trojan.vundo

Viruses and worms
1

how can I get rid of trojan.vundo? avast can’t move it to chest.

2

First, we need some information.

Please download HijackThis from the link below. Do not download HJT to the desktop but instead download it into it’s own folder on the hard drive.

Run the program but do not make any fixes and then post the log results using the “copy & paste” method. It will probably take more than one post to be able to get the complete log posted.

OR, you can post it as an attachment to your post by clicking on “Additional Options…” below left of the posting box. Someone will review your log and then offer help.

http://filehippo.com/download_hijackthis/

3

Hi…

Along with Charley’s suggestion, you can try running this program to see if it can be removed…

http://vundofix.atribune.org/

Hope this helps… :slight_smile:

Best Regards…

4

Why couldn’t you move it to the chest, what errors were displayed to the screen ?

What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?
Check the avast! Log Viewer (right click the avast ‘a’ icon), Warning section, this contains information on all avast detections.

If you have XP, vista32bit or Win2k, you could enable a boot time scan. Right click the avast icon, select Start avast! Antivirus, a memory scan will take place followed by the opening of the Simple User Interface, Menu, ‘Schedule boot-time scan…’ Or see http://www.digitalred.com/avast-boot-time.php.

5

win32:vundo-dm[trj]has been found in "C:/system volume information/_restore…

6

I ran the boot-time scan but still it can’t move to the chest, it can’t be deleted, move/rename and move to chest, :cry:

7

Maybe a Sticky is needed for cleaning out infected System Restore Points ???

To clear existing restore points

  1. Click Start, click All Programs, click Accessories, click System Tools, and then click System Restore.

  2. Click to add a check mark beside Turn off System Restore on all Drives, and click Apply.

  3. When you are warned that all existing Restore Points will be deleted, click Yes to continue.

All system restore points are deleted. Now you should manually create a restore point.

  1. Click Start, click All Programs, click Accessories, click System Tools, and then click System Restore.

  2. Click Create a Restore Point, and then click Next.

  3. Name your restore point. (I use the date as well as a descriptive term such as “After Restore Point Deletion.”)

8

i think it came from symantec ::slight_smile: