This is a long summary, but bear with me, question is at the bottom, please read.
I was writing a report for English, and all of a sudden I get bombarded by these messages that pop up from the McAffe logo that say, Trojan/Virus Removed, and they explain that it was Vundo, and it was located in macromedia(flash?)/(somerandomletternumbercombination).dll. After each message, the combination would switch to another random. Then later it started using application data identities? Not sure, but I started to run a McAffe virus scan and then a alert says, something about a Dll failure and how stuff that isn't saved could be lost. I click close, and every 15 seconds a Send error report/Do not send window comes up saying that the DLL going to an applicaiton was a faluire… They kept comming and eventually started to make those weird still images on the background when i moved them around. Anyways, the virus scan then put up a memory alert or failure, something to do with C++, and then the virus scan window turned white and became part of the background. Everything was non selectable, except the windows task bar, which i didn't use. I turned off the computer manually and re-started it, ran a virus scan, but this time when it said DLL failure, i didn't click close, and ran it through the whole scan. I clicked close after wards, as the scan found nothing… Mcaffe said internet explorer had changed, I don't really use it a lot, and i decided to click block access to internet. Now my problem is that sometimes internet explorer pops up as a small rectangle when i am using fire fox and can't connect. It tries going to a weird random website.
My question is, Am I still safe? Is it ok to have Internet Explorer running online again? And how serious is the Vundo Trojan?
Related posts:
2 responses so far ↓
1 chris // Apr 21, 2009
I doubt you're OK from the symptoms you're having. Vundo is a terrible virus to have, it's hard to get rid of and can do some sneaky things (who knows, it could be stealing your info). Download combofix (http://www.combofix.org) and Malwarebytes' Anti-Malware (http://www.malwarebytes.org), install MBAM and update it. Then disconnect from the internet and disable McAfee's real time scanning (should be an option to Snooze protection or something similar on the tray icon) and run combofix, follow the prompts (don't install recovery console if it asks) and it should scan and eventually close or reboot your computer. When it's done, run Malwarebytes and do a full scan. After you hopefully get it cleaned, get different security software, especially if it's no longer valid, because McAfee isn't considered to be the best. Norton Internet Security 2009 has been given high honors by many publications and I agree, I've installed it on a few clients' computers quickly and easily, and the protection and features are great.
2 Shane L // Apr 21, 2009
Please try to follow these steps to get rid off this issue:–
1. Try to install and download the "Antimalwarebytes" (freely available)
2. Try to update "Antimalwarebytes".
3. Scan your computer using the "Antimalwarebytes".
4. Remove all the infected files.
5. Restart your computer in normal mode.
Leave a Comment