Help! Vundo.gen281

[Guest ZLam]

I got an error 1058 message today and my automatic update is working since.

My Norman Antivirus program has detected virus name:

 

Trojan Vundo.gen281

Infected file c:\WINDOWS\system32\ddcBQgFV.dll

 

I wonder what I can do now? I'm currently on business trip in the State and

don't have any recovery CD for my laptop. This matter does affect the

performance of my laptop.

 

I tried to visit help site i.e. http://aumha.org but it doesn't let me

register and post up message by saying my email address is not correct.

 

I'm pretty stress out now. Anyone can help?

[Guest ZLam]

I got an error 1058 message today and my automatic update is NOT working

since.

My Norman Antivirus program has detected virus name:

 

Trojan Vundo.gen281

Infected file c:\WINDOWS\system32\ddcBQgFV.dll

 

I wonder what I can do now? I'm currently on business trip in the State and

don't have any recovery CD for my laptop. This matter does affect the

performance of my laptop.

 

I tried to visit help site i.e. http://aumha.org but it doesn't let me

register and post up message by saying my email address is not correct.

 

I'm pretty stress out now. Anyone can help?

[Guest David H. Lipman]

From: "ZLam" <ZLam@discussions.microsoft.com>

 

| I got an error 1058 message today and my automatic update is working since.

| My Norman Antivirus program has detected virus name:

 

| Trojan Vundo.gen281

| Infected file c:\WINDOWS\system32\ddcBQgFV.dll

 

| I wonder what I can do now? I'm currently on business trip in the State and

| don't have any recovery CD for my laptop. This matter does affect the

| performance of my laptop.

 

| I tried to visit help site i.e. http://aumha.org but it doesn't let me

| register and post up message by saying my email address is not correct.

 

| I'm pretty stress out now. Anyone can help?

 

 

 

Malwarebytes Anti-Malware

http://www.malwarebytes.org/mbam/program/mbam-setup.exe

 

--

Dave

http://www.claymania.com/removal-trojan-adware.html

Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[Guest kalyan]

hi

 

try the link&get back to me

 

http://download.norman.no/public/Norman_Vundo_Cleaner.exe

 

--

Warm Regards

Kalyan

 

 

 

"ZLam" <ZLam@discussions.microsoft.com> wrote in message

news:8401F16F-3A96-4605-9DD7-A4F6EC2B933E@microsoft.com...<span style="color:blue">

>I got an error 1058 message today and my automatic update is working since.

> My Norman Antivirus program has detected virus name:

>

> Trojan Vundo.gen281

> Infected file c:WINDOWSsystem32ddcBQgFV.dll

>

> I wonder what I can do now? I'm currently on business trip in the State

> and

> don't have any recovery CD for my laptop. This matter does affect the

> performance of my laptop.

>

> I tried to visit help site i.e. http://aumha.org but it doesn't let me

> register and post up message by saying my email address is not correct.

>

> I'm pretty stress out now. Anyone can help?

>

>

> </span>

[Guest Maurice N ~ MVP]

Hello Zlam,

 

Make sure you are putting in a true/ verifiable email address when registering on forum.

 

Help at malware removal forums: Read the topmost directions at the forum and Post your logs as required by the forum to one (and only one) of the following

 

http://spywarehammer.com/simplemachinesfor....php?board=10.0

http://www.bleepingcomputer.com/forums/forum22.html,

http://forum.malwareremoval.com/viewforum.php?f=11

http://forums.spywareinfo.com/index.php?showforum=18

http://www.spywarewarrior.com/viewforum.ph...c0ca7ab9210f7ae,

http://forums.subratam.org/index.php?showforum=7,

http://forums.spybot.info/forumdisplay.php?f=22

or other appropriate forums for expert analysis, not here.

 

Make very sure you read and follow the very topmost instructions at the forum you have selected.

Do NOT post your logs here.

--

Maurice Naggar

MS-MVP

-----

 

"ZLam" <ZLam@discussions.microsoft.com> wrote in message news:8401F16F-3A96-4605-9DD7-A4F6EC2B933E@microsoft.com...<span style="color:blue">

>I got an error 1058 message today and my automatic update is working since.

> My Norman Antivirus program has detected virus name:

>

> Trojan Vundo.gen281

> Infected file c:WINDOWSsystem32ddcBQgFV.dll

>

> I wonder what I can do now? I'm currently on business trip in the State and

> don't have any recovery CD for my laptop. This matter does affect the

> performance of my laptop.

>

> I tried to visit help site i.e. http://aumha.org but it doesn't let me

> register and post up message by saying my email address is not correct.

>

> I'm pretty stress out now. Anyone can help?</span>

[Guest Malke]

ZLam wrote:

<span style="color:blue">

> I got an error 1058 message today and my automatic update is NOT working

> since.

> My Norman Antivirus program has detected virus name:

>

> Trojan Vundo.gen281

> Infected file c:WINDOWSsystem32ddcBQgFV.dll

>

> I wonder what I can do now? I'm currently on business trip in the State

> and don't have any recovery CD for my laptop. This matter does affect the

> performance of my laptop.

>

> I tried to visit help site i.e. http://aumha.org but it doesn't let me

> register and post up message by saying my email address is not correct.

>

> I'm pretty stress out now. Anyone can help?</span>

 

From a practical standpoint (you traveling on business), there's isn't a

whole lot you can do. Make a visit to a local computer store and purchase a

small external hard drive and back up your data. If your laptop doesn't

have a special partition with the recovery image on it (most do), then call

the laptop mftr.'s tech support and have them express ship you the recovery

disks. Restore to factory condition.

 

The alternative would be to find a local computer professional to do all

this for you. Of course, I don't know where you are or what's available to

you. I don't recommend using a BigComputerStore/GeekSquad type of place.

Perhaps you have some business colleagues who can suggest someone.

 

Malke

--

MS-MVP

Elephant Boy Computers - Don't Panic!

FAQ - http://www.elephantboycomputers.com/#FAQ

[Guest ZLam]

Thanks Kalyan,

 

The Norman file doesn't seem to work and it couldn't scan anything out. Do

you have any other solution?

 

Regards,

Zenix

 

"kalyan" wrote:

<span style="color:blue">

> hi

>

> try the link&get back to me

>

> http://download.norman.no/public/Norman_Vundo_Cleaner.exe

>

> --

> Warm Regards

> Kalyan

>

>

>

> "ZLam" <ZLam@discussions.microsoft.com> wrote in message

> news:8401F16F-3A96-4605-9DD7-A4F6EC2B933E@microsoft.com...<span style="color:green">

> >I got an error 1058 message today and my automatic update is working since.

> > My Norman Antivirus program has detected virus name:

> >

> > Trojan Vundo.gen281

> > Infected file c:WINDOWSsystem32ddcBQgFV.dll

> >

> > I wonder what I can do now? I'm currently on business trip in the State

> > and

> > don't have any recovery CD for my laptop. This matter does affect the

> > performance of my laptop.

> >

> > I tried to visit help site i.e. http://aumha.org but it doesn't let me

> > register and post up message by saying my email address is not correct.

> >

> > I'm pretty stress out now. Anyone can help?

> >

> >

> > </span>

>

>

> </span>

[Guest What's in a Name?]

On Thu, 18 Sep 2008 10:16:01 -0400, ZLam <ZLam@discussions.microsoft.com>

wrote:

<span style="color:blue">

> Thanks Kalyan,

>

> The Norman file doesn't seem to work and it couldn't scan anything out.

> Do you have any other solution?</span>

 

Did you run the malwarebytes tool that David suggested? Here it is again.

http://www.malwarebytes.org/mbam/program/mbam-setup.exe

 

max

--

Virus Removal http://max.shplink.com/removal.html

Keep Clean http://max.shplink.com/keepingclean.html

Change nomail.afraid.org to gmail.com to reply by email.

nomail.afraid.org is setup for use in USENET by everyone

[Guest ZLam]

Yes I'm running the Malwarebytes' Anti Malware now. Is it a very powerful

tool? It already running for an hour now, might take another 30 to 50 mins to

go. Will update you guys asap! I will be staying in front of this whole day

until I fix it!!!!!

 

Thank you so much to you all.... feeling so warm to have people to save me

while I'm alone in the State!

 

"What's in a Name?" wrote:

<span style="color:blue">

> On Thu, 18 Sep 2008 10:16:01 -0400, ZLam <ZLam@discussions.microsoft.com>

> wrote:

> <span style="color:green">

> > Thanks Kalyan,

> >

> > The Norman file doesn't seem to work and it couldn't scan anything out.

> > Do you have any other solution?</span>

>

> Did you run the malwarebytes tool that David suggested? Here it is again.

> http://www.malwarebytes.org/mbam/program/mbam-setup.exe

>

> max

> --

> Virus Removal http://max.shplink.com/removal.html

> Keep Clean http://max.shplink.com/keepingclean.html

> Change nomail.afraid.org to gmail.com to reply by email.

> nomail.afraid.org is setup for use in USENET by everyone

> </span>

[Guest ZLam]

Hi guys,

 

I just finished the MBAM scan and get rid of the vundo, however, my system

goes a little bit crazy after that. Lots of error messages pop and all the

messages said Bad Image... what does it mean?

 

Zenix

 

"What's in a Name?" wrote:

<span style="color:blue">

> On Thu, 18 Sep 2008 10:16:01 -0400, ZLam <ZLam@discussions.microsoft.com>

> wrote:

> <span style="color:green">

> > Thanks Kalyan,

> >

> > The Norman file doesn't seem to work and it couldn't scan anything out.

> > Do you have any other solution?</span>

>

> Did you run the malwarebytes tool that David suggested? Here it is again.

> http://www.malwarebytes.org/mbam/program/mbam-setup.exe

>

> max

> --

> Virus Removal http://max.shplink.com/removal.html

> Keep Clean http://max.shplink.com/keepingclean.html

> Change nomail.afraid.org to gmail.com to reply by email.

> nomail.afraid.org is setup for use in USENET by everyone

> </span>

[Guest Maurice N ~ MVP]

MBAM is an exceptionally good tool for catching and removing the current prevalent malwares. However, you need to run other tools as well to see about any other remainders of other malware. No one single anti-malware tool is a capable of catching "everything".

Did you see my other reply to you ?

 

--

Maurice Naggar

MS-MVP

-----

 

 

"ZLam" <ZLam@discussions.microsoft.com> wrote in message news:4C01B676-6B34-4CA5-83DE-6AA329531BE5@microsoft.com...<span style="color:blue">

> Yes I'm running the Malwarebytes' Anti Malware now. Is it a very powerful

> tool? It already running for an hour now, might take another 30 to 50 mins to

> go. Will update you guys asap! I will be staying in front of this whole day

> until I fix it!!!!!

>

> Thank you so much to you all.... feeling so warm to have people to save me

> while I'm alone in the State!

> </span>

[Guest Maurice N ~ MVP]

Would you do yourself a big favor? Consider getting guided help for free at an anti-malware forum ! Malware cleanups are most often too complicated to deal with here.

 

Help at malware removal forums: Read the topmost directions at the forum and Post your logs (as required by the forum)

to one (and only one) of the following

 

http://spywarehammer.com/simplemachinesfor....php?board=10.0

http://www.bleepingcomputer.com/forums/forum22.html,

http://forum.malwareremoval.com/viewforum.php?f=11

http://forums.spywareinfo.com/index.php?showforum=18

http://www.spywarewarrior.com/viewforum.ph...c0ca7ab9210f7ae,

http://forums.subratam.org/index.php?showforum=7,

http://forums.spybot.info/forumdisplay.php?f=22

or other appropriate forums for expert analysis, not here.

 

Make very sure you read and follow the very topmost instructions at the forum you have selected.

Do NOT post your logs here.

 

--

Maurice Naggar

MS-MVP

-----

 

"ZLam" <ZLam@discussions.microsoft.com> wrote in message news:C969E476-DDBE-4483-8D7C-665598D144C0@microsoft.com...<span style="color:blue">

> Hi guys,

>

> I just finished the MBAM scan and get rid of the vundo, however, my system

> goes a little bit crazy after that. Lots of error messages pop and all the

> messages said Bad Image... what does it mean?

>

> Zenix</span>