Not what you were looking for? Ask our experts!
Reply
Visitor
R_Duke
Posts: 9
Registered: ‎11-15-2009
Accepted Solution

Virus Help

[ Edited ]
I'm wondering if I could get some advice/help with a bit of a virus problem I've been having.  I've seemed to have picked up some sort of virus/trojan that keeps reinstalling itself on my labtop even after it gets removed after a norton scan removes it.  Its called Trojan.Vundo and it keeps poping up on me after I've removed it. I'm running the 2010 ed. of Nortons Antivirus and I don't really have anything else in terms of antivirus on there.  I'm not sure of what other information you may require so if I've left stuff out I'll try my best to get you what is needed.  Any help or advice with this is appreciated.  Thanks.
Message Edited by R_Duke on 11-15-2009 07:02 PM
AllenM
Posts: 10,222
Topics: 221
Kudos: 2,151
Solutions: 377
Registered: ‎12-14-2008

Re: Virus Help

[ Edited ]

Hi R_Duke,

 

Welcome to the forum. Which OS and SP do you have? What is the full version of Norton AV 2010?

 

Thanks

Allen

Message Edited by AllenM on 11-15-2009 07:17 PM
Windows 7 Ultimate SP 1, 32 bit, 4 GB * NIS 2012 (19.8.0.14) * Ghost 15 * IE 9, Firefox, Safari.
Test laptop with W7 Home Premium 64 bit * NIS 2012 (19.8.0.14)
Visitor
R_Duke
Posts: 9
Registered: ‎11-15-2009

Re: Virus Help

Thanks for the welcome and quick reply.  I'm running Windows XP for my OS.  For Nortons I've got the AntiVirus 2010 with antispyware edition.  Hopefully this helps.
AllenM
Posts: 10,222
Topics: 221
Kudos: 2,151
Solutions: 377
Registered: ‎12-14-2008

Re: Virus Help

[ Edited ]

R_Duke wrote:
Thanks for the welcome and quick reply.  I'm running Windows XP for my OS.  For Nortons I've got the AntiVirus 2010 with antispyware edition.  Hopefully this helps.

 

Hi R_Duke,

 

When I asked for full version of Norton AV 2010, it was to ensure that you had the latest version from Live Update. Please see this link concerning the Trojan. Also after removing this threat I would also recommend running Malware Bytes to do some further checking of your system and make sure there are no more infections.

 

Please go to www.malwarebytes.org

1. Download Malwarebytes’ Anti-Malware (mbam-setup.exe) free version and save it on your Desktop.
2. After downloading, double-click on mbam-setup.exe to install the application.
3. Follow the prompts and install as “default” only
4. Before the installation completes, check on the following prompts:
- Update Malwarebytes’ Anti-Malware
- Launch Malwarebytes’ Anti-Malware
5. Click “Finish.” The programme will run automatically and you will be prompt to update the programme before doing a scan. Please update.
6. Scan your computer thoroughly choosing a "full scan".
7. When scanning is finished click on “Show Results”
8. Make sure that all detected threats are marked with a check mark, click on "Remove Selected".
9. Restart your computer.

Please post the logs back to this thread using "add attchments" below the orange "post" button.

Note: Some malware may prevent mbam-setup.exe from downloading and/or running. You can download and rename this program from a different computer before running it on an infected system.

 

Thanks

Allen

Message Edited by AllenM on 11-15-2009 07:34 PM
Message Edited by AllenM on 11-15-2009 07:36 PM
Windows 7 Ultimate SP 1, 32 bit, 4 GB * NIS 2012 (19.8.0.14) * Ghost 15 * IE 9, Firefox, Safari.
Test laptop with W7 Home Premium 64 bit * NIS 2012 (19.8.0.14)
Visitor
R_Duke
Posts: 9
Registered: ‎11-15-2009

Re: Virus Help

Will do.  I'll take those steps and keep my fingers crossed on finally being rid of this thing.  I appreciate the prompt help and I'll post the logs as soon as I get that program up and running.
AllenM
Posts: 10,222
Topics: 221
Kudos: 2,151
Solutions: 377
Registered: ‎12-14-2008

Re: Virus Help

Hi R_Duke,

 

My partner got this one before so you should be fine. Be sure to follow the instructions carefully including disabling system restore. If you don't do this step you could end up getting re-infected.

 

I'll be waiting for results.

 

Thanks

Allen

Windows 7 Ultimate SP 1, 32 bit, 4 GB * NIS 2012 (19.8.0.14) * Ghost 15 * IE 9, Firefox, Safari.
Test laptop with W7 Home Premium 64 bit * NIS 2012 (19.8.0.14)
AllenM
Posts: 10,222
Topics: 221
Kudos: 2,151
Solutions: 377
Registered: ‎12-14-2008

Re: Virus Help

Hello R_Duke,

 

I'm heading off to bed now. I hope things are going ok and I will check back first thing in the morning after I wake up.

 

Thanks

Allen

Windows 7 Ultimate SP 1, 32 bit, 4 GB * NIS 2012 (19.8.0.14) * Ghost 15 * IE 9, Firefox, Safari.
Test laptop with W7 Home Premium 64 bit * NIS 2012 (19.8.0.14)
Visitor
R_Duke
Posts: 9
Registered: ‎11-15-2009

Re: Virus Help

I'm sorry I haven't gotten back to you sooner, but I couldn't take the actions last night at that time.  I'm taking the steps now and should have the logs ready for you in however long it takes the scans.  Thanks for your patience.
AllenM
Posts: 10,222
Topics: 221
Kudos: 2,151
Solutions: 377
Registered: ‎12-14-2008

Re: Virus Help


R_Duke wrote:
I'm sorry I haven't gotten back to you sooner, but I couldn't take the actions last night at that time.  I'm taking the steps now and should have the logs ready for you in however long it takes the scans.  Thanks for your patience.

 

Hi R_Duke,

 

No problem, I'll be here when you are ready. I'm usually gone for work for about 10 hours a day and then my sleep time but apart from taht I generally see responses pretty quickly since I get email alerts. :smileywink:

 

By the way you can always tell if a user is offline by clicking on the user name.

 

Allen

Windows 7 Ultimate SP 1, 32 bit, 4 GB * NIS 2012 (19.8.0.14) * Ghost 15 * IE 9, Firefox, Safari.
Test laptop with W7 Home Premium 64 bit * NIS 2012 (19.8.0.14)
Visitor
R_Duke
Posts: 9
Registered: ‎11-15-2009

Re: Virus Help

Well just got finished with the scans and I've attached the log with the information you requested.  I unfortunately had to save the thing to notepad because of a lack of MS office on my labtop at the moment and hopefully that isn't a problem.  If it is I can find a way to get the thing in a word doc and give it to you guys.  Hope this helps.