Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Norton has repeatedly detected a virus Trojan.Vundo in multiple files. They are always *.dll or *.exe. The naming of the files seems to be random letters and/or numbers. It quarantines them but the virus keeps showing up on restart or after several hours. My best guess is that there is another virus which is replacing the files as it detects that they have been removed from my system. Any Idea how to track down what is doing this since norton is not locating it.

Please download VundoFix.exe to your C:\.
Double-click VundoFix.exe to run it.
Click the Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will shutdown your computer, click OK.
Turn your computer back on.
Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button." when VundoFix appears at reboot.Post the log located at C:Vundofix.txt.
Please post a Hijack This log so that the files associated with the virus/spyware/hijacker can be identified.
Please download HJTsetup.exe from this link http://www.thespykiller.co.uk/files/HJTsetup.exe to your desktop.
Doubleclick on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click "next" in the setup dialogue boxes until you get to the "Select Addition Tasks" dialogue.
Put a check by "Create a desktop icon" then click "Next" again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click "Finish" and it will launch Hijack This.
Click on the "Do a system scan and save a logfile" button. It will scan and the log should open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log and post it in this thread.Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly.

![]() |
Internet Explorer grabs 1...
|
Harvester on a website
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |