• The TUGBBS forums are completely free and open to the public and exist as the absolute best place for owners to get help and advice about their timeshares for more than 27 years!

    Join tens of thousands of other owners just like you here to get any and all Timeshare questions answered!
  • TUG started 28 years ago in October 1993 as a group of regular Timeshare owners just like you!

    Check out our happy birthday post here: Happy Birthday TUG!
  • TUG is asking for recent reviews of older resorts, earn a free year membership!

    Read more here
  • TUG has now saved timeshare owners more than $17,000,000 dollars just by finding us in time to rescind a new Timeshare purchase! A truly incredible milestone!

    Read more here: TUG saves owners more than $17 Million dollars
  • Follow the TUG Member Banner as it travels the world on vacation with Timeshare owners! Also sign up to get the banner sent to you so you can submit a photo of your vacation with the banner to share with TUG! Banner Thread
  • Sign up to get the TUG Newsletter for free! Join tens of thousands of other owners who get this every week! Latest resort reviews and the most important topics discussed by owners during the week!
  • Our official "end my sales presentation early" T-shirts are available again! Also come with the option for a free membership extension with purchase to offset the cost!

    Read more Here
  • A few of the most common links here on the forums for newbies and guests!

[September Thread] Help, I have the Vundo trojan that can not be cleaned

GrayFal

TUG Member
Joined
Jun 6, 2005
Messages
8,977
Reaction score
1,497
Points
449
Location
The Hamptons, NY
Resorts Owned
Marriott Bluegreen WestinStJohn VGV, SBx2 & CVx2 SVV Morritt's Seaside
from my McAfee VirusScan

The file C:\WINDOWS\system32\_c00953F0.dat is infected by the Vundo trojan and cannot be cleaned.

What to do??? :shrug:

It seems to be suddenly closing all my internet explorer windows....not affecting Microsoft Outlook Mail program
 

timeos2

Tug Review Crew: Rookie
TUG Lifetime Member
Joined
Apr 11, 2005
Messages
11,183
Reaction score
3
Points
36
Location
Rochester, NY
Stop using IE and many problems end

from my McAfee VirusScan

The file C:\WINDOWS\system32\_c00953F0.dat is infected by the Vundo trojan and cannot be cleaned.

What to do??? :shrug:

It seems to be suddenly closing all my internet explorer windows....not affecting Microsoft Outlook Mail program
First stop using Internet Exploder - thats half your overall problem. Then use VundoFix.exe from Atribune.org to remove Vundo. Try Firefox or Chrome to replace IE and be far safer and secure. Do NOT remove IE as you need it for Windows updates (but don't use it for anything else).

Good luck.
 

GrayFal

TUG Member
Joined
Jun 6, 2005
Messages
8,977
Reaction score
1,497
Points
449
Location
The Hamptons, NY
Resorts Owned
Marriott Bluegreen WestinStJohn VGV, SBx2 & CVx2 SVV Morritt's Seaside
First stop using Internet Exploder - thats half your overall problem. Then use VundoFix.exe from Atribune.org to remove Vundo. Try Firefox or Chrome to replace IE and be far safer and secure. Do NOT remove IE as you need it for Windows updates (but don't use it for anything else).

Good luck.

Thanks John,
I ran McAfee twice - first time it found 3 of these - 2 were removed and one I had to restart the computer to get rid of it - which I did - second time it detected one vundo which it deleted - so I restarted and I am running it a third time....

Will try your suggestion next if it is still detecting vundo after this third try.
 

rcs249

TUG Member
Joined
Feb 7, 2008
Messages
31
Reaction score
0
Points
6
I didn't know about Vundofix.exe when this happened to me last month, but I downloaded Google's Spyware Doctor from the Google Pack and it took care of it.

Good luck.
 

GrayFal

TUG Member
Joined
Jun 6, 2005
Messages
8,977
Reaction score
1,497
Points
449
Location
The Hamptons, NY
Resorts Owned
Marriott Bluegreen WestinStJohn VGV, SBx2 & CVx2 SVV Morritt's Seaside
The third scan was the charm - I am now Vundo free ....thanks :hi:
 

billymach4

TUG Member
Joined
Oct 20, 2006
Messages
2,677
Reaction score
691
Points
348
Location
Everywhere
I got this Vundo thing also

I have tried several fixes no luck. Will let you know how Spydoctor works!!!:mad:
 

Mosca

TUG Member
Joined
Jun 6, 2005
Messages
1,463
Reaction score
8
Points
248
Google "vundofix".

If that doesn't work try superantispyware.
 

debraxh

TUG Member
Joined
Jun 6, 2005
Messages
1,409
Reaction score
3
Points
246
Location
California
Google "vundofix".

If that doesn't work try superantispyware.
Also Malwarebytes anti-malware. The combination of these two (both free) finally ridded me of a similar virus. I downloaded them from a different computer, copied them to a memory stick, then ran them on the infected machine. I also disabled system restore. Once the scans showed clean, I updated the definitions for both programs and completed re-scans. After rebooting and rescanning to be sure all infections were gone, I re-enabled system restore.

Good luck!
 

billymach4

TUG Member
Joined
Oct 20, 2006
Messages
2,677
Reaction score
691
Points
348
Location
Everywhere
I am afraid to say this

But I may have finally managed to eradicate this Vundo virus from my PC.

I am going to wait a few days before I make my final judgement.

I will let you all know what finally did it.

This is a very persistent little virus. If this latest fix does not work I am going reformat my drive and reinstall the OS.
 

billymach4

TUG Member
Joined
Oct 20, 2006
Messages
2,677
Reaction score
691
Points
348
Location
Everywhere
First stop using Internet Exploder - thats half your overall problem. Then use VundoFix.exe from Atribune.org to remove Vundo. Try Firefox or Chrome to replace IE and be far safer and secure. Do NOT remove IE as you need it for Windows updates (but don't use it for anything else).

Good luck.

Funny thing is I primarily user Firefox. Vundo was starting IE and spoofing a version of a Rougue Anitvirus 2008 Malware.

It was very slick and convincing but I did not take the bait, cause I know my firewall, and Symantec Anitvirus behavior. Everytime I would try to cancel, hit the X to close, another window would pop up. Really nasty.

Unfortunately there are some sites and functions that don't always work with firefox. So you need to keep Internet Exploder around and dormant most of the time.
 

billymach4

TUG Member
Joined
Oct 20, 2006
Messages
2,677
Reaction score
691
Points
348
Location
Everywhere

Cruiser Too

TUG Member
Joined
Jun 6, 2005
Messages
1,188
Reaction score
32
Points
258
Also Malwarebytes anti-malware. The combination of these two (both free) finally ridded me of a similar virus......
Question:

I heard that having more than ONE anti-virus/anti-spyware "active" will/may cause problems.

Any truth to the above ???

Thanks !!!
 

debraxh

TUG Member
Joined
Jun 6, 2005
Messages
1,409
Reaction score
3
Points
246
Location
California
I ran manual scans by each program, one at a time, and didn't have any problems. They don't run continually so shouldn't interfere with other software.
 
Top