How to remove the Vundo Trojan

The Vundo Trojan is a tricky virus that can attach itself to fake files within the system, and cause so much havoc that some of the best anti-virus software available can’t remove it. Here’s some steps you can take to remove this pesky virus.

Difficulty: Moderately Challenging

Instructions

Things You'll Need:

• A computer infected with the Vundo Trojan
• A reliable anti-virus system
• A copy of VundoFix from Atribune

1. The Vundo Trojan is a tricky virus that can attach itself to fake files within the system, and cause so much havoc that some of the best anti-virus software available can’t remove it. Here’s some steps you can take to remove this pesky virus.

2. First, run several scans of your hard drive with your currently installed anti-virus. If Vundo has imbedded itself too far into the system, then it may not clear it out, but doing this can do some damage and clean out anything else that can cause the system to be unstable.

3. Run VundoFix from Atribune. It’s a piece of software that has a list of all known fake files that Vundo hides itself in. After the scan is done, make note of the file paths it lists, then use it to remove those files.

4. Most of the infection should still be clear, but you should check and see if anything supesious is running in the background. Hit Ctrl + Alt + Del and go to processes. If anything seems out of place, end those processes.

5. You should also go to Start, then Run, and type msconfig. Go to the startup tab and remove anything unnecessary for good measure.

6. If your computer is still infected, you’ll need to locate the fake files and lock them out from the system itself. Vundo can replicate within the system once files are deleted, but if they are locked down instead, it isn’t scripted to reproduce. There’s a lot of special software that can be found to lock down files for good.

7. At the end of the day, if you haven’t fully removed the virus, you may need to consult an I.T. professional. If all else fails, back up your data and reformat the PC.

Tips & Warnings

• This virus is sometimes a carrier for fake versions of anti-virus and anti-spyware software that appear to be legit. If you didn’t install it, then it shouldn’t be on the system. Don’t fall for this scheme and do not buy any fake products.
• There’s also a lot of fake anti-Vundo software out there, so be careful when downloading software to fix your PC.
• Be extra careful when locking down or deleting files that are near system critical file systems. If you’re unsure, consult an I.T. specialist.

Resources

• Symantec's Vundo listing.
• www.atribune.org/

[connectionwizar]

on 2/2/2009 ok I figured out an easy fix for the vundo, the past 3 months i have been working on it and have used everything out there to try to beat it. vundo fix don't do it, spyware doctor don't even pick most of it up. use malwarebytes and spybot search and destroy, malware bytes first, it's about the only thing that can get updates. them two will remove it all. Might have to make some changes in your services.msc file. for full instructions go to http://connectionwizard.comoj.com/ you can get the programs there as well.