trojan Vundo & maybe related problems

  palinka 18:16 05 Mar 2009

My neighbour asked for help with “something strange on my computer”.
OS is Vista. She had installed Firefox (by accident) and apparently it was since then that she’d had strange pop-ups. From the description they sounded like soft-porno sites.
The only pop-ups I saw were “Winlogon notifiers” - 6 copies on the desktop, all identical, all relating to “!SASWinLogon”.
Deleted Firefox (because she found its Logo “threatening”!) and restored IE to the desktop.
Ran A-squared; C Cleaner , Super anti-spyware and Spybot – all of them new copies that I’d downloaded on my own system after I found that her already installed copy of Spybot was behaving oddly. these found only low-risk cookies.
Finally Ran malwarebytes anti-malware which found and deleted Trojan “Vundo”.
The pop-ups about Winlogon appear to have stopped.
Switched off Sys Restore and then on again.
As far as I can tell all is OK again – unless anyone can see something I’ve left out!

  User-1229748 18:28 05 Mar 2009

you seem to have it covered especially as the pop ups seem to be stopped,although another scan with malwarebytes wouldn't do any harm,to see if it gives you the all clear

  jimv7 18:31 05 Mar 2009

Run a deep scan in safe mode with malwarebytes.

  palinka 18:44 05 Mar 2009

thank you both.

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Honor 9 Lite review

How Social Media has Propelled Political Graphic Design and Art in the Last Decade

The best kids apps for iPhone & iPad 2018

HomePod d’Apple : date de sortie, prix et fiche technique