WARNING For all Vundo-fixing techies out there...

pchelpman

New varient coming. Keep your guard up. Vundo may not be that easy to fix this time round. Couple of threads to show you what I mean ...

http://www.bleepingcomputer.com/forums/topic54027.html

http://www.techsupportforum.com/showthread.php?t=102878

After Vundofix has been applied there are still many Vundo files. It just keeps coming back.

Browntoa

hope that guy I helped this morning did'nt have one of these !!

Quincy_3

Mmmmm

Ok this is all fine and I agree its a new Variant and a real git at that but what im at a loss, I cannot for the life of me find any info on how to protect or for a better word find any preventative measures for this or other variants, it all seems geared to cure a PC after infection. :think:

Is it all a big secret

Browntoa

I'm always just careful, no opening of strange attachments, no clicking on dodgy links and NEVER click on a pop-up

fingers crossed so far

Quincy_3

But is their any pre warning in the sense of, It hides within specific pop-ups or adverts or some other banner, A good email scanner is a 1st step so is common sense opening attactments and not to open any from dodgy senders.

LittleJo

Hi.
Now this is what I call spectacular badness - TROJ_ARHIVEUS.A
The ransome virus!!
Jo

Alfonso_Skinarelli

Quincy wrote:

But is their any pre warning in the sense of, It hides within specific pop-ups or adverts or some other banner, A good email scanner is a 1st step so is common sense opening attactments and not to open any from dodgy senders.

You're not far wrong there Quincy. A large amount of Vundo infections come from opening an email which attempts to run a java script on the potential victim's machine. The best way to avoid Vundo is to make sure you're currently running the latest version of Sun Java. See here.

Versions 1.4.X are particularly vulnerable to Vundo.

Rex_Mundi

LittleJo wrote:

Hi.
Now this is what I call spectacular badness - TROJ_ARHIVEUS.A
The ransome virus!!
Jo

This one has just made its first appearance in the UK. It takes all your files, and locks them in a password protected folder needing a 30 digit password to unlock it. It then directs you to a (russian) pharmacy site and requires you to buy something in return for the password.

But....................

Some clever chaps at one of the antivirus companies has found that the password was hidden in the virus code.

If you get hit with this, using the password mf2lro8sw03ufvnsq034jfowr18f3cszc20vmw should unlock all your files for free.