hjt and vundo logs attached.
Still have to kill and re-start explorer.exe several times to obtain properly functioning system of explorer.exe

Thanks,
Swizz

Attached Files

	hijackthis.log (5.5 KB, 1 views)
	VundoFix.txt (576 Bytes, 3 views)

I cant see why these files cant be removed from the log..Vundo has killed them.....try to run HJT again and remove them.It also tells me that you java needs updating.Its this that has let the virus slip into your computer....update it from here.

Download Java software from Sun Microsystems

As I will be logging off for 12 hours I would like you to download Service Pack.. 2 SP2...its a big file.

Download Windows XP Service Pack 2: XP SP2 (Full package)

It will not let me install SP2 as it says "services.exe is running" and it is not something I can kill with taskmanager.

Help

tried running xp service pack 2 from the link provided got error message "the file c:\windows\system32\services.exe is open or in use by another application close all other applications and then click retry" also tried in safemode but same error message. Task manager won't let me end services.exe so I am now stuck.

Attached Files

hijackthis.log (5.8 KB, 2 views)

Can you you Killbox again and remove these files....

C:\WINDOWS\system32\winmine.exe
C:\WINDOWS\system32\csqyi.exe
C:\WINDOWS\system32\dmcfp.exe
C:\WINDOWS\System32\wlwygrum.dll

Please download http://www.atribune.org/ccount/click.php?id=4 to your desktop.
Double-click VundoFix.exe to run it.
Right Click inside the listbox (white box) and click add more files
Copy&Paste the 2 entries below into the top 2 boxes
C:\WINDOWS\system32\mkagq.dll
C:\WINDOWS\System32\uwvibccu.dll

Click Add Files and Click Close Window
Click Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will shutdown your computer, click OK.
Turn your computer back on.
It will produce a log of it's actions at C:\vundofix.txt.Please post back the log


Belive it or not I have just finished cleaning this same bug from a user in another forum without any problems.......cant see why this one is being a pain...

Ok, so when using combofix, I could not paste all 4 of the files listed into the window, I had to paste 2, run combofix, and then do the remaining 2 one at a time. Then when running vundo, I added the 2 files to the extra window, however those 2 files were not in the window when vundo was done. also when it began its reboot it gave error "the application failed to initialize properly 0xc0000005 click ok to terminate the application.

Attached Files

	hijackthis.log (5.9 KB, 1 views)
	VundoFix.txt (1.1 KB, 1 views)