Vundo Removal/Confirmation

eja642 · 06-15-2009, 08:16 PM

My sister got the vundo virus. She attempted to fix it using a fix program which I believe was provided by symantec, I may be wrong.

She got home from school for the summer, and the pc was not working at all. You would attempt to boot, get past the "HP" logo screen, a blue screen would appear quickly stating something about corruption, it was not there for long enough to read. I'm really not sure what happened.

So I reformatted the hard drive, cleaned up the junk that came with the pc, installed avast antivirus, malwarebytes, and spybot, all of which are detecting nothing malicious.

I would just like confirm that it is gone. I have posted a HJT log.

Ried · 06-15-2009, 09:34 PM

Hello eja642,

If you reformatted the machine before reinstalling Windows, that should have gotten rid of any Vundo onboard. I'd be happy to do a check for you, but HijackThis is no longer the preferred initial scanning tool in this forum.

If you'd please follow our pre-posting process outlined here, we can get started:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help

After running through all the steps, you shall have a proper set of logs. Please post them in your next reply.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

eja642 · 06-16-2009, 05:19 PM

My apologies, I assumed it was just a typical "Read before posting" as on many other forums and chose to ignore it.

I'm posting from my personal PC to inform you that I don't have access to my sister's computer for a few days, so I'll get back to you with the proper logs.

Ried · 06-16-2009, 05:42 PM

I'll remain subscribed through the weekend.

06-15-2009, 09:34 PM	#2 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 27,005 OS: WinXP and Vista	Re: Vundo Removal/Confirmation Hello eja642, If you reformatted the machine before reinstalling Windows, that should have gotten rid of any Vundo onboard. I'd be happy to do a check for you, but HijackThis is no longer the preferred initial scanning tool in this forum. If you'd please follow our pre-posting process outlined here, we can get started: NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help After running through all the steps, you shall have a proper set of logs. Please post them in your next reply. If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

06-16-2009, 05:19 PM	#3 (permalink)
eja642 Registered User Join Date: Jun 2009 Posts: 2 OS: Windows XP SP2	Re: Vundo Removal/Confirmation My apologies, I assumed it was just a typical "Read before posting" as on many other forums and chose to ignore it. I'm posting from my personal PC to inform you that I don't have access to my sister's computer for a few days, so I'll get back to you with the proper logs.

06-16-2009, 05:42 PM	#4 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 27,005 OS: WinXP and Vista	Re: Vundo Removal/Confirmation I'll remain subscribed through the weekend. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."