[September Thread] Help, I have the Vundo trojan that can not be cleaned

[GrayFal]

from my McAfee VirusScan

The file C:\WINDOWS\system32\_c00953F0.dat is infected by the Vundo trojan and cannot be cleaned.

What to do???

It seems to be suddenly closing all my internet explorer windows....not affecting Microsoft Outlook Mail program

 

[timeos2]

Stop using IE and many problems end

from my McAfee VirusScan

The file C:\WINDOWS\system32\_c00953F0.dat is infected by the Vundo trojan and cannot be cleaned.

What to do???

It seems to be suddenly closing all my internet explorer windows....not affecting Microsoft Outlook Mail program

First stop using Internet Exploder - thats half your overall problem. Then use VundoFix.exe from Atribune.org to remove Vundo. Try Firefox or Chrome to replace IE and be far safer and secure. Do NOT remove IE as you need it for Windows updates (but don't use it for anything else).

Good luck.

 

[GrayFal]

First stop using Internet Exploder - thats half your overall problem. Then use VundoFix.exe from Atribune.org to remove Vundo. Try Firefox or Chrome to replace IE and be far safer and secure. Do NOT remove IE as you need it for Windows updates (but don't use it for anything else).

Good luck.

Thanks John,
I ran McAfee twice - first time it found 3 of these - 2 were removed and one I had to restart the computer to get rid of it - which I did - second time it detected one vundo which it deleted - so I restarted and I am running it a third time....

Will try your suggestion next if it is still detecting vundo after this third try.

 

[rcs249]

I didn't know about Vundofix.exe when this happened to me last month, but I downloaded Google's Spyware Doctor from the Google Pack and it took care of it.

Good luck.

 

[GrayFal]

The third scan was the charm - I am now Vundo free ....thanks

 

[billymach4]

I got this Vundo thing also

I have tried several fixes no luck. Will let you know how Spydoctor works!!!

 

[Mosca]

Google "vundofix".

If that doesn't work try superantispyware.

 

[debraxh]

Google "vundofix".

If that doesn't work try superantispyware.

Also Malwarebytes anti-malware. The combination of these two (both free) finally ridded me of a similar virus. I downloaded them from a different computer, copied them to a memory stick, then ran them on the infected machine. I also disabled system restore. Once the scans showed clean, I updated the definitions for both programs and completed re-scans. After rebooting and rescanning to be sure all infections were gone, I re-enabled system restore.

Good luck!

 

[billymach4]

I am afraid to say this

But I may have finally managed to eradicate this Vundo virus from my PC.

I am going to wait a few days before I make my final judgement.

I will let you all know what finally did it.

This is a very persistent little virus. If this latest fix does not work I am going reformat my drive and reinstall the OS.

 

[billymach4]

First stop using Internet Exploder - thats half your overall problem. Then use VundoFix.exe from Atribune.org to remove Vundo. Try Firefox or Chrome to replace IE and be far safer and secure. Do NOT remove IE as you need it for Windows updates (but don't use it for anything else).

Good luck.

Funny thing is I primarily user Firefox. Vundo was starting IE and spoofing a version of a Rougue Anitvirus 2008 Malware.

It was very slick and convincing but I did not take the bait, cause I know my firewall, and Symantec Anitvirus behavior. Everytime I would try to cancel, hit the X to close, another window would pop up. Really nasty.

Unfortunately there are some sites and functions that don't always work with firefox. So you need to keep Internet Exploder around and dormant most of the time.

 

[billymach4]

Nope did not eradicate just yet.

I have put a lid on this thing, but sometimes it does get out to annoy me on my PC. Going to try a few more fixes. If not, then I will format and reinstall XP!!!

Also found this on the net!
http://www.infopackets.com/news/sec...ke_antivirus_2009_software_says_microsoft.htm


http://www.reddit.com/r/technology/comments/7mw82/400000_pcs_infected_with_fake_antivirus_2009/

 

[Cruiser Too]

Also Malwarebytes anti-malware. The combination of these two (both free) finally ridded me of a similar virus......

Question:

I heard that having more than ONE anti-virus/anti-spyware "active" will/may cause problems.

Any truth to the above ???

Thanks !!!

 

[debraxh]

I ran manual scans by each program, one at a time, and didn't have any problems. They don't run continually so shouldn't interfere with other software.