Also deleted the <'> folder under the dosprompt by changing the 'attribs' to -s -h

However - the folder will keep re-appearing and dumping various 110 kb programs.

If you disable Norton, then maybe you can download & install AVG. You really shouldn't have 2 AVs active at once (they can interfere with each other & end up scanning each other), so if you do manage to download AVG, disable Norton while you're updating AVG & scanning.

Otherwise, I think you should go to one of the specialised help sites in post #2 (they're free)

Found the problem?

It seems we are dealing with a new strain of the Vundo trojan - Norton seems to be unable to remove it. It recognizes it - removes it - however it seems to return.

The solution that worked for me:

Disable your system restore so your computer cannot restore the file.

Please download VundoFix.exe to your Desktop

• Double-click VundoFix.exe to run it.
• Click the Scan for Vundo button.
• Once it's done scanning, click the Remove Vundo button.
• You will receive a prompt asking if you want to remove the files, click YES
• Once you click yes, your desktop will go blank as it starts removing Vundo.
• When completed, it will prompt that it will reboot your computer, click OK.

You might have to run Vundo several times to remove it completely.

Then restore your 'system restore function' run a virus scan and spybot program.

Seems to have worked for me.

Question remains how the heck did I get this little beasty on my computer since all MP3's are scanned with an updated virus checker?

Thanks for the info Where did you get that advice from?

I don't know how those files got past your scan, maybe it's just such a new trojan that some AV programs don't have it within their virus definitions yet.??

Can you remember anything that stood out about the files that you were downloading before you got infected (don't mention artist or file titles)? Just so other people might know what to avoid.

I noticed Norton trying to deal with the Vundo trojan three times and the second time the file was submitted, the third and final time it was removed. I was curious so I Googled the info and found some good advice on the Spybot site
Trojan.Vundo Already tried Vundo fix and continues to re-surface after removal - Safer Networking Forums

Downloaded the file, ran it several times and removed the remainder of the .dll's. I also d/l the latest version of Spybot which caught the Virtumondo adware 'trojan' which was also missed by up-to-date versions of Norton and Ad-Aware.
I have no idea which files contained the contamination, but I scan all my d/l's with Norton, which by the way is due to expire in 3 weeks, I am not sure if I should be shopping for an alternative?

Hopefully I have solved the problem and try installing LW again.

Installed LW, so far so good No more problems with configuration and rebooting after shutdown.

Norton had dealt with the Vundo (again) at computer start up, did another Vundo fix, no problems found, scanned the computer again with Spybot and it seemed cleared.

What ever was attached to the mp3 file it was not caught by Norton last Thursday.

C

Sorry for taking so long to reply, but since I used BFU, then used command pompt to "DEL \'\" then did a system restore. No probs and I am still carrying on regardless . I did try some of the suggestions offered, but the combination that finally fixed the prob was as above.

I am in no way saying there is not a nasty new virus out there, or it won't get me, but this is what I did and has work up till now.

I have check "Command prompt" everyday and the reply is "Not found"

Hope it helps.

Stew

OMG!! SOMEONE PLEASE HELP MEEE!!

i have the exact same problem as all of you!!! but i'm not very technical so i don't really understand all of this stuff. can you please explain it to me step by step what do to? i've been struggling with these problems for almost a month now and it's driving me crazy!!

so first of all how do i solve the limewire-popping-up problem?
do i use the BFU and then do system restore??

secondly, is the solution quoted above the solution to the "user\name\'\" folder problem?
if so, how do you disable the system restore? (i use windows vista, not sure if that even matters)
also, do you restore the system restore function the same way you disabled it?
and for the next step, "run a virus scan and spybot program", can i just use trend micro to scan or is there a specifc program i should use? i have the latest version of trend micro internet security and i would really prefer not to have to download something else.

and what is the that thing you guys did with the command prompt? i never really use the command prompt thing so i don't really understand what you guys were saying about how to delete the files in the ' folder. can someome tell me step by step what to type in the command prompt?

yeah, so if you have not already realized, i'm quite desparate. i'm so sick of this stupid malware problem so please please please help!!

thanks in advance for any advice!

Ok, so I have the same issue. I tried BFU, but Limewire kept popping back up. I also found a folder in C: called bintheredunthat after I ran BFU. Now, VundoFix is giving me an error message when I try to run it. Help, please?!