1 reply to this topic

[Euphemism]

I'm new to MalwareBytes and have recently downloaded the free edition in an attempt to rid my computer of trojan.vundo. I've noticed that, after doing a full scan, MalwareBytes is consistently able to find trojan.vundo. However, when I attempt to use the "Remove Selected" option after the scan is complete, I am told that a reboot is required in order to finish deleting a handful of files. After rebooting, I notice that those files are still present. For instance, c:\windows\system32\zjoevsc.dll is one file that is repeatedly tagged as malware that needs to be deleted upon reboot.

I'm not sure if this is relevant, but I did a little snooping by using the process explorer tool from sysinternals and can see that zjoevsc.dll is being used by explorer.exe, svchost.exe, and winlogon.exe.

I made sure to update to the latest definitions, did a full scan, and have attached a couple of logs that I was able to get from my infected system. Any help would be welcome.

Attached Files

•  mbam_log_2009_05_16__06_55_02_.txt   4.25K   61 downloads
•  mbam_info.txt   4.54K   39 downloads

[Maniac]

Greetings and Welcome .

Please follow the instructions here:
I'm infected - What do I do now?

And post your logs in a new topic here:
Malware Removal - HijackThis Logs

Please be sure not to install any software or use any removal/scanning tools exept those that you are
instructed to by the expert who will be assisting you as doing so can make their job much more difficult.

note: if for some reason you are unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just post here: Malware Removal - HijackThis Logs describing your issues and an expert will reply with further instructions.

I hope I was helpful. Good luck and safe surfing.