Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 91911 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

How do i get rid of Trojan.Vundo (mljji.dll)?


  • This topic is locked This topic is locked
10 replies to this topic

#1 L0st117

L0st117

    New Member

  • Authentic Member
  • Pip
  • 5 posts

Posted 07 November 2005 - 07:49 PM

Ok.

Symantec AntiVirus tells me that i have Trojan.Vundo and that the infected file is C:\WINDOWS\system32\mljji.dll. All Symantec can do is quarantine it, but that does no good because the virus SEVERLY reduces the processing speed of my computer. I'm lagging as I type here.

I tried running:
TrendMicro HouseCall
PandaActiveScan
BitDenfender
AdAware
Spybot Search&Destroy

they found no Trojan.Vundo.

The Symantec Trojan.Vundo removal tool says its not there, while Symantec AntiVirus says it is and constantly has popup notifications about it. I also know its there because my computer is extremely slower since i received the first alert.

I tried going into safe mode and running scans in that, but it says "the file is in use by another program".

Can someone PLEASE give me a step by step on how to remove this?

And i read Micah_6:8's post at http://forums.tomcoy...php/t47837.html on getting rid of it, but i have a question about what he said. He said that the KillTrojan.bat asks for two filepaths, and he said enter C:\WINDOWS\system32\awvvt.dll and ...system32\tvvma.dll. I want to run the program, but i am not sure on what to enter. I know to enter in ...32\mljji.dll because thats infected, but what about awvvt.dll and tvvma.dll? Nothing ever said those two were infected, and if i enter those in and those are uninfected system files, will they be deleted?

Can someone please tell me how to get rid of Trojan.Vundo mljji.dll and/or how to work the removal tool (what to do about the two fil paths) in the removal tool listed here http://forums.tomcoy...php/t47837.html?

Thanks.

You can reply to this or instant-message me on AIM at L0st 117

    Advertisements

Register to Remove


#2 L0st117

L0st117

    New Member

  • Authentic Member
  • Pip
  • 5 posts

Posted 07 November 2005 - 08:45 PM

yea i really need help. my computers lagging to the point where text is lagging

#3 HappyShiner

HappyShiner

    Authentic Member

  • Banned
  • PipPip
  • 52 posts

Posted 07 November 2005 - 09:13 PM

Hi there, I would ignore the fix/tool in that log...it's outdated. I could help you fix Vundo, but the problem with that one is it tends to also install other stuff. My advice is to navigate to the Hijack This forum on this site, read all the stickies and post a Hijack This log. Big Smiles HS
Posted Image
DynaSig: Free Dynamic Forum Signatures!

"Dogs are Running wild in the street...I just can't take it anymore!"

#4 L0st117

L0st117

    New Member

  • Authentic Member
  • Pip
  • 5 posts

Posted 08 November 2005 - 03:28 PM

ok thanks. but would it hurt to try that trojan.vundo fix/tool? and are we talking about the same trojan.vundo (mljji.dll) bc i think theres more than one type? and would i know if it installed stuff on my computer? or would it just be hiding. and how would i get the other stuff off? also, i have HJT bc it said to DL it on that thread, so i did, but i dont know really what it does and what a HJT log tells. and im completely lost in HJT forums. if i reposted a HJT log in this thread could u tell me what to do please? thanks also, do u have a screen name? like AIM? mines L0st 117.

#5 HappyShiner

HappyShiner

    Authentic Member

  • Banned
  • PipPip
  • 52 posts

Posted 08 November 2005 - 04:42 PM

Hi there, I'll explain a couple of things to you....Hijack This is a tool that scans the registry where malware 'has' to install itself and it then reports back on what is there (much of the stuff may be ok...that's why an expert needs to read it). Using Hijack This as a base...an expert then removes those bad items...or...incorporates other specialist tools if required to remove them. Essentially, Hijack This is our central tool for fixing malware infections. Now, since you have posted a Hijack This log on site it would be unfair of me to jump in and say do 'X' or 'Y' on whoever is, or will be, helping you. In your case, patience for an expert to address your log would be the best way to go...as the resulting fix won't be partial but complete. Big Smiles HS
Posted Image
DynaSig: Free Dynamic Forum Signatures!

"Dogs are Running wild in the street...I just can't take it anymore!"

#6 L0st117

L0st117

    New Member

  • Authentic Member
  • Pip
  • 5 posts

Posted 08 November 2005 - 05:11 PM

ok... but the thing is, i have no expert helping me with my system. thats why im asking people for help. could u please tell me which things to check and fix on HiJackThis?

#7 HappyShiner

HappyShiner

    Authentic Member

  • Banned
  • PipPip
  • 52 posts

Posted 08 November 2005 - 06:11 PM

Hi there,

Fine....
Download the trial version of Spy Sweeper from Here

Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it. If you receive alerts from your firewall, allow all activities for Spy Sweeper)

You will be prompted to check for updated definitions, please do so.
(This may take several minutes)

Click on Options > Sweep Options and check Sweep all Folders on Selected drives. Check Local Disc C. Under What to Sweep, check every box.

Click on Sweep and allow it to fully scan your system.

When the sweep has finished, click Remove to remove any items found.

Exit Spy Sweeper.

Let me know if Download the trial version of Spy Sweeper from Here

Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it. If you receive alerts from your firewall, allow all activities for Spy Sweeper)

You will be prompted to check for updated definitions, please do so.
(This may take several minutes)

Click on Options > Sweep Options and check Sweep all Folders on Selected drives. Check Local Disc C. Under What to Sweep, check every box.

Click on Sweep and allow it to fully scan your system.

When the sweep has finished, click Remove to remove any items found.

Exit Spy Sweeper

Let me know if Vundo is still there.

Big Smiles

HS
Posted Image
DynaSig: Free Dynamic Forum Signatures!

"Dogs are Running wild in the street...I just can't take it anymore!"

#8 L0st117

L0st117

    New Member

  • Authentic Member
  • Pip
  • 5 posts

Posted 08 November 2005 - 10:15 PM

thanks. spy sweeper didnt get trojan.vundi but quarantined a few others. how do i get those off my system? more importantly trojan.vundo (mljji.dll)? and this was the trail version which only lasts 14 dayts. will it un-quarantine them after 14 days or what?

#9 Micah_6:8

Micah_6:8

    Evilware Emancipator

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,060 posts
  • Interests:Web (Perl, PHP, JavaScript, HTML) programming, CNC programming, Squashing spyware!

Posted 08 November 2005 - 10:19 PM

Click Me
Micah 6:8 He hath shewed thee, O man, what is good; and what doth the LORD require of thee, but to do justly, and to love mercy, and to walk humbly with thy God?

The help you receive here is free.
If you wish to show your appreciation, then you may donate to help keep us online.

Want to help others? Join the ClassRoom and learn how.

Download Hijack This! My Website: UnSpyMe!

#10 HappyShiner

HappyShiner

    Authentic Member

  • Banned
  • PipPip
  • 52 posts

Posted 08 November 2005 - 10:39 PM

Hi there, You have the trial version for 14 days...but...it won't unleash those things it has removed from your machine when that trial ends...they are removed. Vundo still remains? Don't worry. You have posted an HJT log...therefore I will leave you in the HJT expert's capable hands. It is bad form to have the same problem treated in more then one thread or forum in any case. They will fix your issue :) Big Smiles HS
Posted Image
DynaSig: Free Dynamic Forum Signatures!

"Dogs are Running wild in the street...I just can't take it anymore!"

#11 tashi

tashi

    Forum God

  • Root Admin
  • 11,520 posts

Posted 09 November 2005 - 12:34 PM

Re malware removal:
Who Will Help You With Your Hijackthis Log

The hjt log has been posted in the correct forum; this topic is closed.

Microsoft MVP 2006-2016. Windows Insider MVP 2016-2018. Microsoft MVP Reconnect 2018

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users