Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Vundo, Sagispul.com and ConHook


  • Please log in to reply

#1
JWHolt

JWHolt

    New Member

  • Member
  • Pip
  • 2 posts
Hello,

I'm running a WindowsXP computer that was last reformatted back in November 2008. I was using AVG Free as an antivirus program and AdAware 2008 as a Spyware program. Lately I've been having trouble with Firefox opening up windows sometimes to porn sites, sometimes to dating sites, some game sites and occasionally a blank screen with Sagispul.com in the address bar.

About a week back I got a notice pop up saying I have Virtumonde and various other Trojan Horse droppers/agents. I researched Virtumonde and found the VundoFix program. Which has turned up empty handed each time.

Since then I've been running virus scans nightly and each night I get anywhere from 3-11 infection notices of various Trojan Horses. I always delete them. They are usually moved to the Virus Vault and sometimes my computer is required to restart for this to take effect.

Lately the popups have become so annoying that I decided to try a new virus scanner. I downloaded Anvira AntiVir Personal Free and keep getting notices that I have:

TR/Vundo.gfb.2 at C:\WINDOWS\System32\deyhvm.dll
TR/Vundo.D.15 at C:\WINDOWS\System32\xxyvvtt.dll
TR/ConHook.D.18 (sorry failed to grab the place of infection for this one)

Every time I try to either Move to quarantine, delete or deny access it keeps popping back up. I actually just have the windows moved off screen for now.

I've looked through this site and found several tips and programs to use but I'm unsure exactly which ones will work for me. I don't know how to get you these logs everyone posts...

I appreciate any help that you can give me.
  • 0

Advertisements


#2
JWHolt

JWHolt

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts
Here are logs for SUPERAntiSpyware, Malwarebytes Anti-Malware and HiJackThis after following the steps listed here.

I forgot to mention that I have a Windows Security Alert in my right hand tray that shows up red with a white x. When I click on it it says Automatic Updates are off and I may be at risk.

No matter how many times I click to change it nothing happens. I don't know if this is virus related or something else.

Thanks again for any help!

Attached Files


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP