Infected Windows PC at work. Some clueless user “caught” the VUndo.F variant leading to NTdetect not found and eternal reboot cycle.
First locate copy of WinXP cd, then boot from cd and repair the installation. This will at least lead to a bootable PC which is still infected with the Trojan VUndo.
Usually files Rundll32.exe, iExplore.exe are infected. An infected dll (in my case named “nohiyizi.dll”) was present in \system32\. VUndo does not allow other processes to create directories; it will delete these right after creation. Thus installation of anti...Continue Reading »