I forget which one I used before....so can someone give me a link to a good web-based trojan scan?
I have a friend who I know online...who has said the following....
"Somehow I have ended up with Trojan.Vundo virus according
to Norton.I did a HouseCall Scan of my entire system and it said
there is no virus or prob.Norton keeps saying there is.I've tried to
do what they say to rid it but it's jibber talk I dont understand. "
I was going to suggest she do a trojan scan....but can't find the links I used to have for it.
I will keep looking tho.
I am also going to try and send her here, so you all can help her out.
I found these two.
I will have her run one of these and also try to get her to come here as well.
http://www.anti-trojan.net/en/onlinecheck.aspx
http://www.windowsecurity.com/trojanscan/
EWIDO
has a 15 day free demo then converts to like aaw scan on demand and manual update !
ask around and think you will find it's pretty good !
http://www.ewido.net/en/ (http://www.ewido.net/en/)
or look on my site ( signature) in newbie oldie page
AFTER reading "how did i get infected" ;-D
If your friend really has vundo, it will show up as "MSEvents Object" in a HJT log. It would be wise to have her post a log in the HJT forum to be verified. Atribune has written a special VUNDOFIX that can be used to help her.
Have her download HijackThis from here: http://www.thespykiller.co.uk/files/HJTsetup.exe .
Note: This is a complete installer that installs HijackThis to your computer to at C:\Program Files\HijackThis, making an entry in the start menu and also providing a desktop shortcut.
At the download prompt, choose "Save". After the download is complete, navigate to the C:\Program Files\HijackThis folder and double-click it. When the installation is complete, double-click the HijackThis icon on your desktop. Select "Do a system scan and save logfile". Save the logfile and a text file will be produced.. Copy the text file and paste it in the HJT forum.
I am not real sure what her level of computer knowledge is as of yet.
I know her from a db that I go to. I have not talked to her alot.
I don't know how long it will be before she checks her post at the db that I replied to try and get her to come here.
Hopefully she will come here and read all the info.
Time is getting close to me leaving for Sweden. So my time is more limited. I can't help as much as I wish, or would like. So I am going to try and send as many that I come across, to here.
Thanks for all your help!
You guys are the BEST!
Okay I'm here.Thanks for trying to help.I'm not a computer whiz.
All i know how to do is turn on messenger,clear cookies,and that's
about it.
I clicked on the windows security link for a scan.It said that I have no
Malware.Norton still says I have the Vundo.I'm so confused.
Earlier today I went to Mcafee site and tried to do what they say to
rid it.I downloaded what hey said but when i rebooted like they said,i lost
whatever i downloaded.cant find it now..Straight Jacket anyone?
ok you do have norton so how about trying this "from norton"
http://securityresponse.symantec.com/avcenter/venc/data/trojan.vundo.removal.tool.html (http://securityresponse.symantec.com/avcenter/venc/data/trojan.vundo.removal.tool.html)
READ the instructions aboutNOT being online !!!!!!!
and what anti-scum programs do you hve? norton and what else?
firewall?
have you done any of the IE or Outlook Express security settings?
Thanks Mitch and Corrine for your help!
I walked Petalina thru some things last night, while talking to her on yahoo messanger from my cell phone last night. Got her registered here and showed her how to post and got her set up with the updates Notifier for Adaware and Norton.
I was going to have her uninstall her Norton and set her up with AVG...BUT she just paid Norton for the subscription renewal! :(
She just installed Adaware about 3 days ago. And I had her update it last night, and she ran the scan and it found 7.
Her next step was to follow Corrine's instructions on downloading Hijack This.
She has alot of health issues so last night, she had to stop. She is going to try and get back to it later today.
I explained to her that she needed to follow the instructions by you guys who are knowledgable and trained in the hijack this, completely. That she should not try and fix anything herself.
I also told her to post the hijack log in the hijack logs forum.
Her isp is AOL. GULP! Poor thing! hehehe
She felt that their blocks and filters were enough to protect her from everything, such as spyware/malware/etc.
I explained that she does need more.
At least she does have a good start, with having adaware on her pc now.
Looks like I should probably have her download spybot first before we have her do the hjt?
If she has Vundo, we'll have her use the fix that Atribune created.
(As to AOL -- I personally wouldn't use it, which how I got involved at Freedomlist -- ISPs $10/month or less. :lol: )
Someone asked if I have Norton.Yes,it's a 3 month free
trial that's up end of this month.It came with my new Dell.
In the past I've used GateWay computer and necer renewed the
anti virus software.Never had any prob before this.Also i use AOL
and they've been good about blocking my Spam.I told Skittles
I also use Lavasoft.My fire wall is on too.
1. you always need a CURRENT good working anti-virus
click on my signature and i have a "how to" on installing AVG ( unnstall norton first)
2. what firewall? the one that came with windows XP?
and are you current on all the updates"patches" to XP?
do you know about Microsoft's FREE anti-spyware???? it will offer you some real time protection
Unless we find out her Norton is corrupt, she might as well keep it, don't you think? Since she just paid for another year of Norton. :( I tried to catch her before she did it, but it is paid, so she would like to get the most out of what she paid for. Altho, if it were me I would still uninstall it and then install AVG or Avast.
It depends on what other security features she has on her PC -- Mitch's question regarding the firewall, for example. Also, does she have Spyware Blaster & Spyware Guard? What browser does she use? If IE, then IE-Spyads. WinPatrol or Startup Monitor would also be good -- but let's get her cleaned up first before making more changes.
Sounds good Corrine!
I just instructed her to download spybot per the instructions on what to do prior to posting a hjt log.
She said she gets easily confused, but from what I have seen she does follow directions very well!
Just give her step by step instructions here, as to what to do first, then next.
I have been having problems with my yahoo messanger so I can't always get to her, to talk when I am at home using my cell phone, and definately can't come here on my cell. I have to get to the library to come here. And I won't be coming here much after this weekend. Last week to move.
Thanks for all of your help!
Okay last night she got Spybot. She had alot of problems getting it downloaded but the last time out of 3 tries was a success.
I told her to get the SpywareBlaster next. SpywareBlaster Download (http://www.javacoolsoftware.com/sbdownload.html)
Do you think that she should also get Spyware Guard as well? I have always heard conflicting stories of whether or not to have them both.
Hi, Skittles. :)
I haven't heard of problems running both SpywareGuard & SpywareBlaster. However, while you're around this weekend, it might be better to get her to post that logfile if she really has VUNDO on her system.
I thought you wanted her to get all cleaned up with all the spyware protection and scans and all that before she did the hjt log?
btw....spybot found 7 last night.
Oh...I just love those "help pictures" such as Mitch has for downloading AVG. Where it shows you step by step what you will see and what to press, etc.
I have seen one for hijack this before, but can't remember where! LOL Anyone have one? I think that would help her.
We still need her to tell us what firewall she has IF she has one.
Hello,skittlespc found this link for ya....http://www.bleepingcomputer.com/forums/tutorial94.html
Hope this helps ...
numbnuts... :breakkie:
Thanks! I found the two I have seen before.
http://www.netstar.me.uk/hjt/hjt.html
http://forum.littleeagle.us/showthread.php?t=112
:D I prefer Avast ( www.avast.com ) as a good & FREE antivirus to AVG, which has more problems
( ask Mitch about his recent experience ) . With Spybot, Spywareblaster & SpywareGuard on the
same computer, small problems may arise, such as Spybot updates, at times, may cause items in
SpywareBlaster to become "unprotected". Also Spybot's "Teatimer" does essentially the same thing
as Spywareguard & it is best to have only 1 of them . There are many good "tutorials" at
www.bleepingcomputer.com on many different subjects. Norton Antivirus can be difficult to
COMPLETELY uninstall when the time comes to replace it with a good & FREE Antivirus program .
Quote from: SpiritWind on October 20, 2005, 05:19:39 PM
....
Also Spybot's "Teatimer" does essentially the same thing as Spywareguard & it is best to have only 1 of them
............
I recommend SpywareGuard instead of Teatimer.