Infected - help please

[kathy99]

Chris:

Thanks for posting. I had this exact problem and used your fix of copying the executable file onto a flash drive. Worked like a charm. I ran MBAM, and it found the vundo trojan. I restarted and ran it again, and it again found several of the same trojans. This morning, it is still running slowly and acting infected. I think there are still traces of the trojan that are reproducing.

Please pass along more advice or tips.

Thanks,

Kathy

[kathy99]

Update for admin:

I ran MBAM again this morning, and it found the same vundo trojans as last night. I still can't access e-mail and am still getting the pop-ups. Why is Malwarebytes not eradicating all of this?

Kathy

[kathy99]

I tried the Microsoft malicious software removal tool, and the trojan deletes the executable file from it as well. I even tried running it from a CD, and it starts to run and then stops almost immediately.

How can I do a similar fix to the Malwarebytes executable file; i.e., rename the exe file and copy it back to the infected computer. I can't find the file (it is not in program files like MBAM was).

Someone please help.

[Blade81]

Hi Kathy,

Do these following steps if you still need help, please.

Download DDS and save it to your desktop from here or here or here.

Disable any script blocker, and then double click dds.scr to run the tool.

• When done, DDS will open two (2) logs:
  1. DDS.txt
     
  2. Attach.txt
     

  [*]Save both reports to your desktop. Post them back to your topic.

Download GMER here by clicking download exe -button and then saving it your desktop:

• Double-click .exe that you downloaded
  
• Click rootkit-tab and then scan.
  
• Don't check
  Show All
  box while scanning in progress!
  
• When scanning is ready, click Copy.
  
• This copies log to clipboard
  
• Post log in your reply.
  

[AdvancedSetup]

Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.