Wonder if any of you have any advice regarding this. My sons chat to their mates via MSN, or is it windows messenger? The younger one had a message from a friend of mines daughter, which was simply a link asking 'is this picture you' They know not to click on links, but the daft lad thought as it was a long time family friend it would be OK. Now, she didnt put the link on, and we have no idea how it came off her Pc. We now have have a bug which, as soon as the lads try to sign into messenger all sorts of wierd things happen and then the screen freezes, and for moments the cursor is taken over. my PC works fine on all other websites email etc, just not on messenger. We have McAfee, and a window pops up warning me of a PUP named Vundo.dll yet it can't seem to remove it. we have searched in the Pc but can't find it. Anyone any ideas what it is, or how to find and remove it? McAfee says it can't be removed because another program is using it, and we need to unsubscribe but we have no idea what it is. The Pc was fine until he clicked on the link. Any advice would be very welcome!

I'm always telling my kids about downloading things, even pictures that are sent to them via msn.
Have you tried uninstalling msn, wiping it off altogether, ? don't know if it would work but I'd try that cos you can always install messenger again.

I have noticed though that when my eldest has been on msn chatting to what seems like hundreds all at once, I have to scandisk the pc because I have trouble signing in after he's been on it, and nothing works properly until I do so. No virus's have shown up and it works fine after. But he will be given an extra warning now about downloading pictures.
Sorry I can't be of help.

This sounds like a typical trojan (not a bug, a bug is when there's something wrong with teh programming, which there are plenty of!!!!)

Searcing Vundo.dll removal on google with give you plenty of links on how to remove it.

And drum it into your son to always ask if it was sent to him by the person it supposidly was :)

Sounds like you definitely have a virus. I don't use McAfee but they should have a way to run a scan in safe mode. I'd dowload the latest update to your antivirus software then start Windows in safe mode. To do that press the F8 key before windows starts. That's at different points depending on the OS version but keep hitting it and you'll get there or search your help files for specifics for your OS. Instructions for XP are here. That will run a minimum of services so might get rid of the problem of other programs using it. If that doesn't work you might have to look at Vundo specific removal. I googled around and found this site that has Vundo removal tools but I certainly couldn't vouch for their safety or integrity. I personally don't download any tools from sites like this because I don't trust them. I would rebuild my hard drive first but then I don't mind doing that sort of thing.

We gave up using McAfee as it didn't seem to work very well. We now use Avast which is a free virus checker and, touch wood, seems to be excellent at it's job. Google will find it for you :)

Try this link http://vundofix.atribune.org/

I got this bug a couple of months ago.
Try housecall online vurus checker worked for me :) :)
Lea :)

Thanks everyone, just had a look to see if anyone could help....so I know what I'm doing tomorrow :D ;)

Have tried what McAfee said to do, still have the pesky thing, trouble is the Pc is working, just not when messenger goes on, so I removed it. Now, if I'm in AOL I don't get any bad popups, but when I go onto modzilla firefox it goes pop-up loopy (nasty ones,)and freezes up, anyone any ideas? Is firefox safe? before I do anything drastic, got some things finishing on ebay today which I forgot I need to watch, so will be plunging in with the other suggestions later tonight. But I have thins sinking feeling it will be back to the shop for a cleanup. Or the bin :D

Not sure if its enough to get rid of a virus but how about restoring your computer to its settings prior to the link being opened. you should be able to do this through control panel.
HTH