Tom's Guide | Tom's Hardware | Tom's Games

Computing.Net > Forums > Security and Virus > vundo trojan

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

vundo trojan

Reply to Message Icon

Name: sherryt
Date: September 17, 2005 at 03:21:58 Pacific
OS: xp home,sp2
CPU/Ram: 3200+ AMD Athlon /512 mb
Comment:

i picked up the vundo trjan somewhere. searched for help. ran hijack this. found one entry, but it wouldnt get rid of it. searched my registry, deleted the BHO for it. but it was still there.
i downlaoded process explorer, fix vundo registry file and also killbox. I ran in safe mode and followed all instructions that i had found. killbox would not work for me. i tried it twice, but everything went fine. i've deleted all cookies, shut off system restore. etc. ran hijack this again and its still there, still getting msevent popups.

now what? how do i get rid of it?

XP Home sp2., Compaq Presario SR1330NX, 512mb ram, AMD Athlon, LAN



Sponsored Link
Ads by Google

Response Number 1
Name: johnr
Date: September 17, 2005 at 07:09:09 Pacific
Reply:

Have you tried Symantec's removal tool? - download & instructions here:

http://securityresponse.symantec.com/avcenter/venc/data/trojan.vundo.removal.tool.html


"I know that I'm mad - I've always been mad..."


0

Response Number 2
Name: sherryt
Date: September 17, 2005 at 16:29:14 Pacific
Reply:

thank you for the link.

I ran the program as instructed and it found nothing, both times. Maybe i got it. I hope. I havent been on all day, so i'll have to wait and see.

thanks again.

XP Home sp2., Compaq Presario SR1330NX, 512mb ram, AMD Athlon, LAN


0

Response Number 3
Name: sherryt
Date: September 18, 2005 at 02:14:29 Pacific
Reply:

I was on my comp for 3hours last night, after doing the removal and there were no incidences or popups of any kind. Then first thing this morning they started again. I ran process explorer to stop them. what it is finding is a BHO which is in my win32 file. its nnnll.dll, the same thing hijack this found. i deleted this key from my registry. so why cant i get rid of it? where else might i find it? Or what else can i so.
I just finished running trendmicro housecall and it found nothing.

XP Home sp2., Compaq Presario SR1330NX, 512mb ram, AMD Athlon, LAN


0

Response Number 4
Name: XpUser4Real
Date: September 18, 2005 at 23:55:30 Pacific
Reply:

Try WinPatrol
and find out which browser helpers are running and remove the ones you don't need.
This is a great freebie and also warns you when programs try to get installed on your PC along with other features.

Hopefully my advice will help you...Please post back with your results....thanks


0

Response Number 5
Name: sherryt
Date: September 19, 2005 at 04:07:42 Pacific
Reply:

XpUser4Real, thanks for your help. i used the winpatrol and it seems to have done the trick. i ran hijack this twice and no signs of the bho. *crossing fingers*. thanks again.

XP Home sp2., Compaq Presario SR1330NX, 512mb ram, AMD Athlon, LAN


0

Related Posts

See More



Response Number 6
Name: XpUser4Real
Date: September 19, 2005 at 08:49:26 Pacific
Reply:

Thanks a million for posting back and hope all works out well for you in the future!

Hopefully my advice will help you...Please post back with your results....thanks


0

Response Number 7
Name: 12boutside
Date: October 9, 2005 at 06:46:13 Pacific
Reply:

I got this thing yesterday. My Symantec finds it, but cannot delete or clean it: systems32/byvvt.dll - Tried the removal tool in and out of Safe Mode and it find nothing. Also tried suspending some programs as sugested by one person - no luck. I'm a novice at these things - would be grateful for instructions on what to do? - -
:( - Mary


0

Response Number 8
Name: sherryt
Date: October 9, 2005 at 12:08:16 Pacific
Reply:

I also tried everything. Even the Samantic Vundofix wouldnt work.this was a hard one to get rid of.
But do use WinPatrol that XpUser4Real suggested. It was the only thing that worked for me. Also after that, my Adaware program got updated and it found and got rid of the registry keys that i couldnt find. Been running fine ever since.

Wish you luck.

XP Home sp2., Compaq Presario SR1330NX, 512mb ram, AMD Athlon, LAN


0

Response Number 9
Name: andy1
Date: October 10, 2005 at 14:16:44 Pacific
Reply:

try these instructions explaining how to remove vundo trojan


0

Sponsored Link
Ads by Google
Reply to Message Icon



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links
Ads by Google


Results for: vundo trojan
Zlob and Vundo Trojan www.computing.net/answers/security/zlob-and-vundo-trojan/21848.html

Vundo Trojan efcdeec.dll www.computing.net/answers/security/vundo-trojan-efcdeecdll/21616.html

Vundo Trojan www.computing.net/answers/security/vundo-trojan/21529.html