Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Infection with Trojan Vundo

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: Infection with Trojan Vundo

Unread postby Scotty » June 16th, 2008, 11:46 am

Hi

I would go ahead and delete those files.

Congratulations, you appear to be malware free.

Time for some housekeeping

  • Click START then RUN
  • Now type Combofix /u in the runbox and click OK. Note the space between the x and the /u, it needs to be there.

    Image


Open OTMoveIt and cleick on the CleanUp button, and allow it to finish.

If it still exists, delete the SDFix icon from your Desktop and then navigate to and delete this folder:
C:\SDFix

You may wish to keep hold of the Kaspersky Online Scan as an extra on-demand virus-scanner.
If not you can uninstall it through Start>Control Panel>Add/Remove Programs


Delete the older versions of Java and download the newest.
Please follow these steps to remove older version Java components.
  1. Close any programmes you may have running, ESPECIALLY your web browser
  2. Click Start > Control Panel.
  3. Click Add/Remove Programs.
  4. Check any item with Java Runtime Environment (JRE or J2SE) in the name.
  5. Click the Remove or Change/Remove button.
  6. Repeat as many times as necessary to remove all versions of Java.
  7. Reboot your computer once all Java components are removed.
Then download the latest version of Java Runtime Environment (JRE) (5th one down the list), which is JRE6u6, and click Yes at the page warning. Under "Platform" select Windows, then check the box to accept the Licence Agreement. Click Yes at the second page warning before downloading the Offline file.
There is no need to download the Sun Download manager but it is optional.

Malwarebytes Anti-Malware is a good program to keep. If you wish to keep it, use it to do a quick scan once a week and keep it updated.
Remember, only the paid for version offers real-time protection

Here is another couple of free programs I recommend.

Winpatrol
Winpatrol is heuristic protection program, meaning it looks for patterns in codes that work like malware. It also takes a snapshot of your system's critical resources and alerts you to any changes that may occur without you knowing. You can read more about Winpatrol's features here.

You can get a free copy of Winpatrol or use the Plus version for more features.

You can read Winpatrol's FAQ if you run into problems.

Spyware Blaster
SpywareBlaster is a program that is used to secure Internet Explorer by making it harder for ActiveX programs to run on your computer. It does this by disabling known offending ActiveX programs from running at all.

You can download SpywareBlaster from Javacool.

If you need help in using SpywareBlaster, you can read SpywareBlaster's tutorial at Bleeping Computer.


Hosts File
A Hosts file is like a phone book. You look up someone's name in the phone book before calling him/her. Similarly, your PC will look up the website's IP address before you can view the website.

Hosts file will replace your current Hosts file with another one containing well-known advertisement sites, spyware sites and other bad sites. This new Hosts file will protect you by re-directing these bad sites to 127.0.0.1.

Here is a good Hosts file:

MVPS Hosts File

A tutorial about Hosts File can be found at Malware Removal.


Make sure your Windows is ALWAYS up to date!

An unpatched Windows is vulnerable and even with the "best" Antivirus and Firewall installed, malware will find its way through.
So visit http://windowsupdate.microsoft.com/ to download and install the latest updates.


Update your Antivirus programs and other security products regularly to avoid new threats that could infect your system.

Please check out Tony Klein's article "How did I get infected in the first place?"

Here is some great information from experts in this field that will help you stay clean and safe online.
http://forum.malwareremoval.com/viewtopic.php?t=14

Follow this list and your potential for being infected again will reduce dramatically.

I'd be grateful if you could reply to this post so that I know you have read it and, if you've no other questions, the thread can be closed.
User avatar
Scotty
Retired Graduate
 
Posts: 4138
Joined: August 4th, 2006, 5:31 am
Location: Haggistown, Kiltland
Advertisement
Register to Remove

Re: Infection with Trojan Vundo

Unread postby Charlet » June 17th, 2008, 10:21 am

Hello,

I deleted the two files as suggested. Then I removed ComboFix and OTMoveIt and updated Java. Then I installed Winpatrol, Spyware Blaster and loaded the Hosts File, and read your entire post. Everything seems OK.
Before closing the threat, I have an additional question about not movable files, if you allow me.
I notice that, when uninstalling ComboFix, OTMoveIt and Java softwares, the size of not movable (“green”) files displayed using the Windows defragmentation tool, does not seem to change. On the opposite, when iinstalling softwares, not movable files tend to grow in parallel, if I am wright. Would it mean that access to part of the memory space keeps being blocked even following software uninstallation? Is that necessary? If not, would you know of a way having this memory space become available again?

Thanks for your patience, your prompt responses and your very efficient assistance.
Best regards - Charlet
Charlet
Active Member
 
Posts: 11
Joined: June 6th, 2008, 11:24 am

Re: Infection with Trojan Vundo

Unread postby Scotty » June 17th, 2008, 2:58 pm

Hi Charlet

Defragging has nothing to do with memory space. It's hard drive space. Basically, most programs dont write to the drive contiginously, ie in one straight block, thus the data is "fragmented". Defragging brings all that together.
You will find files such as system files are not moveable.

It could have an effect on speed if you have a small hard drive and is badly fragmented.
User avatar
Scotty
Retired Graduate
 
Posts: 4138
Joined: August 4th, 2006, 5:31 am
Location: Haggistown, Kiltland

Re: Infection with Trojan Vundo

Unread postby Charlet » June 18th, 2008, 6:19 am

Hello,

I understand what you say. Actually, I used a wrong word in my question: I used memory space meaning hard disk space. My question was:
My hard disk is pretty much occupied at this time, with only 27% free and with many scattered not movable (green) files. When installing softwares, I notice that, not movable files tend to grow whereas, when uninstalling softwares, the size of not movable files does not seem to diminish. It seems that, following software uninstallation, part of the hard disk space having to do with the removed softwares could be possibly recovered for storing ordinary files, but this space keeps being locked for some reason. If so, is there a way of recovering this hard disk space?

About a similar question, I have just read an article by Wes Miller (http://technet.microsoft.com/fr-fr/maga ... TechNet.10).aspx ) mentioning the use of PageDefrag for defragging the Windows Exchange File. Could that process improve the speed of the computer or could it free some hard disk space?

I realize that my questions might be beyond the purpose of the Malware Removal Website. In that case I apologize. This would be the end of this threat. If not, I would be grateful if, before closing the threat, you could give me an advice concerning these defrag problems.
Thanks for everything – Charlet.
Charlet
Active Member
 
Posts: 11
Joined: June 6th, 2008, 11:24 am

Re: Infection with Trojan Vundo

Unread postby Scotty » June 18th, 2008, 11:05 am

Hi

I think the best place for you to get answers to these questions is a dedicated tech forum. Here are a few good ones to choose from.

Whatthetech- http://forums.whatthetech.com/Microsoft_Windows_f119.html

Geeks2Go- http://www.geekstogo.com/forum/Windows-XP-2000-2003-NT-f5.html

Computer Trouble- http://forum.computertrouble.co.uk/index.php

TechSupportGuy- http://forums.techguy.org/21-windows-nt-2000-xp/

All may require you to register free before posting for help.

Please post a reply to let me know you read this, so I can have it closed.
User avatar
Scotty
Retired Graduate
 
Posts: 4138
Joined: August 4th, 2006, 5:31 am
Location: Haggistown, Kiltland

Re: Infection with Trojan Vundo

Unread postby Charlet » June 18th, 2008, 11:39 am

Hello,

Thank you for this information. I shall look at it carrefully.
Many thanks again. I wish you the best. - Charlet
Charlet
Active Member
 
Posts: 11
Joined: June 6th, 2008, 11:24 am

Re: Infection with Trojan Vundo

Unread postby askey127 » June 19th, 2008, 10:22 am

Glad we could be of assistance. This topic is now closed. If you wish it to be reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.
Please do not contact us to reopen this topic if you are not the topic starter.
A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.

You can help support this site from this link : Donations For Malware Removal
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 13903
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA
Advertisement
Register to Remove

Previous

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 32 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware