Talk:Vundo

From Wikipedia, the free encyclopedia

Contents 1 Corrections 2 Smitfraud 3 POV 4 Norton 360 5 More symptoms of Vundo 6 Spynomore plug 7 Dealing with Vundo

[edit] Corrections

I've started correcting this article. Vundo is a trojan that drops programs like SysProtect/WinFixer but they are not the same. Some of the advice such as disconnecting from the internet or closing the browser through Alt+Ctrl+Delete is not correct. This trojan infects through an exploit in Java, not by users clicking on a popup window. The messages shown in the article occur only after the user is already infected. 68.40.58.147 05:42, 3 August 2006 (UTC)

[edit] Smitfraud

WinSoftware have today told me that it is the Smitfraud trojan that is responsible? 80.193.149.218 16:24, 20 August 2006 (UTC)

That's incorrect, Smitfraud is a different infection which also advertises anti-spyware products. 68.43.121.42 03:54, 21 August 2006 (UTC)

[edit] POV

Wikipedia is an encyclopedia, not a tutorial. This is not the place to write your opinions on whether someone should or should not use HijackThis or what they should remove with it. 68.43.121.42 03:54, 21 August 2006 (UTC)

Bear with me in civility. Please define your terms? What is "an encyclopedia" (warning: I'm a librarian and the term "encyclopedia" is something with which I have more than passing familiarity) and why is a "tutorial" not relevant? Is it an opinion to rightfully inform someone of a problem and how they might fix it?

I suspect anyone defending obscuring information about removing malware. I ALSO suspect those who give advice (since they could be promoting installation of malware under the guise of being helpful).

I agree that promoting a certain version of any software can be seen as a POV violation. But I'm conflicted when I realize that the suggestion might be a valid one. You might want to suggest to the promoter of HijackThis to a) disclaim any affiliation with the producers, and b) explain in more objective detail why one might want to use HijackThis. I'm still investigating HijackThis and am leaning towards approving its use. -- Quartermaster 19:19, 6 September 2006 (UTC)

That doesn't matter. There are plenty of virus-removing programs out there. It does seem POV to explicitly mention one. Mo-Al 00:43, 7 September 2006 (UTC)

I can accept your point (explicit mention of a single program). Find it more useful to hash this out in TALK rather than getting in an edit/revert war anyhow. -- Quartermaster 18:11, 7 September 2006 (UTC)

Firstly, a tutorial is not relevent because Wikipedia's rules very clearly say that tutorials are not to be included in Wikipedia articles. Secondly, it's factually inaccurate to label HijackThis as a Vundo removal tool since HijackThis is not capable of removing Vundo. HijackThis can detect certain symptoms of certain variants of Vundo, but if you attempt to fix the entries in HijackThis, they will come back as soon as you restart your computer.

68.43.121.42 01:17, 1 October 2006 (UTC)

This last I'd describe as 'laughably untrue'... given that virus removal is my job, I run into Vundo every day, and use HijackThis all the time to get rid of it. Of course, you do need to use it properly to do so (ie: set the relevant dlls to be deleted on reboot, as files in use cannot otherwise be deleted by HijackThis), but other then that, a proper deployment of HijackThis kills Vundo dead. Endovior (talk) 07:42, 11 May 2008 (UTC)

For the record, there is a very clear policy at WP:NOT#HOWTO. 132.203.59.129 (talk) 19:57, 10 January 2008 (UTC)

There's no mention in this article about Vundo slows down system performance!!! Shouldn't this be put in? Dbottino 23:31, 26 March 2007 (UTC)

Could we not just have multiple/all known removal tools listed? Is it not relevant and factual information to possibly include sites that are against it? Anything that can help get rid of malware I am for. That may be a point of view, but there is an agenda in everything on this website if only the agenda to spread knowledge. Readers can choose to use that information however they wish. --74.167.25.115 09:40, 22 May 2007 (UTC)

Claims that this or that tool can be used to remove Vundo would have to be properly cited according to the Wikipedia:Verifiability policy. --98.223.158.174 (talk) 19:23, 17 May 2008 (UTC)

[edit] Norton 360

Would this effectivly remove this program? —Preceding unsigned comment added by 84.12.55.2 (talk) 10:45, 18 September 2007 (UTC)

No. Currently only AVG is able to do that. And BitDefender, but Vundo alters admin rights, in order to prevent BitDef. installation.Galassi 10:49, 18 September 2007 (UTC)

McAfee removed Vundo for me though :P 71.123.191.252 (talk) 12:20, 22 November 2007 (UTC)

Almost nothing but VundoFix can remove Vundo completely; it's even a pain to remove manually, even with MoveEx because the files regenerate. ♥ Fredil 23:07, 24 November 2007 (UTC)

Much like with what someone said about a certain other program, this is utter rubbish. I personally use/recommend Norton 360 and it has worked each time when it comes in contact with a computer infected with Vundo. It makes me beg the question: How many people actually TRY OUT a means of removing Vundo before they simple go "It does not work!" without testing it. For the record: Yes, Norton 360 should work fine for you as it has for all whom I have recommended it to(including myself) for dealing with Vundo. 67.11.46.168 (talk) 09:23, 13 May 2008 (UTC)HeartCard

[edit] More symptoms of Vundo

I'm not sure if this is only a problem with my computer or all Vundo variants cause it, but I was infected by it. At random times it would start casuing floating point errors in various programs. It also did not allow me to install various programs such as NoAdware and Spybot (Although I'm not sure if this was caused by the floating-point problem). If anyone knows if this is a common Vundo symptom and can find a source for it elsewhere, can it be added?

195.166.202.70 20:43, 12 October 2007 (UTC)

I too have seen these floating point messages on my mother's computer, when it was infected. I think it also killed McAfee's antivirus which was installed at the time. It was removed with Microsoft (trial version of) OneCare, so I'd recommend it. --Nathanael Bar-Aur L. 21:44, 14 October 2007 (UTC)

[edit] Spynomore plug

From what I've seen of Spynomore it's a piece of crap. Under the removal section however a line says that Spynomore is the best option? As far as I know, Vundofix is that option. What's with the plug for spynomore? (As well as the lack of mentioning Vundofix in that section?)

71.251.33.28 (talk) 19:33, 10 February 2008 (UTC)

[edit] Dealing with Vundo

I noticed there was no section for this in the Article, and I realise it cannot be for being a "Guide" and am thus putting in the TALK page to be done with as people please. This is a simple tiny guide that would make it so your computer is seemingly unaffected even when infected with Vundo. This is a temporary solution until you have enough money/the ability/parental permission/etc to remove Vundo. And yes, this is how I dealt with it while I was short the cash to get Norton 360:

It is quite simple really. Reboot with specific settings. Those of which being to not load any kind of java and anything that would open your internet explorer/firefox/etc upon reboot. Henceforth all you have to do is make sure not to ever use Internet Explorer(Or any such application) ever again. Any slowing down of your computer/popups/explorer.exe crashing/etc will not be present(Except by things that caused such before you became infected with Vundo). You simply cannot use Internet Explorer/etc on the infected computer ever again unless you want those problems to reappear until you reboot.67.11.46.168 (talk) 09:33, 13 May 2008 (UTC)HeartCard