I'm a newbie to this site and found it through Google, and from reading through previous responses, thought you seemed like a friendly and knowledgeable bunch!
I'm trying to sort out a friend's laptop for them - it's running XP Home, and Norton Security 2005. When I first booted it up, I found a number of trojans, which I removed fairly easily. However, one has got me stumped....
When booting up, Norton pops up a window: -
Object Name C:\windows\system32\gebbcd.dll
Virus Name Trojan.Vundo
Norton is unable to quarantine the file (as it's in use).
Now, I've booted in safe mode and run the Symantec Vundo removal tool, but it reports that the virus isn't present. Same with VundoFix. I also ran a number of recommended spyware tools (TrojanHunter, Spybot, AVG anti-Spyware & ComboFix) and they all come up clean. I'm unable to run a Norton scan in safe mode, as I'm getting a Windows error message ("Symantec Integrator has encountered a problem and needs to end").
I should also add that all of the Windows updates have been applied, and Norton's definitions are up to date.
Any help would be massively appreciated - it's driving me mad!
Thanks in advance.
HJT Log attached
Edited by Tredders, 08 January 2008 - 02:18 PM.