Remove Vundo.b. Removal instructions

Vundo.b manual removal:

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\[filename]
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{44240BB5-BD7D-4D49-A1AA-8AB0F3D3CB44}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{44240BB5-BD7D-4D49-A1AA-8AB0F3D3CB44}
Misc:
[filename] is a name of the trojan's main file.

Vundo.b uses randomly named files.

The parasite creates infected library (.DLL) files with random names. These files can be found in different folders inside C:\Windows or C:\Winnt directory.