Member Panel

The Vundofix didn't work im afraid , we'll have to use the manuall way to get rid of it:


Please download Process Explorer by Systernals from HERE.

Also download KillBox by Option^Explicit from HERE.


Then boot up in SAFE MODE and stay in safe mode (hit f8 when booting up), untill the entire fix is done.

Unzip Process Explorer and double click on procexp.exe

In the top section of the Process Explorer screen double click on winlogon.exe to bring up the winlogon.exe properties screen. Click on the Threads tab at the top.
Once you see this screen click on each instance of ddayy.dll once and then click the kill button.
After you have killed all of the ddayy.dll's under winlogon click OK.

Next In the top section of the Process Exlporer screen again , double click on explorer.exe and again click once on each instance of ddayy.dll then click the kill button.

Once you have done that click OK again.


Next run HijackThis and place a check beside each of the following:

Now click fix checked and close HijackThis.

Please copy the text in the quote below, and paste it into a blank notepad window.
Save it as vundo.reg and in the "save as" type box choose "all files".
Once you have saved it double click it and allow it to merge with the registry.


Double click on Killbox.exe and then check the delete on reboot button.

Enter the following filepath and filename into the Full path of file to delete box:

C:\WINDOWS\SYSTEM32\ddayy.dll

Click the red circle with the white x and allow your computer to reboot.
(if killbox doesn't reboot on its own then please reboot manually)

After your computer has rebooted please run Hijackthis again and post a new Hijackthis log.

Yup , its dead this time. Youre hjt log is clean now.


How is it going with the problems you had?

Thank you for finding and stepping me through the Vundo thing! I can't believe Ad-Aware, SpyBot, WebRoot SpySweeper and NAV didn't tell me I had it and offer to get rid of it for me.

On the freeze ups...I will probably have to wait a couple of days to see if it happens again. It seemed to have happened once every day or two and then I would have to force it to reboot to get out of it. If it goes 3 days without doing it I will think it is taken care of.

Do you think Vundo was causing it?

I did clean out the dust today. It wasn't too bad inside but the vents were looking quite dusty. If you don't mind I would like to send you another Speedfan report in a day or two and see if it is better.

Thank you so much again!!!!!!
Cindy

Well, it's been a day and a half and so far no freeze ups although for having a gig of memory the CPU usage sometimes gets 100 percent for a few seconds at a time and in the 90's for up to a minute at a time but then it drops back down.

Attached is tonights speedfan report. Just want to see if it is still too warm. If memory serves correctly, I had a flame by the CPU temp before though.,

Holy crickey lol, I cant even find the temps. But your memory really has nothing to do with your CPU.. Can you right click your taskbar and hit task manager and let us know what is taking up most of the cpu cycles?

Yeah-- I don't know why the 'default report' in speedfan is that detailed... takes ten minutes to figure out that what you want isn't even in it. Bios data... and a bunch of incomprehensible numbers.