|
Title: Vundo
Type: Trojans
Remove Vundo. Removal instructions
Also known as: Vundo.b, Vundo.celldorado
Severity scale:
 (92 / 100)
Vundo is distributed by e-mail in messages containing links to insecure web sites, which exploit certain security vulnerabilities of the Internet Explorer web browser. Once the user clicks on such a link, Internet Explorer opens a dangerous site that automatically installs the Vundo trojan into the system without user knowledge and consent. Vundo is responsible for the severe decrease of the amount of system virtual memory available. This results in noticeable computer performance slowdowns. Vundo secretly runs on every Windows startup. Vundo creates a DLL file in the Windows system32 directory and writes registry entries, causing Windows to inject the file into winlogon.exe and many other programs. There are some tools created to remove Vundo trojan. They called vundofix, they can fix certain variants of Vundo trojan. Related files: vturr.dll, vzbb.dll, dszigqd.dll Vundo properties: • Shows commercial adverts • Connects itself to the internet • Hides from the user • Stays resident in background Automatic Vundo removal: 
We are testing STOPzilla's efficiency at removing Vundo
(2012-01-01 08:16:26)
We are testing Malwarebytes Anti Malware's efficiency at removing Vundo
(2012-01-01 08:16:26)
We are testing Spyware Doctor's efficiency at removing Vundo
(2012-01-01 08:16:26)
Vundo manual removal:Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\*WinLogon HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\*[filename] HKEY_CLASSES_ROOT\CLSID\{2316230A-C89C-4BCC-95C2-66659AC7A775} HKEY_CLASSES_ROOT\CLSID\{8109AF33-6949-4833-8881-43DCC232B7B2} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ATLEvents.ATLEvents HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ATLEvents.ATLEvents.1 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02F96FB7-8AF6-439B-B7BA-2F952F9E4800} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02F96FB7-8AF6-439B-B7BA-2F952F9E4800} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2316230A-C89C-4BCC-95C2-66659AC7A775} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8109AF33-6949-4833-8881-43DCC232B7B2} HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Active State Unregister DLLs: vzbb.dll, vturr.dll Delete files: vzbb.dll vturr.dll dszigqd.dll Misc: [filename] is a name of the trojan's main file. The parasite creates infected executable files with random names. These files can be found in different folders inside C:\Windows or C:\Winnt directory. Remove Vundo by following there steps. Manual and automated Vundo Fix. 
Information added: 2005-10-12 13:15:37
Information updated: 2012-01-01 05:39:11 Additional resources related to Vundo:Attention: If you know or you have a website or page about Vundo removal, feel free to add a link to this list: add url |
Related news:
Similar parasites:
Related articles:
Related discussions:
|
FORUM:
HELP:
Spreading the knowledge:
It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your
visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
PEOPLE, AVOID DOWNLOADING PS2 EMULATORS FROM TORRENT SITES. GO TO THE ORIGINAL SITES INSTEAD.
Malwarebytes Malware remover killed it for real.
Both are free.
Post Comment: