Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


It Started With Vundo

  • This topic is locked This topic is locked
2 replies to this topic

#1 Komyathy


  • Members
  • 4 posts
  • Location:New York
  • Local time:12:45 AM

Posted 23 July 2007 - 06:27 AM

I was hit with Vundo, and ran through the suggested fixes about five times - I ran cleanmgr, Ad-Aware, Spybot, VundoFix, McAfee Stinger, SdFix - and I have two antivirus programs currently running. EZTrust is my main run, and on a temporary basis I am using a trial copy of a-squared. Whenever I open Internet Explorer, I constantly have ads opening - they run the gamut of topics with a lot of them powered by Zedo and Web Buying Assistant. My daily EZTrust scan detects and deletes Web Buying Assistant almost daily, to no avail. BTW, Firefox doesn't seem affected, although when I open cnn.com the upper left quarter of my screen (actually slightly less than that) has a faint partilal ad for what appears to be something like expedia for travel or a search for a lawyer. Since the whole ad does not appear, I can't be sure. The latest virus that EZTrust is detecting is AbetearB. There was a similarly named one a few days ago. Another file that VundoFix deleted on its second pass was Windows\edyguajA.exe. This one came back also. Would a new copy of HijackThis log help somebody to solve my problem?

BC AdBot (Login to Remove)


#2 buddy215


  • Moderator
  • 13,313 posts
  • Gender:Male
  • Location:West Tennessee
  • Local time:12:45 AM

Posted 23 July 2007 - 06:41 AM

You are being helped by the Hijack This Team. They are waiting for your response.
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 tg1911


    Lord Spam Magnet

  • Members
  • 19,274 posts
  • Gender:Male
  • Location:SW Louisiana
  • Local time:11:45 PM

Posted 23 July 2007 - 06:53 AM


Since you have an open HJT log posted in the HijackThis Logs and Analysis forum, you shouldn't make any changes to your system.
Doing so, could change the results of the posted log, making it difficult to properly clean your system.

At this point, the HJT Team should be the only members that you take advice from, until they have verified your log as clean.

I'm closing this topic until you are cleared by the HJT Team.
If, after your log has been cleaned, you still need help, please PM a Moderator and we will re-open this topic.

If you have any questions, don't hesitate to send me a PM.
MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, VGA: ECS GeForce Black GTX 560, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users