Bullguard Antivirus Forum Download A Free Copy Of Bullguard Antivirus Software
Free Antivirus Forum - Learn about antivirus, firewalls and personal security Free Antivirus Forum - Learn about antivirus, firewalls and personal security
 HomeLog InRegisterCommunity CalendarSearch the ForumView The Member ListHelp
Unable To Remove The Vundo Virus
   
BullGuard Antivirus Forum > Virus > Alerts & New Threats > Unable To Remove The Vundo Virus  
Forum Quick Jump
 
New Topic Locked Topic Printable version of : Unable To Remove The Vundo Virus
[ << Previous Thread | Next Thread >> ]

Sidz
New Member


Date Joined Jun 2008
Total Posts : 3
 
   Posted 7-2-2008 12:51 (GMT +2)    Quote: Unable To Remove The Vundo VirusAlert an admin about: Unable To Remove The Vundo Virus
Hello, I have recently picked up a few Virus's. The first was one called Antivirus XP 2008, and the other Vundo something. I am not sure, but I think I removed the first one, because I scanned, saw it and Vundo, clicked "Fix" and then I scanned again, the first one was gone but vundo was still there. However, I also see that the first one(Antivirus XP 2008) still looks to be installed on my start menu. I did try and unstall it as well, but the icon stays.
 
Symptoms
----------
 
 - Slower Computer
 - Can't open certain sites(IE: Bitdefender for one)
 - Links in google send me to unknown directories(I have to copy and paste URL in the Address bar)
 - Firefox does not work(I click on it, see the hour glass, but it doesn't open), I now have to use IE
 - Spybot does not work(I click on it, see the hour glass, but it doesn't open), but the rest of my anti-spyware does
 
I came here because I saw a similiar problem talked about by someone else. He couldn't access certain sites either. His problem was solved by Touch, so I hope my problem is the same.
 
FYI: Just thought I'd mention I have combofix already as the guy in the old thread I saw had it as well... I just don't know how to use it again, as I had to use it for a different problem quite some time ago... I remember just clicking on it and it running, but it doesn't seem to want to do that anymore. I also have Killbox, Superantispyware, Adaware, Spywareblaster, AVG, CCleaner, and LSPfix(which I got during my search for a fix).
 
Thanks to all that can help. I have attached my hijackthis log
 
I guess I should add my OS as well... XP SP3.

Post Edited (Sidz) : 02-07-2008 11:48:40 GMT



File Attachment :
hijackthis1.log   8KB (application/octet-stream)
This file has been downloaded 91 time(s).
Back to Top
 

Touch
Forum Moderator




Date Joined Jun 2004
Total Posts : 13085
 
   Posted 7-2-2008 2:19 (GMT +2)    Quote: Unable To Remove The Vundo VirusAlert an admin about: Unable To Remove The Vundo Virus
Hello cool
 
 
Please download Combofix:
 
 
And save to the desktop.

Close all other browser windows.
 
Please connect all your external hard drive/flash drive before running Combofix
 
 
 
Important-> Temporarily disable your anti-virus, real-time protection before performing a scan. They can interfere with combofix or remove some of its embedded files which may cause "unpredictable results".
 
 
Go to Start->Run and copy/paste: ComboFix /snapshot and hit OK. It should run Combofix.
 
Please note, that once you start combofix you should not click anywhere on the combofix window as it can cause the program to stall. In fact, when combofix is running, do not touch your computer at all and just take a break as it may take a while for it to complete.

 When finished, it will produce a logfile located at C:\combofix.txt.
 

Post the contents of that log in your next reply with a new hijackthis log.
 
Please copy and paste your log files. DO NOT add it as an attachment


Do NOT post your problem in someone elses thread.

Back to Top
 

Sidz
New Member


Date Joined Jun 2008
Total Posts : 3
 
   Posted 7-2-2008 9:54 (GMT +2)    Quote: Unable To Remove The Vundo VirusAlert an admin about: Unable To Remove The Vundo Virus
Thanks, but I can't access that link for some reason. If i copy URL to Address bar, still can't access it. Tried downloading combofix from other sites, same thing.  It just brings me to the "Page cannot be displayed" page.
 
Like I said, I already have it, so is there any way that I can re-run it?
 
I got my copy to run, but then it said it was expired and it deleted itself from the computer.

Post Edited (Sidz) : 02-07-2008 21:11:01 GMT

Back to Top
 

Touch
Forum Moderator




Date Joined Jun 2004
Total Posts : 13085
 
   Posted 7-3-2008 6:38 (GMT +2)    Quote: Unable To Remove The Vundo VirusAlert an admin about: Unable To Remove The Vundo Virus
Ok. Tried a systemrestore ?


Do NOT post your problem in someone elses thread.

Back to Top
 

Sidz
New Member


Date Joined Jun 2008
Total Posts : 3
 
   Posted 7-3-2008 12:53 (GMT +2)    Quote: Unable To Remove The Vundo VirusAlert an admin about: Unable To Remove The Vundo Virus
No. One thing I have learned from experience is to NEVER use system restore when I get a virus like this. Why? Because a copy of the virus is saved in restore points.

No offense, but I went to a different tech support forum, as I saw this one isn't very active. I'm pretty sure I have solved my problems. It was an in-depth guide, maybe a lil more then I needed to do, but one step almost solved my problem all on itself.

Ok, so my problem(Other then the virus) was that I couldn't access certain sites--usually the ones I needed--and I could't get combofix. Well, I solved that by using malwarebytes anti-malware program. It made it so that pretty much everything worked(FF, Spybot, links etc.). However, it did not kill all the virus's. Combofix and other prgrams did the rest. What this one did, was allow me to use combofix. I HIGHLY recommend it. It saved my day.

So if that is it, I thank you for your time and for trying nevertheless, Touch.

Take care.
Back to Top
 
New Topic Locked Topic Printable version of : Unable To Remove The Vundo Virus
 
Forum Information
Currently it is Wednesday, October 08, 2008 8:22 AM (GMT +2)
There are a total of 62.580 posts in 15.608 threads.
In the last 3 days there were 22 new threads and 54 reply posts. View Active Threads
Who's Online
This forum has 26672 registered members. Please welcome our newest member, KOTURNER.
29 Guest(s), 0 Registered Member(s) are currently online.  Details
5 Latest Threads
Problems with internet explorer microsoft outloook and msn messenger (4)08-10-2008 05:42:33 (cmdemp)
Need help with my virus being unable to update!!!! (0)08-10-2008 05:35:36 (KOTURNER)
The redirect bug!!!! HELP PLEASE!!!! (2)08-10-2008 05:27:29 (KOTURNER)
Help please...Radz removal (3)08-10-2008 05:18:01 (Touch)
Virus disables safe mode, task manager, run, antivirus (3)08-10-2008 05:04:38 (Touch)