Computing.Net > Forums > Security and Virus > Trojan.Vundo PLEASE help...

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Trojan.Vundo PLEASE help...

Reply to Message Icon

Name: MyIssues
Date: October 11, 2005 at 16:20:19 Pacific
OS: Windows XP Home
CPU/Ram: 2.8 GHz / 512 MB
Comment:

I have the grueling task of removing the Trojan.Vundo virus from my wife's computer. I have tried everything, exept I have not sent in my HijackThis log yet. I have a red virus alert from Norton stuck on my desktop and it won't go away. I have followed Symantec's instructions for manual removal, with no success. When looking for any related registry keys to delete, none of them existed. I tried their Trojan.Vundo removal tool and the results said that the virus was not detected.

The only thing I can think of is to show someone my HJT log and have them show me the way, but I guess we're not supposed to post it, unless requested. If it helps, message #16704 explained EXACTLY what I'm going through, exept on my computer the virus is located in my pmnlk.dll file in Windows. c:\windows\sustem32\pmnlk.dll

I also cannot delete the file, because it is "being used by another person or program". Any help would be appreciated. Thanks!



Sponsored Link
Ads by Google

Response Number 1
Name: courtjes
Date: October 11, 2005 at 17:22:39 Pacific
Reply:

winfixer.com should be reported to your state atty general office and request investigation into invasion of privacy and attack on computer.

Lets get those bad guys!


0

Response Number 2
Name: andy1
Date: October 12, 2005 at 00:57:41 Pacific
Reply:

try these vundo trojan removal instructions


0

Response Number 3
Name: uncool
Date: October 12, 2005 at 07:36:11 Pacific
Reply:

yes I have the same problem with my wifes computer also. (Did all the wives visit the same infected website?) Yes, i've had the same exact bad luck as listed above with symantec. Their tech support told me to pay $40 and they'd help me remove it. (keep in mind I just barely paid $50 for their antivirus program that is supposed to catch this crap) Is their really a chance that paying the $40 for their special virus-removal team will work? or is it just money lost?
The supposed infected file is: windows\system32\ssqpp.dll

like the other post... the annoying window wont go away even though the trojan.vundo removal program says its gone. I think its a problem with Symantec Antivirus 2005. Come on symantec... make some real software.(or make a patch "PRONTO" !!! )


0

Response Number 4
Name: Maggie_333
Date: October 12, 2005 at 10:02:06 Pacific
Reply:

Hey Uncool ...

Norton's gave me the same crap about paying the extra $40 to help me remove the trojan Vundo, but I sent them a nasty e-mail and told them I would rather give the money to their competition since I'd already paid my $50.00 to run their crappy program on my computer. Funny how an e-mail like that will bring on a FREE response. *LOL*. They suggested that I go to the windows site and download any upgrades (I'm on automatic updates so I didn't need to do that), then update your Norton's to make sure you have all the most current virus definitions. Now turn off your system restore till you get the virus under control. Next run the Norton's antivirus program in 'safe mode' .. but first if you are on Cable, disconnect it and also turn your computer completely off (all power sources) for at least 30 seconds to stop the trojan from running in the memory. Now that you have your computer in Safe Mode do a scan with Norton's. I didn't use this method because I had already downloaded Spy Sweeper and did a sweep in "Safe Mode" and it did find and quarantine it for me. I'm wondering if the "free advice" from Norton's would have worked. I was so grateful to Spy Sweeper that I did buy a years subscription to their product which cost me $22.00. Alot less than the Norton's and they had a very easy site to navigate and tech help was there to assist me. Good luck with your wife's computer.
Maggie


0

Response Number 5
Name: uncool
Date: October 12, 2005 at 11:11:31 Pacific
Reply:

Maggie,

I did what you told me in Norton. It did NOT work.

So I downloaded the free 14-day trial version of Spysweeper and ran it like you did....It worked !!! I'll be dumping symantec and switching to Webroot products from now on.

(I'm also a sales rep for a large software reseller and will be switching my 200+ corporate & gov. accounts from symantec NAV enterprise licenses over to webroot products as soon as their symantec maintenance expires because of how they treated me)


0

Related Posts

See More



Response Number 6
Name: MyIssues
Date: October 12, 2005 at 12:04:15 Pacific
Reply:

Maggie,
For some reason, Norton will not run in safe mode, but I just tried it in normal and it works perfect. In safe mode I just get an error message saying that a specific file in Norton could not access the server. It's not a trial version either, I paid the $50, but it's got problems. I dumped Norton on my computer and now trying AVG Free anti-virus. I've heard pretty good things about them too. I am going to try and download SpySweeper now, since it worked for you and uncool. Hope it works! I'll let you know how it turns out. If any experts at all want to review my HJT log please let me know, as I can't post it on here otherwise. Thanks!


0

Response Number 7
Name: MyIssues
Date: October 12, 2005 at 16:18:52 Pacific
Reply:

Spy Sweeper is AAWWWSSOOMME! I have been messing with this trojan for 3 days and all it took was a 5 minute scan with Spy Sweeper to get rid of it. I downloaded the free trial and now I'm buying the software for $29. Oh yeah, I wasn't impressed with Norton over this whole deal, so I wiped it off my computer and now I'm going with Webroot AVG Free anti-virus. Thanks for the help!


0

Response Number 8
Name: Maggie_333
Date: October 12, 2005 at 18:35:39 Pacific
Reply:

Hey Uncool and MyIssues ...

I'm so happy that Spy Sweeper worked for you both! I know how it feels to be in that frustrating position ... especially when Norton's was very little help. Some of the fixes on this site were too complicated for me to figure out so I'm glad there are programs out there that can help.
Thank you both for telling me that the Norton's remedy wouldn't have worked, now I don't have to wonder. My subscription to Norton's is up in November ... guess I will be trying AVG (*thanks for the tip). I'm glad we all got rid of this VUNDO ... THANKS SPY SWEEPER!


0

Response Number 9
Name: jadsemail
Date: October 13, 2005 at 08:06:40 Pacific
Reply:

I am having the same problem with Trojan.Vundo (not the 'B' version). I have tried Norton's tool for Vundo removal (which ran for over 5 hours) and several others to no avail.

I would be GREATLY appreciative of any help. My HJT log will be submitted on request. Thanks in advance!


0

Response Number 10
Name: Maggss
Date: October 13, 2005 at 20:33:45 Pacific
Reply:

Go to http://www.techguylive.com/

It's the best $25 bucks you'll ever pay
to get rid of this nasty Trojan Vundo.
They do it all for you. They log into your
desktop and you watch them go through all
the steps. I tried for hours to do it myself. It did take about 2 1/2 hours with the techguylive. Like I said. $25 bucks! It's well worth it.


0

Response Number 11
Name: Maggie_333
Date: October 14, 2005 at 05:49:49 Pacific
Reply:

John,
Scroll up a few posts and follow the instructions. Download the free spy sweeper program from webroot. It's free and it takes 5 minutes to remove Vundo, no computer knowledge required. Hope it works for you like it did for me.
Maggie


0

Response Number 12
Name: MissGuydid
Date: October 14, 2005 at 07:52:08 Pacific
Reply:

i had the exact problem as the topic starter. i tried to use NAV 2005 (money wasted) to no avail. i tried to manually remove, and received the same "being used" message.
luckily, i found this forum yesterday & noticed many people having success with Webroot Spy Sweeper, which i also have on my laptop. so i ran that last night & the file is now gone!
my only complaint is that Spy Sweeper did not automatically catch & quarantine it. but then again, at least it fixed it! which is more than i can say for NAV, which detected it & told me the name but did absolutely nothing to prevent it from hitting my computer or to aid in deleting it.
my advice would be to go with Spy Sweeper if you can. i didn't have to play around in safe mode or follow some huge list of instructions. i didn't have to pay Best Buy the $140 or so they quoted me to fix it. i simply ran Spy Sweeper once. 10 minutes or so later? problem solved.
good luck!


0

Response Number 13
Name: KatD
Date: October 17, 2005 at 01:08:36 Pacific
Reply:

SpySweeper just made my day. I've been trying to get rid of this nasty adware Trojan.Vundo for days. Norton software
(along the way I found out that the "removal tool" on their website is out of date)and their tech support were 100% useless. The irony was that I already have the spy sweeper program installed but it was not updated for a few months. So it took a couple minutes to update to version 4.5.3 and the...stuff was removed. Definitively feeling better now. Good luck everyone on dealing with all those bugs.


0

Response Number 14
Name: nallam
Date: October 17, 2005 at 08:29:31 Pacific
Reply:

The Norton Trojan.Vundo Removal Tool 1.3.1 worked perfectly for me. Unfortunately, Norton neglected to say that they have updated the August 23, 2005 version, but they have.


0

Response Number 15
Name: JamesClancy_com
Date: October 18, 2005 at 10:15:20 Pacific
Reply:

I have removed this virus a couple of time now. I have a method that seems to work.
1) Before doing anything, turn off the system Restore. Vundo re-installs itself upon reboot.

2)Download and run the FixVundo.exe tool from symantec. ( http://securityresponse.symantec.com/avcenter/venc/data/trojan.vundo.removal.tool.html )

3) I use a few tools to clean up the PC. CCleaner is one(free) and so is CleanUp40!
Both, and nore free tools, available at:
http://www.jamesclancy.com/Downloads.html.

4) I then installed, updated and ran Spybot to clean off spyware.

this seem to do it.



0

Response Number 16
Name: alx478
Date: October 19, 2005 at 15:02:11 Pacific
Reply:

wow it did work, i dowloaded it and i finally got rid of vundo after weeks of suffering.


0

Response Number 17
Name: alx478
Date: October 19, 2005 at 15:05:54 Pacific
Reply:

wow it did work, i dowloaded it (spysweeper)and i finally got rid of vundo after weeks of suffering.

The Norton Trojan.Vundo Removal Tool 1.3.1 did not worked for me at all.


0

Response Number 18
Name: shutchuk
Date: October 22, 2005 at 18:46:33 Pacific
Reply:

Symantec solution sucks! (and I love these guys).

Here's what worked for me

1. Boot pc using manufacturers CD recovery disk (mine is Dell).
2. Once windows is up, use DOS command line to delete xxx.dll file from WINDOWS/SYSTEM32 folder (or whatever named file si causing your problem.
3. Reboot from c drive
4. Download latest virus software
5. Run complete virus scan for machine.
6. Check results are good.
7. Have a very stuff whiskey after messing around for 2 weeks with garbage solutions

Later dudes!


0

Response Number 19
Name: -Cole-
Date: October 23, 2005 at 18:41:40 Pacific
Reply:

So I tossed my laptop out the second floor window and it survived, so i figured I might as well continue trying to remove this damn Trojan.Vundo.B ...Ive done EVERYTHING THAT EVERYONE HAS SAID, and still no luck "thats why i tossed it out:)" I have a file infected named qopqn.dll, located in...
C:\WINDOWS\system32\qopqn.dll

Now,

1.manual delete does not work

2.Safe mode manual delete does not work

3.Safe mode and normal mode Symantec Trojan.Vundo.B Removal Tool 1.0.0 DOES NOT WORK..."it says "Trojan not found"

4.Safe mode and normal mode Norton Trojan.Vundo Removal Tool 1.3.1 DOES NOT WORK..."it says "Trojan not F**cking found"

5.Reformating My Computer DOES NOT WORK! (i know i was like wtf?
"Goin a lil crazy now"

6.Safe mode and normal mode Norton Trojan.Vundo Removal Tool 1.4.0..."it says "Trojan found and deleted will be gone after reboot" so i had already disabled System Restore, and norton peace of s*it anti virus...rebooted, and wouldnt you know it...The lil S*it is...oh wait no its gone! F*ck Ya! Time for a Very Dirty Martini and some Advil!


P.S:
7.THROWING IT OUT THE WINDOW!DOES NOT WORK!!!
So Refer to method #6

P.P.S: And if that doesnt work...Start off with a double dose of dirty martinis and 3 Advils!

Good Luck! -Cole-


Holly crap im done
-Cole-


0

Response Number 20
Name: uncool
Date: October 25, 2005 at 09:45:46 Pacific
Reply:

why dont you just download and run the free trial version of spysweeper and be done with it?

several of us already mentioned this in our earlier posts.

its fast, its free and it works. trust me.


0

Response Number 21
Name: karynann
Date: October 25, 2005 at 16:15:17 Pacific
Reply:

I got this nasty Trojan Vundo B on my Dell Dimension 2400 - it disabled Internet Explorer and I was unable to get online to download any sort of fix-it program. I have Norton AntiVirus 2005, which I paid $49.99 for back in April - and I could not fix the problem using any of their solutions. I had to get a computer tech out to my house to the tune of $250 - and now it is fixed - but at great cost. I have always been able to delete viruses in the past. This one is particularly nasty. And, after this episode, I have very little use for Norton and Symantec. I paid for their damn AntiVirus and it doesn't work!!! And their phone support sucks too! I have AOL - and the tech who came to my house said that the AOL Anti-Spyware is useless, as is Norton - and he installed Microsoft Anti Spyware for me. I just hope this doesn't happen again - I can't afford to pay $250 again!

Perhaps we all should write nasty emails to Symantec???


0

Response Number 22
Name: Clamraker
Date: November 4, 2005 at 23:10:28 Pacific
Reply:

My subscription to NAV runs out in a few weeks. I was thinking of getting rid of it, (Going with another software) but I heard there have been allot of problems removing it. Has anyone had any problems uninstalling NAV 2005?
TIA


0

Response Number 23
Name: rasor
Date: November 5, 2005 at 20:00:35 Pacific
Reply:

I, too, have not been able to get rid of Vundo with the Norton Removal Tool in and out of SafeMode. I, too, downloaded Spy Sweeper and was able to remove the trojan with no difficulty. Moreover, I specifically purchased NAV from Dell instead of the McAfee that was offered. I can not understand why Norton is unable to help with removal of Vundo, but Spy Sweeper has saved me from reformatting my hard drive.


0

Response Number 24
Name: Student04
Date: November 20, 2005 at 18:09:50 Pacific
Reply:

Someone please help me. I'm trying to delete Vundo! Nothing works. I downloaded the Spysweeper it didn't work. It said to remove subscribe. I need this virus off my computer.


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Trojan.Vundo PLEASE help...

Trojan Horse..please help www.computing.net/answers/security/trojan-horseplease-help/21893.html

Trojan found...please help! www.computing.net/answers/security/trojan-foundplease-help/16719.html

Win32:Trojan-gen please help www.computing.net/answers/security/win32trojangen-please-help/26101.html