Friday, June 22, 2007

How to remove Vundo Trojan?

Yesterday my office PC with Windows XP pro was affected with Vundo trojan.
I tried to remove it with my McAfee Antivirus & Xsoft spy.
Both the programs were detecting the file , but it couldn't remove completley.
I even tried with Windows defender, but it couldn't detect the file.

Xsoft Spy has detected following registry entries & removed these registry entries


software/mocrosoft/Windows NT/currentversion/winlogon/winwil32/dllname

software/mocrosoft/Windows NT/currentversion/winlogon/winwil32/impersonate

software/mocrosoft/Windows NT/currentversion/winlogon/winwil32/startup

software/mocrosoft/Windows NT/currentversion/winlogon/winwil32/shutdown

software/mocrosoft/Windows NT/currentversion/winlogon/winwil32/asynchronous


But when I restart the PC again this trojan creates above registry entries and opens annoying popups.

I did number of searches and found some tools to remove this Vundo trojan.

Tools needed for this fix:
Vundo Fix
VirtumundoBegone (if VundoFix does not work)

Thanks to http://www.bleepingcomputer.com/forums/topic18610.html

0 comments: