|
|
|
Trojan.Vundo.B Virus Removal
|
Original Message
|
Name: mdk
Date: October 19, 2005 at 21:26:41 Pacific
Subject: Trojan.Vundo.B Virus RemovalOS: Windows XP HomeCPU/Ram: 512MB |
Comment: I tried all the below steps but could not remove the Trojan.Vundo.B virus. After running the removal software it gives me a message "Trojan.Vundo.B NOT FOUND ON YOUR COMPUTER"..But when I restart the machine in normal mode nortnon again detects it and shows in popup Please help me some - unplug the internet cable - turn off the norton auto-protect - run in safe mode - turn off system restore - run the removal tool - remember to turn system restore on again
Report Offensive Message For Removal
|
|
Response Number 3
|
Name: rhenderson
Date: October 20, 2005 at 07:21:14 Pacific
|
Reply: (edit)norton told me i had vundo.b and i went through their recommended proceedures and downloaded the removal tool. nothing worked. while running through everything again i accidently ran the removal tool for vundo (instead of the one for vundo.b). this appears to have worked - norton no longer detects the trojan. hope this helps anyone who is having problems
Report Offensive Follow Up For Removal
|
|
Response Number 4
|
Name: Mike R
Date: October 20, 2005 at 07:55:29 Pacific
|
Reply: (edit)I also went through Symantec's instructions to the letter and it didn't find it on the machine. I went and tried it again-- but from that time on, whenever I try going into Safe Mode, all I get is a black screen with Safe Mode in the corners-- no desktop or icons. I am very interested in getting this blasted thing off my system-- it currently only affects one file- rqonn.dll.... Thanks!
Report Offensive Follow Up For Removal
|
|
Response Number 5
|
Name: Matt st.
Date: October 20, 2005 at 12:25:17 Pacific
|
Reply: (edit)I am experiencing the same black start up screen in start-up. Why is this happening? I have also tried to manually remove the virus and run Symantec's removal program to no avail. The infected file is yabaa.dll and 3 registry keys. Any suggestions! Help! Thanks, matt
Report Offensive Follow Up For Removal
|
|
Response Number 6
|
Name: Matt st.
Date: October 20, 2005 at 12:27:22 Pacific
|
Reply: (edit)Also, my computer is running at relatively high usage. Esp. winlogon.exe. After periods of low computer use, explorer.exe also rises causing my computer to run at 100%. This is a new laptop and very disheartening.
Report Offensive Follow Up For Removal
|
|
Response Number 7
|
Name: XpUser4Real
Date: October 20, 2005 at 13:05:06 Pacific
|
Reply: (edit)mks42 (by Matt st.), Try this free On-line Spyware Scan and delete all it finds...that should help you. Also make sure you have a GOOD AV and a GOOD firewall. Hopefully my advice will help you...Please post back with your results....thanks
Report Offensive Follow Up For Removal
|
|
Response Number 9
|
Name: Smiller
Date: October 21, 2005 at 10:35:53 Pacific
|
Reply: (edit)I also had the same problem Norton would find it,the removal tool would not,using the manual deletion tecnique I went into the registry and could not find any of the entries that they said were there and to delete.My Norton said it was finding the virus and deleting it and putting a copy in quarantine ,but when I went to quarantine ther were no entries.Anyway I thought maybe Norton was identifying the wrong virus so I went to Symantec and downloaded the removal tool for Trojan Vundo virus not Trojan.Vundo.B I followed all the directions but also turned off anti-virus before using the removal tool it found and removed the virus.
Report Offensive Follow Up For Removal
|
|
Response Number 10
|
Name: Smiller
Date: October 21, 2005 at 11:00:48 Pacific
|
Reply: (edit)The directions they gave me on the Symantec sight to put your comp. in safe mode did not work for me this is what did: (a)in start menu click run (b)type msconfig hit ok (c)Click on BOOT.INI (d)check the box next to safe mode (e)by default(on my comp)minimal is checked change it to DSREPAIR click ok when prompted hit restart be patient it takes awhile to reboot in safe mode after awhile it will bring up a box asking if you want to try to fix your comp. in safe mode or use system restore click yes for safe mode again be patient all you get is a black screen with safe mode in the 4 corners the computer acts like it is locked up and isn't doing anything it takes at least 3-4 minutes then the computer boots up Hint:for me Trojan.Vundo.B tool could not find virus I downloaded Trojan Vundo tool and it removed it. Hope this helps
Report Offensive Follow Up For Removal
|
|
Response Number 12
|
Name: uncool
Date: October 25, 2005 at 09:33:04 Pacific
|
Reply: (edit)Yeah, spysweeper worked for me to. You can go to webroot.com and get the free 14-day trial and it works. Anything made by norton or symantec sucks and doesnt work. What a waste.
Report Offensive Follow Up For Removal
|
|
Response Number 13
|
Name: noblevirk
Date: November 2, 2005 at 19:50:19 Pacific
|
Reply: (edit)Hey guys A quick question your help needed here, All of the vundo or virtumondo victims, I am currently working with a University as their Tech. I have a project for making a sure shot way for removing the above said culprits. To develop such kind of procedure I need to play around with this. So I want to download the Vundo Yeah Vundo on a machine and then do some tests on it. I wanna know does anybody remember that what was the last internet activity which lead you to the installation of Vundo or Virtumondo. Please gave me as much as info as possible, like what you were doing, did you install something new, what websites were you guys visiting using which browser. Please Please help me out in researching this isue, I did try visiting some online gaming sites and tried to download some sort of crap but our Antivirus Software Mcafee 8.0 did remove everything. This is also an increasing threat to our community as we are getting new reports from the members of our university and want to get rid of these. Hope you guys wanna help in this cause, so we can provide a better attacking plan in removing these kind of craps.I will be waiting the thread regularly I am waiting for your replies Thank you noble virk
Report Offensive Follow Up For Removal
|

|

|
Use following form to reply to current message:
|
|

|