Vundo

Discussion in 'Virus Information' started by Mhaxx, Sep 23, 2008.

  1. Mhaxx

    Mhaxx Guest

    I'm afraid to have trojan Vundo: how to be sure to have it?

    I've just launched Spybot and NOD32 and they haven't detected anything.

    Please, tell me!

    Mhaxx


    P.S. maybe you need the HiJackThis log?
     
    Mhaxx, Sep 23, 2008
    #1
    1. Advertisements

  2. Mhaxx

    pcdevelop Guest

    How do you know that you are infected exactly by Vundo?
    Try Quick Scan using OneClick Spyware Expert -
    http://privacy-care.com/bin/SpywareExpertInstall.exe
     
    pcdevelop, Sep 23, 2008
    #2
    1. Advertisements

  3. From: "Mhaxx" <>

    | I'm afraid to have trojan Vundo: how to be sure to have it?

    | I've just launched Spybot and NOD32 and they haven't detected anything.

    | Please, tell me!

    | Mhaxx


    | P.S. maybe you need the HiJackThis log?


    Please do NOT post a HJT log here.

    However, plaese elaborate on why you believe you have a Vundo Trojan.
     
    David H. Lipman, Sep 23, 2008
    #3
  4. Mhaxx

    Max Wachtel Guest

    * Mhaxx, after much thought, came up with this jewel:
    You should have cross-posted this-now you have to chase all the
    different answers you received.
     
    Max Wachtel, Sep 23, 2008
    #4
  5. Mhaxx

    Mhaxx Guest

    How do you know that you are infected exactly by Vundo?

    It's a long story.. :)

    Anyway I've launched an exe file some days ago and then lost the PC. Spybot
    told me it found virtumonde.dll, etc...
    Ok, thanks.

    Mhaxx
     
    Mhaxx, Sep 23, 2008
    #5
  6. Mhaxx

    jen Guest

    This domain(check it out) and poster appears very dodgy!
    I would *not* click or go there...

    -jen
     
    jen, Sep 23, 2008
    #6
  7. From: "jen" <>


    | This domain(check it out) and poster appears very dodgy!
    | I would *not* click or go there...

    | -jen


    whois -h whois.estdomains.com privacy-care.com ...
    Registration Service Provided By: YOUR WEB POINT - E-GOLD DOMAIN REGISTRATIONS
    Contact: +7.9016156086
    Website: hxxp://www.yourwebpoint.com

    Domain Name: PRIVACY-CARE.COM

    Registrant:
    PricacyCare Lab.
    George ()
    Rewsen
    Hazard
    Kentucky,41701
    US
    Tel. +1.80951246932

    Creation Date: 17-May-2008
    Expiration Date: 17-May-2009
     
    David H. Lipman, Sep 23, 2008
    #7
  8. Mhaxx

    Peter Foldes Guest

    LOL. Another alias. pcdevelop=pcbutts
     
    Peter Foldes, Sep 23, 2008
    #8
  9. Mhaxx

    ~BD~ Guest

    LOL. Another alias. pcdevelop=pcbutts

    --
    Peter

    <snip>

    Are you sure it's not BoaterDave, Peter?

    --
     
    ~BD~, Sep 23, 2008
    #9
  10. Mhaxx

    Peter Foldes Guest

    He( BD) would not be smart enough to do that Dave
     
    Peter Foldes, Sep 24, 2008
    #10
  11. Mhaxx

    jen Guest

    Ummm... I think not. Not unless he/she/it has moved (or been exiled)
    to Ukraine. lol

    -jen

    LOL. Another alias. pcdevelop=pcbutts
     
    jen, Sep 24, 2008
    #11
  12. From: "Peter Foldes" <>

    | LOL. Another alias. pcdevelop=pcbutts

    | --
    | Peter

    Phunnt but no...

    Jen brought up an issue that is suspicious.

    First, the poster...
    "pcdevelop" <>
    NNTP-Posting-Host: pool-225.imu.kiev.ua 194.140.237.225

    Second, ESTDomains involvement with Rogues.

    Third, compare with the Whois record which shows Hazard Kentucky and the bogus phone
    number and the above email address.

    This bears futher investigation.
     
    David H. Lipman, Sep 24, 2008
    #12
  13. Mhaxx

    ~BD~ Guest

    I'm just kidding, y'know... <g> You can't be responsible for
    other people's paranoia, after all.
     
    ~BD~, Sep 24, 2008
    #13
  14. Mhaxx

    jen Guest

    Have you checked out the SpywareExpertInstall.exe that was posted yet?

    -jen
     
    jen, Sep 24, 2008
    #14
  15. From: "jen" <>


    | Have you checked out the SpywareExpertInstall.exe that was posted yet?

    | -jen

    Of course, when it was first posted there was 1 heuristic on VT on the Inno Setup.
    Today, no hits on VT.

    Further examination is forthcoming...
     
    David H. Lipman, Sep 24, 2008
    #15
  16. Mhaxx

    jen Guest

    Good... Let us know the results :)

    -jen
     
    jen, Sep 24, 2008
    #16
  17. Mhaxx

    Peter Foldes Guest

    LOL.

    --
    Peter

    Please Reply to Newsgroup for the benefit of others
    Requests for assistance by email can not and will not be acknowledged.

     
    Peter Foldes, Sep 24, 2008
    #17
  18. Mhaxx

    Peter Foldes Guest

    Dave

    I am not the one that will keep things inside

    I was the tester and you fell for it hook line and sinker. Now we know for sure.

    You sure are not very high on the IQ

    --
    Peter

    Please Reply to Newsgroup for the benefit of others
    Requests for assistance by email can not and will not be acknowledged.

     
    Peter Foldes, Sep 24, 2008
    #18
  19. Something tells me that as*holes like you don't know what you are talking
    about, you think you do but you don't. Please visit
    http://pcbutts1.com/downloads/fu.htm you might learn more about yourself.

    --
    Ignore any posts made by the Stalker Leythos, he's still in love with me.
    He started stalking me after I spurned his advances towards me.
    He said he would stop Stalking me If I stopped mentioning his name.
    As you can see that does not work. He is a sick obsessive STALKER.





    LOL. Another alias. pcdevelop=pcbutts
     
    The Real Truth MVP, Sep 24, 2008
    #19
  20. Mhaxx

    ~BD~ Guest

    Maybe you should look here, Peter - http://pqlr.org/bbs/viewtopic.php?t=1171

    Things are not always as they seem - you know that!

    Dave

    --
    Dave

    I am not the one that will keep things inside

    I was the tester and you fell for it hook line and sinker. Now we know for sure.

    You sure are not very high on the IQ

    --
    Peter

    Please Reply to Newsgroup for the benefit of others
    Requests for assistance by email can not and will not be acknowledged.

     
    ~BD~, Sep 24, 2008
    #20
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.