Hi David,

Actually I went ahead and removed both Java and Netscape, which
HighjackThis indicated was installing these files through Netscape.
Now that I have removed Java and Netscape 7.1 the files are coming in
through IE's Browser Helper Object facility. I have located place in
the Registry where all BHO's are loacate and deleted all of the keys
refering to anything that is NOT Spybot. But, the BHO's continue to be
reinstalled on each boot of the operating system. Any ideas how I can
put a stop to this? I don't think this is as simple as removing past
spyware. This is a new one. So new that I can't even find a name to it
yet, although it started when I tried to remove cmdServices.

On Thu, 14 Feb 2008 04:00:10 GMT, "David H. Lipman"
<DLipman~nospam~@Verizon.Net> wrote:

>From: "Victor Laszlo" <vlaszlo@worldnet.att.net>
>
>| Does anybody know anything about the dll awvwx.dll . Its associated
>| with some spyware but Google doesn't seem to have anything about what
>| it does or how to get rid of it.
>
>Most likely a Vundo Trojan.
>
>
>Two phase answer...
>
>Perform Part 1 then perform Part 2
>
>It is suggested that you execute each tool in Normal Mode then in Safe Mode.
>
>
>If you are using any version of Sun Java that is prior to JRE Version 6.0,
>then you are strongly urged to remove any/all versions.
>There are numerous vulnerabilities in them and they are actively being exploited.
>
>It is highly suggested that you update to the latest version which is Sun Java JRE/JSE
>Version 6.0 update 4 (jre 6u4)
>
>Simple check, look under...
>C:\Program Files\Java
>
>The only folder under that folder should be the latest version.
>
>Such as...
>C:\Program Files\Java\jre1.6.0_04
>
>http://java.sun.com/javase/downloads/index.jsp
>http://www.java.com/en/download/manual.jsp
>
>FYI:
>http://sunsolve.sun.com/search/docum...=1-26-102557-1
>http://sunsolve.sun.com/search/docum...=1-26-102622-1
>http://sunsolve.sun.com/search/docum...=1-26-102648-1
>http://sunsolve.sun.com/search/docum...=1-26-102729-1
>http://sunsolve.sun.com/search/docum...=1-26-102732-1
>http://sunsolve.sun.com/search/docum...=1-26-102760-1
>
>
>
>
>Part 1
>------------
>Download Adware-Virtumundo Removal Tool --
>http://secured2k.home.comcast.net/to...undoBeGone.exe
>
>Information on the Adware-Virtumundo Removal Tool:
>http://forums.mcafeehelp.com/viewtopic.php?t=57049
>
>Part 2
>------------
>Download Atribune's VUNDOFIX.EXE
>http://www.atribune.org/ccount/click.php?id=4
>
>Save VUNDOFIX.EXE to "C:\" ( C:\VUNDOFIX.EXE ) and execute it from there.
>
>
>* * * Please report back your results * * *