Infection with Trojan Vundo

Hi

I would go ahead and delete those files.

Congratulations, you appear to be malware free.

Time for some housekeeping

• Click START then RUN
• Now type Combofix /u in the runbox and click OK. Note the space between the x and the /u, it needs to be there.
  
  

Open OTMoveIt and cleick on the CleanUp button, and allow it to finish.

If it still exists, delete the SDFix icon from your Desktop and then navigate to and delete this folder:
C:\SDFix

You may wish to keep hold of the Kaspersky Online Scan as an extra on-demand virus-scanner.
If not you can uninstall it through Start>Control Panel>Add/Remove Programs


Delete the older versions of Java and download the newest.
Please follow these steps to remove older version Java components.

1. Close any programmes you may have running, ESPECIALLY your web browser
2. Click Start > Control Panel.
3. Click Add/Remove Programs.
4. Check any item with Java Runtime Environment (JRE or J2SE) in the name.
5. Click the Remove or Change/Remove button.
6. Repeat as many times as necessary to remove all versions of Java.
7. Reboot your computer once all Java components are removed.

Then download the latest version of Java Runtime Environment (JRE) (5th one down the list), which is JRE6u6, and click Yes at the page warning. Under "Platform" select Windows, then check the box to accept the Licence Agreement. Click Yes at the second page warning before downloading the Offline file.
There is no need to download the Sun Download manager but it is optional.

Malwarebytes Anti-Malware is a good program to keep. If you wish to keep it, use it to do a quick scan once a week and keep it updated.
Remember, only the paid for version offers real-time protection

Here is another couple of free programs I recommend.

Winpatrol
Winpatrol is heuristic protection program, meaning it looks for patterns in codes that work like malware. It also takes a snapshot of your system's critical resources and alerts you to any changes that may occur without you knowing. You can read more about Winpatrol's features here.

You can get a free copy of Winpatrol or use the Plus version for more features.

You can read Winpatrol's FAQ if you run into problems.

Spyware Blaster
SpywareBlaster is a program that is used to secure Internet Explorer by making it harder for ActiveX programs to run on your computer. It does this by disabling known offending ActiveX programs from running at all.

You can download SpywareBlaster from Javacool.

If you need help in using SpywareBlaster, you can read SpywareBlaster's tutorial at Bleeping Computer.


Hosts File
A Hosts file is like a phone book. You look up someone's name in the phone book before calling him/her. Similarly, your PC will look up the website's IP address before you can view the website.

Hosts file will replace your current Hosts file with another one containing well-known advertisement sites, spyware sites and other bad sites. This new Hosts file will protect you by re-directing these bad sites to 127.0.0.1.

Here is a good Hosts file:

MVPS Hosts File

A tutorial about Hosts File can be found at Malware Removal.


Make sure your Windows is ALWAYS up to date!

An unpatched Windows is vulnerable and even with the "best" Antivirus and Firewall installed, malware will find its way through.
So visit http://windowsupdate.microsoft.com/ to download and install the latest updates.


Update your Antivirus programs and other security products regularly to avoid new threats that could infect your system.

Please check out Tony Klein's article "How did I get infected in the first place?"

Here is some great information from experts in this field that will help you stay clean and safe online.
http://forum.malwareremoval.com/viewtopic.php?t=14

Follow this list and your potential for being infected again will reduce dramatically.

I'd be grateful if you could reply to this post so that I know you have read it and, if you've no other questions, the thread can be closed.

Hello,

I deleted the two files as suggested. Then I removed ComboFix and OTMoveIt and updated Java. Then I installed Winpatrol, Spyware Blaster and loaded the Hosts File, and read your entire post. Everything seems OK.
Before closing the threat, I have an additional question about not movable files, if you allow me.
I notice that, when uninstalling ComboFix, OTMoveIt and Java softwares, the size of not movable (“green”) files displayed using the Windows defragmentation tool, does not seem to change. On the opposite, when iinstalling softwares, not movable files tend to grow in parallel, if I am wright. Would it mean that access to part of the memory space keeps being blocked even following software uninstallation? Is that necessary? If not, would you know of a way having this memory space become available again?

Thanks for your patience, your prompt responses and your very efficient assistance.
Best regards - Charlet

Hi Charlet

Defragging has nothing to do with memory space. It's hard drive space. Basically, most programs dont write to the drive contiginously, ie in one straight block, thus the data is "fragmented". Defragging brings all that together.
You will find files such as system files are not moveable.

It could have an effect on speed if you have a small hard drive and is badly fragmented.

Hello,

I understand what you say. Actually, I used a wrong word in my question: I used memory space meaning hard disk space. My question was:
My hard disk is pretty much occupied at this time, with only 27% free and with many scattered not movable (green) files. When installing softwares, I notice that, not movable files tend to grow whereas, when uninstalling softwares, the size of not movable files does not seem to diminish. It seems that, following software uninstallation, part of the hard disk space having to do with the removed softwares could be possibly recovered for storing ordinary files, but this space keeps being locked for some reason. If so, is there a way of recovering this hard disk space?

About a similar question, I have just read an article by Wes Miller (http://technet.microsoft.com/fr-fr/maga ... TechNet.10).aspx ) mentioning the use of PageDefrag for defragging the Windows Exchange File. Could that process improve the speed of the computer or could it free some hard disk space?

I realize that my questions might be beyond the purpose of the Malware Removal Website. In that case I apologize. This would be the end of this threat. If not, I would be grateful if, before closing the threat, you could give me an advice concerning these defrag problems.
Thanks for everything – Charlet.

Hi

I think the best place for you to get answers to these questions is a dedicated tech forum. Here are a few good ones to choose from.

Whatthetech- http://forums.whatthetech.com/Microsoft_Windows_f119.html

Geeks2Go- http://www.geekstogo.com/forum/Windows-XP-2000-2003-NT-f5.html

Computer Trouble- http://forum.computertrouble.co.uk/index.php

TechSupportGuy- http://forums.techguy.org/21-windows-nt-2000-xp/

All may require you to register free before posting for help.

Please post a reply to let me know you read this, so I can have it closed.

Hello,

Thank you for this information. I shall look at it carrefully.
Many thanks again. I wish you the best. - Charlet

Glad we could be of assistance. This topic is now closed. If you wish it to be reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.
Please do not contact us to reopen this topic if you are not the topic starter.
A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.

You can help support this site from this link : Donations For Malware Removal