Deleting "mlJCTkIX.dll"

[Stephen]

My virus scan program on my XP computer (McAffee) detected a trojan horse called "Vundo", and the file that is infected is C:/Windows/system32/mlJCTkIX.dll. McAffee cannot repair or quarintine this file, and I tried to delete it, but it doesn't delete it, because I get the same message about the same trojan after I "delete" it. I tried booting up to a command prompt and deleting it using the "del" command, but it says it's in use by a program. I looked up Google, and no results were returned for this DLL file. Anyone know how I can delete this file? Thanks in advance.

[LFMusicFan]

This is the same virus that crashed my laptop.  I have tried EVERYTHING to get rid of it, but nothing it worked. I installed over 10 different anti-virus software programs, I took it to a computer repair shop, and I even tried some of the vundo repair programs, but none worked.

[Stephen]

Well that's great.

[LFMusicFan]

Well, it all depends on what vundo's "host" program is. In my case, it was explorer.exe and winlogon.exe, both of which are necesary for the computer to run.

[beanboy89]

If you can't delete the DLL file from within Windows, you might have better luck booting into either Safe Mode and deleting it, OR booting to the Command Prompt and deleting it.

[Stephen]

If you can't delete the DLL file from within Windows, you might have better luck booting into either Safe Mode and deleting it, OR booting to the Command Prompt and deleting it.

That's exactly what I did. Neither of them worked.

[beanboy89]

If you can't delete the DLL file from within Windows, you might have better luck booting into either Safe Mode and deleting it, OR booting to the Command Prompt and deleting it.

That's exactly what I did. Neither of them worked.

Did you actually delete the file, then when you rebooted it was back? If that is the case, it seems that the infected DLL file is getting reseeded every time you reboot, therefore making removing it seem nearly impossible.

[Stephen]

Did you actually delete the file, then when you rebooted it was back? If that is the case, it seems that the infected DLL file is getting reseeded every time you reboot, therefore making removing it seem nearly impossible.

No, it doesn't even delete, I get an error message saying the file is in use, even if booting from a command prompt.

[beanboy89]

Did you actually delete the file, then when you rebooted it was back? If that is the case, it seems that the infected DLL file is getting reseeded every time you reboot, therefore making removing it seem nearly impossible.

No, it doesn't even delete, I get an error message saying the file is in use, even if booting from a command prompt.

Do you have a Linux live or bootable CD laying around? If so, try booting into Linux and deleting the file. Since Windows will not be running at all, you should have no problems deleting the infected file...

[Stephen]

Thanks to a program called VundoFix, I was able to successfully delete the file. 

[Mike M]

I wonder if this was the same file that crashed my computer last year. I should of asked you guys about this when I had this problem. My computer got so full of adware that eventually my desktop background changed to something like "your computer may be infected," and there was this message telling me that the computer needs to restart and there was a countdown under it. The only method that I could think of to get rid of the virus was to restore my computer, and so I did. It caused me to lose everything prior to April 2007 on my harddrive. At least the virus was gone, though. After that all happened, that's when I decided to switch from IE to Firefox.

[Stephen]

I wonder if this was the same file that crashed my computer last year. I should of asked you guys about this when I had this problem. My computer got so full of adware that eventually my desktop background changed to something like "your computer may be infected," and there was this message telling me that the computer needs to restart and there was a countdown under it. The only method that I could think of to get rid of the virus was to restore my computer, and so I did. It caused me to lose everything on my harddrive. At least the virus was gone, though. After that all happened, that's when I decided to switch from IE to Firefox.

If you got any of the symptoms as listed on this page (and I believe I've seen some of them too before I got this trojan): http://en.wikipedia.org/wiki/Vundo , then yes, it was that trojan.

[wxmancanada]

Try renaming the file, then delete it.. If that doesnt work, reboot it, start in safe mode, then rename and delete. Ssould work!

[Stephen]

Try renaming the file, then delete it.. If that doesnt work, reboot it, start in safe mode, then rename and delete. Ssould work!

Thanks to a program called VundoFix, I was able to successfully delete the file. 

Maybe you should've read the thread completely, before posting.

[wxmancanada]

Try renaming the file, then delete it.. If that doesnt work, reboot it, start in safe mode, then rename and delete. Ssould work!

Thanks to a program called VundoFix, I was able to successfully delete the file. 

Maybe you should've read the thread completely, before posting.

No one else does, why should I?!