Trying to help a friend of mine get this trojan off his computer, I've run virus checkers, adaware and a program designed by symantec to specifically get this trojan off computers and it says it cleared it up. For some reason norton antivirus keeps saying that khhfg.dll in my system32 folder is still infected and that access to it is denied. What can I do to clear this up?

10/18/2005 3:28:01 PM

update norton completely then unplug the internet from the PC (just unplug the cord from the back)

then reboot the PC and press F8 rapidly until you get a series of boot options.

select "Safe Mode" and hit enter.

it'll take a while to boot into safe mode but once there, run norton and delete the infected files.

this should take care of it.

10/18/2005 3:30:05 PM

http://securityresponse.symantec.com/avcenter/venc/data/trojan.vundo.b.removal.tool.html will help you

(oops, didn't read, i was in a hurry...try running it in safe mode like rl said above)

[Edited on October 18, 2005 at 3:31 PM. Reason : ]

10/18/2005 3:31:13 PM