Re: trojan.vundo.b

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 04/30/05


Date: Fri, 29 Apr 2005 20:09:53 -0400


From: "philogynist" <philogynist@discussions.microsoft.com>

| I have the above trojan according to Norton 2003. I have scanned several
| times in normal and safe mode but am unable to remove the file. With Norton
| it finds the file but cannot quarantine it or delete it. It is labelled
| c:\windows\repair\infodb.dll I understand it is an adware and I am getting
| the following advert comming up routinely
| http://www.winantivirus.com/index-pro.php?aid=mdwavtop&lid=virus . I do not
| want to contact them as I am unsure of what efect that might have.
|
| The microsoft website has nothing on search this adware trojan.
|
| Any clues?
| --
| Philogynist.

The following set of instructions have been reported WILL WORK !
Attached is a HTML Log file of that report.

Download CLEAN.EXE from the URL --
http://www.ik-cs.com/programs/virtools/clean.exe

It is a self-extracting ZIP file that contains the Kixtart Script Interpreter { http://kixtart.org Kixtart is CareWare } three batch files, two Kixtart scripts, two Link (.lnk) files and a PDF instruction file.
GETFILES.BAT -- For downloading (FTP) the files needed to run the McAfee Command Line Scanner.

CLEAN.BAT -- For running within Windows after running c:\mcafee\GetFiles.BAT. If you choose to scan again at a future date, run this batch file. It will automatically check the date of the McAfee DAT files and if it is a couple of days old, it will download (FTP) the latest signature files and install them before performing the scan.

DOSCLEAN.BAT -- For use on a Win9x/ME PC or on a Win2K/WinXP PC that is using FAT32 after you have booted from an Emergency Boot Disk or DOS disk and have already executed; c:\mcafee\GetFiles.BAT from within Windows. DOS disk boot images can be obtained from; http://www.bootdisk.com/bootdisk.htm

I need you to perform the following...

Execute; CLEAN.EXE
Choose; Unzip
Choose; Close

Execute; c:\mcafee\GetFiles.BAT
{ or Double-click on 'GetFiles Link' in c:\mcafee }

Reboot the PC into Safe Mode [F8 key during boot]

Shutdown as many applications as possible !
It would also help for you to read - "How to perform a clean boot in Windows XP"
http://support.microsoft.com/kb/310353

Execute; c:\mcafee\CLEAN.BAT
{ or Double-click on 'Clean Link' in c:\mcafee }

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm




Relevant Pages

  • Re: Possible Virus; Need Xp Gurus Help
    ... missing from Norton. ... opinion" av scanner). ... Please download, install and update the following software... ... I suggest scanning the system in Safe Mode. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: SOS: Trojan on XP is not permitting to function any application
    ... I could run AVG scanner and removed 29 instances of trojan ... and Safe mode with command prompt is working. ... Anything else which might have gone wrong while removing the trojan ... FireWall to allow it to download the needed AV vendor related files. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: trojan.vundo.b
    ... With Norton ... | The microsoft website has nothing on search this adware trojan. ... Reboot your PC into Safe Mode and shutdown as many applications as possible. ... Re-enable System Restore and re-apply any System Restore preferences, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: HELP!!!!!!!!!!!! - W32.Spybot.Worm Virus on Vista
    ... | I have Norton AntiVirus 2007 and a new Vista PC which is about 3 months old. ... FireWall to allow it to download the needed AV vendor related files. ... needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key ...
    (alt.comp.anti-virus)
  • Re: WSNInst.exe
    ... Norton should provide a fully qualified name and path to the infected file. ... I suggest scanning the system in Safe Mode. ... FireWall to allow it to download the needed AV vendor related files. ... needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key ...
    (alt.comp.anti-virus)

Quantcast