TroganVundo.. cant remove

[Ravenrx7]

Hey Guys,

Anybody else having a hard time removing this trojan, we've used AVG,norton, antispyware, ad-ware, micro trend, u name it, has any body successfully removed it yet?

thanks

Josh McMahon
A+ Certified,CCNA
jmcmahon@lexgen.com

 

[aquias]

Vundo is a viscious and difficult to remove piece of malware...

However, prior to starting off I'd strongly suggest running HijackThis!

http://www.spywareinfo.com/~merijn/downloads.html

Extract HijackThis from the zip file to C:\HJT and then run HijackThis!

Note...DO NOT REMOVE/FIX ANYTHING without advice from knowledgeable users!!!

Save a copy of the log and paste it up here. Or post it to the spyware forum (

http://tek-tips.com/threadminder.cfm?pid=760).

If you move this thread to the spyware forum just make a note here so people know to not respond to this thread.

 

[linney]

How to remove the Trojan.Vundo.B / Search42.com / MSevent / Req.dat Redirector
Credits: Attribune for developing the canned fix

http://www.bleepingcomputer.com/for...janVundoB-Search42com-MSevents-tx18610-0.html

See my quote of "Option^Explicit" in the following thread.
problems with IE and explorer
thread779-1049037

http://www.google.com/search?source...&rls=GGLG,GGLG:2005-28,GGLG:en&q=Vundo+remove

 

[Ravenrx7]

guys this is the only site that was useful..

http://www.atribune.org/forums/Another-Vundo-Victim-With-a-Twist-t845.html

Josh McMahon
A+ Certified,CCNA
jmcmahon@lexgen.com

 

[aquias]

My concern here, prior to jumping into Vundo, is knowing WHAT we're dealing with. It's likely that there are other baddies lurking on this system that may/may not have created other possible problems.

That's why I suggest HJT! prior to attempting any removal. Additionally, it will allow us to see what/if there is any protection on the system to make some recommendations to avoid future infection.