Comments on: How do I remove a Trojan.Virtumonde or Vundo http://www.whatthetech.com/2008/12/26/how-do-i-remove-a-trojanvirtumonde-or-vundo/ Tech Answers Sat, 21 Nov 2009 02:35:49 -0600 http://wordpress.org/?v=2.8.6 hourly 1 By: Raymond http://www.whatthetech.com/2008/12/26/how-do-i-remove-a-trojanvirtumonde-or-vundo/comment-page-1/#comment-2310 Raymond Mon, 29 Dec 2008 22:22:45 +0000 http://www.whatthetech.com/?p=377#comment-2310 I can sympathize. I went through two days of hell and tried everything imaginable...but I did eventually defeat this Vundo Variant, which I believe is fairly new. It took me five steps to finally eradicate the Trojan: 1. Run HJT and you will likely find a false BHO entry created by the virus; it must be removed. 2. Run an updated version of SuperAntiSpyware. TODAY's update seems to get at the root of this Trojan. 3. Run combofix.exe. I believe it was this last step that really finished off the Trojan and deleted all of the false Windows system files it spawned. 4. Turn off Restore before you reboot; 5. Reboot into safe mode each time Good luck with this. I can sympathize. I went through two days of hell and tried everything imaginable...but I did eventually defeat this Vundo Variant, which I believe is fairly new.

It took me five steps to finally eradicate the Trojan:

1. Run HJT and you will likely find a false BHO entry created by the virus; it must be removed.

2. Run an updated version of SuperAntiSpyware. TODAY's update seems to get at the root of this Trojan.

3. Run combofix.exe. I believe it was this last step that really finished off the Trojan and deleted all of the false Windows system files it spawned.

4. Turn off Restore before you reboot;

5. Reboot into safe mode each time

Good luck with this.

]]>