Need help on a virus attack

2/24/08 | krankor

[Krankor]

Any experts on virus protection? I have McAfee VIRUS PROTECTION, but I also have a big time vundo virus infection which I can't get rid of. The techs at McAfee give advice and downloads which do nothing. Is there a better virus protection which will- get rid of my vundo and protect me from another attack? Help. Help. Help. Thank you.

[MarineBrat]

What virus does McAfee say you have.

[SandRat]

Try Symantec

[holymoly]

This may help clean your infection. It's free, so you've nothing to lose.

Dr. Web CureIT!

No installation required. Just download the executable & run it.

[MarineBrat]

Sorry, I didn’s see the “vundo” portion of your message. Let me go look it up...

[o_zarkman44]

AVG virus is a free download that really helped my sons computer rid a virus. it took a download and two complete scans to rid the computer of over 100 files related to the virus.
Currently I have Norton. McAfee allowd a virus a couple years ago and I dumped it. If I didn’t have a subscription to Norton I would convert to the AVG now.

[D-fendr]

IBGAM

[LibFreeOrDie]

http://forums.cnet.com/5208-6132_102-0.html?forumID=32&threadID=265099&messageID=2589573

[MIchaelTArchangel]

Yeah, stay out of the porn sites.

[MIchaelTArchangel]

http://forums.techguy.org/malware-removal-hijackthis-logs/406823-solved-trojan-vundo-virus.html

[goodnesswins]

Try Eset NOD32....you have to pay some ($27-39 annually)...but it seems to be good, and they computer people I deal with use it for ALL their customers.

[MarineBrat]

Symantec seems to have a free removal tool for vundo.

http://www.symantec.com/security_response/writeup.jsp?docid=2004-112210-3747-99

Removal instructions are pretty extensive. I don’t envy you.

I highly suggest you investigate disabling active content in IE for the Internet Zone. Google “disable IE active” (without the quotes) to get some ideas. My IE can’t do squat except for show a web page. No Active-X, scripting, Java, etc... If I MUST allow a web page to do that stuff I can put it into my trusted zone. That way you don’t get trashed just by clicking on the wrong link.

I also use the HOSTS file to disable access to known bad sites. Including “google-analytics.com” in case JR’s reading this. :)

[joe fonebone]

download combofix and run it

[Syberyenta]

I’ve had success with this one
http://www.atribune.org/content/view/24/2/

[granite]

SDFIX worked for me. It did not take long.

 

[gura]

[MediaMole]

Save and backup your data, then reformat your hard drive and reinstall Windows.

Nothing will really ensure that everything is off the hard drive except reformatting and reinstalling the operating system.

[AppyPappy]

Drink heavily

[Krankor]

I want to thank you and everyone who’s answered. Just want to warn everyone about McAfee. They seem to be an excellent company. At first, they responded immediately, but once the problem couldn’t be solved, they ignored me after many attempts to contact them online. My subscription is running out in a few days, so they may be stalling until I re-subscribe. My service has been fine until now. Sadly, it appears if you have a big time virus, Mcafee can’t help you.

[Neidermeyer]

Try Symantec
***********************
Norton software is worse than a virus ,, if you want free and EXCELLENT , go AVG from Grisoft ,, the best commercial antivirus is CA’s ..

[kempo]

AVG antivirus is the way to go. Its free and damn good. Go to www.downloads.com It is CNET’s second most popular download.

[DesScorp]

Both McAffee amd Symantec have essentially become malware in and of themseves. If you’re convinced that only a commercial anti virus solution will help you, then get PC Cillin from Trend Micro. But AVG’s free anti-virus app is as good as anything.

The best thing you can do is get a Mac and stop worrying at all.

[Neidermeyer]

I forgot to mention you can go to TREND MICRO’s website and do their “housecall” ,, it works when other removers don’t .. http://housecall.trendmicro.com/

[backhoe]

I’d go with the “drink heavily” advice...

Seriously, besides the expected wise-assed cracks, AVG is quite good. Another good free one is:

http://www.avast.com/

If you still have trouble, join here, read the FAQ, follow the directions, and post a scan in the forum- they are slow ( overwhelmed, and use volunteer helpers) but they are good:

http://forums.spywareinfo.com/index.php?s=d003915c64018f6af0861eab2984669f&showforum=18

[politicalwit]

I suggest you give AVAST a try. Like AVG, there is a “free home version”. Multiple daily updates, unlike AVG with single daily updates.

[chuckles]

I just format C: and restore from my most recent backup using Ghost. If you have it in your boot sector, F-prot is usually enough.

Oh, you don't have a backup.......Jeeszus!

I don't really want to be mean, but most of us has been there, done that, and have a closet of T Shirts. You have to get a clean backup and have a restoral software, such as Norton Ghost. Any software that can image your drive and boot from a removable drive and restore from an image file will save you beau coup of misery. I have my image on a totally different HD that I can remove if needed. I have several images to choose from also. My data and e mail are kept on another drive, never the default location the software wants. That way when it comes down to it, I can restore just the program files and my data is safe.

Just as an observation, when you get a trojan or a virus that is this hard to get rid of, start over. You could spend days wrestling with this and you computer may never be the same.

[Thommas]

Try Eset NOD32....

Ditto.

[Krankor]

Ahh, it’s all clear to me now. I think I’m just gonna vote for Obama- he’ll fix everything.

[Chuck54]

One other thing. once you get rid of this issue, spend a few bucks and back your computer up off line. Relatively cheap, 50 bucks a year or so.

I use Mozy and sleep very well at night. There are several available so pick one and spend the bucks. You’ll sleep better, guaranteed.

chuck

[Digital Sniper]

I recommend Grisoft’s AVG anti-virus.

http://free.grisoft.com/

It’s free and really does the job. I recommend it to all Windows users I know.

[jdm]

Removal Steps:

1. Download Vundo Fix and save it to your desktop.
   
   
2. When it has completed downloading, double-click VundoFix.exe to run it.
   
   
3. Click the Scan for Vundo button.
   
   
4. Once it's done scanning, click the Remove Vundo button.
   
   
5. You will now receive a prompt asking if you want to remove the files, click the YES button. Once you click yes, your desktop will go blank as it starts removing Vundo.
   
   
6. When completed, it will prompt that it will shutdown your computer, click the OK button.
   
   
7. When the computer has shutdown, turn your computer back on.

The WinFixer and Vundo infection should now be removed from your computer.

If you are still having a problem then please perform the following steps.

This step should only be used if the instructions in the previous steps did not remove the infection:

1. Download VirtumundoBegone and save it to your desktop.
   
   
2. Now reboot into Safe Mode.
   
   
   1. This can be done tapping the F8 key as soon as you start your computer
      
      
   2. You will be brought to a menu where you can choose to boot into safe mode.
      
      
   3. Select safe mode with networking using your arrow keys on the keyboard and then press enter.
      
      
   4. When you computer reaches the desktop make sure you log in as the same user which you had performed the previous steps,
      
      
3. Once you are logged into safe mode, double-click VirtumundoBeGone.exe file you just downloaded and follow the instructions.
   
   
4. Exit when it has finished, and reboot back to normal mode.

The WinFixer and Vundo infection should now be removed from your computer.

[Parmy]

Try AVG. It is freeware and does really well.

[jdm]

Instead of McAfee use this:

http://www.free-av.com

[TruthWillWin]

When I hear stories like this it makes me wonder what are we getting for the virus protection we pay for. Why didn't McAfee detect and prevent this virus. When you got it why didn't it get rid of it and why couldn't they help you when it didn't?

I'd ask for a refund from McAfee.

[roamer_1]

it appears if you have a big time virus, Mcafee can’t help you.

McAffee is crap
Norton is crap.
PCCillin is crap.

Kaspersky AV is the best, period.
Nod32 is good.
F-Protect is good.
AVG is good.

Regarding your dilemma, Download AVG AntiSpyware. This is different from AVG Antivirus. It is the old EWIDO anti-trojan, and will run fine along side of your current anti-virus.

Install it, update it, and scan. If it will not install or update due to infection, it will install and update from safe mode w/ networking. It will find and remove VUNDO.

Keep AVG Antispyware on your system, and use it as a back up scanner. After 30 days, the realtime scanner will quit working unless you buy it, but if not, it still works perfectly well for manual scans. Whether or not AVGAS removes the virus, you must also uninstall McAfee, and install one of the recommended AVs. All have a 15/30 day trial, so DL and try them at your leisure (Only ONE AV installed at a time plz).

While Kaspersky is the best, My favorite is F-protect. It is lighter on system resources, and if you have multiple machines, it can be installed on up to 5 seats for one time price of $35US/YR, or up to 10 seats (corporate edition) for $45US/YR.

I would also recommend Spybot Search & Destroy and either Lavasoft's Adaware or SuperAntiSpyware to help keep your machine free of spyware/ adware.

See my article "How to Keep your Computer Clean" for more info.

[ThomasThomas]

You can back up a virus you know.

[John Robie]

http://vundofix.atribune.org/

[Krankor]

Thank you. In all honesty, I didn’t have any complaints until I did get a virus. Once I did, McAfee did respond immediately when I notified them. Sadly, their solutions didn’t get rid of the virus. Even sadder, they stopped responding to me.

[Publius6961]

You can back up a virus you know.

Interesting statement.
We need to verify this with the computer geeks, but I thought that if the entire Windows folder and subfolders were removed and reinstalled, it would take all malware with the removal

[MichiganMan]

AVG. I happily use Linux exclusively, and still have nothing but admiration for AVG.

[tubebender]

Virus Ping...

[Bloody Sam Roberts]

Punt MacAfee out the window and download AVG Free. It’s not bloat-ware like MacAfee and Symantec and it simply works.

[Hot Tabasco]

Norton software is worse than a virus

It sure is! I would equate Norton to trying to drive a sports car while towing a house trailer without wheels.........

[khenrich]

I have used AVG for several years now, and it works flawlessly. I would recommend it to anybody, and, it’s free.

[Apercu]

Makes you wonder who is manufacturing the virus - not that any anti-virus software provider is trying keep themselves in business by concocting malware.(R-i-i-i-ght)

[Chewbacca]

ESET NOD32 is what I use and have not had any infections.

Uses few resources to bog your computer down with unlike Semantec.

[lowbridge]

Makes you wonder who is manufacturing the virus - not that any anti-virus software provider is trying keep themselves in business by concocting malware.(R-i-i-i-ght)

One time my brothers got a virus on his computer. The virus was known as "cpvfeed.com". (DONT go to that address). It caused an endless number of advertisement pop ups. One after the other in quick succession. Hundreds of them. One of the many advertisement pop ups was an ad for an anti-spyware software!

[xone]

bttt

[biscuit jane]

wow Thank you for generously sharing the info and software!!

Your my new best friend !

[roamer_1]

Thank you for generously sharing the info and software!!

Happy to be of some service. A small recompense compared to what I get from all the good folks here on FR :D