Trojan:Win32/Vundo.gen!X RRS feed

  • Question

  • I keep getting a OneCare window each time I boot which says

    "OneCare took the steps below to prevent the unwanted software from

    Program Name: Trojan:Win32/Vundo.gen!X
    Action: Quarantined"

    Then I get a window labelled "ssl" which reads

    "Error creating process <C:\Users\...
    ...AppData\Local\Temp\IXP000.TMP\sl0rev3a.exe>.  Reason:  Access is

    So, it looks like OneCare is preventing things from getting worse,
    but how do I get rid of these messages?

    Please help!

    Thank You.


    P.S.  "There was a problem with your submission.  We apologize for...
    ... please try again later."  Doesn't cut it!@#$
    Friday, September 5, 2008 10:05 PM


All replies

  • I think that what's happening is that OneCare is quarantining the current infection, but there's still something it is missing, causing it to reappear at boot.

    Please contact support to report this and for help with removal.
    How to reach support (FAQ) - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2

    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx  for details.  For international information, see your local subsidiary Support site.


    Tuesday, September 9, 2008 5:30 PM

    Hi there,


    I had more or less the same problem and microsoft has a fix for it.


    here you go:


    Microsoft® Windows® Malicious Software Removal Tool (KB890830)


    Install, scan and look what you can do from there on (mostly they present to scan your computer with decent anti virii software after the tool has finished).




    note on the side:

    Brief Description
    This tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. Microsoft will release an updated version of this tool on the second Tuesday of each month.
    Be sure to update it and scan from time to time after using windows live care or any other software, even mcafee on my O.S. is updated weekly and didn't find trojan.frauder, this tool did. Smile
    Hope this helps buddy !
    Kind regards,
    Saturday, October 11, 2008 2:28 AM