Anti-spy wear

Anti-spy wear

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Anti-spy wear millbrookgirl 05-31-2007
---> Re: Anti-spy wear David H. Lipman05-31-2007
Posted by Malke on June 2, 2007, 10:46 am
If you were  Registered and logged in, you could reply and use other advanced thread options
millbrookgirl wrote:
> Wow, that was a lot and I swear I could have been reading greek. Each year I
> renew the Norton stuff.........I know I have my firewall up....let's see, the
> Norton Alert that comes up says it's from windows/addins/tuilabs.dll and the
> virus name is Trojan.Vundo..........The message about the anti-spyware says
> that the MSN connection center did not detect an active
> antisywareprogam.............when you said that MSN has such programs for
> free, how do you go about getting them or downloading them?

To remove Vundo infections:

Do the preparatory work here:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with either Sysclean or Multi_AV as described in the
link above.

You may need to do:
http://www.elephantboycomputers.com/page2.html#Winfixer

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the link above (not here, please).

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigStoreUSA). Please be aware that not all local shops are skilled at
removing malware and even if they are, your computer may be so infested
that Windows will need to be clean-installed. Have all your data backed
up before you take the machine into a shop.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Posted by David H. Lipman on June 2, 2007, 11:18 am
If you were  Registered and logged in, you could reply and use other advanced thread options

| Wow, that was a lot and I swear I could have been reading greek. Each year I
| renew the Norton stuff.........I know I have my firewall up....let's see, the
| Norton Alert that comes up says it's from windows/addins/tuilabs.dll and the
| virus name is Trojan.Vundo..........The message about the anti-spyware says
| that the MSN connection center did not detect an active
| antisywareprogam.............when you said that MSN has such programs for
| free, how do you go about getting them or downloading them?

The Vundo is a Trojan, not a virus.



Two phase answer...

Perform Part 1 then perform Part 2

It is suggested that you execute each tool in Normal Mode then in Safe Mode.


If you are using any version of Sun Java that is prior to JRE Version 6.0,
then you are strongly urged to remove any/all versions.
There are numerous vulnerabilities in them and they are actively being exploited.

It is highly suggested that you update to the latest version which is Sun Java
JRE/JSE
Version 6.0 update 1 (jre 6u1)

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version.

Such as...
C:\Program Files\Java\jre1.6.0_01

http://java.sun.com/javase/downloads/index.jsp
http://www.java.com/en/download/manual.jsp

FYI:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102557-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102622-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102729-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102732-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102760-1




Part 1
------------
Download Adware-Virtumundo Removal Tool --
http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

Information on the Adware-Virtumundo Removal Tool:
http://forums.mcafeehelp.com/viewtopic.php?t=57049

Part 2
------------

Download Atribune's VUNDOFIX.EXE
http://www.atribune.org/ccount/click.php?id=4

Save VUNDOFIX.EXE to "C:\" ( C:\VUNDOFIX.EXE ) and execute it from there.



* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by Gerald309 on June 2, 2007, 2:22 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
On Jun 1, 11:08 pm, millbrookgirl
> Wow, that was a lot and I swear I could have been reading greek. Each year I
> renew the Norton stuff.........I know I have my firewall up....let's see, the
> Norton Alert that comes up says it's from windows/addins/tuilabs.dll and the
> virus name is Trojan.Vundo..........The message about the anti-spyware says
> that the MSN connection center did not detect an active
> antisywareprogam.............when you said that MSN has such programs for
> free, how do you go about getting them or downloading them?
> --
> Thanks for your help!

=====================================/.
hello again... Just up front - Norotn got really really weird in the
past 2 years. They used to have one of the best names in Antivirus.
They changed over to creating "suites" which are like the 3-fold
package of firewall, antivirus, antispyware. This got really trendy
world-wide with many companies really messing things up in antispyware
land - and this is because they all purchased really second rate
antispyware company softwares and renamed them as their suite. It has
been generally always promoted to NOT


Posted by Gerald309 on June 2, 2007, 2:59 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> On Jun 1, 11:08 pm, millbrookgirl
>
> > Wow, that was a lot and I swear I could have been reading greek. Each year I
> > renew the Norton stuff.........I know I have my firewall up....let's see, the
> > Norton Alert that comes up says it's from windows/addins/tuilabs.dll and the
> > virus name is Trojan.Vundo..........The message about the anti-spyware says
> > that the MSN connection center did not detect an active
> > antisywareprogam.............when you said that MSN has such programs for
> > free, how do you go about getting them or downloading them?
> > --
> > Thanks for your help!
>
> =====================================/.
> hello again... Just up front - Norotn got really really weird in the
> past 2 years. They used to have one of the best names in Antivirus.
> They changed over to creating "suites" which are like the 3-fold
> package of firewall, antivirus, antispyware. This got really trendy
> world-wide with many companies really messing things up in antispyware
> land - and this is because they all purchased really second rate
> antispyware company softwares and renamed them as their suite. It has
> been generally always promoted to NOT

{{{sorry....miscued the reply to early..... to finish}}}}
.... It has been generally always promoted to NOT purchase a security
suite - to bust them up and one product from one company and another
product from another company. This is also because if one of the 3
gets hit by industrial malware then it goes generally that the whola
security package is rendered worthless until they fix things.

Open MSN Browser.... Click the Security Shield up top - blue and white
shield. The drop down menu will show "Virus Guard" and 'Firewall" and
"Antispyware". If you wish to install the McAfee Personal Firewall
free or the McAfee Antivirus free or Webroot Spysweeper free - this is
where you do it. Click which one you want and you will automatically
be taken through the installation process. Done in less than 5
minutes. There is nor registration or anything at all - it is
automatic because you are an MSN Customer. You can write down any
License Number on a text file and save it to My Documents for
reference.

About the infection.... Trojan.Vundo
Apparently the full pop up message is not appearing. Usually one of
two things is occurring. One it is simply asking you "Do You Wish To
Permanently Delete Trojan.Vundo?".... and of course you click yes
because it is presenting you with a known threat that is very
dangerous and you will want that permanently deleted. Number tow, it
could be attempting to tell you that it cannot remove this threat
until you reboot into Safe Mode which is the only way to remove it.

.... Let's continue this at my groups if you will.... I do not want to
fight past other idiot responses that often happen here and then many
trolls will show up as well. I moderate my groups against this. For
instance you have Norton which has been known as one of the world's
best to remove a simple trojan here and you are getting instructions
to use independent removal utilities. This is insulting and absurd
especially to someone with quality protection.

Generally a security suite advertises to buy their full package is a
lot of times these type of messages. MSN is not intrusive like that to
interrupt a person with security software notifications about what
they have and don't have. To be getting that message you must have
installed one of the free McAfee programs - their Firewall ? MSN does
notr continually harass their customers with these type messages. If
you use their free package it will now determine what security
software you have - like here Norotn - so it will not download the
free McAfee antivirus. However, if you installed the McAfee Firewall
it may suggest once or twice to add on Webroot free. If it continually
gives some pop up - you may want to check out exactly what is going
on. This is not how MSN operates. In other words if someone signed up
for MSN right now they will NEVER get any message about what security
software they have or don't have. You have something else going on
here and there has never been any break in or phony fake spyware
messages with MSN from fakes like SpyAxe or SpyFalcon or SpywareQuake
and so on (these give fake security messages saying you are infected
and need to download their program now).
That has never occurred at MSN.com.

I really question what messages you are getting from "MSN Connection
Center"... this would NOT come from there. You may be confused as to
what you are observing. The MSN Connection Mananger does not give
messages about software - only about any temporary connection problem
to the internet.

In fact I have never seen this type message
"MSN connection center did not detect an active antisywareprogam"

If you need further help with the trojan removal - please join one of
my groups:


JOIN HERE FOR REMOVAL HELP:
BlueCollarPC.Net Website Group
http://www.bluecollarpc.net/joingroup.html
AntiSpyGroup
http://tech.groups.yahoo.com/group/AntiSpyGroup/
SpyForum
http://groups.google.com/group/SpyForum


Similar ThreadsPosted
Removing Delux Communications Spy Wear February 4, 2008, 8:38 pm
Re: Beta1 antispy - no pm settings June 27, 2005, 7:29 pm
Re: Beta1 antispy - no pm settings June 27, 2005, 8:56 pm
Re: Beta1 antispy - no pm settings June 28, 2005, 5:09 am
Best Malware Remover (Antispy/Antivirus) August 25, 2008, 4:57 pm

The site map in XML format XML site map

Contact Us | Privacy Policy