Trojan Vundo

[Mhaxx]

I'm afraid to have trojan Vundo: how to be sure to have it?

I've just launched Spybot and NOD32 and they haven't detected anything.

Please, tell me!

Mhaxx


P.S. maybe you need the HiJackThis log?

 

[Max Wachtel]

* Mhaxx, after much thought, came up with this jewel:

I'm afraid to have trojan Vundo: how to be sure to have it?
I've just launched Spybot and NOD32 and they haven't detected anything.
Please, tell me! P.S. maybe you need the HiJackThis log?

Use this tool

http://vundofix.atribune.org/

Do not post log files here please. There are special forums for them.

 

[Gaz]

I'm afraid to have trojan Vundo: how to be sure to have it?

I've just launched Spybot and NOD32 and they haven't detected
anything.

Please, tell me!

Mhaxx


P.S. maybe you need the HiJackThis log?

These three tools will help you. This trojan has numerous variants, and I
find it really needs a clean through from all three of these programmes to
be sure you have got rid of it:

i) Superantispyware
ii) Malwarebytes
iii) smitfraudfix.

All three programmes are free, you *must* update them before use, it would
be better once you have installed them all and updated them, to drop into
safe mode and run from there.

Gaz

 

[Mhaxx]

All three programmes are free, you *must* update them before use, it would

I'm scanning my PC with all the applications you suggested, without finding
anything.

Maybe I was confused because the fact that told me to have Vunde was this:
scanning my HD with SpyBot I see on the bottom of the window of the scan the
phase "Scanning.. (136593/286339: VirtuMonde.dll)". At the end of the scan
no VirtuMonde is found, anyway I can't understand why Spyot shows
"VirtuMonde.dll" there.. do you have Spybot and can you you try by your own
in order to understand its meaning, please?

Thanks again,

Mhaxx

 

[Beauregard T. Shagnasty]

Maybe I was confused because the fact that told me to have Vunde was
this: scanning my HD with SpyBot I see on the bottom of the window of
the scan the phase "Scanning.. (136593/286339: VirtuMonde.dll)". At
the end of the scan no VirtuMonde is found, anyway I can't understand
why Spyot shows "VirtuMonde.dll" there.. do you have Spybot and can
you you try by your own in order to understand its meaning, please?

In the status bar, it shows *all* the items it is scanning for. It runs
rather quickly, but don't you notice that it starts at "1" and continues
scanning to the 286,339th item? Maybe it takes longer to look for this
one item, so it is displayed in the status bar long enough for you to
actually read it.

If nothing was found when the scan *completes*, I think you have naught
to worry about.

 

[Mhaxx]

In the status bar, it shows *all* the items it is scanning for. It runs

rather quickly, but don't you notice that it starts at "1" and continues
scanning to the 286,339th item?
Sure

Maybe it takes longer to look for this
one item, so it is displayed in the status bar long enough for you to
actually read it.

It could be

If nothing was found when the scan *completes*, I think you have naught
to worry about.

Okay, thanks a lot.

Massimo

 

[Dustin Cook]

These three tools will help you. This trojan has numerous variants,
and I find it really needs a clean through from all three of these
programmes to be sure you have got rid of it:

i) Superantispyware
ii) Malwarebytes
iii) smitfraudfix.

All three programmes are free, you *must* update them before use, it
would be better once you have installed them all and updated them, to
drop into safe mode and run from there.

Gaz

With the exception of Malwarebytes, it doesn't perform as well in safe
mode as it would in normal mode.

 

[Gaz]

With the exception of Malwarebytes, it doesn't perform as well in safe
mode as it would in normal mode.

Really? I wasnt aware of that. Any reason??

Gaz

 

[Dustin Cook]

Really? I wasnt aware of that. Any reason??

Windows doesn't load a complete copy of the registry in safe mode. We
would miss some registry items.