This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Backdoor.Trojan / Trojan.Vundo

1 min read

This thread's last reply is from April 8, 2009, 10:49 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

cannonwill
April 8, 2009, 7:49 PM UTC last edited April 8, 2009, 10:48 PM UTC (Edited to disable links.)
I am getting pop-up warnings from my Symantec antivirus regarding a Backdoor.Trojan / Trojan.Vundo and it keeps identifying files in my temp directory. I noticed another user posted regarding this item and the item was closed and I am not sure why, even by the admn's description.

This is a real threat and I have now seen almost a dozen computers infected wih it. It pops up browser windows every few minutes when you are using a browser and displays fake warnings about virus infection and offers scanning tools.

A browser window opens in almost every case where an HTTP 404 - File not found error is returned in a Google Toobar window with the statement Oops! This link appears broken. The site displayed is always:
hxxp://sameshitasiteverwas.com/traf/tds/default.cgi

Although it is getting caught with Symantec Antivirus when it executes, t is not being detected by the traditional spyware detection and removal tools and I have not been able to find any solid inormation on what is causing it or what the remedy might be.

Has anyone had this experience and do they know of a solution for removing this obnoxious little bugger?

Thanks. Your help would be greatly appreciated!

hxxp://sameshitasiteverwas.com
NonSuch
April 8, 2009, 10:49 PM UTC
In order for us to help you it is necessary that you provide us with a HijackThis log. Please follow the guideline at the link below to start a new topic and post your HijackThis log.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here: >Guideline for posting your HijackThis log<