Software

Ask something
Discussion Locked

Trojan.Vundo

0 helpful
11 replies

by rezrider

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a virus on a clients pc win xp home named trojan.vundo. Norton finds the virus but cannot delete it. It is in c:\windows\fonts\mfcad.dll I tried to manually delete mfcad.dll and that will not work either. I went to symantec site and tried to manually remove the registry entries that they suggested no luck with that either. I tried thier virus removal tool. No luck. Any takers.....
Thanks

11 replies

by gary56789

Boot into Safe Mode, rename the file and then delete. Also, search the Registry in Safe Mode for any mention of the file. Then rescan with Norton AV before you reboot into Normal mode.
You might also have to reset the AV scanning options (Options--click Manual Scan under System--"Comprehensive File scanning"--Bloodhound--check "Enable bloodhound heuristics--click "Highest level of protection"--OK.

by otl

Did you try turning off system restore before you removed the offending entries ? Rebooting when completed. Also check for strange program calls on startup ? (one way a virus could rebuild itself on reboot).

by glennyg01

Just finished a service call w/ this same problem. Several removal 'tools' didn't work safe mode or not. Rename and delete of snyjlsqf.dll in windows system 32 folder failed. Client had let XP Home slip well behind on updates .. only SP1. Loaded SP2 from CD then completed updates from Microsoft including MS's malious software removal tool. After reboots and security setup MS removal caught it and ripped it out. Good luck.

by rezrider

This was good advice thank you. I tried that on another pc, this particular pc I just did a system restore.

This discussion is closed to new replies.