Posted 07 April 2006 - 12:28 PM
I have a Dell Dimension desktop that is impossible to use due to constant popups (not the computer I am writing this on). I ran SpyBot S&D and a "commercial" spyware/addware removal program repeatedly (about 6 times), both in normal and safe mode, to no avail (by commercial I mean one that you pay for, to the tune of $40.00); I don't remember the name of the "commercial" one, but it's the one with the icon that looks like the ghost busters logo. I finally discovered I could make the computer "usable" by disconnecting it from the internet and stopping all Startup and Services via the System Configuration Utility, and starting it in safe mode. At that point I installed Norton Internet Security 2005, restarted the computer in normal mode and hooked to the internet so I could run LiveUpdate, which I was eventually successful at doing; an agonizing undertaking as the adds were coming at the rate of about one every two seconds and in about a minute there would be so many that the system would freeze. I then disconnected it from the internet and ran a virus scan. This was when I discovered it had the Trojan.Vundo, and where the "main" malware file was located (in C:\ProgramFiles\WINDOWS\System32\awwva.dll, I think; I'm not sure about the awwva.dll part).
At this point I searched the internet for info about this Trojan (that's how I discovered this site) and downloaded Symantecs Trojan.Vundo removal tool.
I ran the removal tool five times, three times in safe mode and twice in normal mode, following Symantecs instructions too the letter, but it was unable to remove this main .dll file, so did not help. At that point I tried to remove it myself in safe mode but it keeps saying "access denied".
Does anyone have any suggestions? They would be much appreciated!
P.S. As I am new to this site I am not sure I am posting this in the right place and following the approved procedure so if I am not I would appreciate any constructive info and/or critesizem about things I may be doing wrong in this post. (I realize I have been to wordy in my exasperation over this problem)