Windows Defender Warning Help!!!

**Baldie559** · 06-22-2008, 09:14 AM

Ever since yesterday I've been getting a windows defender warning for "Trojan:Win32/Vundo.gen!M". I've tried to remove it or quarantine it but I'm still constantly getting this message. Also automatic windows udpate is constantly disabling, and seems to have started after I started getting this error. I ran the windows defender scan and also Avast Antivirus scan and nothing. ANY HELP??

ZLRAC · 06-22-2008, 09:43 AM

1. Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
2. In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>
Windows>CurrentVersion>Explorer>ShellExecuteHooks
3. In the right panel, locate and delete the entry:
{FB936D4B-E1F5-4345-A9B3-D05971F30C4E} = ""
4. Again in the left panel, double-click the following:
HKEY_LOCAL_MACHINE>Software>Microsoft>Windows>
CurrentVersion>Explorer>Browser Helper Objects
5. Still in the left panel, locate and delete the key:
{FB936D4B-E1F5-4345-A9B3-D05971F30C4E}
6. Again in the left panel, double-click the following:
HKEY_CLASSES_ROOT>CLSID
7. Still in the left panel, locate and delete the key:
{FB936D4B-E1F5-4345-A9B3-D05971F30C4E}

**Baldie559** · 06-22-2008, 10:17 AM

I did not see any of those values in the registry.

ZLRAC · 06-22-2008, 11:24 AM

What antivirus program do you use?

**Baldie559** · 06-22-2008, 11:42 AM

I have Avast Antivirus, Ad-Aware 2007, and Ad-watch 2007. I have these programs running all the time.

**Glaswegian** · 06-22-2008, 02:15 PM

Baldie559 - Please start here and follow the instructions.

http://www.techsupportforum.com/secu...sting-log.html

If you cannot complete any of the Steps, simply move on to the next one - remember to let the Analyst know about this when you post your logs.

Do not post your logs back in this thread - follow the guidance in the above link!

Please note that the Security Forum is always busy, so I would ask for your patience while waiting for a reply.

ZLRAC - we appreciate you are trying to help but please note that only authorised Security Staff may post specific security advise to users.
Please Read! "Who is Helping you?"

**Baldie559** · 06-22-2008, 02:22 PM

I posted a HJT log a few hours and am just waiting for a response. Just noticed also that my firefox browser is starting to freeze while IE works fine.

Ried · 06-22-2008, 04:01 PM

I noticed you also bumped your thread already.

(that 'bump' post has been deleted)

Nor did you follow the link provided by Glaswegian or heed his advice about patience.

Real-time assistance is not implied anywhere in our 5-step process.

Please refer to the Posting Rules found in Step 5 of our sticky topic (Updated!) IMPORTANT - Read This Before Posting A Log

Quote:

Posting Rules

2. Please be considerate of the fact that the people helping you are not being paid for this, and in fact usually have a job, and have a limited amount of time to help, and can only do so much. If no one has replied to your thread within 72hrs after you posted it, please reply in your thread with the word BUMP. to move it forward.

DO NOT Bump the thread unless 72 hours has passed. We work from oldest to newest posts... so your wait will be longer if you bump it forward before the 72 hours is up.

As you can see, we are quite busy in the HijackThis Help forum. There are only so many of us doing the best we can.

One of the Analysts will get to your log as soon as possible.

**Baldie559** · 06-22-2008, 04:13 PM

I apologize. I will wait for a response.

Ried · 06-22-2008, 04:14 PM

While you're waiting, why don't you go ahead and follow those 5-Steps and post the requested logs.

**Baldie559** · 06-22-2008, 04:52 PM

I'm trying to disable avast antivirus prior to the panda active scan however the icon is not in the bottom right corner any longer. Panda gets an error while installing.

Ried · 06-22-2008, 08:14 PM

Then skip the Panda scan and continue with the remaining steps.

06-22-2008, 09:14 AM	#1 (permalink)
Baldie559 TSF Enthusiast Join Date: Nov 2006 Location: California Posts: 596 OS: Xp and Vista	Windows Defender Warning Help!!! Ever since yesterday I've been getting a windows defender warning for "Trojan:Win32/Vundo.gen!M". I've tried to remove it or quarantine it but I'm still constantly getting this message. Also automatic windows udpate is constantly disabling, and seems to have started after I started getting this error. I ran the windows defender scan and also Avast Antivirus scan and nothing. ANY HELP??

06-22-2008, 09:43 AM	#2 (permalink)
ZLRAC Registered User Join Date: Jul 2006 Posts: 96 OS: Vista Home Premium My System	Re: Windows Defender Warning Help!!! 1. Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter. 2. In the left panel, double-click the following: HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft> Windows>CurrentVersion>Explorer>ShellExecuteHooks 3. In the right panel, locate and delete the entry: {FB936D4B-E1F5-4345-A9B3-D05971F30C4E} = "" 4. Again in the left panel, double-click the following: HKEY_LOCAL_MACHINE>Software>Microsoft>Windows> CurrentVersion>Explorer>Browser Helper Objects 5. Still in the left panel, locate and delete the key: {FB936D4B-E1F5-4345-A9B3-D05971F30C4E} 6. Again in the left panel, double-click the following: HKEY_CLASSES_ROOT>CLSID 7. Still in the left panel, locate and delete the key: {FB936D4B-E1F5-4345-A9B3-D05971F30C4E}

06-22-2008, 10:17 AM	#3 (permalink)
Baldie559 TSF Enthusiast Join Date: Nov 2006 Location: California Posts: 596 OS: Xp and Vista	Re: Windows Defender Warning Help!!! I did not see any of those values in the registry.

06-22-2008, 11:24 AM	#4 (permalink)
ZLRAC Registered User Join Date: Jul 2006 Posts: 96 OS: Vista Home Premium My System	Re: Windows Defender Warning Help!!! What antivirus program do you use?

06-22-2008, 11:42 AM	#5 (permalink)
Baldie559 TSF Enthusiast Join Date: Nov 2006 Location: California Posts: 596 OS: Xp and Vista	Re: Windows Defender Warning Help!!! I have Avast Antivirus, Ad-Aware 2007, and Ad-watch 2007. I have these programs running all the time.

06-22-2008, 02:15 PM	#6 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 20,985 OS: Win XP Pro SP3 My System Blog Entries: 9	Re: Windows Defender Warning Help!!! Baldie559 - Please start here and follow the instructions. http://www.techsupportforum.com/secu...sting-log.html If you cannot complete any of the Steps, simply move on to the next one - remember to let the Analyst know about this when you post your logs. Do not post your logs back in this thread - follow the guidance in the above link! Please note that the Security Forum is always busy, so I would ask for your patience while waiting for a reply. ZLRAC - we appreciate you are trying to help but please note that only authorised Security Staff may post specific security advise to users. Please Read! "Who is Helping you?" __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. Ad-Aware::SpywareBlaster::SpyBot::SpywareGuard::SnoopFree::AVG Free::HOSTS File::HijackThis::Donate::5 Steps For Infected PCs

06-22-2008, 02:22 PM	#7 (permalink)
Baldie559 TSF Enthusiast Join Date: Nov 2006 Location: California Posts: 596 OS: Xp and Vista	Re: Windows Defender Warning Help!!! I posted a HJT log a few hours and am just waiting for a response. Just noticed also that my firefox browser is starting to freeze while IE works fine.

06-22-2008, 04:13 PM	#9 (permalink)
Baldie559 TSF Enthusiast Join Date: Nov 2006 Location: California Posts: 596 OS: Xp and Vista	Re: Windows Defender Warning Help!!! I apologize. I will wait for a response.

06-22-2008, 04:14 PM	#10 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 18,687 OS: WinXP and Win98se	Re: Windows Defender Warning Help!!! While you're waiting, why don't you go ahead and follow those 5-Steps and post the requested logs. __________________ Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Keep this site free for all. Please consider, donating "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

06-22-2008, 04:52 PM	#11 (permalink)
Baldie559 TSF Enthusiast Join Date: Nov 2006 Location: California Posts: 596 OS: Xp and Vista	Re: Windows Defender Warning Help!!! I'm trying to disable avast antivirus prior to the panda active scan however the icon is not in the bottom right corner any longer. Panda gets an error while installing.

06-22-2008, 08:14 PM	#12 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 18,687 OS: WinXP and Win98se	Re: Windows Defender Warning Help!!! Then skip the Panda scan and continue with the remaining steps. __________________ Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Keep this site free for all. Please consider, donating "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."