFix.exe to your C:\.
Double-click VundoFix.exe to run it.
Click the Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will shutdown your computer, click OK.
Turn your computer back on.
Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button." when VundoFix appears at reboot.

Post the log located at C:Vundofix.txt.

Please post a Hijack This log so that the files associated with the virus/spyware/hijacker can be identified.

Please download HJTsetup.exe from this link http://www.thespykiller.co.uk/files/HJTsetup.exe to your desktop.
Doubleclick on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click "next" in the setup dialogue boxes until you get to the "Select Addition Tasks" dialogue.
Put a check by "Create a desktop icon" then click "Next" again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click "Finish" and it will launch Hijack This.
Click on the "Do a system scan and save a logfile" button. It will scan and the log should open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log and post it in this thread.

Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly.


0
Reply to Message Icon

Related Posts

See More


Internet Explorer grabs 1... Harvester on a website



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Trojan.Vundo repeatedly found

Trojan.Vundo Virus Unable Repair www.computing.net/answers/security/trojanvundo-virus-unable-repair/16663.html

Can't Remove Trojan.Vundo www.computing.net/answers/security/cant-remove-trojanvundo/23118.html

Trojan Vundo www.computing.net/answers/security/trojan-vundo/17023.html