Page 1 of 2 12 LastLast
Results 1 to 15 of 21
  1. #1
    2 Star Lounger miladytn's Avatar
    Join Date
    Apr 2002
    Location
    East Tennessee, USA
    Posts
    153
    Thanks
    4
    Thanked 4 Times in 4 Posts

    trojan.vundo.b

    Edited by HansV to provide clickable link to post

    A friend of mine has this virus on a laptop. Laptop is HP Pavilion with Windows Vista, home media center. Up to date Symantec/Norton antivirus. Norton found the virus and he downloaded the removal tool. However.. the removal tool says the problem is not found. Norton virus scan says it is there and it cannot fix the problem. I saw this previous thread and it was no help to us.
    <post#=527290>post 527290</post#>

    I did internet searches with Google, you guys, cnet and found nothing but frustration and the "help" I found was 2 to 3 years old. I thank you in advance for your help.

  2. #2
    Plutonium Lounger
    Join Date
    Mar 2002
    Posts
    84,353
    Thanks
    0
    Thanked 29 Times in 29 Posts

    Re: trojan.vundo.b

    Where does Norton AntiVirus find the Trojan? It usually reports the folder and file in which it was discovered.

  3. #3
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: trojan.vundo.b

    Not too many malware get their own entry in Wikipedia: http://en.wikipedia.org/wiki/Vundo. It sounds as though quite a bit of work is required to remove all the remnants.

  4. #4
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: trojan.vundo.b

    From here......

    You will need to get into safe mode and then run the removal tool.
    There are two methods you can try.
    Note - you need to completely shutdown the computer before trying the F8 method, a restart may not work.

    If Windows XP is the only operating system installed on your computer, booting into Safe Mode with these instructions.

    If the computer is running, shut down Windows, and then turn off the power
    Wait 30 seconds, and then turn the computer on.
    Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
    Ensure that the Safe mode option is selected.
    Press Enter. The computer then begins to start in Safe mode.
    When you are finished with all troubleshooting, close all programs and restart the computer as you normally would.


    To use the System Configuration Utility method

    Close all open programs.
    Click Start, Run and type MSCONFIG in the box and click OK
    The System Configuration Utility appears, On the BOOT.INI tab, Check the "/SAFEBOOT" option, and then click OK and Restart your computer when prompted.
    The computer restarts in Safe mode.
    Perform the troubleshooting steps for which you are using Safe Mode.
    When you are finished with troubleshooting in Safe mode, open MSCONFIG again, on the BOOT.INI tab, uncheck "/SAFEBOOT" and click OK to restart your computer
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  5. #5
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: trojan.vundo.b

    But these instructions might be better....
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  6. #6
    2 Star Lounger miladytn's Avatar
    Join Date
    Apr 2002
    Location
    East Tennessee, USA
    Posts
    153
    Thanks
    4
    Thanked 4 Times in 4 Posts

    Re: trojan.vundo.b

    Thank you for all the help! It will be a couple of days before I can work on that computer again. I'll let you know how it goes.

  7. #7
    2 Star Lounger miladytn's Avatar
    Join Date
    Apr 2002
    Location
    East Tennessee, USA
    Posts
    153
    Thanks
    4
    Thanked 4 Times in 4 Posts

    Re: trojan.vundo.b

    Again, thanks for all the help and it was indeed a nasty experience. For future reference, Spyware Doctor is the one the finally eradicated the beastie.

  8. #8
    Plutonium Lounger
    Join Date
    Mar 2002
    Posts
    84,353
    Thanks
    0
    Thanked 29 Times in 29 Posts

    Re: trojan.vundo.b

    Thanks for posting back, it might be useful to others.

  9. #9
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: trojan.vundo.b

    Did you have to purchase Spyware Doctor before it would remove what it found ??? Or did you go for the Google Pack to get the removal features for <img src=/S/free.gif border=0 alt=free width=30 height=15>, but limited real-time protection & updates ???
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  10. #10
    2 Star Lounger miladytn's Avatar
    Join Date
    Apr 2002
    Location
    East Tennessee, USA
    Posts
    153
    Thanks
    4
    Thanked 4 Times in 4 Posts

    Re: trojan.vundo.b

    The free version did the trick. Since it was a one time removal for a friend, tried that first and it worked <img src=/S/clapping.gif border=0 alt=clapping width=19 height=23>

  11. #11
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: trojan.vundo.b

    <img src=/S/thumbup.gif border=0 alt=thumbup width=15 height=15>
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  12. #12
    Silver Lounger Duchess843's Avatar
    Join Date
    Apr 2002
    Location
    Sicklerville, NJ
    Posts
    2,488
    Thanks
    36
    Thanked 0 Times in 0 Posts

    Re: trojan.vundo.b

    Doc, do you have any idea why Kaspersky AV made me remove Spyware Doctor before the install would continue? I can't see the relationship between the two (but what do I know)?
    <img src=/S/coffeetime.gif border=0 alt=coffeetime width=32 height=48>

  13. #13
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: trojan.vundo.b

    I think it's a false positive caused by one or more of the components of Spyware Doctor. Kapersky is running into conflict / false positive issues with Spysweeper (I use this an know it's not a problem) & Spywareblaster (also not a problem) and are working on these issues. There might be a beta download to fix this. " By upgrading to the MP3 beta2:http://downloads1.kaspersky-labs.com...sonal/english/, the next time Kav finds madtool after you install MP3, it will give you the option to exclude it from scanning."

    I found this information here. HTH
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  14. #14
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: trojan.vundo.b

    Sorry Gloria. <img src=/S/blush.gif border=0 alt=blush width=15 height=15> That link is dead and it's old information. I should have looked at the date before I read the thread.

    I still think it's a flase positive.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  15. #15
    Silver Lounger Duchess843's Avatar
    Join Date
    Apr 2002
    Location
    Sicklerville, NJ
    Posts
    2,488
    Thanks
    36
    Thanked 0 Times in 0 Posts

    Re: trojan.vundo.b

    Doc, I couldn't use the first link you provided. Shouldn't personal be spelled out?
    <img src=/S/coffeetime.gif border=0 alt=coffeetime width=32 height=48>

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •