Trojan.Vundo.h found by malwarebytes - won't die. SAS doesn't find it.

[AmyA]

Here's my malwarebytes log. It started with 23 and got down to 4 that don't die at restart. I've got system restore off during all of these shinnegans. It says no action taken only because I've ran the log several times and didn't bother trying the restart since they keep coming back. SuperAntiSpyware doesn't find the trojan.vundo.h files (and won't do a smart update for some reason, altho firewall is turned off and I'm on internet). Norton has a laughable fix but they didn't stop this thing in the first place - needless to say that didn't work wither. PLEASE HELP! Can I keep working on my computer or will eventually keep grinding to a hault?

Malwarebytes' Anti-Malware 1.36

Database version: 2174

Windows 5.1.2600 Service Pack 2

5/24/2009 3:52:10 PM

Part4_4filesmbam-log-2009-05-24 (15-51-53).txt

Scan type: Quick Scan

Objects scanned: 91697

Time elapsed: 9 minute(s), 42 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 3

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f168810d-0ffd-426b-a866-b121a9240552} (Trojan.Vundo.H) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\jwkqjblt (Trojan.Vundo.H) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{f168810d-0ffd-426b-a866-b121a9240552} (Trojan.Vundo.H) -> No action taken.

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\WINDOWS\system32\rzhdtxv.dll (Trojan.Vundo.H) -> No action taken.

[martinstephen]

Here's my malwarebytes log. It started with 23 and got down to 4 that don't die at restart. I've got system restore off during all of these shinnegans. It says no action taken only because I've ran the log several times and didn't bother trying the restart since they keep coming back. SuperAntiSpyware doesn't find the trojan.vundo.h files (and won't do a smart update for some reason, altho firewall is turned off and I'm on internet). Norton has a laughable fix but they didn't stop this thing in the first place - needless to say that didn't work wither. PLEASE HELP! Can I keep working on my computer or will eventually keep grinding to a hault?

Malwarebytes' Anti-Malware 1.36

Database version: 2174

Windows 5.1.2600 Service Pack 2

5/24/2009 3:52:10 PM

Part4_4filesmbam-log-2009-05-24 (15-51-53).txt

Scan type: Quick Scan

Objects scanned: 91697

Time elapsed: 9 minute(s), 42 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 3

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f168810d-0ffd-426b-a866-b121a9240552} (Trojan.Vundo.H) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\jwkqjblt (Trojan.Vundo.H) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{f168810d-0ffd-426b-a866-b121a9240552} (Trojan.Vundo.H) -> No action taken.

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\WINDOWS\system32\rzhdtxv.dll (Trojan.Vundo.H) -> No action taken.

[martinstephen]

sorry! not good at these things

i have used several programs and got rid of many problems, however now unable to delete reg entries and files recognised by malwarebytes but not by other programs.

i have posted also.

i have run in normal mode and safe mode with the same results.

martin

[Maniac]

Greetings.

To get you fixed up please follow the instructions here: I'm infected - What do I do now?

And post your logs in a new topic here: Malware Removal - HijackThis Logs

Please be sure not to install any software or use any removal/scanning tools exept those that you are

instructed to by the expert who will be assisting you as doing so can make their job much more difficult.

note: if for some reason you are unable to run some/any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just post here: Malware Removal - HijackThis Logs describing your issues and an expert will reply with further instructions.

I hope I was helpful. Good luck and safe surfing.