Hey there folks. You are my last hope in removing this Vundo (rqrpqoo.dll??) virus which has had me pulling my hair out for the last week.

I tried following your prelim instructions and ran into some problems with them. One, when I boot into safe mode (or normal) and try running AVG, the window expands larger than my monitor so I cannot see all of the menu since it's 'offscreen'. I have a Syncmaster 213T set to 1280x1024. In safe mode, it gets worse as far as being able to see the entire AVG window.

So, I do have a HJT log I can post and I'd like to point out my Symantic no longer is able to take any action against this rqrpqoo.dll (vundo). In fact, it's running now like a madman in realtime with an ever increasing # of notifications (400 and counting!). The basic symptoms I'm experiencing are a constant noise from my pc (yellow light blinks off and on) like a process is running in a loop? IE windows open randomnly and now my explorer.exe gives me a send/dont send pop up window and shuts down.

Here's the HJT log and I appreciate any help offered. Thanks and have a great Christmas everyone.

Attached Files

hijackthis.log (9.8 KB, 1 views)

This will help to identify malware on your system.
Please download Combofix from any of these locations:
Here
or
Here
Save ComboFix to the desktop and please ensure that you disable realtime security/virus programs that monitors your PC while CF is running.
1. Double click on combo.exe & follow the prompts.
2. When finished, it will produce a logfile located at C:\ComboFix.txt.
3. Copy and Paste the contents of that log in your next reply with a new hijackthis log. Do not use Code or html unless asked for.
Note: Do not mouseclick combofix's window while it is running. That may cause your system to stall/hang.

Caution...Never run and remove files using ComboFix without being supervised by a security analyst.

I d/l'ed NOD32. I cant delete it even in safe mode. It pops up like it wants to run and then nothing.
Should I just run the Combofix anyway?

Thank you for replying...this is more frustrating than I ever imagined!!

Iggy

Yes run Combo.

God I hope this helps. Here we go. Thanks in adance dude.

Attached Files

	log.txt (10.7 KB, 4 views)
	hijackthis.log (7.3 KB, 2 views)

Pancake, did I attach the files correctly? I now realize you said to cut and paste but I attached them instead. I can redo it if you want.