Trojan Vundo for Atribune

[Calvin_hobbes]

Thread on HiJackThis-forum.de is

http://www.hijackthis-forum.de/showthread.php?t=21950&page=2

Attached is the information regarding the vundo culprit files

Code:

C:\WINDOWS\system32\awtur.dll
-----------------------------
AntiVir 7.3.1.38 03.01.2007 TR/Spy.Vundo.AF
AVG 7.5.0.447 02.28.2007 Downloader.Zlob.FC
BitDefender 7.2 03.01.2007 Adware.Virtumonde.EB
DrWeb 4.33 03.01.2007 Trojan.Virtumod
Fortinet 2.85.0.0 03.01.2007 suspicious
Ikarus T3.1.1.3 03.01.2007 MemScanTrojan.Vundo.AF
NOD32v2 2085 02.28.2007 probably a variant of Win32/Adware.Virtumonde.O
Panda 9.0.0.4 02.28.2007 Suspicious file
Sophos 4.14.0 03.01.2007 Virtumundo
Symantec 10 03.01.2007 Trojan.Vundo
VirusBuster 4.3.19:9 03.01.2007 Trojan.DL.Vundo.Gen!Pac.6

Aditional Information
File size: 281652 bytes
MD5: 13314d0ae4e9941e9ca0a43f0fa6f47e
SHA1: 8381dc1ede3b9f79f5ad92139329e225264399f6
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
C:\WINDOWS\system32\xxyywtt.dll
--------------------------------
AntiVir 7.3.1.38 03.01.2007 TR/Crypt.ULPM.Gen
AVG 7.5.0.447 03.01.2007 Adware Generic.VMW
BitDefender 7.2 03.01.2007 MemScan:Adware.VirtuMonde.DY
CAT-QuickHeal 9.00 03.01.2007 AdWare.Virtumonde.ha (Not a Virus)
DrWeb 4.33 03.01.2007 Trojan.Virtumod
Fortinet 2.85.0.0 03.01.2007 Adware/VirtuMonde
Ikarus T3.1.1.3 03.01.2007 not-a-virus:AdWare.Win32.Virtumonde.ha
Kaspersky 4.0.2.24 03.01.2007 not-a-virus:AdWare.Win32.Virtumonde.ha
NOD32v2 2086 03.01.2007 probably a variant of Win32/Genetik
Norman 5.80.02 03.01.2007 W32/Virtumonde.ERB
Panda 9.0.0.4 03.01.2007 Spyware/Virtumonde
Prevx1 V2 03.01.2007 SpywareQuake
Sophos 4.14.0 03.01.2007 Virtumundo
Symantec 10 03.01.2007 Trojan.Vundo
TheHacker 6.1.6.067 03.01.2007 Adware/Virtumonde.ha
UNA 1.83 02.28.2007 Adware.Virtumonde.D179

Please do the needful

[attachment deleted by admin]

[Would you do all this for nothing?]

You have come to The Spykiller for help because your Antivirus or Antispyware hasn't been able to fix your problem.

Modern Malware has become so involved and difficult to fix that it takes a very long time and a lot of hard work to read all the logs posted here and research and prepare the fixes for you. In many cases each part of the fix takes about 30 minutes to prepare, so a large part of my time is spent helping you

Would you do all this for nothing?

The reason I run this site is to raise funds for Hedgehog Rescue

Please donate if I have helped you or you have found this site useful.

You can donate safely and securely by using the paypal service, just click on one of the buttons below.

To donate in UK £

To donate in US$

To donate in Euro €

Any amount no matter how small is gratefully accepted and needed to ensure we keep the Rescue Centre running

To donate via paypal when the button doesn't appear or the link doesn't work: just go to www.paypal.com or your country's paypal log in page and chose send money and use help@thehedgehog.co.uk as recipient email address and select other service as the option. then follow prompts

[Information]

  
  Information
   Security & Protection Blog
   Prevention
   Using Autoruns
     System Restore
  Rss feeds
     Microsoft at Home
     MSRC
     Malware blog

Take the Kaspersky Challenge: See what your current antivirus is missing. Our free online virus scanner is a great way to find out if you have any viruses or spyware on your machine without having to uninstall your current antivirus software or install a new one.

Kaspersky Online Scanner

Most importantly, you can see what viruses your current antivirus software let slip through! Now works with ANY Java enabled browser