Virtumonde Removal Vundo Removal
This guide is the easiest guide we have written for Vundo and Virtumonde removal. We also have a more advanced guide if this does not work for you.
Keep in mind that many of the tools listed here are free and as with any free tool they do not always work. We do recommend Spyware Doctor With Anti-Virus because it does fully remove the Virtumonde threat and is one of the leading anti-spywre products on the market. Learn more about this tool on the PC Tools website located at http://www.pctools.com/consumer/products/.
If you are not tech savvy or just don't want to deal with this threat anymore then head over to http://www.onlinecomputerrepair.org. These guys can remove all viruses and spyware for one very low price and the best part is if they can not fix it you do not pay a single cent. Not too shabby if you ask me.
After you have followed the instructions bellow please take a minute and give us some feed back on this guide so we can improve it. Instrutions for this are at the bottom.
Be Sure and book mark this page now because you will be re-booting several times during this process and need the links on this page for the free removal software. Hit (Ctrl+D) on the keyboard to book mark us.
The first thing we will do is take your computer back in time to when you were not infected. Hit the windows Start button and select “All Programs” > Accessories > System Tools > System restore. Start the restore process. Choose a date when you KNOW you were not infected. If you just noticed you started having popups last week then go back 2 weeks. I would always go back an extra week. This will not fully remove the virus but undo damage done. You will not loose any pictures or documents but any software installed after the restore date you choose will be uninstalled along with some of the vundo traces. Your computer will auto reboot during the restore process.
Once your computer re-boots log back in and wait till you see a box saying something like “System Restore Complete”. Re-boot your computer and enter into safe mode by pressing the F8 key on boot-up. Keep pressing the F8 Key until you see the DOS like screen and then select “Safe Mode with Networking”. If windows boots normal and you do not see the afore mentioned screen then re-boot and try the F8 thing again. When asked if you would like to continue or do a system restore just select YES to continue. Make sure you log in under your normal account User name.
We are now ready to downlaod and install the following programs. Just click the links below to download the programs.
Vundofix
Spyware Doctor
Spybot Search and Destroy
Save all three in a location were you will remember like the desktop. Go ahead and install Spyware Doctor first. Make sure you update the program. Spyware Doctor may try and run after you update the program. Spyware Doctor has a free 30 day trial but it will not remove anything untill you purchase the program. If you want you can just purchase the program and then run the scan and be done with this guide. Your other choice is to stop the auto scan after you update the program. We will still be using this program regardless at the end of this guide to ensure you are vundo free. The reason we need it right now is so it will block vundo from working while we use other methods to clean the system. We will also be running the free scan at the end so you know you are vundo free.
Now install Spybot Search and Destroy. Follow the on screen install instructions. Do what it says. When asked to make a registry bakup say yes, when asked to update say yes, when asked to imunize say yes. DO NOT run the scan yet.
Once installed reboot into "safe mode" NOT safe mode with netowrking.
Run Vundofix.exe FIRST!!!! Just double click the file and then select "Scan for vuno". If any traces are found only then can you select "Remove Vundo". If not all traces could be removed then allow the program to run on re-boot. Remember you MUST BE IN SAFE MODE WITH NETOWRKING!!!. If Spybot Tea timer or spyware doctor asks you if you want to allow the registy changes select YES to allow the change.
Run Spybot S&D. Just double click the Spybot icon or launch the program from "All Programs" The scan should take about 30 minutes and if it finds anything select them all and remove them. If it says it could not remove all traces then allow the program to run on boot-up.
Now run Spyware doctor. The scan is 100% free but to remove anything else it would cost money. The purpose of using Spyware doctor is because it is the best on the market and if you have any traces left over that program will find it. If it finds nothing then YHEAAAAAA!!! you are now Vundo free baby. If it just finds cookies and it will!!! Then there is no need to but the program to remove Vundo as it is already removed.
Do a little clean up. If you purchase Spyware doctor you will want to un-install Spybot as it is not needed and will only slow your copmuter down. Also you may still need to change your home page back to normal. Surf the web a bit and see that you have no more pop-ups. Your home page may still be changed when you first launch IE or Firefox. If that is the case just go to "Tool" > Options and change your home page to your favorite site.
Be sure and go to http://www.java.com/en/ to download the latest Java program as the old one has holes that might allow Vundo in.
If you have no Anti-Virus or Anti-spyware protection you should consider an all in one solution like PC tools Internet Security.
If all else fails and you find you are still infected then you will need help form a pro. You can always take your comptuer somewere local or just have is fixed on-line at www.onlinecomputerrepair.org. These guys will repair it for only 89 bucks.
PLEASE READ!!! This guide is new and updated please post your comments on our blog. Post if it worked and if any of the directions were to hard to follow let us know. Feed Back is the only way we can improve this site! Go to our comment Page |
