Vundo trojan help needed...

Chebe · 12-29-2007, 05:42 PM

My operating system is Windows XP. I keep getting the message from McAfee that I have the Vundo trojan. It is in the system32\qomljgd.dll file and cannot be repaired or deleted. Before scanning in Safe Mode, I followed directions from another site and disabled system restore, and it shows that Vundo would be removed after restarting. When I restart in regular mode, the Vundo trojan message comes up again. Can you help me?

supermep · 12-30-2007, 05:01 PM

Your best bet is to just delete the qomljgd.dll file. It is NOT required for anything on Windows and it is perfectly safe to delete it. If you have problems deleting it put it into a new folder and delete the whole folder. If you STILL can't delete it you can always delete it from the command prompt:

Start>Run>CMD

Then type

cd C:\Windows\System32

then del qomljgd.dll

Chebe · 12-30-2007, 05:28 PM

Thanks for the options you provided. I tried both ways that you suggested and, unfortunately, the file cannot be moved into a new file and cannot be deleted. Is there anything else I can try?

supermep · 12-30-2007, 05:41 PM

Your welcome. In case your afriad of it being a required file you could always save a copy off on a flash drive in case as well.

Chebe · 12-30-2007, 05:45 PM

I tried both methods that you suggested and, unfortunately, the file cannot be moved or deleted. Can you offer any other suggestions?

supermep · 12-30-2007, 05:53 PM

It's probably being used.

Open up your task manager and close basically everything in there besides:

SVCHOST.exe (there will be about 8 of these)
SYSTEM
System Idle Process
CSRSS.exe (if you have it)
Services.exe
Spoolsv.exe

Then attempt to delete it. If it STILL does not delete then you might have to stop a service.

Hijackthis is also a great program to attempt to delete it with.

12-29-2007, 05:42 PM	#1 (permalink)
Chebe Registered User Join Date: Dec 2007 Posts: 3 OS: windows xp	Vundo trojan help needed... My operating system is Windows XP. I keep getting the message from McAfee that I have the Vundo trojan. It is in the system32\qomljgd.dll file and cannot be repaired or deleted. Before scanning in Safe Mode, I followed directions from another site and disabled system restore, and it shows that Vundo would be removed after restarting. When I restart in regular mode, the Vundo trojan message comes up again. Can you help me?

12-30-2007, 05:01 PM	#2 (permalink)
supermep Games Tech Team Join Date: Dec 2007 Location: Phoenix Posts: 254 OS: winxp	Re: Vundo trojan help needed... Your best bet is to just delete the qomljgd.dll file. It is NOT required for anything on Windows and it is perfectly safe to delete it. If you have problems deleting it put it into a new folder and delete the whole folder. If you STILL can't delete it you can always delete it from the command prompt: Start>Run>CMD Then type cd C:\Windows\System32 then del qomljgd.dll

12-30-2007, 05:28 PM	#3 (permalink)
Chebe Registered User Join Date: Dec 2007 Posts: 3 OS: windows xp	Re: Vundo trojan help needed... Thanks for the options you provided. I tried both ways that you suggested and, unfortunately, the file cannot be moved into a new file and cannot be deleted. Is there anything else I can try? Last edited by Chebe : 12-30-2007 at 05:40 PM.

12-30-2007, 05:41 PM	#4 (permalink)
supermep Games Tech Team Join Date: Dec 2007 Location: Phoenix Posts: 254 OS: winxp	Re: Vundo trojan help needed... Your welcome. In case your afriad of it being a required file you could always save a copy off on a flash drive in case as well.

12-30-2007, 05:45 PM	#5 (permalink)
Chebe Registered User Join Date: Dec 2007 Posts: 3 OS: windows xp	Re: Vundo trojan help needed... I tried both methods that you suggested and, unfortunately, the file cannot be moved or deleted. Can you offer any other suggestions?

12-30-2007, 05:53 PM	#6 (permalink)
supermep Games Tech Team Join Date: Dec 2007 Location: Phoenix Posts: 254 OS: winxp	Re: Vundo trojan help needed... It's probably being used. Open up your task manager and close basically everything in there besides: SVCHOST.exe (there will be about 8 of these) SYSTEM System Idle Process CSRSS.exe (if you have it) Services.exe Spoolsv.exe Then attempt to delete it. If it STILL does not delete then you might have to stop a service. Hijackthis is also a great program to attempt to delete it with. Last edited by supermep : 12-30-2007 at 05:55 PM.