MBLisa Posted November 6, 2009 ID:154198 Share Posted November 6, 2009 Hi everyone,About 3 days ago my homepages in FF and IE were changed and my google search at the top right corner of FF was changed to something called Web Search. My computer is really slow and I get virtual memory low warnings. Well I immediately started googling for information. I came across two different spyware removal forums and as I was reading through everything, and one of the malware names caught my eye, Vundo. In that topic I noticed that it had a fix for it called Vundofix. Ok well right after that I ran Malwarebytes and sure enough it found Trojan.vundo. I was shocked, but also so excited that I actually had run across earlier a removal 'specifically' for this trojan. So like a dummy I told Malwarebytes to ignore it, and I ran back to that website and downloaded Vundofix and ran it. Well, it didn't even find it! So, here I sat, stuck with this thing on my computer and now MB couldn't find it because I told it to ignore it!Well, I went through the two forums and I did all the steps for self removal of malware. And there were alot, let me tell ya. Anyway, with my computer still slugglish and virtual memory warnings, I went back to MB and looked around in there and I found a tab labeled Ignore List. I went in and found something but it didn't have the Vundo name on it. Maybe it was different, I don't know. So I hit remove. So ~ now I'm wondering if hitting remove only just took it off the ignore list and now I still might have creepy malware still on my machine. Ok, so my question is, when you delete it from the Ignore List does it remove that particular malware or does it just remove it from the list?Thanks for taking the time to read my rant. And thanks in advance for your help. Link to post Share on other sites More sharing options...
Hardhead Posted November 6, 2009 ID:154213 Share Posted November 6, 2009 I'm not sure what OS you are running but you need to be sure that you have show hidden files showing in View/Folder Options.In Vista the file is located at C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware.You can safely delete ignore.dat and rescan with MBAM and the file will show up again for removal.I also suggest that you read this post here and post here afterwards. Link to post Share on other sites More sharing options...
MBLisa Posted November 6, 2009 Author ID:154234 Share Posted November 6, 2009 Thanks so much for the fast reply. I don't have Vista, I have Windows XP Home edition. Where would the .dat file be in XP? I'll read the other posts that you suggested. But I'll wait to hear from you as to where the file is for XP. Thanks again.I'm not sure what OS you are running but you need to be sure that you have show hidden files showing in View/Folder Options.In Vista the file is located at C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware.You can safely delete ignore.dat and rescan with MBAM and the file will show up again for removal.I also suggest that you read this post here and post here afterwards. Link to post Share on other sites More sharing options...
Hardhead Posted November 6, 2009 ID:154237 Share Posted November 6, 2009 Here you go...You will find it at the below location.Be sure that hidden files are showing and post back if you need help to show hidden filesC:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware Link to post Share on other sites More sharing options...
MBLisa Posted November 6, 2009 Author ID:154238 Share Posted November 6, 2009 I unhid files and folders. I followed the path. The only things that are in the Application Data folder are a folder called Microsoft and another folder called MSN6 and a desktop.ini. There is no Malwarebytes folder. What could be wrong?Here you go...You will find it at the below location.Be sure that hidden files are showing and post back if you need help to show hidden filesC:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware Link to post Share on other sites More sharing options...
Hardhead Posted November 6, 2009 ID:154239 Share Posted November 6, 2009 I unhid files and folders. I followed the path. The only things that are in the Application Data folder are a folder called Microsoft and another folder called MSN6 and a desktop.ini. There is no Malwarebytes folder. What could be wrong?You have to be logged in as admin.Look in All Users. Link to post Share on other sites More sharing options...
MBLisa Posted November 6, 2009 Author ID:154240 Share Posted November 6, 2009 Ok I'll switch to that one. I'll get right back to you, if you're going to be here for a little while.You have to be logged in as admin. Link to post Share on other sites More sharing options...
Hardhead Posted November 6, 2009 ID:154241 Share Posted November 6, 2009 You are looking in Administrator instead of C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware Link to post Share on other sites More sharing options...
MBLisa Posted November 6, 2009 Author ID:154243 Share Posted November 6, 2009 What does that mean?Am I not looking in that path now?I did look there before I saw your post, and the same two things are in there, nothing else.Where should I look for administrator?You are looking in Administrator instead of C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware Link to post Share on other sites More sharing options...
Hardhead Posted November 6, 2009 ID:154247 Share Posted November 6, 2009 What does that mean?Am I not looking in that path now?I did look there before I saw your post, and the same two things are in there, nothing else.Where should I look for administrator?Take a look at this pic please...Note that I have it in D:\ drive and yours will be in C:\. Link to post Share on other sites More sharing options...
Hardhead Posted November 6, 2009 ID:154249 Share Posted November 6, 2009 The ignore.dat file will be regenerated after you delete it and reboot. Link to post Share on other sites More sharing options...
MBLisa Posted November 6, 2009 Author ID:154250 Share Posted November 6, 2009 I followed the path exactly. I didn't accidentally slip into the Admin folder And this is what's in there: Take a look at this pic please...Note that I have it in D:\ drive and yours will be in C:\. Link to post Share on other sites More sharing options...
Hardhead Posted November 6, 2009 ID:154251 Share Posted November 6, 2009 Also be sure that you have hidden files setup this way please.Open Control Panel and click on Tools/Folder Options.Click apply and OK. Link to post Share on other sites More sharing options...
MBLisa Posted November 6, 2009 Author ID:154252 Share Posted November 6, 2009 Yep, I did that. Also be sure that you have hidden files setup this way please.Open Control Panel and click on Tools/Folder Options. Link to post Share on other sites More sharing options...
MBLisa Posted November 6, 2009 Author ID:154255 Share Posted November 6, 2009 SUCCESS! I found it. It was in the All Users.WINDOWS folder. I found it in there and deleted it. Now to run MB again....yea, I think I'll do that tomorrow. Off to bed.I shall return. I'll run MB tomorrow and see if it finds it. I will post a final post to end the thread. Thanks! Yep, I did that. Link to post Share on other sites More sharing options...
Hardhead Posted November 6, 2009 ID:154256 Share Posted November 6, 2009 Be sure to reboot please and then run new scan. Link to post Share on other sites More sharing options...
MBLisa Posted November 6, 2009 Author ID:154257 Share Posted November 6, 2009 Ok I will. I'll be back tomorrow to finish the thread.Be sure to reboot please and then run new scan. Link to post Share on other sites More sharing options...
Hardhead Posted November 6, 2009 ID:154258 Share Posted November 6, 2009 Ok I will. I'll be back tomorrow to finish the thread.Good work.. Please follow the directions here. Link to post Share on other sites More sharing options...
MBLisa Posted November 7, 2009 Author ID:154787 Share Posted November 7, 2009 Hi again Hardhead! I'm sorry I didn't get on here last night when I said I would. After I deleted the Ignore.dat out of the folder, the next morning I ran the Malwarebytes scan and low and behold it found it! There was one piece of Vundo in the registry. It cleaned it so I think I'm all set. I haven't been having any more problems. I've also been doing alot of other self cleaning processes (from the "geek" forums) on this computer so it's running alot better now.Thanks very much for sticking with me and helping me find that file to get rid of. I totally appreciate your help. It's more help than I've gotten from any of those other "geek help" forums!God bless,LisaGood work.. Please follow the directions here. Link to post Share on other sites More sharing options...
Hardhead Posted November 8, 2009 ID:154916 Share Posted November 8, 2009 My pleasure MBLisa.Great to hear everything is running better for you now.Nice work. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now