Results 1 to 18 of 18
  1. #1
    Troll Killer and best Snooper!
    I decide when the pigs fly!
    Rhea's Avatar
    Join Date
    January 18th, 2005
    Location
    New York, USA
    Posts
    6,195
    Got a virus prunnet.exe
    Can someone do some research for me to find info on how to purge this SOB from my PC and post the instructions or URL in this thread?

    I'd do it myself but every time I try to open a search engine domain it redirects to some bogus URL and starts popping windows on my PC (for something called Virus Remover 2008.)

  2. #2
    ABW Ambassador purplebear's Avatar
    Join Date
    January 18th, 2005
    Posts
    3,960
    Don't know if this is much help but found
    Prunnet.exe is Trojan/Backdoor

    I just made searches on google and found:
    http://www.bleepingcomputer.com/star...exe-24388.html

    Am sorry, but cost me $136 from Dell support a little while back to remove some stuff from my computer and am kinda scared to go visiting anywhere for fear it'll get me.

    Can say from what I've been reading about it, definitely a bad guy. Somebody had spent 5 hrs. trying to remove it. Have ya tried malwarebytes I think is the name?

    Sorry, I don't think I've helped any. Will keep checking to see if anybody else can help, if not will keep looking for ya

    Found a little more

    PRUNNET.EXE remove instruction

    1. Temporarily Disable System Restore, Reboot computer in SafeMode;

    2. Locate PRUNNET.EXE virus files and uninstall PRUNNET.EXE files program. Follow the screen step-by-step screen instructions to complete uninstallation of PRUNNET.EXE.

    3. Delete/Modify any values added to the registry related with PRUNNET.EXE,Exit registry editor and restart the computer;

    4.Clean/delete all PRUNNET.EXEinfected file(s):PRUNNET.EXE and related,or rename PRUNNET.EXE virus files;

    5.Please delete all your IE temp files with PRUNNET.EXE manually,run a whole scan with antivirus program ;

  3. #3
    ABW Ambassador beachcom's Avatar
    Join Date
    May 11th, 2006
    Location
    Myrtle Beach SC
    Posts
    723
    Saw this on daniweb dot com from someone else who caught this bug and how they got rid of it. You have to scan in Safe Mode

    Download Malwarebytes' Anti-Malware (http://www.majorgeeks.com/Malwarebyt...re_d5756.htmll) to your desktop.

    * Double-click mbam-setup.exe and follow the prompts to install the program.
    * At the end, be sure to checkmark the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    * If an update is found, it will download and install the latest version.
    * Once the program has loaded, select Perform full scan, then click Scan.
    * When the scan is complete, click OK, then Show Results to view the results.
    * Be sure that everything is checked, and click Remove Selected.
    * When completed, a log will open in Notepad.
    * Post the log back here.

    Make sure that you restart the computer.

    Hope this helps

  4. #4
    Troll Killer and best Snooper!
    I decide when the pigs fly!
    Rhea's Avatar
    Join Date
    January 18th, 2005
    Location
    New York, USA
    Posts
    6,195
    Thanks for the help but that link is broken. can you convert it with tinyurl? Muchos!

    BTW, you CPA managers out there will be happy to know that you're probably paying some rogue affiliate (or employee) for all these crap popups on my PC. Or maybe -- you're doing it yourselves?

  5. #5
    Troll Killer and best Snooper!
    I decide when the pigs fly!
    Rhea's Avatar
    Join Date
    January 18th, 2005
    Location
    New York, USA
    Posts
    6,195
    Thanks guys. It seems to be less intrusive with FF than IE. I've decided to just bring this hunk of junk to the computer fixit store tomorrow and let them clean up the mess. I also need some memory and my CD player needs tweaking so I might as well make their Xmas merry and bright and pay for it all at once.

    And I'm keeping track of all the urls that pop on this machine. Could be interesting to see if it's possible to track this back to a CPA firm or affiliate.

  6. #6
    Moderator
    Join Date
    April 6th, 2006
    Posts
    2,689
    Hi Rhea, totally agree re: Malwarebytes Anti-Malware - a few months ago it was the only way to get rid of a little nasty bugger:

    http://www.malwarebytes.org/

    It is free, but I opted to pay the $25 to activate the scheduled features.

    Should do the trick for you!

  7. #7
    ...and a Pirate's heart. Convergence's Avatar
    Join Date
    June 24th, 2005
    Posts
    6,918
    Two great FREE program IMhO -

    Lavasoft's Ad-Aware
    http://www.download.com/Ad-Aware-200...-10045910.html

    AVG Free
    http://www.download.com/AVG-Anti-Vir...-10320142.html

    I have had great success with computers running Windows XP and earlier. With Vista it's always a crap shoot. Especially if you use Windows Mail (should upgrade to Thunderbird http://www.mozilla.com/en-US/thunderbird/ )

    Good luck!

  8. #8
    Troll Killer and best Snooper!
    I decide when the pigs fly!
    Rhea's Avatar
    Join Date
    January 18th, 2005
    Location
    New York, USA
    Posts
    6,195
    Malwarebytes seems to have done the trick. Took over five hours to scan all three fixed disks but well worth the time if the fix really works.

    Already had AVG Free on the machine so obviously it didn't defend against this nasty bug.

    How'd I get it? All I did was click the Windows Security Alerts icon.

    And all those popups it threw at me? My best guess is they were all CPA programs.

    Thank you all very, very much. UDABEST!!!

  9. #9
    Troll Killer and best Snooper!
    I decide when the pigs fly!
    Rhea's Avatar
    Join Date
    January 18th, 2005
    Location
    New York, USA
    Posts
    6,195
    Computer's still screwed up.

  10. #10
    ABW Ambassador 2busy's Avatar
    Join Date
    January 17th, 2005
    Location
    Tropical Mountaintop
    Posts
    5,636
    See if you can get to http://www.eset.com/onlinescan/
    They have a free download, but it won't work right if you have Norton/Symantec installed.

  11. #11
    ABW Adviser Panel Dynamoo's Avatar
    Join Date
    January 18th, 2005
    Location
    Opposite the Slough of Despond
    Posts
    5,465
    Trend Micro Housecall (IE or Java)
    http://housecall.trendmicro.com/

    F-Secure Online Scanner (IE only)
    http://support.f-secure.com/enu/home/ols.shtml

    Ewido Online Scanner (IE only)
    http://www.ewido.net/en/onlinescan/

    I've also had some good results with:
    http://www.superantispyware.com/
    The site doesn't look that good, but the product is and there's a free trial download.

    Then there's always ComboFix: http://www.bleepingcomputer.com/comb...o-use-combofix
    That's more difficult and not-risk free.
    Innovative advertising with Slimeware Corporation and Telephore. Mail-order fuel with Petrol Direct.

  12. #12
    Troll Killer and best Snooper!
    I decide when the pigs fly!
    Rhea's Avatar
    Join Date
    January 18th, 2005
    Location
    New York, USA
    Posts
    6,195
    I'm typing this on my laptop so there might be lots of typos.

    I took my to Computer Renaissance (which is where I bought it) and we talked about the virus (VUNDO, very bad virus) as well as all the other things that the machine neseds to bring it up to speed (it's 3 years old). Bottom line is I decided to buy a new desktop. The tech guy is going to copy all the data from my old machine. I'm happy with the solution.

    Mele kalikimaka and thanks for all the fish!

  13. #13
    Resident Genius and Staunch Capitalist Leader's Avatar
    Join Date
    January 18th, 2005
    Location
    Florida
    Posts
    12,817
    The tech guy is going to copy all the data from my old machine.
    Wouldn't "all the data" include...the virus??

  14. #14
    Troll Killer and best Snooper!
    I decide when the pigs fly!
    Rhea's Avatar
    Join Date
    January 18th, 2005
    Location
    New York, USA
    Posts
    6,195
    lol! Sorry, all the data EXCEPT the virus and OS.

  15. #15
    ABW Adviser Panel Dynamoo's Avatar
    Join Date
    January 18th, 2005
    Location
    Opposite the Slough of Despond
    Posts
    5,465
    Let's see.. you take your PC in with a virus and end up with a new PC... I don't know what your tech guy told you but it sounds like there's nothing wrong with his marketing skills!

    Actually, it gives me an idea.. nasty bit of malware? Here's a link to Dell!
    Innovative advertising with Slimeware Corporation and Telephore. Mail-order fuel with Petrol Direct.

  16. #16
    Troll Killer and best Snooper!
    I decide when the pigs fly!
    Rhea's Avatar
    Join Date
    January 18th, 2005
    Location
    New York, USA
    Posts
    6,195
    Shhh! I want him to stay right where he is. I don't want to have to break in somebody new ya know.

    But truthfully, I went in with a laundry list of upgrades and tweaks and the cost to bring my three year old PC up to snuff was nearly as much as buying a new machine so the decision was pretty much a no-brainer.

  17. #17
    ABW Veteran Mr. Sal's Avatar
    Join Date
    January 18th, 2005
    Posts
    6,795
    Quote Originally Posted by Dynamoo
    Let's see.. you take your PC in with a virus and end up with a new PC... I don't know what your tech guy told you but it sounds like there's nothing wrong with his marketing skills!

    Actually, it gives me an idea.. nasty bit of malware? Here's a link to Dell!
    Please, don't elaborate on that idea...

  18. #18
    What's the word? Rhia7's Avatar
    Join Date
    January 13th, 2006
    Posts
    9,578
    Quote Originally Posted by Convergence
    I like AVG Free
    ~Rhia7 -- Remember the 7
    Twitter me

  19. Newsletter Signup

+ Reply to Thread

Similar Threads

  1. Replies: 4
    Last Post: August 31st, 2007, 02:09 AM
  2. Exact Advertising : nls.exe
    By Chris - AMWSO in forum Suspicious Activity!
    Replies: 7
    Last Post: September 23rd, 2004, 09:18 PM
  3. Command.exe Virus - Watch out!
    By Akiva in forum Midnight Cafe'
    Replies: 1
    Last Post: May 23rd, 2003, 12:35 PM
  4. Topsites.exe
    By Dynamoo in forum Suspicious Activity!
    Replies: 5
    Last Post: March 11th, 2003, 05:54 AM
  5. /_vti_bin/_vti_aut/author.exe
    By John Kruger in forum Programming / Datafeeds / Tools
    Replies: 3
    Last Post: December 16th, 2002, 05:50 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •