force dll to unload and allow dll file to be deleted

[Guest]

I have a pc that is infected with a portion of the Trojan.Vundo virus.
Symantec will locate a specific dll file but can not delete it because it is
in use by the Windows system. I've tried the Vundo Removal Tool from
Symantec that is supposed to stop the process, but it claims to not find the
Vundo virus on my system. This dll runs whether I'm in normal or safe mode.
How do I force unload a dll from running in order that the dll file can be
deleted?

 

[David Candy]

You can rename running programs. On reboot whatever uses it won't be able to find it.

 

[Guest]

I'll have to try that next time, but I found another way to kill it. I
removed all permissions to the dll from the security tab on the properties of
the file, and deleted it after a reboot when the file didn't have a chance to
load since Windows no longer had permissions for it.

 

[Yves Leclerc]

Do the delete in "Safe Mode". This usually does not load extra DLLs.

 

[David H. Lipman]

From: "Josh" <[email protected]>

| I have a pc that is infected with a portion of the Trojan.Vundo virus.
| Symantec will locate a specific dll file but can not delete it because it is
| in use by the Windows system. I've tried the Vundo Removal Tool from
| Symantec that is supposed to stop the process, but it claims to not find the
| Vundo virus on my system. This dll runs whether I'm in normal or safe mode.
| How do I force unload a dll from running in order that the dll file can be
| deleted?

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus


The following tool will remove the WinFixer 2005 and Trojan Vundo infection.

Download WinFixerFix.exe from the URL --
http://www.ik-cs.com/programs/virtools/WinFixerFix.exe

Execute; WinFixerFix.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.
It would be a good idea to scan in Safe Mode and in Normal Mode and save a copy of the HTML
report for each session.

* * * Please report back your results * * *

 

[4help]

Send me an email at (e-mail address removed) and I will send you a fix
tool that will remove that pest. Remove the XXX to make the email valid. Oh
BTW ignore the response you will get from David or Leythos he is a sick
obsessed stalker who cannot fix your problem. He would rather have you
suffer with this issue then to receive help from me.

 

[David Candy]

You should be more specific about which David. But as this thread is concluded there was no point to your post.

 

[restperiod]

Send me an email at (e-mail address removed) and I will send you a fix
tool that will remove that pest. Remove the XXX to make the email valid. Oh
BTW ignore the response you will get from David or Leythos he is a sick
obsessed stalker who cannot fix your problem. He would rather have you
suffer with this issue then to receive help from me.

 

[David H. Lipman]

When my program does not work after it crashes then send an email to this
guy his program works perfect. (e-mail address removed) and he will send
you a fix tool that will remove that pest. Remove the XXX to make the email
valid.