I've just posted a quick intro, then bobbed over to your Spyware removal section.
I was about to follow all intructions, to remove this virus from my laptop, but I'm stumbling at the 1st hurdle.
This trojan has disabled my firewall, plus it wont let microsoft essentials run its update.
I've just spent 14 hours trying to get rid of this and am pulling my hair out.
I ran Malwarebytes anti-malware deep scan 1st of all. This came up with a virus, which was removed. I then ran Spybot, and it immediately came up wtih the Virtumondo trojan with 2 entries. So deleted and as intructed allowed it to reboot, then it ran with nothing else on the desk top for what must have been 3 hours. Still one entry showing. Deleted and rebooted. Ran Malwarebytes deep scan again..... Nothing!
Thinking I may have done it and got rid, felt dead chuffed, but to be on the safe side, I've then run Microsoft essentials on a deep scan, this came up with 3 entries, one of them was yet another trojan, but appeared to be attached to Java..... So, am gutted again
I've rebooted and the rundlll.exe is back again, so am currently running Spybot again.
I'm contacting you through my old PC, rather than the laptop, as I'm scared to use the internet on that now the firewall is disabled and worried about infecting anything or anyone elses computer with this thing. I am ripping my hair out in frustration at this!
Just in case it helps, the infected laptop is a Sony Vaio, BX61MN running XP Pro SP 3.
Hope someone can help!
A very desperate and soon to be hairless Annie
PS: When I try to enable the Firewall, I get a box popping up saying
"Windows firewall settings cannot be displayed because the associated server is not running. Do you want to start the windows firewall /internet connection sharing (ICS) service?"
The options are yes or no so I click yes
Then I get a box saying "Windows cannot start the windows firewall /internet connection sharing (ICS) service"
similarly when I try to run the update on Microsoft essentials
Edited by SoSassy, 25 August 2010 - 03:12 PM.