Infected withTrojan:Win32/vindor!pz

Infected withTrojan:Win32/vindor!pz

Author
Discussion

RVB

Original Poster:

1,985 posts

87 months

Wednesday 7th June 2023
quotequote all
My father in law asked me to source him a Dell Optiplex 780 USFF, Windows 7, then upgrade it to SSD and 8GB RAM. I know it's a vulnerable computer but that's what he says he needs for a project.

The computer booted fine, albeit perhaps a little slower than I would have expected even for a spinning hard drive, especially as there were no documents, pictures etc, as if someone had just done a fresh installation of Windows.

After a few quick checks and being satisfied that it works, I powered it off again and took out its hard drive.
I connected its HDD (I have a powered USB-SATA cable) to what I call my guinea pig computer (an expendable computer running Windows 10 which has nothing important on it) and asked my guinea pig to virus scan it using Windows Defender.

After a while it warned of the presence of Trojan:Win32/vindor!pz

Windows 10 Defender says it removed it. I asked Defender to scan again, which it is doing as I type.

Do I need to be concerned if Windows 10 Defender says the virus is gone?

Thanks for any advice or suggestions.


ARHarh

4,147 posts

113 months

Thursday 8th June 2023
quotequote all
What possible project could need that particular spec? Any PC running win 10 will run win 7 software.

Anyhow just reinstall a fresh win7 and no more virus if you must have win7 and don't connect to the internet.

RVB

Original Poster:

1,985 posts

87 months

Thursday 8th June 2023
quotequote all
Normally I would have reinstalled the OS but this one has an unusual variant of W7 installed and Microsoft don't offer downloadable ISO. The only Win7 reinstallation CD I have is Win7 Pro which is a higher licence than what the computer has.

And what about the Win10 computer that I used to analyse the Win7 HDD? How at risk is that? Nothing was opened from the Win7 drive connected to it via the USB-SATA adapter. As soon as I plugged in the Win7 HDD I asked Defender to scan it.

On the Win10 computer used to scan the infected drive, I ran a full scan afterwards with Win10 Defender and nothing detected.

Also on the Win7 drive, after the Win10 computer said it had removed the virus, I put the Win7 drive back into its original computer and installed Norton, then ran a full Norton scan, with no virus detected.
Then I removed its drive for a second time and used the USB-SATA cable to plug it back into the Win10 computer and did another full scan with Win10 Defender, with no virus detected.

Apologies if my questions are odd, but I don't have much experience with viruses.

Edited by RVB on Thursday 8th June 12:49

Durzel

12,431 posts

174 months

Thursday 8th June 2023
quotequote all
Trojan:Win32/vindor!pz is apparently ransomware, so I'd be making sure your "guinea pig computer" is airgapped.

ARHarh

4,147 posts

113 months

Thursday 8th June 2023
quotequote all
Why not just restore the OS to factory then?

What "special" OS is it running?

ARHarh

4,147 posts

113 months

Thursday 8th June 2023
quotequote all
And we still don't know why it needs windows 7. I would just install win 10 and use it without a licence. only thing you lose is backgrounds and you get a nag in the bottom corner.

pquinn

7,167 posts

52 months

Thursday 8th June 2023
quotequote all
ARHarh said:
And we still don't know why it needs windows 7. I would just install win 10 and use it without a licence. only thing you lose is backgrounds and you get a nag in the bottom corner.
You can always use the Windows 7 key to activate 10.

RVB

Original Poster:

1,985 posts

87 months

Thursday 8th June 2023
quotequote all
ARHarh said:
And we still don't know why it needs windows 7.
Neither do I.

RVB

Original Poster:

1,985 posts

87 months

Thursday 8th June 2023
quotequote all
pquinn said:
ARHarh said:
And we still don't know why it needs windows 7. I would just install win 10 and use it without a licence. only thing you lose is backgrounds and you get a nag in the bottom corner.
You can always use the Windows 7 key to activate 10.
Yes, I recently used a Windows 7 key from a computer's past life to activate Windows 10.

pquinn

7,167 posts

52 months

Thursday 8th June 2023
quotequote all
If you really want to nuke it with a fresh Win 7 install then copies of the MSDN ISO images for all the flavours are available for direct download in a few open archives. If you know what version you want I'd give you the specific file name to search for.

I'd directly link you but someone might get funny even though it's not pirated or anything like that.

Griffith4ever

4,578 posts

41 months

Friday 9th June 2023
quotequote all
Dont panic. After Defender has rescanned, install Superantispyware, or Malwarebytes and run a complete scan. Once that is also happy relax in the knowledge all is well.

Polly Grigora

11,209 posts

115 months

Friday 9th June 2023
quotequote all
Been there, don't bother go Linux

the-photographer

3,810 posts

182 months

Saturday 10th June 2023
quotequote all
RVB said:
Normally I would have reinstalled the OS but this one has an unusual variant of W7 installed and Microsoft don't offer downloadable ISO. The only Win7 reinstallation CD I have is Win7 Pro which is a higher licence than what the computer has.
footnote]
Can you get a Dell image of Windows 7 from their support site (need asset tag)? Its still available for old Latitude laptops

aterribleusername

319 posts

69 months

Saturday 10th June 2023
quotequote all
RVB said:
ARHarh said:
And we still don't know why it needs windows 7.
Neither do I.
If he's anything like my dad it's because that's what they're used to and refuse to learn a new system. My dad recently bought a new laptop with Win10 on it which upgraded to 11 while setting itself up, he hated it and wanted me to put XP on it! I've offered to put it back to 10 for him but that drew a hissy fit (he's 84 and quite stubborn) so it's just sat on the table for a few weeks now and he soldiers on with his old desktop that is on Win7 but takes an absolute age to do anything. He still moans about that upgrading from XP and it did that nearly a decade ago!

TonyRPH

13,107 posts

174 months

Saturday 10th June 2023
quotequote all
OP I have several verified Windows 7 iso images along with a raft of updates, which will get you a fresh working installation of Windows 7.

I also have the last version of MSE (security essentials - which still updates by the way).

Yes, one of my PCs is running Windows 7 as I use some specialist audio testing software on it, which although does work on Windows 10, doesn't work very well (interface issues).

If you need anything, drop me a PM.

And a note for mods: None of this are illegal downloads - they are Windows iso images that were in the public domain for many years, and subsequently withdrawn by Microsoft.

There are NO WINDOWS KEYS.


the-photographer

3,810 posts

182 months

Saturday 10th June 2023
quotequote all
TonyRPH said:
There are NO WINDOWS KEYS.
Yes, he doesnt need a key, 7 or 10 will activate using the firmware key

Griffith4ever

4,578 posts

41 months

Saturday 10th June 2023
quotequote all
Or... Bugger me for being radical.... Use the now cleaned OS as it is! :-)