InterviewSolution
Saved Bookmarks
InterviewSolution
| 1. |
Solve : Suspected Virtumundo? |
|
Answer» It all began when I ran an executable called keygen.exe... Yes, I know, stupid. If any of you are familiar with it, it's the sort that comes with crack.exe in the same archive as a text file. If it's pertinent, I'll post the link where I got it. I've done a lot of crap on my system, trying to fix it myself, so I haven't done anything else on the "Before you post" thread in case it'll make my system worse. I'll describe what's wrong with my system, then I'll give a list of the things I did, in the order I did them. *********** I ran VirtumundoBeGone.exe but the log said: Quote [09/28/2008, 12:16:54] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\leon\Desktop\VirtumundoBeGone.exe" ) Next I ran FixVundo.exe which ran a lengthy full scan of my computer. After a while, the window SIMPLY went gray and froze, and I had to forcibly end it. I rebooted my system and tried VirtumundoBegone again but nothing appeared still. -Then, I ran f-vmonde.exe from another source and it simply said no traces were detected either. As of now, the "Automatic Updates" notification no longer appears, but the same webpage problem persists.read this once you've followed those steps- you can post the logs here.Quote from: BC_Programmer on September 28, 2008, 06:54:58 PM read this Alright, after doing all that, I ran into a few hitches, but otherwise my system appears TOTALLY normal now (Except one time my firefox crashed, which was a bit worrying, but that was before I finished everything else). When I was running Super Antispyware, it froze the first time as it was completing, so I ran it three more times, the third time completing the entire full scan. Here are all the logs. [Saving space - attachment deleted by admin]Here is the final SUPERAntiSpyware log that I couldn't get in (it only lets me do 4) [Saving space - attachment deleted by admin]Download the Norton Removal Tool (SymNRT) to your Desktop. Once downloaded please close ALL open browsers, also save any work because this may require a restart.
---------- Download Disable/Remove Windows Messenger to the Desktop to remove Windows Messenger. Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups. Unzip the file on the Desktop. Open the MessengerDisable.exe and choose the bottom box - Uninstall Windows Messenger and click Apply. Exit out of MessengerDisable then delete the two files that were put on the Desktop. ---------- Open HijackThis and select Do a system scan only. Place a check mark next to the following entries: (if there) O20 - Winlogon Notify: mlJApNDw - mlJApNDw.dll (file missing) Important: Close all windows except for HijackThis and then click Fix checked. Exit HijackThis and run CCleaner. How is everything now?Everything works perfectly (to my knowledge). Thank you very much Set a New Restore Point to prevent possible reinfection from an old one Setting a new restore point AFTER cleaning your system will enable your computer to roll-back to a clean working state if needed.
Windows XP System Restore Guide or Windows Vista System Restore Guide . ---------- Use the Secunia Software Inspector to check for out of date software.
---------- Go to Microsoft Windows Update and get all critical updates. ---------- Here are some great FREE tools to help you keep from getting infected again. These tools use little or no resources so won't slow down your PC. Concerned about Browser Security? Consider using Mozilla Firefox 3.0 with Adblock Plus and NoScript To prevent unknown applications from being installed on your computer install WinPatrol 2008 * Using Winpatrol to protect your computer from malicious software I suggest using SiteAdvisor. SiteAdvisor rates sites on business practices and spam. Safety ratings from McAfee SiteAdvisor are based on automated safety tests of Web sites. SpywareBlaster - Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox. * Using SpywareBlaster to protect your computer from Spyware and Malware * If you don't know what ActiveX controls are, see here Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future. Also see Slow Computer? It May Not Be Malware for free cleaning/maintenance tools to help keep your computer running smooth. |
|