Pop Up MALWARE: trojan.vundo, winfixer2005, winantivirus etc.

[xlurker]

The constant vundo alert and all the pop up windows and alert boxes
stopped appearing on my PC on 12/15/2005. They have not come back in
the the 25 days which have passed since.

I do not know who fixed me, but I appreciate it. My XP and all my
applications are running MUCH better now.


Newsgroups: microsoft.public.security.virus, alt.comp.virus,
alt.comp.anti-virus, alt.privacy.spyware,
symantec.customerservice.general
From: (e-mail address removed)
Date: 4 Dec 2005 18:51:58 -0800
Subject: Pop Up MALWARE: trojan.vundo, winfixer2005, winantivirus etc.

Symantec Norton AnriVirus is showing me in a virus alert notification
box that Norton finds a trojan.vundo virus in a file named geedd.dll.
That Norton box notifies that Norton cannot access or repair that file
and will not close that notice box.


Generous participants in these groups have suggested that Symantec and
I cannot access that file b/c an application is using it. I wish the
on-screen access denial notifications had delivered that explanation.


One intuits that the correct response to this problem is for Symantec
Norton or MS anti-spyware to close the application which is using the
file and then cleanse the virus. Why are Symantec Norton and MS not
doing that?

 

[Scherbina Vladimir]

Such problem may occure when for example, virus or adware is injected into
system process. Antivirus software cannot shutdown it (an example:
winlogon.exe) and thus cannot remove physically file.

AFAIR Norton have possibility to remove such files on reboot using it's own
driver.