This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Vundo.

1 min read

This thread's last reply is from January 17, 2009, 6:33 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

th3asiansensation
January 13, 2009, 11:54 PM UTC last edited January 17, 2009, 6:28 AM UTC (Edited to disable malicious links.)
I get random pop-ups from advertising sites and pop-ups with no content, just a blank white page. Also, I can't put my cpu to sleep, it just turns on after a minute or so. I can't download HijackThis, as the virus fragments the download file into two parts, so I don't have their log, but I do have a Norton log. Also, I can't turn on Windows' automatic updates. This is the link to the popup when I searched "Hijack This" on Google. 
hxxp://sagipsul.com/go/?cmp=vm_mg_juan&uid=070A4594E02D11DD8807168484CFFFFF&lid=hijack+this&url=www.google.com%2Fsearch%3Fq%3Dhijack+this%26ie%3Dutf-8%26oe%3Dutf-8%26aq%3Dt%26rls%3Dorg.mozilla%3Aen-US%3Aofficial%26client%3Dfirefox-a&guid=D48B79BD423D4166828FE0FC69D6286D&affid=168484&rid=zdez&cl=superjuan


Also, there's this frequent pop-up:
hxxp://82.98.235.113/dot.gif/?ver=112&cmp=profiling4&uid=070A4594E02D11DD8807168484CFFFFF&guid=D48B79BD423D4166828FE0FC69D6286D&affid=168484&rid=zdez&m=ish6&revid=9922&lid=suggestqueries.google.com%2Fcomplete%2Fsearch%3Foutput=firefox%26client=firefox%26hl=en-US%26q=HijackThis&uqs=101&s=0&c1=101&c2=0&uid_track=bd784ccf-cfeb-457a-9d7d-5a15fa3e435a&br=firefox


And this one (while searching "China population" on Google):
hxxp://droopsci.com/go/?cmp=vm_mg_juan&uid=070A4594E02D11DD8807168484CFFFFF&lid=china+population&url=www.google.com%2Fsearch%3Fq%3Dchina+population%26ie%3Dutf-8%26oe%3Dutf-8%26aq%3Dt%26rls%3Dorg.mozilla%3Aen-US%3Aofficial%26client%3Dfirefox-a&guid=D48B79BD423D4166828FE0FC69D6286D&affid=168484&rid=zdez&cl=superjuan
NonSuch
January 17, 2009, 6:33 AM UTC
We understand that you are having difficulty running certain programs, including HijackThis. However, in order for us to help you it is necessary that you provide us with a HijackThis log, and it is possible you may be able to trick the malware into letting you do this. First, download HijackThis to a clean computer, then rename it from HijackThis.exe to any other name you want, using an .exe extension, for example... YourLastName.exe. Once you have done that, burn it to a CD (preferable to using a flash drive that may easily become infected) then transfer the renamed file to the infected computer and run a scan, then start a new topic and include your HijackThis log.

Please follow the guideline at the link below to start a new topic and post your HijackThis log. If you are unable to create and post a HijackThis log, then your only option may be to reformat your computer and reinstall the operating system.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here, just be certain to rename HijackThis: >Guideline for posting your HijackThis log<