Trojan.Vundo Removal

Question

I just got back to my apartment from Christmas break. And it came to my attention that I now have something called Trojan.Vundo on my computer. I ran VundoFix.exe, FixVundo.exe, AdAware, McAfee, HiJackThis, Ewido, Cleanup. . .and the Norton's alert window stopped popping up, and the Symantec FixVundo no longer finds the trojan, but my computer is still running very very slowly. So now I'm stuck with basically a useless computer and no idea where to go next. . .any help would be fantastic. Thanks. Message Edited by dwag182 on 01-05-2006 10:14 AM

ky331 · Answer

Download a self-extracting copy of the latest version of HJT (HiJackThis) (version 1.99.1) from http://downloads.malwareremoval.com/hijackthis_sfx.exe     Save it to your Desktop. Double-click on the file    hijackthis_sfx.exe    file, and allow it to self-extract [by clicking on UnZip] into the suggested/default folder, C:\Program Files\HijackThis   Use Windows Explorer to navigate your way into this folder, and then double click on HiJackThis. exe Click on  Do a System Scan and Save a LogFile This will automatically open NotePad Copy the entire file from NotePad:  EDIT/SelectAll, EDIT/Copy Then go to the new forum dedicated for HiJack This logs (**NOT** back here), and  PASTE the results there: http://forums.us.dell.com/supportforums/board?board.id=si_hijack Be sure to include a detailed description of any problems/errors/warnings you are encountering. Hopefully, one of the HJT experts will get to it as quickly as possible.   WARNING:  HiJack This is a VERY POWERFUL tool.  While it's  completely safe  for you to download, generate, and post your log (as described above), you should *NOT* attempt to do anything else (in particular, do NOT use it to delete/fix any entries) until you are advised to do so by a forum expert!!   Improper use of this tool can severely damage your system.   Message Edited by ky331 on 01-05-2006 12:34 PM

Toby6 · Answer

I had Trojan.Vundo also on my buddys Dimension 2400 that was detected by norton anti-virus but their removal tool did not work. I searched and tried numerous other removal tools and came across Webroot spy sweeper which took care of it with little effort on my part. It is a 14 day free trial, I will try this in the future first.

http://www.download.com/Webroot-Spy-Sweeper/3000-8022_4-10192729.html

Good Luck!

ky331 · Answer

Toby: 1) if you carefully read the entire post above, you'll notice that the person later wrote that 'Norton's alert window stopped popping up, and the Symantec FixVundo no longer finds the trojan', so on that basis, I believe we can assume that the original trojan.vundo problem has already been solved here. 2) while webRoot spysweeper is indeed an first-rate, excellent  product... and while it can remove trojan.vundo... the 'problem' is that the free version is only usable during the 14-day trial period... after that, if you get another infection, either you have to buy it (which is probably worth the money in this case) or else, find an alternative free fix for trojan.vundo.  there are in fact two such free fixes available for the download.  the simplest to use is VirtumundoBeGone, which is what i currently recommend.  the other is something called the Atribune VundoFix [which the person posting here already had and used], which also works, but is slightly more 'complicated' to run.

Virus & Spyware

Trojan.Vundo Removal

Was this post helpful?