Tech Support Forum - View Single Post - Trojan.Vundo Virus Detected & Norton AntiVirus Will Not Remove

sUBs · 10-14-2005, 11:59 PM

May I have the logs from Panda.

Have HijackThis fix these entries:

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.compaq.com/1Q00CDT/0409/bl8.asp
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.compaq.com/1Q00CDT/0409/bl7.asp
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - Startup: PowerReg Scheduler V3.exe
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540002} - http://www.wildtangent.com/webdrive...ave/Install.cab
O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} - http://install.wildtangent.com/bgn/...nds/install.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://a284.g.akamai.net/f/284/987/...aploader_v6.cab
O20 - Winlogon Notify: geebc - C:\WINDOWS\system32\geebc.dll (file missing)

After you have done that, please post a new HJT log & the report from Panda

10-14-2005, 11:59 PM	#4 (permalink)
sUBs Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy Join Date: May 2005 Posts: 24,352 OS: N/A	May I have the logs from Panda. Have HijackThis fix these entries: R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.compaq.com/1Q00CDT/0409/bl8.asp R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.compaq.com/1Q00CDT/0409/bl7.asp O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u O4 - Startup: PowerReg Scheduler V3.exe O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540002} - http://www.wildtangent.com/webdrive...ave/Install.cab O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} - http://install.wildtangent.com/bgn/...nds/install.cab O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://a284.g.akamai.net/f/284/987/...aploader_v6.cab O20 - Winlogon Notify: geebc - C:\WINDOWS\system32\geebc.dll (file missing) After you have done that, please post a new HJT log & the report from Panda __________________ Question - what have you done for the community today?