How do i get rid of Trojan.Vundo (mljji.dll)?

Ok.

Symantec AntiVirus tells me that i have Trojan.Vundo and that the infected file is C:\WINDOWS\system32\mljji.dll. All Symantec can do is quarantine it, but that does no good because the virus SEVERLY reduces the processing speed of my computer. I'm lagging as I type here.

I tried running:
TrendMicro HouseCall
PandaActiveScan
BitDenfender
AdAware
Spybot Search&Destroy

they found no Trojan.Vundo.

The Symantec Trojan.Vundo removal tool says its not there, while Symantec AntiVirus says it is and constantly has popup notifications about it. I also know its there because my computer is extremely slower since i received the first alert.

I tried going into safe mode and running scans in that, but it says "the file is in use by another program".

Can someone PLEASE give me a step by step on how to remove this?

And i read Micah_6:8's post at http://forums.tomcoyote.org/lofiversion/in…php/t47837.html on getting rid of it, but i have a question about what he said. He said that the KillTrojan.bat asks for two filepaths, and he said enter C:\WINDOWS\system32\awvvt.dll and …system32\tvvma.dll. I want to run the program, but i am not sure on what to enter. I know to enter in …32\mljji.dll because thats infected, but what about awvvt.dll and tvvma.dll? Nothing ever said those two were infected, and if i enter those in and those are uninfected system files, will they be deleted?

Can someone please tell me how to get rid of Trojan.Vundo mljji.dll and/or how to work the removal tool (what to do about the two fil paths) in the removal tool listed here http://forums.tomcoyote.org/lofiversion/in…php/t47837.html?

Thanks.

You can reply to this or instant-message me on AIM at L0st 117

yea i really need help. my computers lagging to the point where text is lagging

Hi there, I would ignore the fix/tool in that log…it's outdated. I could help you fix Vundo, but the problem with that one is it tends to also install other stuff. My advice is to navigate to the Hijack This forum on this site, read all the stickies and post a Hijack This log. Big Smiles HS

ok thanks. but would it hurt to try that trojan.vundo fix/tool? and are we talking about the same trojan.vundo (mljji.dll) bc i think theres more than one type? and would i know if it installed stuff on my computer? or would it just be hiding. and how would i get the other stuff off? also, i have HJT bc it said to DL it on that thread, so i did, but i dont know really what it does and what a HJT log tells. and im completely lost in HJT forums. if i reposted a HJT log in this thread could u tell me what to do please? thanks also, do u have a screen name? like AIM? mines L0st 117.

Hi there, I'll explain a couple of things to you….Hijack This is a tool that scans the registry where malware 'has' to install itself and it then reports back on what is there (much of the stuff may be ok…that's why an expert needs to read it). Using Hijack This as a base…an expert then removes those bad items…or…incorporates other specialist tools if required to remove them. Essentially, Hijack This is our central tool for fixing malware infections. Now, since you have posted a Hijack This log on site it would be unfair of me to jump in and say do 'X' or 'Y' on whoever is, or will be, helping you. In your case, patience for an expert to address your log would be the best way to go…as the resulting fix won't be partial but complete. Big Smiles HS

ok… but the thing is, i have no expert helping me with my system. thats why im asking people for help. could u please tell me which things to check and fix on HiJackThis?

Hi there,

Fine….
Download the trial version of Spy Sweeper from Here

Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it. If you receive alerts from your firewall, allow all activities for Spy Sweeper)

You will be prompted to check for updated definitions, please do so.
(This may take several minutes)

Click on Options > Sweep Options and check Sweep all Folders on Selected drives. Check Local Disc C. Under What to Sweep, check every box.

Click on Sweep and allow it to fully scan your system.

When the sweep has finished, click Remove to remove any items found.

Exit Spy Sweeper.

Let me know if Download the trial version of Spy Sweeper from Here

Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it. If you receive alerts from your firewall, allow all activities for Spy Sweeper)

You will be prompted to check for updated definitions, please do so.
(This may take several minutes)

Click on Options > Sweep Options and check Sweep all Folders on Selected drives. Check Local Disc C. Under What to Sweep, check every box.

Click on Sweep and allow it to fully scan your system.

When the sweep has finished, click Remove to remove any items found.

Exit Spy Sweeper

Let me know if Vundo is still there.

Big Smiles

HS

thanks. spy sweeper didnt get trojan.vundi but quarantined a few others. how do i get those off my system? more importantly trojan.vundo (mljji.dll)? and this was the trail version which only lasts 14 dayts. will it un-quarantine them after 14 days or what?

Hi there, You have the trial version for 14 days…but…it won't unleash those things it has removed from your machine when that trial ends…they are removed. Vundo still remains? Don't worry. You have posted an HJT log…therefore I will leave you in the HJT expert's capable hands. It is bad form to have the same problem treated in more then one thread or forum in any case. They will fix your issue Big Smiles HS

Re malware removal:
Who Will Help You With Your Hijackthis Log

The hjt log has been posted in the correct forum; this topic is closed.