It appears this vundo variant has changed since the last time I dealth with it. This issue will require further investigation and probably the use of more powerful tools than we recommend in this forum. Before that can be done you will need you to create and post a hijackthis log.
Please read the pinned topic titled "Preparation Guide For Use Before Posting A Hijackthis Log
". You may have performed some of these steps already. If you can't perform a step, then skip and continue
with the next. In step #9
there are instructions for downloading HijackThis and creating a log. (This is a self-extracting version which will automatically install the current version of HJT in the proper location.
) If using Windows Vista, be sure to Run As Administrator
When you have done that, post your log
in the HijackThis Logs and Malware Removal
forum, NOT here
, for assistance by the HJT Team Experts. A member of the Team will walk you through, step by step, on how to clean your computer. If you post your log back in this thread, the response from the HJT Team will be delayed because your post will have to be moved. This means it will fall in line behind any others posted that same day.
Start a new topic, give it a relevant title and post your log along with a brief description of your problem, a summary of any anti-malware tools you have used and a summary of any steps that you have performed on your own. Please include the top portion of the HijackThis log that lists version information
. An expert will analyze your log and reply with instructions advising you what to fix. After doing this, we would appreciate if you post a link to your log back here so we know that your getting help from the HJT Team.