locked
OFF TOPIC: Win32:Vundo-gen34 - Please help me RRS feed

  • General discussion

  • I noticed that my computer was running slower than usual so I checked Task Manager and saw that winlogon.exe was using a lot of my CPU so I read on the internet that if winlogon.exe is anywhere else than in the \WINDOWS\System32 folder then it's a virus.

    I ran a search for winlogon.exe and I found one where it is suppoed to be (System32) and another one in WINDOWS\ServicePackFiles\i386 , is it supposed to be there?

    Anyway then I ran a virus scan with Avast and when Avast tested my memory it found this:
        File C:\WINDOWS\system32\byxvust.dll is infected by Win32:Vundo-gen34 [Adw], Repair: Error 42060 {The file was not repaired.}
    I tried to repare it as you can see it didn't work.

    Do your magic Stick out tongue
    Wednesday, May 16, 2007 10:44 PM

All replies

  • Wednesday, May 16, 2007 11:40 PM
    Moderator
  • Looks like its gone since avast can start normally, i'm gonna run a throrough scan at let you know.

    But that other winlogon.exe is still in the WINDOWS\ServicePackFiles\i386  should it be there?
    Thursday, May 17, 2007 1:39 PM
  • yes it should be there ( thats use for fail safe measure if ever the winlogon.exe thats active becomes corrupted )

     

    Thursday, May 17, 2007 1:50 PM
  • Allright, I ran a scan and avast didn't find anything Smile
    So thank you JimR1.
    Thursday, May 17, 2007 11:47 PM