Hi to all,

My machine is affected by Trojan Virus and I am not able to disinfect this virus.Can any one suggest some any ideas or their experiences


My Antivirus shows following viruses
a. Trojan Vundo
b. Trojan Downloader


Symptom(s):
1. Automatically open internet explorer and go to some kind of flashy sites" Blacjack.com, wincash.com e.t.c" . Although i have uninstalled Internet explorer from control panel.

2.It automatically make some hidden temporary folders with java script on the location ...\Temp internet Files\Content.IE5\ where it store the list of those flashy website names.

Hidden Folders means it can't be seen with Option "Show hidden files or folder " But you can go to that location if you use "Change Directory" DOS command or you enter same location on folder address bar.

3. My "Real time Symantec protection" with daily updated virus list can catch those script files, when they tried to execute that script, but unable to find the source that creates it.

Action Taken:
1. Downloaded and run FixVundo from symantec site, did not help
2. Install Adware softwares "Ad ware 2007" or from google updater still not able to find the source.
3. Tried to delete thoes temp internet folders with "Windows & Internet Cleaner Pro"
or opening the machine in safe mode with command prompt.
4. Right now I have disabled all the option of internet explorer like "Transfer files, allow java script", so it is not able to dowload any thing from diff site. still its very annoying that new window will open in every 5-10 minutes


I am really frustrated that i am unable to to remove this virus.

HELP PLEASE

try using Spybot search & destroy anti spyware
http://www.safer-networking.org/en/download/index.html

and then download and run ccleaner
http://www.ccleaner.com/download/

run a full system scan with your anti-virus

if none of these work then you can always restore your system to earlier time or format your hard drive and reinstall the operating system

try vundofix
http://www.softpedia.com/get/Antivirus/VundoFix.shtml


i am not sure if it will remove all the vundo files. It may not be able to delete djjjkl.dll. The best way to get rid of vundo:
1. list all the files that are infected and do a search in your registry for those files.
2. Delete all the registry values listing those files.
3. User BartPE or MiniPe to boot your system.
4. Locate those files in the C:\windows\system32 folder and delete them manually.
5. clear the cache files for dll in "%SYSTEMROOT%\system32\dllcache"

Use hijackthis to scan your system
http://www.download.com/HijackThis/3000-8022_4-10379544.html

Good luck

Or,
Create a backup copy of your important files and reinstall the OS.

One more thing. Use (instead of "user") BartPe or MiniPe in my previous post.

I think you are having that problem because there must be some kind of Adware or Spyware installed in your computer without your knowing. This happens when you download some and try to install some program that installs other programs. What you need to do is run disk cleanup, delete temp internet files, and go to control panel and open add/remove program. see for programs that you don't recognize, google the names if you do not recognize them. then remove the adware program. Hope this helps. good luck

and ofcourse don't forget to run Spybot.