virus problem...

[ganonbanned]

I have a virus... its a trojan, Vundo.dll, and mcafee cant delete it. worse yet, it keeps downloading more and more files on my computer that are spyware, i searched for it and cant find it. any help?

[Skyone]

Print out these instructions so you can read them while you clean your system.

Now close all open windows AND browsers and check these items for HJT to fix:
O2 - BHO: CATLEvents Object - {72AC6865-B1D3-4C32-A27B-4B3BF04DE655} - C:\DOCUME~1\STEPHE~1\LOCALS~1\Temp\cmsab.dat
O4 - HKLM\..\RunOnce: [*disk] C:\WINDOWS\Driver Cache\disk.exe
O4 - HKLM\..\RunOnce: [*utiltcp] C:\WINDOWS\Help\SBSI\utiltcp.exe
O4 - HKLM\..\RunOnce: [*comnet] C:\WINDOWS\comnet.exe
O4 - HKLM\..\RunOnce: [*basmc] C:\WINDOWS\Tasks\basmc.exe
O21 - SSODL: XIqRzylNl - {6E3B5DD9-C491-F773-C194-AE0280B3B1BE} - C:\WINDOWS\System32\xsyk.dll

Please reboot into safe mode - How do I boot into "Safe" mode?

Delete these files:
C:\WINDOWS\comnet.exe
C:\WINDOWS\Driver Cache\disk.exe
C:\WINDOWS\Tasks\basmc.exe
C:\WINDOWS\System32\xsyk.dll

Delete the folder:
C:\WINDOWS\Help\SBSI\

You may need to show hidden files to delete them. How to show all hidden and system files

The following DIRECTORY CONTENTS (But not the directory) need to be deleted while in safe mode.
* C:\Windows\Temp\
* C:\Documents and Settings\STEPHE~1\Local Settings\Temporary Internet Files\ <=This will delete all your cached internet
content including cookies. This is recommended and strongly suggested.
* C:\Documents and Settings\STEPHE~1\Local Settings\Temp\
* C:\Documents and Settings\<Any other users Profile>\Local Settings\Temporary Internet Files\
* C:\Documents and Settings\<Any other users Profile>\Local Settings\Temp\
* Empty your "Recycle Bin".

Then disable your system restore

1 Right-click My Computer, and then click Properties.
2 Click the System Restore tab.
3 Check the "Turn off System Restore" or "Turn off System Restore on all drives" check box.
4 Click Apply
5 this will delete all existing restore points. Click Yes to do this.
6 Click OK.

Do an online scan at TrendMicro's site. Let it remove any infected files found.
Reboot into normal mode enable System Restore and post a fresh log in this thread to give you further recommendations.

Check that thread for more information.

Also: http://www.help2go.com/postt16153.html

[bicostp]

Chances are it's in use, and therefore can't be touched. Reboot in safe mode and try deleting it from there.

[ghosstt]

if that doesnt work, try using a diffrent AV. avast! has been really good for me. its free, easy, and you can quarantine (chest) almost anything. you should try it out.