• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
This forum thread needs a solution.
Kudos0

Virus Help

I'm wondering if I could get some advice/help with a bit of a virus problem I've been having.  I've seemed to have picked up some sort of virus/trojan that keeps reinstalling itself on my labtop even after it gets removed after a norton scan removes it.  Its called Trojan.Vundo and it keeps poping up on me after I've removed it. I'm running the 2010 ed. of Nortons Antivirus and I don't really have anything else in terms of antivirus on there.  I'm not sure of what other information you may require so if I've left stuff out I'll try my best to get you what is needed.  Any help or advice with this is appreciated.  Thanks.Message Edited by R_Duke on 11-15-2009 07:02 PM

Replies

Kudos0

Re: Virus Help

Hi R_Duke,

Welcome to the forum. Which OS and SP do you have? What is the full version of Norton AV 2010?

Thanks

Allen

Message Edited by AllenM on 11-15-2009 07:17 PM
Windows 7 Ultimate SP 1, 64 bit, 32 GB * NIS Vers. 21.5.0.19 * Ghost 15 * IE 9, Firefox, Safari. Test laptop with W7 Home Premium 64 bit * NIS Vers. 21.5.0.19
Kudos0

Re: Virus Help

Thanks for the welcome and quick reply.  I'm running Windows XP for my OS.  For Nortons I've got the AntiVirus 2010 with antispyware edition.  Hopefully this helps.
Kudos1

Re: Virus Help


R_Duke wrote:
Thanks for the welcome and quick reply.  I'm running Windows XP for my OS.  For Nortons I've got the AntiVirus 2010 with antispyware edition.  Hopefully this helps.

Hi R_Duke,

When I asked for full version of Norton AV 2010, it was to ensure that you had the latest version from Live Update. Please see this link concerning the Trojan. Also after removing this threat I would also recommend running Malware Bytes to do some further checking of your system and make sure there are no more infections.

Please go to www.malwarebytes.org

1. Download Malwarebytes’ Anti-Malware (mbam-setup.exe) free version and save it on your Desktop.
2. After downloading, double-click on mbam-setup.exe to install the application.
3. Follow the prompts and install as “default” only
4. Before the installation completes, check on the following prompts:
- Update Malwarebytes’ Anti-Malware
- Launch Malwarebytes’ Anti-Malware
5. Click “Finish.” The programme will run automatically and you will be prompt to update the programme before doing a scan. Please update.
6. Scan your computer thoroughly choosing a "full scan".
7. When scanning is finished click on “Show Results”
8. Make sure that all detected threats are marked with a check mark, click on "Remove Selected".
9. Restart your computer.

Please post the logs back to this thread using "add attchments" below the orange "post" button.

Note: Some malware may prevent mbam-setup.exe from downloading and/or running. You can download and rename this program from a different computer before running it on an infected system.

Thanks

Allen

Message Edited by AllenM on 11-15-2009 07:34 PMMessage Edited by AllenM on 11-15-2009 07:36 PM
Windows 7 Ultimate SP 1, 64 bit, 32 GB * NIS Vers. 21.5.0.19 * Ghost 15 * IE 9, Firefox, Safari. Test laptop with W7 Home Premium 64 bit * NIS Vers. 21.5.0.19
Kudos2

Re: Virus Help

Will do.  I'll take those steps and keep my fingers crossed on finally being rid of this thing.  I appreciate the prompt help and I'll post the logs as soon as I get that program up and running.
Kudos1

Re: Virus Help

Hi R_Duke,

My partner got this one before so you should be fine. Be sure to follow the instructions carefully including disabling system restore. If you don't do this step you could end up getting re-infected.

I'll be waiting for results.

Thanks

Allen

Windows 7 Ultimate SP 1, 64 bit, 32 GB * NIS Vers. 21.5.0.19 * Ghost 15 * IE 9, Firefox, Safari. Test laptop with W7 Home Premium 64 bit * NIS Vers. 21.5.0.19
Kudos0

Re: Virus Help

Hello R_Duke,

I'm heading off to bed now. I hope things are going ok and I will check back first thing in the morning after I wake up.

Thanks

Allen

Windows 7 Ultimate SP 1, 64 bit, 32 GB * NIS Vers. 21.5.0.19 * Ghost 15 * IE 9, Firefox, Safari. Test laptop with W7 Home Premium 64 bit * NIS Vers. 21.5.0.19
Kudos0

Re: Virus Help

I'm sorry I haven't gotten back to you sooner, but I couldn't take the actions last night at that time.  I'm taking the steps now and should have the logs ready for you in however long it takes the scans.  Thanks for your patience.
Kudos0

Re: Virus Help


R_Duke wrote:
I'm sorry I haven't gotten back to you sooner, but I couldn't take the actions last night at that time.  I'm taking the steps now and should have the logs ready for you in however long it takes the scans.  Thanks for your patience.

Hi R_Duke,

No problem, I'll be here when you are ready. I'm usually gone for work for about 10 hours a day and then my sleep time but apart from taht I generally see responses pretty quickly since I get email alerts.

By the way you can always tell if a user is offline by clicking on the user name.

Allen

Windows 7 Ultimate SP 1, 64 bit, 32 GB * NIS Vers. 21.5.0.19 * Ghost 15 * IE 9, Firefox, Safari. Test laptop with W7 Home Premium 64 bit * NIS Vers. 21.5.0.19
Kudos0

Re: Virus Help

Well just got finished with the scans and I've attached the log with the information you requested.  I unfortunately had to save the thing to notepad because of a lack of MS office on my labtop at the moment and hopefully that isn't a problem.  If it is I can find a way to get the thing in a word doc and give it to you guys.  Hope this helps.
File Attachment: 
Kudos0

Re: Virus Help

Hi R_Duke,

Thanks for the update. Actually the last thing you want to do is attach a WORD doc. Text and log files and images are the only thing supported on the forum. This looks good, Malware Bytes did find a few things and removed them.

Please run one addtional scan and post results again, just to make sure nothing further is found.

Also, did you carefully follow the procedure for removing the Trojan to include disabling system restore?

So please do the following to complete:

1) Run one more scan with Malware Bytes and post results.

2) Re-enable System Restore and create a manual restore point.

3) Run a full scan with Norton AV and verify no further problems found.

Thanks much

Allen

P.S. And yes I know these things are a pain in the you know what and I always wish people who do this get caught and get the absolute maximum punishment allowed by law!

Message Edited by AllenM on 11-16-2009 08:43 PM
Windows 7 Ultimate SP 1, 64 bit, 32 GB * NIS Vers. 21.5.0.19 * Ghost 15 * IE 9, Firefox, Safari. Test laptop with W7 Home Premium 64 bit * NIS Vers. 21.5.0.19
Kudos0

Re: Virus Help

Yep I turned off system restore and took the steps you recommended.  I'll make sure to do those follow up actions when I get a chance to get back on tomorrow night.  Thanks for the help and I'll return with more results tomorrow.
Kudos0

Re: Virus Help


R_Duke wrote:
Yep I turned off system restore and took the steps you recommended.  I'll make sure to do those follow up actions when I get a chance to get back on tomorrow night.  Thanks for the help and I'll return with more results tomorrow.

Hi R_Duke,

I'll be ready when you come back on. Sorry about all these steps but it is always best to make absolutely sure and re-running scans is the best way to do so.

I will be at work from about 9AM PDT until approx. 7:30PM or so PDT. I will also try to check on my iPhone from work a couple of times. Not sure what time zone you are in, so wanted to throw this in.

Thanks

Allen

Windows 7 Ultimate SP 1, 64 bit, 32 GB * NIS Vers. 21.5.0.19 * Ghost 15 * IE 9, Firefox, Safari. Test laptop with W7 Home Premium 64 bit * NIS Vers. 21.5.0.19
Kudos0

Re: Virus Help

I ran another malware scan and I've attached the logs.  I didn't have the time to do the second part of the instructions tonight but I will be able to get to them tomorrow and let you know the results.
File Attachment: 
Kudos0

Re: Virus Help


R_Duke wrote:
I ran another malware scan and I've attached the logs.  I didn't have the time to do the second part of the instructions tonight but I will be able to get to them tomorrow and let you know the results.

Hi R_Duke,

Thank you for the update and thank you for doing these last tests. This looks perfect, no further problems found by the Malware Bytes scan. The only thing left is the re-enabling of system restore and running an AV scan.

If this last scan from Norton AV does not report problems, then you should be home free.

I'll look forward to final results tomorrow evening.

++++

If you believe I have answered your question to your satisfaction, please click on the green Solution button that only you can see. This will allow others to know the problem is solved and quickly get to the solution when they search the forums.

Thanks again

Allen

Windows 7 Ultimate SP 1, 64 bit, 32 GB * NIS Vers. 21.5.0.19 * Ghost 15 * IE 9, Firefox, Safari. Test laptop with W7 Home Premium 64 bit * NIS Vers. 21.5.0.19
Kudos0

Re: Virus Help

The AV scan turned up clean and it looks like its been dealt with.  I appreciate the help guys.
Kudos0

Re: Virus Help


R_Duke wrote:
The AV scan turned up clean and it looks like its been dealt with.  I appreciate the help guys.

Hi R_Duke,

That is good to hear. Thank you for letting us know that the problem is solved.

Allen

Windows 7 Ultimate SP 1, 64 bit, 32 GB * NIS Vers. 21.5.0.19 * Ghost 15 * IE 9, Firefox, Safari. Test laptop with W7 Home Premium 64 bit * NIS Vers. 21.5.0.19

Replies are locked for this thread.