Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Trojan vundo [CLOSED]

Started by uniqueharmony , Nov 17 2005 11:03 PM

  • This topic is locked This topic is locked

#1
uniqueharmony
Posted 17 November 2005 - 11:03 PM

uniqueharmony

    New Member

  • Member
  • Pip
  • 1 posts
My computer was infected with trojan vundo, I tried everything, plus norton anitvirus is not helping. I followed the instruction but it still says that I am infected with the virus : C:\windows\system32\vtsqq.dll. How do I get rid of this please help me.








+ Created on: 11:49:09 PM, 11/17/2005
+ Report-Checksum: 695A6D13

+ Scan result:

HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -> Spyware.PopularScreensavers : Cleaned with backup
HKU\S-1-5-21-1523423625-2288197877-450359829-1010\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D} -> Spyware.MyWebSearch : Cleaned with backup
HKU\S-1-5-21-1523423625-2288197877-450359829-1010\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA} -> Spyware.MyWebSearch : Cleaned with backup
HKU\S-1-5-21-1523423625-2288197877-450359829-1010\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1C78AB3F-A857-482E-80C0-3A1E5238A565} -> Spyware.iSearch : Cleaned with backup
HKU\S-1-5-21-1523423625-2288197877-450359829-1010\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -> Spyware.PopularScreensavers : Cleaned with backup
HKU\S-1-5-21-1523423625-2288197877-450359829-1010\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1E89F686-B78D-4C85-9EFC-3474516E3FE2} -> Dialer.Generic : Cleaned with backup
HKU\S-1-5-21-1523423625-2288197877-450359829-1010\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{36A59337-6EEF-40AE-94B1-ED443A0C4740} -> Spyware.BetterInternet : Cleaned with backup
HKU\S-1-5-21-1523423625-2288197877-450359829-1010\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959} -> Spyware.ISTBar : Cleaned with backup
HKU\S-1-5-21-1523423625-2288197877-450359829-1010\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{87067F04-DE4C-4688-BC3C-4FCF39D609E7} -> Spyware.WebSearch : Cleaned with backup
HKU\S-1-5-21-1523423625-2288197877-450359829-1010\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DAB941D8-BC94-4819-AB4D-5598C65FA3FE} -> Spyware.Begin2Search : Cleaned with backup
HKU\S-1-5-21-1523423625-2288197877-450359829-1010\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DDFFA75A-E81D-4454-89FC-B9FD0631E726} -> Spyware.VX2 : Cleaned with backup
HKU\S-1-5-21-1523423625-2288197877-450359829-1010\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E0CE16CB-741C-4B24-8D04-A817856E07F4} -> Spyware.Roimoi : Cleaned with backup
HKU\S-1-5-21-1523423625-2288197877-450359829-1010\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E8EDB60C-951E-4130-93DC-FAF1AD25F8E7} -> Spyware.MoneyTree : Cleaned with backup
HKU\S-1-5-21-1523423625-2288197877-450359829-1010\Software\WebSiteViewer -> Dialer.Generic : Cleaned with backup
HKU\S-1-5-21-1523423625-2288197877-450359829-1010\Software\WebSiteViewer\Settings -> Dialer.Generic : Cleaned with backup
C:\Documents and Settings\louise\Cookies\louise@247realmedia[1].txt -> Spyware.Cookie.247realmedia : Cleaned with backup
C:\Documents and Settings\louise\Cookies\[email protected][2].txt -> Spyware.Cookie.Falkag : Cleaned with backup
C:\Documents and Settings\louise\Cookies\louise@atdmt[2].txt -> Spyware.Cookie.Atdmt : Cleaned with backup
C:\Documents and Settings\louise\Cookies\louise@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
C:\Documents and Settings\louise\Cookies\[email protected][2].txt -> Spyware.Cookie.Falkag : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\Cookies\nique@2o7[1].txt -> Spyware.Cookie.2o7 : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\Cookies\nique@atdmt[1].txt -> Spyware.Cookie.Atdmt : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\Cookies\nique@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\Cookies\[email protected][1].txt -> Spyware.Cookie.Overture : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\Cookies\[email protected][1].txt -> Spyware.Cookie.Liveperson : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\Cookies\nique@statcounter[1].txt -> Spyware.Cookie.Statcounter : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\Local Settings\Temporary Internet Files\Content.IE5\KTIVOPEJ\mm[2].js -> Spyware.Chitika : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\Local Settings\Temporary Internet Files\Content.IE5\KTIVOPEJ\mm[3].js -> Spyware.Chitika : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\nique@advertising[2].txt -> Spyware.Cookie.Advertising : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\nique@atdmt[2].txt -> Spyware.Cookie.Atdmt : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\nique@bluestreak[2].txt -> Spyware.Cookie.Bluestreak : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\[email protected][1].txt -> Spyware.Cookie.Sextracker : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\[email protected][2].txt -> Spyware.Cookie.Sextracker : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\[email protected][1].txt -> Spyware.Cookie.Sextracker : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\[email protected][1].txt -> Spyware.Cookie.Sextracker : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\[email protected][1].txt -> Spyware.Cookie.Sextracker : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\[email protected][1].txt -> Spyware.Cookie.Sextracker : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\[email protected][2].txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\[email protected][2].txt -> Spyware.Cookie.Clickzs : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\[email protected][1].txt -> Spyware.Cookie.Clickzs : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\[email protected][1].txt -> Spyware.Cookie.Clickzs : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\[email protected][2].txt -> Spyware.Cookie.Clickzs : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\nique@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\[email protected][2].txt -> Spyware.Cookie.Hitbox : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\nique@hitbox[2].txt -> Spyware.Cookie.Hitbox : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\[email protected][1].txt -> Spyware.Cookie.Masterstats : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\nique@paycounter[1].txt -> Spyware.Cookie.Paycounter : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\nique@questionmarket[1].txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\[email protected][1].txt -> Spyware.Cookie.Advertising : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\[email protected][1].txt -> Spyware.Cookie.Liveperson : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\nique@sexlist[2].txt -> Spyware.Cookie.Sexlist : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\nique@sextracker[1].txt -> Spyware.Cookie.Sextracker : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\nique@statcounter[1].txt -> Spyware.Cookie.Statcounter : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\nique@trafficmp[2].txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
C:\Documents and Settings\nique.YOUR-4F1261A8E5\My Documents\Nique\Local Settings\Temp\Cookies\nique@xxxcounter[1].txt -> Spyware.Cookie.Xxxcounter : Cleaned with backup
C:\Documents and Settings\sleepy.YOUR-4F1261A8E5\Cookies\sleepy@atdmt[1].txt -> Spyware.Cookie.Atdmt : Cleaned with backup
C:\Documents and Settings\sleepy.YOUR-4F1261A8E5\Cookies\sleepy@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
C:\Program Files\WildTangent\Components\SystemConfig0100.dll -> Spyware.WinAD : Cleaned with backup
C:\WINDOWS\wt\wtupdates\Webd\4.1.1\files\wtvh.dll -> Spyware.WildTangent : Cleaned with backup
C:\WINDOWS\wt\wtvh.dll -> Spyware.WildTangent : Cleaned with backup


::Report End
  • 0

Advertisements

#2
OwNt
Posted 19 November 2005 - 04:20 AM

OwNt

    Malware Expert

  • Retired Staff
  • 7,457 posts
Hello, uniqueharmony.

Download and run the following HijackThis autoinstall program from Here . Please choose the default location of C:\Program Files\ as the destination. HJT needs to be in its own folder so that the program itself isn't deleted by accident

Run HijackThis

Click SCAN and SAVE LOG. (a notepad window will open with the log in it when you click Save Log) (Ctrl-A to'select all', Ctrl-C to 'copy')

POST the log into this thread using 'Add Reply' (Ctrl-V to 'paste')
  • 0

#3
OwNt
Posted 27 November 2005 - 01:43 AM

OwNt

    Malware Expert

  • Retired Staff
  • 7,457 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP