[Closed] TROJAN HOURSE VUNDO.J

yes

Please follow the instructions found here:

http://www.geekstogo.com/forum/Repair-Windows-XP-t138.html

Windows XP repair feature won't delete your data, installed programs, personal information, or settings. It just repairs the operating system

Once you do this, we can look at whatever else needs doing. We need to be able to get some diagnostic tools working on your machine,

You will need to install everything from Microsoft Update after this

If you have any questions about this procedure, please do not hesitate to ask.


Trevuren

got it to work ——————————————————————————– KASPERSKY ONLINE SCANNER 7 REPORT Tuesday, June 24, 2008 Operating System: Microsoft Windows XP Professional Service Pack 3 (build 2600) Kaspersky Online Scanner 7 version: 7.0.25.0 Program database last update: Tuesday, June 24, 2008 16:35:39 Records in database: 881324 ——————————————————————————– Scan settings: Scan using the following database: extended Scan archives: yes Scan mail databases: yes Scan area - My Computer: A:\ C:\ D:\ E:\ F:\ Scan statistics: Files scanned: 76976 Threat name: 4 Infected objects: 7 Suspicious objects: 1 Duration of the scan: 01:18:44 File name / Threat name / Threats count C:\Documents and Settings\Administrator\Desktop\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f 1 C:\Documents and Settings\Administrator\Desktop\SmitfraudFix.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f 1 C:\Documents and Settings\Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\zsc0euoh.default\Cache\63329BDCd01 Infected: not-a-virus:RiskTool.Win32.Reboot.f 1 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05840000.VBN Infected: Trojan-Dropper.Win32.Agent.son 1 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0ADC0000.VBN Infected: Trojan.Win32.Monderb.gen 1 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0ADC0001.VBN Infected: Trojan.Win32.Monderb.gen 1 C:\Documents and Settings\Kevin Fowler\Desktop\SmitfraudFix.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f 1 C:\Documents and Settings\Kevin Fowler\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst Suspicious: Trojan-Spy.HTML.Fraud.gen 1 The selected area was scanned.

First I need to know how you got Kaspersky to work. Thanks, Trevuren

i just rebooted and used ie instead of mozilla

Are you running these programs from an account with Administrator privileges?

Yes

1. Please go to Start -> Run -> type cmd and press Enter.

2. At the command prompt type sfc /scannow, making sure to put a space between the "c" and the slash, and then press Enter. This will run the System File Checker.

3. Follow the prompts, and insert your Windows installation CD if requested.

4. Then please REBOOT your computer.

trev…I did the scan now and nothing showed a problem or prompted for a disk

Try our your programs and Operating System functions and note if any of them either will not open correctly or are not working properly. Then post the list here if any are found. Please try and note any error messages displayed or as much detailed information as possible about the malfunction. This may require some heavy-duty detective work. Good Luck Trev

OK…where is that at

Try to use your Task Manager, access your Control Panel, Windows Explorer etc… Start all your Normal programs and see if they work…

Due to inactivity this topic will be closed. If you need help please start a new thread and post a new HJT log