Answered by:
off topic: Vundo spyware! please help!

Question
-
hey guys am ragav from india...until day before my comp was performing well. suddenly yesterday when i logged on to XP i got a message in a dialogue box saying "Warning! Potential Spyware Operation! Your computer is making unauthorised copies of your system and internet files. Run full scan now to prevent unauthorised access to your files! click here to download spyware remover ... YES/NO".
i knew there was sumtin wrong so clicked no. then i found this weird rectangle on my ssytem tray telling me "your computer is infected". i jus wanted to know wat it was and when clicked on it the internet explorer page went to WinAntispyware page. immediately i closed it and searched google and searched for it and understood that this is a spyware called VUNDO.
i searched a few forums and tried the Vundofix and Vundobegone programs but in vain. they scan my comp but say nothing is found. i downloaded windows defender and scanned the comp too but of no avail.
other info/changes on my comp:
1. my internet explorer's home page has been changed to google.com automatically and when i click on internet properties i get a message saying "this operation has been cancelled due to restrictions placed on this computer. please contact the system administrator".
2. when i try to access control panel it says the same "this operation has been cancelled due to restrictions placed on this computer. please contact the system administrator".
please someone help me!Saturday, August 18, 2007 3:15 AM
Answers
-
If you are using Windows Live Onecare please go to this site for immediate assistance
http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=1183038&SiteID=2
then if you are not using WLOC go to this site, it is a General Virus/Spyware/Malware site
another option is going here on this site go to Protect Your PC under Security Section and post in:
Saturday, August 18, 2007 7:09 AM
All replies
-
If you are using Windows Live Onecare please go to this site for immediate assistance
http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=1183038&SiteID=2
then if you are not using WLOC go to this site, it is a General Virus/Spyware/Malware site
another option is going here on this site go to Protect Your PC under Security Section and post in:
Saturday, August 18, 2007 7:09 AM -
hey guys am totally free of infections now. all thanks to milo. this gentleman actually replied all my mails and helped me through. microsoft team rocks! hats off!
ok so this is what he did he asked me to download a file and run it! simple aint it! thats it am cured now!
Sunday, August 19, 2007 1:18 PM -
As per review of those logs you sent that led the way to the proper identification and removal of the infection - Just next time be careful what you click on over the web, esp with videos and games sites
And thanks for choosing Microsoft
Sunday, August 19, 2007 1:52 PM -
Hi,
I have Live OneCare but it appears that WinAntiSpyware (the spyware itself) is blocking OneCare. I think I restored WinAntiSpyware in a system restore. (something for the Microsoft Suggestion Box; remind us to erase old restore points after scanning and finding a bug.)
OneCare doesn't show up anywahere in my computer now. If I go to download it (re-re-download) I get the message that it is already installed. Howver I can't find it to run it. Previously it did find and eliminate WinAntiSpyware.
Anyone have a suggestion how to get to OneCare to run it?
Thanks,
PT
Tuesday, September 4, 2007 7:59 PM -
Please post this inquiry of WLOC not appearing in the main WLOC section for installation
http://forums.microsoft.com/WindowsOneCare/ShowForum.aspx?ForumID=1252&SiteID=2
And for the winantispyware issue in your system
go to this link
http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=1183038&SiteID=2
for assitance in both issue
Monday, September 10, 2007 1:18 AM