Trojan horse

chasrowe · Sep 19, 2007

Okay guys haven't needed you for some time but always appreciate your help. My daughter is away at college and her laptop is infected with Trojan Horse named "Vundo" she tried removing it with mcafee but it won't let her because it says the file is write protected. file name is ljjkiig.dll. The path is is in c:\\windows\system32 message from mcafee says "can not be cleared". Please help, thanks as always.

chaslang · Sep 19, 2007

Vundo cannot be completely removed by any commercial application so don't waste your time. It would actually be easier for your daughter to come here and post so we can work with her on removing this infection since it requires a bunch of work.

She should start with the below.

Download this file - combofix.exe

Double click combofix.exe & follow the prompts.

When finished, it will produce a log ( c:\combofix.txt ) for you. Attach this log to your next reply

Note:

Do not mouseclick combofix's window while it is running. That may cause it to stall.

And then she should continue on to the steps here:Using MGtools and attach the requested MGLogs.zip file here afterwards. Vundo often puts a lot of stuff onto a PC and after we get the logs, we can create a procedure to help her remove everything.

Log in or Sign up

Trojan horse

chasrowe Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Log in or Sign up

Trojan horse

chasrowe Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Useful Searches