Vundo Trojan Help

Discussion in 'NOD32 version 2 Forum' started by red_tide24, Jan 15, 2007.

Thread Status:
Not open for further replies.
  1. red_tide24

    red_tide24 Registered Member

    Joined:
    Jan 15, 2007
    Posts:
    2
    Firstly NOD din detect the virus, then it crashes my NOD also..

    I try many methods to remove it, but unable to do so..

    for eg, disable system restore, use symantec vundo removal tool to remove, but after I restarted the comp, the virus is back again.

    Anyone can help me?
     
  2. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Hi red_tide24, welcome to Wilders.

    Wilders no longer provides support for HijackThis Logs.

    Please complete the following:

    These tools may be detected by NOD32 if you have “Potentially Dangerous Applications” (version 2.5) or "Potentially unwanted and unsafe applications" (version 2.7) ticked within NOD32.

    1. Please go to the NOD32 Control Centre (Start> All Programs> Eset> NOD32 Control Centre)
    2. Click on AMON> Setup> Options (tab)
    3. Untick “Potentially Dangerous Applications” (version 2.5) or "Potentially unwanted and unsafe applications" (version 2.7).
    4. Click on OK.
    5. Click on IMON> Setup> Miscellaneous (tab)> Scanner Setup> Setup (tab)
    6. Untick “Potentially Dangerous Applications” (version 2.5) or "Potentially unwanted and unsafe applications" (version 2.7).
    7. Click on OK.
    8. Click on OK


    When the process below is complete, please place a tick back in “Potentially Dangerous Applications” (version 2.5) or "Potentially unwanted and unsafe applications" (version 2.7).


    Please follow the instructions found at the following 3 websites:

    VundoFix here: http://www.atribune.org/content/view/24/2/

    SmitfraudFix here: http://www.bleepingcomputer.com/forums/topic17258.html

    Look2Me Destroyer here: http://www.atribune.org/content/view/28/2/


    When the process above is complete, please place a tick back in “Potentially Dangerous Applications” (version 2.5) or "Potentially unwanted and unsafe applications" (version 2.7).

    After all of the above, please complete the process below to ensure this does not happen again:

    1. Check your settings against those found HERE

    2. Run a scan by clicking on the NOD32 Control Centre (Green and White split square on the bottom right hand corner of your computers screen).

    3. Click on NOD32.
    4. Click on Run NOD32.
    5. Click on “Scan and Clean”.

    Let us know how you go...

    Cheers :D
     
  3. red_tide24

    red_tide24 Registered Member

    Joined:
    Jan 15, 2007
    Posts:
    2
    Hi Blackspear,

    Thanks for the advice. I have carried out all the above. But still the virus is dere.. My NOD still crash, can't do a normal virus scan.
     
  4. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    What country do you live in?

    Cheers :D
     
  5. YeOldeStonecat

    YeOldeStonecat Registered Member

    Joined:
    Apr 25, 2005
    Posts:
    2,345
    Location:
    Along the Shorelines somewhere in New England
    Ran across this last week...SuperAntispyware got it for me....on top of peeking into the registry manually in the Run section to clear out the stub.
     
Thread Status:
Not open for further replies.