0

Hi
I have a Virus named Mal_Vundo-4 and cannot remove it.I have Trend Micro office scan that currently detects the Vundo,however it cannot remove it as it clearly states.I previously ran vundfix and that didn't detect it.

Any help is appreciated
Thanx in advance

2
Contributors
3
Replies
4
Views
9 Years
Discussion Span
Last Post by sittas87
0

Hey all
I've managed to solve the problem.For those having the same trojan (Mal_Vundo-4) or other Vundo trojan,I highly recommend the following.

First do a scan with the following program:Trend Micro Office scan that-find it @ http://www.trendmicro.com.
If the program cannot remove the virus wich it will tell you,then install a program called system clean witch is a DOS application that can also be found at the above site.
create and store it in a temp folder in the root of the drive you want to scan eg C.
do not run the DOS application yet because theres two more files needed to work in relation with the application.these files are named lpt239 and sspdaX_XXX (note I've replaced the sspdaX_XXX with the file sspda6_633)
The files is zip files and needs to be extracted in the same temp folder as the DOS application.

After the extraction run application and let it do its job.it takes several minutes but did the trick.I also did a registry cleaner after that just to ensure a good job.for that i used RegCure http://regcure.com/.

!!The X's in the second pattern file represent other caracters but I could find that file and replaced it with the above file.It does give a error upon the run of the DOS but it works fine if you click continue/scan

Good luck

0

I have downloaded the system cleaner from trendmicro but don't know where to get the other files needed to clean this. Any help?

0

I have downloaded the system cleaner from trendmicro but don't know where to get the other files needed to clean this. Any help?

Location of the files:
sspdaX_XXX(sspda6_634) -http://www.trendmicro.com/ftp/products/pattern/spyware/da6/sspda6_637.zip


lpt239
http://www.trendmicro.com/download/au/viruspattern.asp#viruspattern-cpr

Both files has been updated,but dont mind the difference in numbering codes eg lpt239 thats updated to lpt245

[Follow the links and you'll see see the files on the page-Good luck ]

This question has already been answered. Start a new discussion instead.
Have something to contribute to this discussion? Please be thoughtful, detailed and courteous, and be sure to adhere to our posting rules.