Computer Help!!!!

[mredskins]

Ok lots of good stuff. Again thanks to all!

[CRedskinsRule]

Combofix looks pretty intensive. I have downloaded it for a just in case scenario, thanks TMC

here is a link to the instructions:A guide and tutorial on using ComboFix

[TheMalcolmConnection]

Originally Posted by CRedskinsRule

Combofix looks pretty intensive. I have downloaded it for a just in case scenario, thanks TMC

here is a link to the instructions:A guide and tutorial on using ComboFix

It's an intensive cleaning process but it's actually very easy to use.

[MTK]

I used ComboFix a few weeks back but I'm still getting warnings from Avira here and there. I can't tell if it's something being blocked internally or externally.

[TheMalcolmConnection]

Originally Posted by Mattyk

I used ComboFix a few weeks back but I'm still getting warnings from Avira here and there. I can't tell if it's something being blocked internally or externally.

Did you run Malwarebytes after? I find that while the .exe files that caused the initial problem aren't running, the remnants of junk are still there and either Malwarebytes or SUPERAntispyware will get the rest...

[MTK]

Yes I did run MWB after, I'll post the warning message next time it pops up

[budw38]

Trojan.Vundo Removal - Removing Help | Symantec ........... Disabling or enabling Windows XP System Restore .... PC Hell: What is the Bloodhound.Exploit.6 and How Do You Remove it. The links might not be exactly what you are dealing with , but might help going into safe mode and finding the virus , and disable or remove it . Looks like TMC has what you need , good luck .

[MTK]

Seems like Avira is blocking whatever remnants are left so it's not connecting to what it needs to in order to function, the warning messages are just annoying.

[TheMalcolmConnection]

Originally Posted by Mattyk

Seems like Avira is blocking whatever remnants are left so it's not connecting to what it needs to in order to function, the warning messages are just annoying.

That's really odd to me. It looks like it opened some backdoors for future viruses. I mean obviously it's blocking them but I would be concerned about that for the future. Try SUPERAntispyware and see how that goes...

[MTK]

Originally Posted by TheMalcolmConnection

That's really odd to me. It looks like it opened some backdoors for future viruses. I mean obviously it's blocking them but I would be concerned about that for the future. Try SUPERAntispyware and see how that goes...

Ran it and it only found 1 tracking cookie. I haven't gotten any warnings in a few days since my last full MWB scan so perhaps I'm in the clear. We'll see.

[tryfuhl]

Originally Posted by Mattyk

Seems like Avira is blocking whatever remnants are left so it's not connecting to what it needs to in order to function, the warning messages are just annoying.

I got vundo on my who gives a crap computer not too long back.. 6 months or so when the new strain was fresh.. I'm not sure if it was the only thing, but it was the major thing

interesting thing was that it was injecting iframes into all of my html, php, etc documents so if I opened up any web project that I had on there it'd be invisibly running the script from that iframe (which doesn't show).. so it would try to respawn itself after the virus itself was removed

If I deleted it out of a file I could save the code and by the time I re-opened the file it was already back in there, several times over...

ended up finding a program that'd search through files and change strings of text and did that through about 400 pages of stuff

[MTK]

Thanks I'll give it a try

[CRedskinsRule]

Did you try running it in safe mode.

[mredskins]

Actually I got it to run.

How do you get in safe mode for future reference?

[budw38]

Originally Posted by mredskins

Actually I got it to run.

How do you get in safe mode for future reference?

This should help you get into safe mode Starting your computer in Safe mode Trojan.Vundo Removal - Removing Help | Symantec . I would copy these instructions , or write them down before going into safe mode . Might find some info on Microsofts website ? Good luck .