Trojan or what is this? - Tech Support Forums

homrok · May 9th, 2008, 01:33 AM

Internet is working perfectly, i can be on yahoo messenger, and most of the websites out there, but i can not use sites like google.com, altavista.com, hotmail.com and some others.
I can enter the google search page but when i try to search it tells me, "waiting for www.google.com" for ages.

Hotmail starts to load as i can see in the address bar but it stops at the white page with no test, altavista just as hotmail nothing but a white text, time to time i get a different website to pup up, usaly a porno one. ive tried to clear out all the temp files, and stuff i know what to do, but i must be missing something, i tried to ping www.google.com and it seam to work out perfect, can it be some malisious stuff that infested my computer? i tried to look for it and i managed to delete a few, but can the Hkey_local_host be a problem as i might have deleted the spyware but never managed to set the keys back? if so how could i do that?

Hexo

Keymaker · May 9th, 2008, 01:41 AM

HijackThis Analyzer & Tutorial

Try this: Start | Run | type:

Code:

cmd

type:

Code:

 ipconfig/flushdns

You are using IE, aren't you?

sharder8 · May 9th, 2008, 01:41 AM

I just ran across the same problem on a customers computer the other day.

It's called Vundo and it's a bitch!!

You can get the Vundo Fix Tool HERE and run it in safe mode. You may also need to run the "Combo Fix" as well to straighten everything out and finally the "WinSockXP Fix" as well.

Finally, if it's locked itself in, you can't delete it even in safe mode. I boot from a "BartCD" and delete it using the A43 Management program.

BTW, Google Tool Bar and Google Desk Top have been reported to download and install Vundo, which is actually an old time rootkit Trojan.

Harder

homrok · May 9th, 2008, 01:55 AM

Quote:

Originally Posted by Keymaker

HijackThis Analyzer & Tutorial

Try this: Start | Run | type:

Code:

cmd

type:

Code:

 ipconfig/flushdns

You are using IE, aren't you?

Quote:

Originally Posted by sharder8

I just ran across the same problem on a customers computer the other day.

It's called Vundo and it's a bitch!!

You can get the Vundo Fix Tool HERE and run it in safe mode. You may also need to run the "Combo Fix" as well to straighten everything out and finally the "WinSockXP Fix" as well.

Finally, if it's locked itself in, you can't delete it even in safe mode. I boot from a "BartCD" and delete it using the A43 Management program.

BTW, Google Tool Bar and Google Desk Top have been reported to download and install Vundo, which is actually an old time rootkit Trojan.

Harder

I am using Firefox, I never heard of Vundo, I am also kinda un experienced with those kind of computer issues, could you guide me true the rest of the help, ill get that tool you linked, but the things i have to do afterwords is hubbahubba to me.

Hexo

homrok · May 9th, 2008, 02:03 AM

Running the Vundo fix right now, seam to take some time, first i thought it was this Qhost trojan but it did not help me to run a scan and removal for that program.

Keymaker · May 9th, 2008, 02:30 AM

Quote:

Originally Posted by sharder8

BTW, Google Tool Bar and Google Desk Top have been reported to download and install Vundo, which is actually an old time rootkit Trojan.

Harder

That's exactly why I never run Google toolbar/integrated crap on my computer. Just more vectors for the virus..

sharder8 · May 9th, 2008, 02:32 AM

Quote:

Originally Posted by homrok

Running the Vundo fix right now, seam to take some time, first i thought it was this Qhost trojan but it did not help me to run a scan and removal for that program.

The Vundo Fix does take some time . . . but if it comes up clean . . . that's good news.

I see 6-8 Vundo infected computers per week here and it's gotten worse since the local TV stations and paper ran stories on it.

Let us know the results and we'll talk you through the next step.

Harder

sharder8 · May 9th, 2008, 02:35 AM

Quote:

Originally Posted by Keymaker

That's exactly why I never run Google toolbar/integrated crap on my computer. Just more vectors for the virus..

What's funny is that we always remove all toolbars at the shop from customers computers and explain why . . . only to see the computer back a couple days later with the tool bar re-installed and the computer infected again.

One of our best supporters is the Geek Squad . . . we see a lot of machines that they've worked on . . . and have to "fix" them for the customer.

Harder

homrok · May 9th, 2008, 03:30 AM

Quote:

Originally Posted by sharder8

The Vundo Fix does take some time . . . but if it comes up clean . . . that's good news.

I see 6-8 Vundo infected computers per week here and it's gotten worse since the local TV stations and paper ran stories on it.

Let us know the results and we'll talk you through the next step.

Harder

No,

It came up totaly clean, no infections

sharder8 · May 9th, 2008, 03:56 AM

Quote:

Originally Posted by homrok

No,

It came up totaly clean, no infections

That's good news!

What browser are you using?

If you're using IE, do as "Keymaker" suggested, then reset IE settings to default. Close and reopen IE and let us know what the result is.

Time for this Ol' man to hit the sack . . . will check in the morning to see if the problem is resolved.

Harder