How to remove Trojan:Win32/Vundo.gen!A

You actually don't look too bad...let's do this:

Please disable all anti-virus and anti-spyware programs while we do the following:

Run C:\MGtools\analyse.exe by double clicking on it. This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

After clicking Fix, exit HJT.

Now Copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

Now run the C:\MGtools\GetLogs.bat file by double clicking on it. Then attach the new C:\MGlogs.zip file.

Be sure to tell us how things are running.

 

Please tell me exactly what it is reporting and the full path to the file(s).

 

I'm not seeing it in your logs (which makes me wonder if it is a false positive), but to be sure:
Go to Bitdefender agree to the license and then select Scan. DO NOT CHANGE THE OPTIONS TO SHOW ALL FILES SCANNED. That will make your logs huge and we don't need to see clean files. Once Bitdefender completes the scan:

Click-on the Detected Problems tab. Then select Click here to export the scan report

When the window comes up to save the report, change the Save as type: box to Text (Tab Delimited) (*.txt) and then in the File name box enter change to bdscan then click save. This will save a file named bdscan.txt in whatever folder you are currently in when you save the file (take notice of where you are at so you can find it later). This bdcan.txt file will actually contain HTML code that we can easily view later while reviewing your log. All we have to do is rename the file to bdscan.html.

 

If you have the option.....tell OneCare to ignore it ( as I think it is a false positive).

Can you not take the title bar and slide it over to see where the file is ....?

 

The files you gave me a screen shot of are quarantined and no longer effecting your system...I'm not familiar with OneCare but you should have the option to remove them. It is doing its job.