looking for a bit of help with vundo trojan

[haden]

i'm having a good bit of trouble trying to remove it. i'm on my dads computer which is infected so i'm writing this while running in safe mode on win xp pro. i've try'ed a couple of different virus scans and symantec has a removal tool but non have worked so far. I found it under C:\WINDOWS\system32\vturs.dll but i cant strait out remove it as it states the file is being used by a program and to close the program but doesn't say what program. i don't want to try to remove it without advice becuse i don't know if i might mess something up. when i ran the removal tool under safe mode it says the file doesn't exist but i can find it through the file system without problems.

any help would be more than appreciated.

[noid]

Re: looking for a bit of help with vundo trojan

This thread on another forum seems to have all sorts of good ideas

http://www.computing.net/security/ww...rum/17042.html

(found by googling 'vturs.dll', btw)

If none of those work, grab your favorite UNIX liveCD, boot it, mount the drive and remove the offending DLL (and replace with a clean one from a known good system).

[Greyhatter]

Re: looking for a bit of help with vundo trojan

C:\WINDOWS\system32\vturs.dll

Have you tried to rename the extention, reboot, and then delete it?

[haden]

Re: looking for a bit of help with vundo trojan

yeah but it still gives me the error of the file is being used by a program. ive tryed a couple of the sugestions on the list already but im gonna try one that involves a couple of tools i dont got yet

[Greyhatter]

Re: looking for a bit of help with vundo trojan

And of course you tried here?

http://www.symantec.com/security_res...112210-3747-99

and here?

http://ccollomb.free.fr/unlocker/

[haden]

Re: looking for a bit of help with vundo trojan

ive already stated that the symantec removal tool did not work. apparently most people have found out like i did that the tool simply does not find the file(s) it was made to find.

as to the unlocker program, i had heard of it but hadn't considered using it yet

[haden]

Re: looking for a bit of help with vundo trojan

thanks alot greyhatter the unlocker worked wonders. it even deleted the files for me and restarted without a single hitch

[Greyhatter]

Re: looking for a bit of help with vundo trojan

ive already stated that the symantec removal tool did not work.

I was not sure you had the current removal tool or Symantec download site. Both tools and sites can change over time. I'm glad to see that the second tool worked out for you!

[SlackJaw]

Re: looking for a bit of help with vundo trojan

Just had to comment on this kick-ass display of community. Yes, haden could have dug in and found these links but Greyhatter and Noid were super cool in helping resolve this. Although I'm an absolute unknown nobody here, I envision this forum as a giant spectrum of diverse knowledge and elite specialties with a knowledge base range from nothing to absolute authorities.