Specialty Forums
Security and Virus
General Hardware
CPUs/Overclocking
Networking
Digital Photo/Video
Office Software
PC Gaming
Console Gaming
Programming
Database
Web Development
Digital Home

General Forums
Windows XP
Windows Vista
Windows 95/98
Windows Me
Windows NT
Windows 2000
Win Server 2008
Win Server 2003
Windows 3.1
Linux
PDAs
BeOS
Novell Netware
OpenVMS
Solaris
Disk Op. System
Unix
Mac
OS/2

Drivers
Driver Scan
Driver Forum

Software
Automatic Updates

BIOS Updates

My Computing.Net

Solution Center

Free IT eBook

Howtos

Site Search

Message Find

RSS Feeds

Install Guides

Data Recovery

About

Home
Reply to Message Icon Go to Main Page Icon

virus help

Original Message
Name: angle02
Date: January 2, 2008 at 13:25:33 Pacific
Subject: virus help
OS: Windows XP
CPU/Ram: pentium4
Model/Manufacturer: Compaq Presario
Comment:
Hi all,

I am at a loss here, so I apologize if this is a bit long.

A couple of weeks ago, Norton began alerting me to a TrojanVundo virus - which it was unable to delete.

I had read on multiple forums to use vundofix - which I ran - as well as running Symantec's own Vundo removal tool. Neither tool found any instances.

I ran both Spybot and Ad-Aware, both of which repeatedly found instances of Virtumonde (it kept returning over and over). The problem became worse - it seemed - the more I used these two programs to remove Virtumonde. Upon re-starting my computer, I found it completely bogged down by an infinite number of Symantec popups which displayed TrojanVundo alerts.

I then ran SpyBot and AdAware in safe mode - again finding multiple VM instances. I re-started my computer, only to find Norton now completely disabled (the desk icon intact but dysfunctional). I installed AVG Free and ran it, and found quite a few viruses - which i promptly removed.

This brings me to my current problem: I am now unable to use any secure connections over the internet (email, online ordering, even updating anti-virus programs like AVG)no matter what browser i use. When i re-start my computer, a message reads: Error loading C:/Windows/system32/yvhumtwc.dll. A couple viruses also seem to return every few days, but are quickly detected by AVG. Unfortunately, because I am unable to update AVG, I am not sure if there are new components of the virus it may not be detecting.

Did I remove an important component possibly (I'm sorry if that is a stupid question) or do you think I might still have a virus?

I sincerely thank anyone who can help me here. Admittedly, I am a bit of a computer idiot.


Report Offensive Message For Removal


Response Number 1
Name: XpUser4Real
Date: January 2, 2008 at 14:14:28 Pacific
Subject: virus help
Reply: (edit)
try this free online scan:
http://www.spywareinfo.com/xscan.php
and remove all it finds.

A good place to start is by scanning with ALL the free progs listed in the link of this post.

Are you using the immunize setting in Spybot S&D? You should be.
Spyware Blaster is also good to prevent problems, as long as you keep up-dating it every 2 weeks or so.

I see you are using AVG and Norton....not a good plan, be sure to uninstall Norton using their uninstaller from their website or AVG or any other AV won't work properly as you can see AVG won't update.

Did your norton subscription run out? Sometimes when people let their subscription expire and think they are still covered, it doesn't happen.

That's when you get nailed with viruses. Also make sure to have all your critical up-dates installed, that will help too.


Some HELP in posting on Cnet plus free progs and instructions Glad to Help!


Report Offensive Follow Up For Removal

Response Number 2
Name: angle02
Date: January 2, 2008 at 15:31:35 Pacific
Subject: virus help
Reply: (edit)
Thanks for the response XpUser4Real,

I downloaded AVG only after I realized that Norton was incapacitated. The desk icon is still present, but nothing happens when it is selected.

For some reason, I am also unable to uninstall Norton. I can't access the download, probably for the same reason I am unable to access secure internet connections. When I try to uninstall via the add/remove function, a message tells me I need to be signed in to uninstall (which I can't do because the program isn't working).

I have been reading through the FAQ, and I had exactly what was being described in the Trojan Vundo thread. I used SpyBot (immunize and all), AdAware-SE, and then AVG, which I believe - combined- got rid of it (VirtuMonde has not been detected on any of these since). I am running SpySweeper now (as many in that thread topic suggested), but will most definitely give the scan you suggested a try afterwards.

Thank you for your input, it is much appreciated.


Report Offensive Follow Up For Removal

Response Number 3
Name: worldlibrary
Date: January 2, 2008 at 17:07:06 Pacific
Subject: virus help
Reply: (edit)

Anti virus, trojan,syp programs can take out needed system files bringing a computer to its knees. Sometimes faster than the virus itself.

If you made a backup....now would be the time to use it. Get those missing files replaced and the machine up and running again.

The backup only replaces missing files and you should lose nothing. email,files ect.

Then run one anti program at a time...in safe mode.

If you have a restore point, don't let any program scan it.



Report Offensive Follow Up For Removal

Response Number 4
Name: XpUser4Real
Date: January 2, 2008 at 20:45:53 Pacific
Subject: virus help
Reply: (edit)
your best bet will be to download the norton uninstaller and the spyware progs plus RegCleaner:
http://www.majorgeeks.com/download4...
and remove any instances of norton it finds AFTER you use the removal tool.

Burn them on a cd and run them on your PC.
you can use cdrw's too, no problem...just download them on a different PC and run them on your PC.


Some HELP in posting on Cnet plus free progs and instructions Glad to Help!


Report Offensive Follow Up For Removal

Response Number 5
Name: angle02
Date: January 2, 2008 at 22:07:14 Pacific
Subject: virus help
Reply: (edit)
Thanks, that's a good idea.

Thank you both for responding.



Report Offensive Follow Up For Removal


Response Number 6
Name: btk1w1
Date: January 3, 2008 at 03:28:15 Pacific
Subject: virus help
Reply: (edit)
Vundo is a tricky trojan to remove due to the fact it morphs...

Which is why general cleaning processes tend to be unsuccessful.

The fact that you appear to have a random .dll file indicates this strongly.(did you use the most powerful search engine provided and come up with blank?)

You need more articulated methods of removal.



Report Offensive Follow Up For Removal

Response Number 7
Name: XpUser4Real
Date: January 3, 2008 at 09:31:33 Pacific
Subject: virus help
Reply: (edit)
the last resort usually is hijackthis. Download it to your pc, execute the file and then post your results in this:
http://hijackthis.de/
Then google the questionable results and see what can be removed safely. Good Luck

Some HELP in posting on Cnet plus free progs and instructions Glad to Help!


Report Offensive Follow Up For Removal



Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: virus help

Comments:

 
  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 


Data Recovery Software




XP Installed to G?

exessive internet traffic

ZoneAlarm Question. Blocked Connect

Windows Live Messenger Problem

Delete $Uninstall after SP3 updates


The information on Computing.Net is the opinions of its users. Such opinions may not be accurate and they are to be used at your own risk. Computing.Net cannot verify the validity of the statements made on this site. Computing.Net and Computing.Net, LLC hereby disclaim all responsibility and liability for the content of Computing.Net and its accuracy.
PLEASE READ THE FULL DISCLAIMER AND LEGAL TERMS BY CLICKING HERE

All content ©1996-2007 Computing.Net, LLC