Removal Of Trojan.heur.vundo

kurtist05 · March 2009

Hi, I am having troubles removing a couple Trojans from my system.

The viruses are the Gen:Trojan.Heur.Vundo.402CD3C3C3. After running a deep system scan, Bit Defender was not able to fix or delete the two viruses.

In addition to that, every time I boot up Windows, I am getting an alert from Bit Defender, trying to add Virusine.dll in the system32 folder to the Windows Registry. It gives me the option to Allow or Block, but no matter what I select, the alert will keep popping up forever.

Can someone please tell me how to resolve these two problems. I am assuming the Virusine.dll is related somehow to the Trojans I have picked up.

Thanks!

rootkit · March 2009

Please paste here the full scan log. We need to see the files(s) location

ashleemwood@gmail.com · March 2009

I'm a different person, but I'm having the same issue! I have BitDefender Antivirus 2009. Here's my log.

BitDefender Log File

Product : BitDefender Antivirus 2009

Version : BitDefender UIScanner v.12

Scanning task : Deep System Scan

Log date : 15:52:37 05/03/2009

Log path : C:\Documents and Settings\All Users\Application Data\BitDefender\Desktop\Profiles\Logs\deep_scan\1236286357_1_02.xml

Scan Paths:Path 0000: C:\

Path 0001: \

Scan Options:Scan for viruses : Yes

Scan for adware : Yes

Scan for spyware : Yes

Scan for applications : Yes

Scan for dialers : Yes

Scan for rootkits : Yes

Target Selection Options:Scan registry keys : Yes

Scan cookies : Yes

Scan boot sectors : Yes

Scan memory processes : Yes

Scan archives : Yes

Scan runtime packers : Yes

Scan emails : No

Scan all files : Yes

Heuristic Scan : Yes

Scanned extensions :

Excluded extensions :

Target Processing:Default action for infected objects : Disinfect

Default action for suspicious objects : None

Default action for hidden objects : None

Scan engines summaryNumber of virus signatures : 2752905

Archive plugins : 45

Email plugins : 6

Scan plugins : 13

System plugins : 5

Unpack plugins : 7

Overall scan summaryScanned items : 503952

Infected items : 385

Suspicious items : 0

Resolved items : 13

Unresolved items : 378

Password-protected items : 6

Individual viruses found : 369

Scanned directories : 11680

Scanned boot sectors : 4

Scanned archives : 11975

Input-output errors : 52

Scan time : 02:04:58

Files per second : 66

Scanned processes summaryScanned : 77

Infected : 0

Scanned registry keys summaryScanned : 1232

Infected : 0

Scanned cookies summaryScanned : 1232

Infected : 0

Remaining issues:Object Name Threat Name Final Status

C:\Documents and Settings\Ashlee\.housecall6.6\Quarantine\netpass[1].zip.bac_a05788=](Quarantine-4)=]netpass.exe Application.NetPass.I Delete Failed (file was in an archive)

[system]=]HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\parupiwawo=]C:\WINDOWS\SYSTEM32\SETIHIKI.DLL Gen:Trojan.Heur.Vundo.402CD3C3C3 Infected

C:\WINDOWS\system32\setihiki.dll Gen:Trojan.Heur.Vundo.402CD3C3C3 Delete Failed

C:\WINDOWS\system32\vezewavu.dll Gen:Trojan.Heur.Vundo.402CD3C3C3 Delete Failed

C:\WINDOWS\system32\vezewavu.dll Gen:Trojan.Heur.Vundo.402CD3C3C3 No action was possible

C:\WINDOWS\system32\setihiki.dll Gen:Trojan.Heur.Vundo.402CD3C3C3 No action was possible