Re: trojan.vundo.b

From: chrisr63 (chrisr63_at_discussions.microsoft.com)
Date: 04/30/05


Date: Sat, 30 Apr 2005 03:07:19 -0700

Hi,

I also had this trogan and this fix did the job, so many thanks! For others
with the same problem, I did have to disable the Windows firewall for
GETFILES.BAT to work. The scan also took ages, but was worth it!

Thanks again
Chris

"David H. Lipman" wrote:

> From: "philogynist" <philogynist@discussions.microsoft.com>
>
> | I have the above trojan according to Norton 2003. I have scanned several
> | times in normal and safe mode but am unable to remove the file. With Norton
> | it finds the file but cannot quarantine it or delete it. It is labelled
> | c:\windows\repair\infodb.dll I understand it is an adware and I am getting
> | the following advert comming up routinely
> | http://www.winantivirus.com/index-pro.php?aid=mdwavtop&lid=virus . I do not
> | want to contact them as I am unsure of what efect that might have.
> |
> | The microsoft website has nothing on search this adware trojan.
> |
> | Any clues?
> | --
> | Philogynist.
>
> The following set of instructions have been reported WILL WORK !
> Attached is a HTML Log file of that report.
>
> Download CLEAN.EXE from the URL --
> http://www.ik-cs.com/programs/virtools/clean.exe
>
> It is a self-extracting ZIP file that contains the Kixtart Script Interpreter { http://kixtart.org Kixtart is CareWare } three batch files, two Kixtart scripts, two Link (.lnk) files and a PDF instruction file.
> GETFILES.BAT -- For downloading (FTP) the files needed to run the McAfee Command Line Scanner.
>
> CLEAN.BAT -- For running within Windows after running c:\mcafee\GetFiles.BAT. If you choose to scan again at a future date, run this batch file. It will automatically check the date of the McAfee DAT files and if it is a couple of days old, it will download (FTP) the latest signature files and install them before performing the scan.
>
> DOSCLEAN.BAT -- For use on a Win9x/ME PC or on a Win2K/WinXP PC that is using FAT32 after you have booted from an Emergency Boot Disk or DOS disk and have already executed; c:\mcafee\GetFiles.BAT from within Windows. DOS disk boot images can be obtained from; http://www.bootdisk.com/bootdisk.htm
>
> I need you to perform the following...
>
> Execute; CLEAN.EXE
> Choose; Unzip
> Choose; Close
>
>
> Execute; c:\mcafee\GetFiles.BAT
> { or Double-click on 'GetFiles Link' in c:\mcafee }
>
> Reboot the PC into Safe Mode [F8 key during boot]
>
> Shutdown as many applications as possible !
> It would also help for you to read - "How to perform a clean boot in Windows XP"
> http://support.microsoft.com/kb/310353
>
> Execute; c:\mcafee\CLEAN.BAT
> { or Double-click on 'Clean Link' in c:\mcafee }
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus



Relevant Pages

  • Re: ReportBuilder 9.03 is now available for Delphi 2005, Delphi 7, and Delphi 6!
    ... >> - Added support for TeeChart 7.05. ... >> - Fix for RichText Editor in Delphi 2005, ... >> when the report generation process is canceled. ... >> - Modified the RAP compiler to allow the local Var and Const sections to ...
    (borland.public.delphi.thirdpartytools.general)
  • Re: Computer reboots spontaneously
    ... IOW don't try to fix anything. ... diagnostics would be on disk and on manufacturer's web site. ... But marginal hardware tends to fail ... The status report on the hard drives shows OK when the computer boots. ...
    (microsoft.public.windowsxp.general)
  • Re: Cannot access "explore" or "search"
    ... track down the real cause and see a fix for many folks having this ... the feeling that the majority of folks with "the windows explorer ... A VERY few actually report ... >>posting that confirmed this for the Windows Explorer problem. ...
    (microsoft.public.windowsxp.general)
  • Re: Testing Internet and Telephony Applications
    ... I need to prepare the test plan, schedule it, (reschedule in due ... going to take to report the problem. ... if there will be a fix. ... estimate testing time; your development manager or project manager has ...
    (comp.software.testing)
  • Re: [Algorithm] Sum of Primes < 1000000
    ... I was forbidden to make the algorithmic optimization, ... trouble because the report was too slow once they loaded all the data. ... The difference in that case was not weeks but a few hours of development time to implement the fix. ... That didn't happen until the project manager who had forbidden the change was replaced. ...
    (comp.lang.java.programmer)