Curse

Wrath of m0o · Apr 29, 2009, 09:11 AM // 09:11

This website constantly keeps trying to give me a Trojan called Vundo!grb.
It took out my main computer, wich is out getting fixed. Same thing is happening to compy #2.
Has anyone found out what is spamming this Trojan?

riktw · Apr 29, 2009, 10:22 AM // 10:22

well vundo is one annoing virus, but GWguru never gave me vundo
run spybot search and destroy, if that program vind vundo you got it.
try some antivirus programs to, if no single program shows vundo its an false alarm.

Joseph Spiritmaster · Apr 29, 2009, 10:32 AM // 10:32

I've been getting Multiple VundoTrojans on my comp, if its from here idk, i havnt gotten it recently (which might not be good =/)

AngelWJedi · Apr 29, 2009, 11:38 AM // 11:38

i never got this one but i do get a bloodhound ever so often when i visit guru.
luckly my anti virus thing catches it each time.

Pleikki · Apr 29, 2009, 01:08 PM // 13:08

I've never had any viruses etc from the site.

Inde · Apr 29, 2009, 01:14 PM // 13:14

First, stupid @#$!@#$!@ #$!#$ piece of #@$!@#$$ website.

Next, STOP USING IE.

All right, got that out.

Now Wrath of m0o, would you please kindly, if it's possible, let me know if you were on a particular ad at the time? Yahoo has been having some problems with this and thus it's infected the ads we are served. No one seems to be able to let us know which ad this is so it's just randomly and sporadically popping up. Which means we can't replicate it until someone is able to find us the ad (we need a link if possible, just rollover for that). Thank you for any help you can provide.

Tarun · Apr 29, 2009, 05:10 PM // 17:10

If anyone thinks they're infected or simply want to check, then please download my Anti-Malware Toolkit and get the Professional package. Follow the directions in the PC Cleanup guide. After that, please start a new thread in the Software section to post a HijackThis log.

I pwnd U · Apr 30, 2009, 03:50 AM // 03:50

I was just using FireFox and running avast! as my antivirus. I had not navigated anywhere else on the internet or using any other part of the internet besides Guru. I got a warning from avast! saying that a connection was being attempted from this website:

hxxp:// roazoa [dot] info / hewoizo

It was a banner for military or veterans that was at the top of the screen.

EDIT: Thanks, couldn't figure out how to not make it clickable. oO

Capulatio · Apr 30, 2009, 06:25 AM // 06:25

This is what you do

Use FireFox and download an addon called NoScript. I have never had a virus whilst browsing, because this stops any scripts at all unless you let them. It even works for ads, so I can allow GWGuru, but not the ad scripts/objects.