Computing.Net > Forums > Security and Virus > Trojan.Vundo.B Virus Removal

Trojan.Vundo.B Virus Removal

Reply to Message Icon

Original Message
Name: mdk
Date: October 19, 2005 at 21:26:41 Pacific
Subject: Trojan.Vundo.B Virus Removal
OS: Windows XP Home
CPU/Ram: 512MB
Comment:

I tried all the below steps but could not remove the Trojan.Vundo.B virus.
After running the removal software it gives me a message "Trojan.Vundo.B NOT FOUND ON YOUR COMPUTER"..But when I restart the machine in normal mode nortnon again detects it and shows in popup
Please help me some
- unplug the internet cable
- turn off the norton auto-protect
- run in safe mode
- turn off system restore
- run the removal tool
- remember to turn system restore on again


Report Offensive Message For Removal


Response Number 1
Name: XpUser4Real
Date: October 19, 2005 at 22:33:40 Pacific
Reply: (edit)

Try
WinPatrol
It's free and you can stop the trojan from starting up.

Hopefully my advice will help you...Please post back with your results....thanks


Report Offensive Follow Up For Removal

Response Number 2
Name: ugnius
Date: October 19, 2005 at 23:11:42 Pacific
Reply: (edit)

here is the manual vundo.b removal instructions


Report Offensive Follow Up For Removal

Response Number 3
Name: rhenderson
Date: October 20, 2005 at 07:21:14 Pacific
Reply: (edit)

norton told me i had vundo.b and i went through their recommended proceedures and downloaded the removal tool. nothing worked. while running through everything again i accidently ran the removal tool for vundo (instead of the one for vundo.b). this appears to have worked - norton no longer detects the trojan. hope this helps anyone who is having problems



Report Offensive Follow Up For Removal

Response Number 4
Name: Mike R
Date: October 20, 2005 at 07:55:29 Pacific
Reply: (edit)

I also went through Symantec's instructions to the letter and it didn't find it on the machine. I went and tried it again-- but from that time on, whenever I try going into Safe Mode, all I get is a black screen with Safe Mode in the corners-- no desktop or icons. I am very interested in getting this blasted thing off my system-- it currently only affects one file- rqonn.dll....

Thanks!


Report Offensive Follow Up For Removal

Response Number 5
Name: Matt st.
Date: October 20, 2005 at 12:25:17 Pacific
Reply: (edit)

I am experiencing the same black start up screen in start-up. Why is this happening? I have also tried to manually remove the virus and run Symantec's removal program to no avail. The infected file is yabaa.dll and 3 registry keys. Any suggestions!

Help!

Thanks,
matt


Report Offensive Follow Up For Removal


Response Number 6
Name: Matt st.
Date: October 20, 2005 at 12:27:22 Pacific
Reply: (edit)

Also, my computer is running at relatively high usage. Esp. winlogon.exe. After periods of low computer use, explorer.exe also rises causing my computer to run at 100%. This is a new laptop and very disheartening.


Report Offensive Follow Up For Removal

Response Number 7
Name: XpUser4Real
Date: October 20, 2005 at 13:05:06 Pacific
Reply: (edit)

mks42 (by Matt st.), Try this free
On-line Spyware Scan
and delete all it finds...that should help you.
Also make sure you have a GOOD AV and a GOOD firewall.


Hopefully my advice will help you...Please post back with your results....thanks


Report Offensive Follow Up For Removal

Response Number 8
Name: randola
Date: October 20, 2005 at 14:25:59 Pacific
Reply: (edit)

i used spy sweeper and it removed it very easily! i just downloaded the free trial from webroot.com


Report Offensive Follow Up For Removal

Response Number 9
Name: Smiller
Date: October 21, 2005 at 10:35:53 Pacific
Reply: (edit)

I also had the same problem Norton would find it,the removal tool would not,using the manual deletion tecnique I went into the registry and could not find any of the entries that they said were there and to delete.My Norton said it was finding the virus and deleting it and putting a copy in quarantine ,but when I went to quarantine ther were no entries.Anyway I thought maybe Norton was identifying the wrong virus so I went to Symantec and downloaded the removal tool for Trojan Vundo virus not Trojan.Vundo.B I followed all the directions but also turned off anti-virus before using the removal tool it found and removed the virus.


Report Offensive Follow Up For Removal

Response Number 10
Name: Smiller
Date: October 21, 2005 at 11:00:48 Pacific
Reply: (edit)

The directions they gave me on the Symantec sight to put your comp. in safe mode did not work for me this is what did:
(a)in start menu click run
(b)type msconfig hit ok
(c)Click on BOOT.INI
(d)check the box next to safe mode
(e)by default(on my comp)minimal is checked change it to DSREPAIR click ok when prompted hit restart be patient it takes awhile to reboot in safe mode after awhile it will bring up a box asking if you want to try to fix your comp. in safe mode or use system restore click yes for safe mode again be patient all you get is a black screen with safe mode in the 4 corners the computer acts like it is locked up and isn't doing anything it takes at least 3-4 minutes then the computer boots up

Hint:for me Trojan.Vundo.B tool could not find virus I downloaded Trojan Vundo tool and it removed it. Hope this helps


Report Offensive Follow Up For Removal

Response Number 11
Name: Mike R
Date: October 21, 2005 at 18:39:53 Pacific
Reply: (edit)

Thanks all!!

randola-- SpySweeper worked for me-- my laptop is faster than ever! Thanks a bunch to everyone!


Report Offensive Follow Up For Removal

Response Number 12
Name: uncool
Date: October 25, 2005 at 09:33:04 Pacific
Reply: (edit)

Yeah, spysweeper worked for me to. You can go to webroot.com and get the free 14-day trial and it works.

Anything made by norton or symantec sucks and doesnt work. What a waste.


Report Offensive Follow Up For Removal

Response Number 13
Name: noblevirk
Date: November 2, 2005 at 19:50:19 Pacific
Reply: (edit)

Hey guys

A quick question your help needed here, All of the vundo or virtumondo victims, I am currently working with a University as their Tech. I have a project for making a sure shot way for removing the above said culprits. To develop such kind of procedure I need to play around with this. So I want to download the Vundo Yeah Vundo on a machine and then do some tests on it. I wanna know does anybody remember that what was the last internet activity which lead you to the installation of Vundo or Virtumondo. Please gave me as much as info as possible, like what you were doing, did you install something new, what websites were you guys visiting using which browser. Please Please help me out in researching this isue, I did try visiting some online gaming sites and tried to download some sort of crap but our Antivirus Software Mcafee 8.0 did remove everything. This is also an increasing threat to our community as we are getting new reports from the members of our university and want to get rid of these.

Hope you guys wanna help in this cause, so we can provide a better attacking plan in removing these kind of craps.I will be waiting the thread regularly
I am waiting for your replies

Thank you

noble virk


Report Offensive Follow Up For Removal






Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: Trojan.Vundo.B Virus Removal

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software




Have you ever used OpenOffice?

Yes, as my main suite.
Yes, occationally.
Yes, but only once.
No, never.


View Results

Poll Finishes In 4 Days.
Discuss in The Lounge