Re: trojan.vundo.b

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 04/30/05


Date: Sat, 30 Apr 2005 11:01:00 -0400

From: <robburne@hotmail.com>

| Hi,
|
| I have recently received a pop-up messag from Norton AV 2004 informing
| me that my machine is infected with the troja.vundo.b visrus. Norton's
| iteself says it cannot delete or quarantine the file.
|
| I have tried the following:
|
| Hijackthis - can delete the dll file but it reappears
| AVG Virus Scan - does not detect it
| Spybot - does not detect it either
| Spyhunter - does not detect it either
| Adaware - does not detect it
|
| I have also tried:
|
| deleting the registry entries manually
| disabled system restore
| scanned the above in safe mode
|
| Still I am receiving the popup from Norotn's.
|
| Can anyone suggest what I can do next?
|
| Thanks,
|
| Rob.

Download CLEAN.EXE from the URL --
http://www.ik-cs.com/programs/virtools/clean.exe

It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
http://kixtart.org Kixtart is CareWare } three batch files, two Kixtart scripts, two Link
(.lnk) files and a PDF instruction file.

GETFILES.BAT -- For downloading (FTP) the files needed to run the McAfee Command Line
Scanner. If you are using Windows XP, you may have to disable the Windows XP FireWall to
allow the FTP utility to download the needed files

CLEAN.BAT -- For running within Windows after running c:\mcafee\GetFiles.BAT. If you choose
to scan again at a future date, run this batch file. It will automatically check the date
of the McAfee DAT files and if it is a couple of days old, it will download (FTP) the latest
signature files and install them before performing the scan.

DOSCLEAN.BAT -- For use on a Win9x/ME PC or on a Win2K/WinXP PC that is using FAT32 after
you have booted from an Emergency Boot Disk or DOS disk and have already executed;
c:\mcafee\GetFiles.BAT from within Windows. DOS disk boot images can be obtained from;
http://www.bootdisk.com/bootdisk.htm

I need you to perform the following...

Execute; CLEAN.EXE
Choose; Unzip
Choose; Close

Execute; c:\mcafee\GetFiles.BAT
{ or Double-click on 'GetFiles Link' in c:\mcafee }

Reboot the PC into Safe Mode [F8 key during boot]

Shutdown as many applications as possible !
It would also help for you to read - "How to perform a clean boot in Windows XP"
http://support.microsoft.com/kb/310353

Execute; c:\mcafee\CLEAN.BAT
{ or Double-click on 'Clean Link' in c:\mcafee }

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Relevant Pages

  • Re: Windows XP wont start upon boot
    ... Enquire, plan and execute ... Once the computer does boot you can then look to add back ... If you can't reach a Windows ... Stop trying to defend your suggestion of disabling AR, ...
    (microsoft.public.windowsxp.general)
  • Re: Iexplore listed in task manager.
    ... Download CLEAN.EXE from the URL -- ... CLEAN.BAT -- For running within Windows after running c:\mcafee\GetFiles.BAT. ... DOS disk boot images can be obtained from; ... Execute; CLEAN.EXE ...
    (microsoft.public.windowsxp.general)
  • Re: Infections
    ... | After completing a Spyware scan I found that my computer is infected. ... | I am on Windows XP SP2installed with Norton Internet security and Antivirus, ... DOS disk boot images can be obtained from; ... Execute; CLEAN.EXE ...
    (microsoft.public.windowsxp.security_admin)
  • Re: desktop with no icons
    ... I get the same symptoms booting to safe mode also. ... CLEAN.BAT -- For running within Windows after running c:\mcafee\GetFiles.BAT. ... you have booted from an Emergency Boot Disk or DOS disk and have already executed; ... Execute; CLEAN.EXE ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Backdoor.Lateda.C
    ... It would also help for you to read - "How to perform a clean boot in Windows XP" ... GETFILES.BAT -- For downloading the files needed to run the McAfee Command Line ... Execute; CLEAN.EXE ...
    (microsoft.public.security.virus)