Trojan.Vundo

DUTR

waddler_8 wrote: »

You're unlikely to get any more protection from Mcafee than AVG or Avast or any other, no matter how much you pay, as your post seems to suggest.

If detections are made by your AV, you need to look at how the malware is getting on the system, rather than thinking another AV is going to give you better protection.

Close the attack vectors and the AV should have nothing to do.

AVG and Avast are free for the basic setup now, anything above that they charge more than what you can get the others for, I know with my PC prior to this I ran Avast and/or AVG plus two other applications, but every now and then I would have stuff on the machine , this one so far has been trouble free even after visiting 'sites'

NotreDame

Ok - scan just finished. Only showing 1 (the trojan) - here are the results!

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org
Database version: v2013.03.03.10
Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Admin1 :: HOME-PC [administrator]
03/03/2013 21:20:35
MBAM-log-2013-03-03 (21-37-41).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 369367
Time elapsed: 16 minute(s), 52 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 1
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> No action taken.
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)

1) shall I delete again & restart again?
2) does that mean my user account has more of a problem as it brought up the trojan plus 20 other problems?

waddler_8

NotreDame wrote: »

Restarted and opened as a different user (admin) & scan is taking a lot longer - sorry.

No problem.

NotreDame

oops - crossed posts again :-)

waddler_8

NotreDame wrote: »

1) shall I delete again & restart again?

Yes.

2) does that mean my user account has more of a problem as it brought up the trojan plus 20 other problems?

None more than any other. That isn't a trojan, it's a registry setting made by MyWebsearch.

SearchScopes specify Internet search providers

http://technet.microsoft.com/en-us/library/cc721975(v=ws.10).aspx

NotreDame

Ok. Deleted and restarted. Opened on my user account again and now running MBAM again on my account but right clicked to start to run as admin .....

waddler_8

Let me know the results.

NotreDame

Will do ....

NotreDame

Yaaaaay! Don't know what has changed but it's now showing as nothing detected!

Malwarebytes Anti-Malware 1.70.0.1100
https://www.malwarebytes.org

Database version: v2013.03.03.10

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Admin1 :: HOME-PC [administrator]

03/03/2013 21:49:19
mbam-log-2013-03-03 (21-49-19).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 369595
Time elapsed: 14 minute(s), 28 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)


Thank you so much for your help and patience. Will this be the end of it? Let's hope so or you'll have to put up with me again!!!

Thank you again

waddler_8

Yes, that should be it sorted.