Hello Everyone
I have a Toshiba laptop, running XP, with wireless connection.
Recently my Nortons 360 advised an update was available, and I duly downloaded it. I then ran Spybot to make sure nothing came in with it.
Spybot found Virtumonde which I "removed" with Spybot.
I then couldnt connect to the internet / receive email.
I have run Nortons itself and it found trojan.vundo, and Nortons wanted to reboot to fix it.
This I did, still cant connect to the internet.
I have used the search function on this forum for internet connectivity, several threads said to run Avast!, which I downloaded via the PC I am using to send this note, transfered via data key. It didnt find anything, but, there were 5 files it couldnt scan.
I tried running sfc / runnow from the start menu and the prompt screen flashes up literally for a minisule of a second and then disappears.
I have skimmed the forum on Trojans / vundo and all the adviice seems to require internet connection, which I dont have on the PC with the problem!!
I have run Ad-aware, found a few tracking cookies but nothing else.
Nortons then said "it has encountered a problem" and takes me down the path of checking my connectivity, and ends up wanting to establish a dial up connection ( I dont have a phone line in the house to do that !!)
When I click on the Explorer icon, it gives me the std "Internet Explorer cannot display the webpage" message, and when I use the "diagnose connection problems" it ends up trying to tell me to check the firewall settings.
I have disabled the firewall, still nothing.
Lastly, the PC does have wireless connection with the router.
All help gratefully received
Nick

Download LSPFix and save to your desktop.
alternate download site
alternate download site

• Disconnect from the Internet, go to the LSPfix file and extract (unzip) LSP-Fix into its own folder such as C:\lspfix. (Click here for information on how to do this if not sure. Win 9x/2000 users click here.
• Open the lspfix folder and double-click on LSPFix.exe to start the program.
• Check the "I know what I am doing" checkbox.
• Select (highlight) all instances of BAD.dll in the left column under "Keep".
• Click the arrow >> so it goes over to the right column under "Remove".
• Click "Finish" and LSPfix will remove references to the file and restore the chain numbers.
• Restart your computer in "SAFE MODE" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".
• Delete the following files:
  
  C:\Windows\system32\BAD.dll
  C:\Windows\system32\BAD.dll
• Restart your computer normally and post a new HJT log.

For instructions with screen shots, see the "Using LSP-Fix Tutorial".

Thanks boopme
Have downloaded / transfered / run LSP-fix, but it hasnt found any BAD.dll files.
All it has found is

mswsock.dll
winrnr.dll
rsvpsp.dll

As we would say here in Oz ... "what the??"

Ok that bites. Let's try this tool>>>
Download and run WinSockFix. This is a two step process that will Back up the Registry and Reset the Winsock Stack.

• Double click on WinsockXPFix.exe to open.
• On the Winsock and TCP Repair Utility screen, click "ReG-Backup"
• On the ERDNT Welcome screen, click "OK".
• On the Backup to: screen, click "OK".
• On the Folder does not exist question screen click "Yes".
• You will see a status screen as your registry is being backed up.
• On the Registry backup is complete! screen, click "OK" and you will go back to the main window.
• On the Winsock and TCP Repair Utility screen, click "Fix".
• On the Apply the VB_Winsock fix? screen click "Yes".
• The screen will display a status message "repair completed please reboot."
• On the Repair Completed screen click "OK" to reboot your computer.
• If your computer was not using DHCP, you will need to reconfigure TCP/IP.
• You should have connectivity restored.

Bugger!
I hate timezone differences!
Inbetween my last and your last boopme, I rang my ISP just to check my settings.
The techo had me "ping" Google from tha command prompt, and it got thru.
I got the sh1ts with Nortons at that moment and uninstalled it.......
hey presto, I have connectivity again.
I am still sending these notes from my "other" PC as the one I had the problem with is currently chugging its way thru a full AVG Internet Security download (51mb).
Will keep you posted if I (still) have connectivity after that........
Cheers
Nick

OK keep us posted