Vundo.KC

[jeffp86]

So somehow my computer has become infected with the trojan horse Vundo.KC virus... ran spy bot, then again automatically at reboot... found the entries and 'removed' them but they just come right back after spybot closes.

Ran VundoFix, didn't show up with anything, but during the scan when it was going through \system32\ avg popped up and detected 3 infected files under c:windows\system32\ the names are labijima.dll kofumaje.dll and devinodo.dll

Clicking remove selected infections in avg, seems to fix the problem for a few minutes, but then the pop ups start again and avg pops back up saying it detected the same type of infection but the file names are different each time this happens

Also ran a virus scan on my whole C drive with avg and it returned 0 results, it seems to only detect it when the virus is trying to open a pop up...

Any help would be greatly appreciated! I've had this laptop for 6 years and it still runs like new because I take care of my stuff... this is driving me crazy!

[Shaba]

Hi jeffp86

Click here (http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe) to download HJTInstall.exe
Save HJTInstall.exe to your desktop.
Doubleclick on the HJTInstall.exe icon on your desktop.
By default it will install to C:\Program Files\Trend Micro\HijackThis .
Click on Install.
It will create a HijackThis icon on the desktop.
Once installed, it will launch Hijackthis.
Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT use the AnalyseThis button, its findings are dangerous if misinterpreted.
DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

[Shaba]

Due to the lack of feedback this Topic is closed.

If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.

If it has been less than four days since your last response and you need the thread re-opened, please send a private message (pm). A valid, working link to the closed topic is required. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.

Everyone else please begin a New Topic.