Vundo...

[nub]

I don't have a CLUE as to how this came to be, but apparently I have Vundo again.

This trojan is a total bastard, and I've dealt with it too many times before and ultimately ended up having to reformat my computer. People keep telling me that there's tools out there meant to deal with this specific trojan, however I have yet to find any tools. I've tried manual methods and they ultimately failed.


It started when I got some weird-ass alert from an antivirus I never really had. I thought I somehow picked up some crappy little malware program and figured I could get rid of it. I scanned with MBAM and it turned out that I had another vundo infection. You know that sick-ish feeling you get when you realize something really shitty just happened? Well...that's pretty much the feeling I got, and I still feel it lingering like I'm probably never gonna get rid of this fucking thing.


Help, PLEASE!

[MaK]

I got Vundo before. Tried using that Vundofix program, didn't help at all. I waited so long I ended up having to reformat my computer. Good luck nub.

[davidc538]

try combofix, youll have to google it though

[no00dylan]

Wow, for a virus, it sure does have a fun name


VUNDO!

(see post above)

[source-maps]

try a boot scan with avast anti virus

[nub]

Strangest thing ever.

Apparently Mbam either succeeded in removing the vundo entries, or it just falsely reported them.

It was another one of those fake antivirus programs. It was called Antivirus System Pro.


I first scanned with MBAM when the fake popups from it started coming up (I was in Mass Effect). It picked up like 8 entries, and four of them were Vundo.Trojan entries. I tried removing all of it, and I guess only a couple of entries couldn't get removed.

After that I ran a scan with Hijack This, and it picked up 4 entries that were obviously fake, so I fixed them (removed them). After that I scanned with Spybot S&D and it picked up 3 different issues, with about 3 entries each. One of them was "iehelper.dll" in the system32 folder. Clearly fake. I tried fixing all the issues and it couldn't get rid of iehelper.dll. So I tried using the file shredder and it did the trick.

After all that, that Antivirus System Pro went away instantly. So I guess I'm ok. I'm gonna continue monitoring everything to see if I'm really clean. But from my experience with Vundo, it seems like I never really had it or simply managed to remove it as soon as I got it; amazingly.