Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I have the grueling task of removing the Trojan.Vundo virus from my wife's computer. I have tried everything, exept I have not sent in my HijackThis log yet. I have a red virus alert from Norton stuck on my desktop and it won't go away. I have followed Symantec's instructions for manual removal, with no success. When looking for any related registry keys to delete, none of them existed. I tried their Trojan.Vundo removal tool and the results said that the virus was not detected.
The only thing I can think of is to show someone my HJT log and have them show me the way, but I guess we're not supposed to post it, unless requested. If it helps, message #16704 explained EXACTLY what I'm going through, exept on my computer the virus is located in my pmnlk.dll file in Windows. c:\windows\sustem32\pmnlk.dll
I also cannot delete the file, because it is "being used by another person or program". Any help would be appreciated. Thanks!

winfixer.com should be reported to your state atty general office and request investigation into invasion of privacy and attack on computer.
Lets get those bad guys!

yes I have the same problem with my wifes computer also. (Did all the wives visit the same infected website?) Yes, i've had the same exact bad luck as listed above with symantec. Their tech support told me to pay $40 and they'd help me remove it. (keep in mind I just barely paid $50 for their antivirus program that is supposed to catch this crap) Is their really a chance that paying the $40 for their special virus-removal team will work? or is it just money lost?
The supposed infected file is: windows\system32\ssqpp.dlllike the other post... the annoying window wont go away even though the trojan.vundo removal program says its gone. I think its a problem with Symantec Antivirus 2005. Come on symantec... make some real software.(or make a patch "PRONTO" !!! )

Hey Uncool ...
Norton's gave me the same crap about paying the extra $40 to help me remove the trojan Vundo, but I sent them a nasty e-mail and told them I would rather give the money to their competition since I'd already paid my $50.00 to run their crappy program on my computer. Funny how an e-mail like that will bring on a FREE response. *LOL*. They suggested that I go to the windows site and download any upgrades (I'm on automatic updates so I didn't need to do that), then update your Norton's to make sure you have all the most current virus definitions. Now turn off your system restore till you get the virus under control. Next run the Norton's antivirus program in 'safe mode' .. but first if you are on Cable, disconnect it and also turn your computer completely off (all power sources) for at least 30 seconds to stop the trojan from running in the memory. Now that you have your computer in Safe Mode do a scan with Norton's. I didn't use this method because I had already downloaded Spy Sweeper and did a sweep in "Safe Mode" and it did find and quarantine it for me. I'm wondering if the "free advice" from Norton's would have worked. I was so grateful to Spy Sweeper that I did buy a years subscription to their product which cost me $22.00. Alot less than the Norton's and they had a very easy site to navigate and tech help was there to assist me. Good luck with your wife's computer.
Maggie

Maggie,
I did what you told me in Norton. It did NOT work.
So I downloaded the free 14-day trial version of Spysweeper and ran it like you did....It worked !!! I'll be dumping symantec and switching to Webroot products from now on.
(I'm also a sales rep for a large software reseller and will be switching my 200+ corporate & gov. accounts from symantec NAV enterprise licenses over to webroot products as soon as their symantec maintenance expires because of how they treated me)

Maggie,
For some reason, Norton will not run in safe mode, but I just tried it in normal and it works perfect. In safe mode I just get an error message saying that a specific file in Norton could not access the server. It's not a trial version either, I paid the $50, but it's got problems. I dumped Norton on my computer and now trying AVG Free anti-virus. I've heard pretty good things about them too. I am going to try and download SpySweeper now, since it worked for you and uncool. Hope it works! I'll let you know how it turns out. If any experts at all want to review my HJT log please let me know, as I can't post it on here otherwise. Thanks!

Spy Sweeper is AAWWWSSOOMME! I have been messing with this trojan for 3 days and all it took was a 5 minute scan with Spy Sweeper to get rid of it. I downloaded the free trial and now I'm buying the software for $29. Oh yeah, I wasn't impressed with Norton over this whole deal, so I wiped it off my computer and now I'm going with Webroot AVG Free anti-virus. Thanks for the help!

Hey Uncool and MyIssues ...
I'm so happy that Spy Sweeper worked for you both! I know how it feels to be in that frustrating position ... especially when Norton's was very little help. Some of the fixes on this site were too complicated for me to figure out so I'm glad there are programs out there that can help.
Thank you both for telling me that the Norton's remedy wouldn't have worked, now I don't have to wonder. My subscription to Norton's is up in November ... guess I will be trying AVG (*thanks for the tip). I'm glad we all got rid of this VUNDO ... THANKS SPY SWEEPER!

I am having the same problem with Trojan.Vundo (not the 'B' version). I have tried Norton's tool for Vundo removal (which ran for over 5 hours) and several others to no avail.
I would be GREATLY appreciative of any help. My HJT log will be submitted on request. Thanks in advance!

Go to http://www.techguylive.com/
It's the best $25 bucks you'll ever pay
to get rid of this nasty Trojan Vundo.
They do it all for you. They log into your
desktop and you watch them go through all
the steps. I tried for hours to do it myself. It did take about 2 1/2 hours with the techguylive. Like I said. $25 bucks! It's well worth it.

John,
Scroll up a few posts and follow the instructions. Download the free spy sweeper program from webroot. It's free and it takes 5 minutes to remove Vundo, no computer knowledge required. Hope it works for you like it did for me.
Maggie

i had the exact problem as the topic starter. i tried to use NAV 2005 (money wasted) to no avail. i tried to manually remove, and received the same "being used" message.
luckily, i found this forum yesterday & noticed many people having success with Webroot Spy Sweeper, which i also have on my laptop. so i ran that last night & the file is now gone!
my only complaint is that Spy Sweeper did not automatically catch & quarantine it. but then again, at least it fixed it! which is more than i can say for NAV, which detected it & told me the name but did absolutely nothing to prevent it from hitting my computer or to aid in deleting it.
my advice would be to go with Spy Sweeper if you can. i didn't have to play around in safe mode or follow some huge list of instructions. i didn't have to pay Best Buy the $140 or so they quoted me to fix it. i simply ran Spy Sweeper once. 10 minutes or so later? problem solved.
good luck!

SpySweeper just made my day. I've been trying to get rid of this nasty adware Trojan.Vundo for days. Norton software
(along the way I found out that the "removal tool" on their website is out of date)and their tech support were 100% useless. The irony was that I already have the spy sweeper program installed but it was not updated for a few months. So it took a couple minutes to update to version 4.5.3 and the...stuff was removed. Definitively feeling better now. Good luck everyone on dealing with all those bugs.

The Norton Trojan.Vundo Removal Tool 1.3.1 worked perfectly for me. Unfortunately, Norton neglected to say that they have updated the August 23, 2005 version, but they have.

I have removed this virus a couple of time now. I have a method that seems to work.
1) Before doing anything, turn off the system Restore. Vundo re-installs itself upon reboot.2)Download and run the FixVundo.exe tool from symantec. ( http://securityresponse.symantec.com/avcenter/venc/data/trojan.vundo.removal.tool.html )
3) I use a few tools to clean up the PC. CCleaner is one(free) and so is CleanUp40!
Both, and nore free tools, available at:
http://www.jamesclancy.com/Downloads.html.4) I then installed, updated and ran Spybot to clean off spyware.
this seem to do it.

wow it did work, i dowloaded it (spysweeper)and i finally got rid of vundo after weeks of suffering.
The Norton Trojan.Vundo Removal Tool 1.3.1 did not worked for me at all.

Symantec solution sucks! (and I love these guys).
Here's what worked for me
1. Boot pc using manufacturers CD recovery disk (mine is Dell).
2. Once windows is up, use DOS command line to delete xxx.dll file from WINDOWS/SYSTEM32 folder (or whatever named file si causing your problem.
3. Reboot from c drive
4. Download latest virus software
5. Run complete virus scan for machine.
6. Check results are good.
7. Have a very stuff whiskey after messing around for 2 weeks with garbage solutionsLater dudes!

So I tossed my laptop out the second floor window and it survived, so i figured I might as well continue trying to remove this damn Trojan.Vundo.B ...Ive done EVERYTHING THAT EVERYONE HAS SAID, and still no luck "thats why i tossed it out:)" I have a file infected named qopqn.dll, located in...
C:\WINDOWS\system32\qopqn.dllNow,
1.manual delete does not work
2.Safe mode manual delete does not work
3.Safe mode and normal mode Symantec Trojan.Vundo.B Removal Tool 1.0.0 DOES NOT WORK..."it says "Trojan not found"
4.Safe mode and normal mode Norton Trojan.Vundo Removal Tool 1.3.1 DOES NOT WORK..."it says "Trojan not F**cking found"
5.Reformating My Computer DOES NOT WORK! (i know i was like wtf?
"Goin a lil crazy now"6.Safe mode and normal mode Norton Trojan.Vundo Removal Tool 1.4.0..."it says "Trojan found and deleted will be gone after reboot" so i had already disabled System Restore, and norton peace of s*it anti virus...rebooted, and wouldnt you know it...The lil S*it is...oh wait no its gone! F*ck Ya! Time for a Very Dirty Martini and some Advil!
P.S:
7.THROWING IT OUT THE WINDOW!DOES NOT WORK!!!
So Refer to method #6P.P.S: And if that doesnt work...Start off with a double dose of dirty martinis and 3 Advils!
Good Luck! -Cole-
Holly crap im done
-Cole-

why dont you just download and run the free trial version of spysweeper and be done with it?
several of us already mentioned this in our earlier posts.
its fast, its free and it works. trust me.

I got this nasty Trojan Vundo B on my Dell Dimension 2400 - it disabled Internet Explorer and I was unable to get online to download any sort of fix-it program. I have Norton AntiVirus 2005, which I paid $49.99 for back in April - and I could not fix the problem using any of their solutions. I had to get a computer tech out to my house to the tune of $250 - and now it is fixed - but at great cost. I have always been able to delete viruses in the past. This one is particularly nasty. And, after this episode, I have very little use for Norton and Symantec. I paid for their damn AntiVirus and it doesn't work!!! And their phone support sucks too! I have AOL - and the tech who came to my house said that the AOL Anti-Spyware is useless, as is Norton - and he installed Microsoft Anti Spyware for me. I just hope this doesn't happen again - I can't afford to pay $250 again!
Perhaps we all should write nasty emails to Symantec???

My subscription to NAV runs out in a few weeks. I was thinking of getting rid of it, (Going with another software) but I heard there have been allot of problems removing it. Has anyone had any problems uninstalling NAV 2005?
TIA

I, too, have not been able to get rid of Vundo with the Norton Removal Tool in and out of SafeMode. I, too, downloaded Spy Sweeper and was able to remove the trojan with no difficulty. Moreover, I specifically purchased NAV from Dell instead of the McAfee that was offered. I can not understand why Norton is unable to help with removal of Vundo, but Spy Sweeper has saved me from reformatting my hard drive.

Someone please help me. I'm trying to delete Vundo! Nothing works. I downloaded the Spysweeper it didn't work. It said to remove subscribe. I need this virus off my computer.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |