Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

vundo, trojan


  • Please log in to reply

#1
Dildorf

Dildorf

    New Member

  • Member
  • Pip
  • 1 posts
Hi,

Im new to this site, refferred to by a friend whom you helped recently. I have tried many things to fix this including the vundofix software posted elsewhere on this site. I have exactly the symptoms described by the download page but with different "antivirus" software named; also I get seemingly random sites as alternative pop-ups in new tabs (including dating sites, news stations, and alternative seach engines that know what i typed into my preffered search engine)leading me to believe it was some type of Adware. I have deleted all temp files and emptied my cache but still fear for my info security.I mainly use firefox to surf but somehow firefox has been disabled and I am currently using IE: no add ons. I also read somewhere that I might have some infected sun java file, but no antivirus software detects this. I tried following the directory that norton gave for the infected files to delete manually, when doing this I got an error message saying the file did not exist. I even tried changing the file type in the file properties to read only and this did not work. I'm pretty stumped on this one, but atleast I'll learn something while trying to solve the problem.

Oh, the problem is on my laptop: Acer aspire 5100-5023, w/ windows vista. . . I can give more specific system capabilities if necessary.

Thanks
Dan

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Acer\Empowering Technology\eDSMSNfix.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\hpwuSchd.exe
C:\Windows\System32\hphmon05.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\program junk\iTunesHelper.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.c...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP