Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Trojan:Win32/Vundo.gen!X RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote
    I keep getting a OneCare window each time I boot which says

    "OneCare took the steps below to prevent the unwanted software from
    running.

    Program Name: Trojan:Win32/Vundo.gen!X
    Action: Quarantined"

    Then I get a window labelled "ssl" which reads

    "Error creating process <C:\Users\...
    ...AppData\Local\Temp\IXP000.TMP\sl0rev3a.exe>.  Reason:  Access is
    denied."

    So, it looks like OneCare is preventing things from getting worse,
    but how do I get rid of these messages?

    Please help!

    Thank You.

    "Schminux"


    P.S.  "There was a problem with your submission.  We apologize for...
    ... please try again later."  Doesn't cut it!@#$
    Friday, September 5, 2008 10:05 PM

Answers

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    I think that what's happening is that OneCare is quarantining the current infection, but there's still something it is missing, causing it to reappear at boot.

    Please contact support to report this and for help with removal.
    How to reach support (FAQ) - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2



    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx  for details.  For international information, see your local subsidiary Support site.

    -steve

    Tuesday, September 9, 2008 5:30 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

     

    Hi there,

     

    I had more or less the same problem and microsoft has a fix for it.

     

    here you go:

     

    Microsoft® Windows® Malicious Software Removal Tool (KB890830)

     

    Install, scan and look what you can do from there on (mostly they present to scan your computer with decent anti virii software after the tool has finished).

     

    http://www.microsoft.com/downloads/details.aspx?familyid=ad724ae0-e72d-4f54-9ab3-75b8eb148356&displaylang=en

     

    note on the side:

    Brief Description
    This tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. Microsoft will release an updated version of this tool on the second Tuesday of each month.
     
    Be sure to update it and scan from time to time after using windows live care or any other software, even mcafee on my O.S. is updated weekly and didn't find trojan.frauder, this tool did. Smile
     
    Hope this helps buddy !
     
    Kind regards,
     
    Gunther.
    Saturday, October 11, 2008 2:28 AM