Trojan Vundo

  • Thread starter Thread starter Mhaxx
  • Start date Start date
M

Mhaxx

I'm afraid to have trojan Vundo: how to be sure to have it?

I've just launched Spybot and NOD32 and they haven't detected anything.

Please, tell me!

Mhaxx


P.S. maybe you need the HiJackThis log?
 
* Mhaxx, after much thought, came up with this jewel:
I'm afraid to have trojan Vundo: how to be sure to have it?
I've just launched Spybot and NOD32 and they haven't detected anything.
Please, tell me! P.S. maybe you need the HiJackThis log?
Click to expand...

Use this tool

http://vundofix.atribune.org/

Do not post log files here please. There are special forums for them.
 
Mhaxx said:
I'm afraid to have trojan Vundo: how to be sure to have it?

I've just launched Spybot and NOD32 and they haven't detected
anything.

Please, tell me!

Mhaxx


P.S. maybe you need the HiJackThis log?
Click to expand...

These three tools will help you. This trojan has numerous variants, and I
find it really needs a clean through from all three of these programmes to
be sure you have got rid of it:

i) Superantispyware
ii) Malwarebytes
iii) smitfraudfix.

All three programmes are free, you *must* update them before use, it would
be better once you have installed them all and updated them, to drop into
safe mode and run from there.

Gaz
 
All three programmes are free, you *must* update them before use, it would

I'm scanning my PC with all the applications you suggested, without finding
anything.

Maybe I was confused because the fact that told me to have Vunde was this:
scanning my HD with SpyBot I see on the bottom of the window of the scan the
phase "Scanning.. (136593/286339: VirtuMonde.dll)". At the end of the scan
no VirtuMonde is found, anyway I can't understand why Spyot shows
"VirtuMonde.dll" there.. do you have Spybot and can you you try by your own
in order to understand its meaning, please?

Thanks again,

Mhaxx
 
Mhaxx said:
Maybe I was confused because the fact that told me to have Vunde was
this: scanning my HD with SpyBot I see on the bottom of the window of
the scan the phase "Scanning.. (136593/286339: VirtuMonde.dll)". At
the end of the scan no VirtuMonde is found, anyway I can't understand
why Spyot shows "VirtuMonde.dll" there.. do you have Spybot and can
you you try by your own in order to understand its meaning, please?
Click to expand...

In the status bar, it shows *all* the items it is scanning for. It runs
rather quickly, but don't you notice that it starts at "1" and continues
scanning to the 286,339th item? Maybe it takes longer to look for this
one item, so it is displayed in the status bar long enough for you to
actually read it.

If nothing was found when the scan *completes*, I think you have naught
to worry about.
 
In the status bar, it shows *all* the items it is scanning for. It runs
rather quickly, but don't you notice that it starts at "1" and continues
scanning to the 286,339th item?
Sure

Maybe it takes longer to look for this
one item, so it is displayed in the status bar long enough for you to
actually read it.
Click to expand...

It could be
If nothing was found when the scan *completes*, I think you have naught
to worry about.
Click to expand...

Okay, thanks a lot.

Massimo
 
Gaz said:
These three tools will help you. This trojan has numerous variants,
and I find it really needs a clean through from all three of these
programmes to be sure you have got rid of it:

i) Superantispyware
ii) Malwarebytes
iii) smitfraudfix.

All three programmes are free, you *must* update them before use, it
would be better once you have installed them all and updated them, to
drop into safe mode and run from there.

Gaz
Click to expand...

With the exception of Malwarebytes, it doesn't perform as well in safe
mode as it would in normal mode.
 
Dustin said:
With the exception of Malwarebytes, it doesn't perform as well in safe
mode as it would in normal mode.
Click to expand...

Really? I wasnt aware of that. Any reason??

Gaz
 
Gaz said:
Really? I wasnt aware of that. Any reason??
Click to expand...

Windows doesn't load a complete copy of the registry in safe mode. We
would miss some registry items.
 
Back
Top