General discussion

Locked

Trojan.Vundo

By rezrider ·
I have a virus on a clients pc win xp home named trojan.vundo. Norton finds the virus but cannot delete it. It is in c:\windows\fonts\mfcad.dll I tried to manually delete mfcad.dll and that will not work either. I went to symantec site and tried to manually remove the registry entries that they suggested no luck with that either. I tried thier virus removal tool. No luck. Any takers.....
Thanks

This conversation is currently closed to new comments.

11 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by ctrservices In reply to Trojan.Vundo

Boot into Safe Mode, rename the file and then delete. Also, search the Registry in Safe Mode for any mention of the file. Then rescan with Norton AV before you reboot into Normal mode.
You might also have to reset the AV scanning options (Options--click Manual Scan under System--"Comprehensive File scanning"--Bloodhound--check "Enable bloodhound heuristics--click "Highest level of protection"--OK.

Collapse -

by rezrider In reply to

Thank I appreciate the tip, that did not work however. Thanks again

Collapse -

by rezrider In reply to

Thank I appreciate the tip, that did not work however. Thanks again

Collapse -

by lowlands In reply to Trojan.Vundo

Check out the link below. There is a description on how to either remove the virus manually, or you can download a removal tool

http://securityresponse.symantec.com/avcenter/venc/data/trojan.vundo.html

Collapse -

by rezrider In reply to

Hi thank you but this also did not work. thanks again

Collapse -

by rezrider In reply to

Hi thank you but this also did not work. thanks again

Collapse -

by OTL In reply to Trojan.Vundo

Did you try turning off system restore before you removed the offending entries ? Rebooting when completed. Also check for strange program calls on startup ? (one way a virus could rebuild itself on reboot).

Collapse -

by rezrider In reply to

Yes I tried this but thank you.

Collapse -

by golfgg21 In reply to Trojan.Vundo

Just finished a service call w/ this same problem. Several removal 'tools' didn't work safe mode or not. Rename and delete of snyjlsqf.dll in windows system 32 folder failed. Client had let XP Home slip well behind on updates .. only SP1. Loaded SP2 from CD then completed updates from Microsoft including MS's malious software removal tool. After reboots and security setup MS removal caught it and ripped it out. Good luck.

Collapse -

by rezrider In reply to

This was good advice thank you. I tried that on another pc, this particular pc I just did a system restore.

Back to Software Forum
11 total posts (Page 1 of 2)   01 | 02   Next

Related Discussions

Related Forums