BleepingComputer.com: Vundo grb on a Mac Tiger OS

Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Vundo grb on a Mac Tiger OS I discovered I have this Vundo grb on my Intel Mac PC

#1 User is offline   kcsummer 

  • Forum Regular
  • PipPipPip
  • Find Topics
  • Group: Members
  • Posts: 345
  • Joined: 17-October 09
  • Gender:Female
  • Location:kansas city

  Posted 17 October 2009 - 11:00 AM

:wacko: So I don't know what to do for sure with it (Vundo grb) since it says its a PC based spybot but its using up memory but I know of no programs for Macs with this problem and I know Apple keeps saying they don't need such a program because Macs don't get stuff but I think they are starting to be affected and I figure they don't want to admit it.

Anyway, I made another post on the Security Log forum here and thought it was the right place but now I figure maybe I should have put it here, so I will repost here and hopefully somebody can give me a clue or two.

Thanks. :blink:

This post has been edited by kcsummer: 17 October 2009 - 11:02 AM

"People are okay taken two or three at a time.

Beyond that number they tend to choose up sides and wear armbands"
- George Carlin

#2 User is offline   kcsummer 

  • Forum Regular
  • PipPipPip
  • Find Topics
  • Group: Members
  • Posts: 345
  • Joined: 17-October 09
  • Gender:Female
  • Location:kansas city

Posted 17 October 2009 - 11:32 AM

:blink: I just got off the phone with Apple Support and they gave me the name of a program called Protect that I can download from their site and run free for 30 days and they said that should take care of it so I'm going to do that and see what happens.

I just went to Apple's website and typed in Protect and the program came up and I am downloading.

So, here goes, thanks. :wacko:
"People are okay taken two or three at a time.

Beyond that number they tend to choose up sides and wear armbands"
- George Carlin

#3 User is offline   Animal 

  • Bleepin' Animinion
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Site Admin
  • Posts: 17,988
  • Joined: 18-August 05
  • Gender:Male
  • Location:Location, Location

Posted 17 October 2009 - 12:10 PM

Thanks for letting us know you are working with Apple support.
The Internet is so big, so powerful and pointless that for some people it is a complete substitute for life.
Andrew Brown

Posted Image
A learning experience is one of those things that say, "You know that thing you just did? Don't do that." — Douglas Adams.
Why is the word abbreviation so long?
Follow BleepingComputer on: Facebook | Twitter | Google+

#4 User is offline   Twin B 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 90
  • Joined: 19-December 08
  • Gender:Male
  • Location:More Than a Mile High

Posted 17 October 2009 - 11:39 PM

Update your thread to let us know how it goes, OK?
For fun, I want to put my very large hands around the throat of just one someone who writes viruses, malware, etc., etc., etc.

#5 User is offline   buddy215 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 4,491
  • Joined: 14-April 06
  • Gender:Male
  • Location:West Tennessee

Posted 18 October 2009 - 09:07 PM

How did you identify the malware???
Could it be that popup told you that you were infected?
Saw this happen to other Mac users and the solution was to simply flush their browser cache.

#6 User is offline   kcsummer 

  • Forum Regular
  • PipPipPip
  • Find Topics
  • Group: Members
  • Posts: 345
  • Joined: 17-October 09
  • Gender:Female
  • Location:kansas city

  Posted 20 October 2009 - 01:06 PM

Thanks everyone for your suggestions.

How I knew I was infected, I just was running my systems monitor which I do from time to time and I noticed a file that had this name/number attached and it said it was for a pC-based mac which made it stand out. I typed the name of the file into google and it led me here where it confirmed my suspicion it was malware.

After I downloaded the free program from Apple web site, I could never get it to open successfully. I got an error code which I talked with Apple about and they said based on the code there was something wrong with the file and that they would get hold of the 3rd party publisher. In the meantime they suggested I drag it to the trash and I did and have kept an eye open for it to reappear but it hasn't so hopefully its gone.

That is what my instincts told me to do to begin with but I wanted to be sure I shouldn't do more and thats why I left my posts here and why I called Apple since I'm not up to speed on the current philosophy regarding macs and malware.

But thanks for your suggestions and interests. you have a cool/helpful website here, very impressive, thanks. I told my friends about you. :blink:
"People are okay taken two or three at a time.

Beyond that number they tend to choose up sides and wear armbands"
- George Carlin

#7 User is offline   kcsummer 

  • Forum Regular
  • PipPipPip
  • Find Topics
  • Group: Members
  • Posts: 345
  • Joined: 17-October 09
  • Gender:Female
  • Location:kansas city

Posted 20 October 2009 - 01:12 PM

Oh, Buddy, no it wasn't a case of Scareware, I never got any popup notice like that. I just noticed a strange file showing up on the system monitor program. Thanks.
"People are okay taken two or three at a time.

Beyond that number they tend to choose up sides and wear armbands"
- George Carlin

#8 User is offline   Buddyme2 

  • Senior Member
  • PipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 382
  • Joined: 23-August 06

Posted 22 October 2009 - 05:00 PM

May be a stupid question but how did a PC bug get installed and running on a Mac?
Can you show a screenshot of the system monitor with cnql1213.dnl listed?
I didn't find any info on cnql1213.dnl from my google search. I did find something about cnql1213.dll though which has to do with Windows but not OS X. Plus another on Canon drivers. Do you use any Canon printers/scanners with the Mac?

#9 User is offline   kcsummer 

  • Forum Regular
  • PipPipPip
  • Find Topics
  • Group: Members
  • Posts: 345
  • Joined: 17-October 09
  • Gender:Female
  • Location:kansas city

  Posted 31 October 2009 - 02:10 AM

View PostBuddyme2, on Oct 22 2009, 05:00 PM, said:

May be a stupid question but how did a PC bug get installed and running on a Mac?
Can you show a screenshot of the system monitor with cnql1213.dnl listed?
I didn't find any info on cnql1213.dnl from my google search. I did find something about cnql1213.dll though which has to do with Windows but not OS X. Plus another on Canon drivers. Do you use any Canon printers/scanners with the Mac?
Interesting you should mention that, as i do have a Canon scanner and I do think thats where it came from. However, I never downloaded anything from a website I got all the drivers and stuff from the diskette that came with the scanner which I purchased from Amazon.com and to the best of my knowledge thats the only place I got the software. Anyway, I think you have it right that is where it came from.

I can't give you a webshot coz I already erased it. But I feel safe in saying its a result of my Canon scanner because there was also a button control at the same time that went with my scanner.

So I guess thats mystery solved sort of. Thanks, sorry to be so late getting back. :wacko: :blink:
"People are okay taken two or three at a time.

Beyond that number they tend to choose up sides and wear armbands"
- George Carlin

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users