When I am running a scan on my computer using "Advanced SystemCare 6.1" when it is scanning for malware threats it shows you the names of the files it is scanning and whilst scanning I see LOADS files named "trogen.win32/vundo" And many other obvious viruses but are not getting picked up. I have scanned my system with Avast and Microsoft Security Essentials but they're not picking them up either, what should I do?
Virus names showing during scan
- Thread starter Jarrodp
- Start date
SilentRabbit
New Member
When it says 'scanning for trogan.win32/vundo' that means it is scanning your computer for than virus in case you have it, all anti-virus software do that as they have massive libraries of archived viruses collected from users over time and when you perform a scan, it scans your PC for all of the archived viruses. Does that make sense to you?
Its not saying you have the virus, just that its looking for it, in case you have it. (if the scan comes back okay, then you don't have it).
Are there any other reasons you think you may have a virus?
Its not saying you have the virus, just that its looking for it, in case you have it. (if the scan comes back okay, then you don't have it).
Are there any other reasons you think you may have a virus?
If you think you are infected please do the following.
Please download Malwarebytes' Anti-Malware from here or here and save it to your desktop.
If for some reason Malwarebytes will not install or run please download and run Rkill.scr, Rkill.exe, or Rkill.com. If you are still having issues running rkill then try downloading these renamed versions of the same program.
EXPLORER.EXE
IEXPLORE.EXE
USERINIT.EXE
WINLOGON.EXE
But DO NOT reboot the system and then try installing or running Malwarebytes. If Rkill (which is a black box) appears and then disappears right away or you get a message saying rkill is infected, keep trying to run rkill until it over powers the infection and temporarily kills it. Once a log appears on the screen, you can try running malwarebytes or downloading other programs.
Download the HijackThis installer from here.
Run the installer and choose Install, indicating that you accept the licence agreement. The installer will place a shortcut on your desktop and launch HijackThis.
Vista and Windows 7 users must right click on the hijackthis icon and click on run as. If the run as option doesn't appear then press and hold the shift key while right clicking on the icon to get it to appear.
Click Do a system scan and save a logfile
Most of what HijackThis lists will be harmless or even essential, don't fix anything yet.
When the hijackthis log appears in a notepad file, click on the edit menu, click select all, then click on the edit menu again and click on copy. Come back to your reply and right click on your mouse and click on paste.
Post the logfile that HijackThis produces along with the Malwarebytes Anti-Malware log
This will tell us if you are actually infected or not.
Please download Malwarebytes' Anti-Malware from here or here and save it to your desktop.
- Double-click mbam-setup.exe and follow the prompts to install the program.
- At the end, be sure a checkmark is placed next to
- Update Malwarebytes' Anti-Malware
- and Launch Malwarebytes' Anti-Malware
- then click Finish.
- If an update is found, it will download and install the latest version. Please keep updating until it says you have the latest version.
- Once the program has loaded, select Perform quick scan, then click Scan.
- When the scan is complete, click OK, then Show Results to view the results.
- Be sure that everything is checked, and click Remove Selected.
- A log will be saved automatically which you can access by clicking on the Logs tab within Malwarebytes' Anti-Malware
If for some reason Malwarebytes will not install or run please download and run Rkill.scr, Rkill.exe, or Rkill.com. If you are still having issues running rkill then try downloading these renamed versions of the same program.
EXPLORER.EXE
IEXPLORE.EXE
USERINIT.EXE
WINLOGON.EXE
But DO NOT reboot the system and then try installing or running Malwarebytes. If Rkill (which is a black box) appears and then disappears right away or you get a message saying rkill is infected, keep trying to run rkill until it over powers the infection and temporarily kills it. Once a log appears on the screen, you can try running malwarebytes or downloading other programs.
Download the HijackThis installer from here.
Run the installer and choose Install, indicating that you accept the licence agreement. The installer will place a shortcut on your desktop and launch HijackThis.
Vista and Windows 7 users must right click on the hijackthis icon and click on run as. If the run as option doesn't appear then press and hold the shift key while right clicking on the icon to get it to appear.
Click Do a system scan and save a logfile
Most of what HijackThis lists will be harmless or even essential, don't fix anything yet.
When the hijackthis log appears in a notepad file, click on the edit menu, click select all, then click on the edit menu again and click on copy. Come back to your reply and right click on your mouse and click on paste.
Post the logfile that HijackThis produces along with the Malwarebytes Anti-Malware log
This will tell us if you are actually infected or not.
SilentRabbit
New Member
I don't think he's infected, john, but he's simply misread the loading bar on an antivirus program.
I think he is misreading the red highlighted box, thinking he has a 'trojan' but it is actually just scanning for one.
I think he is misreading the red highlighted box, thinking he has a 'trojan' but it is actually just scanning for one.
SilentRabbit
New Member
Ah okay well that makes sense, and yeah id agree there haha!
ChantelleC
Member
JarrodP, Hijackthis is an advanced tool and requires advanced knowledge about your operating system. If you are going to follow John's instructions to search for any potential virus's, I strongly recommend that you don't attempt to fix any threats it finds unless you are confident you know exactly what you are removing as it could potentially screw your system. Ensure you post the log on here for John to review before doing anything if you're not sure.