Comments on: Slaying the virtumonde virus

By: Wingwoman

Wingwoman — Wed, 27 Jan 2010 19:54:34 +0000

Just got ensnared with this bugger. Going to give a go with SDFix, per the recommendations above (Spybot S&D didn’t take it out, running avast boot-time scan at the moment). SDFix download and readme can be found here:
http://downloads.andymanchesta.com/RemovalTools/SDFix_ReadMe.htm

By: mar

mar — Fri, 10 Apr 2009 15:38:43 +0000

i wanted to try sdfix…. it isn’t there anymore. :(

any new solutions?

By: hb

hb — Wed, 04 Feb 2009 21:29:41 +0000

I have tryed all the above all week long…..I backed up pics,music,a few programs,and will re-instal xp with a complete wipeout….I say uncle to the virus

By: Buzz

Buzz — Sun, 11 Jan 2009 20:47:40 +0000

SDFix was the ONLY app that took the Virtumonde virus off. The date is Jan 12, 2009 and it worked great!

By: Brian

Brian — Sat, 25 Oct 2008 12:57:53 +0000

Not one person has mentioned stopping system restore. I can assure that if you have had this virus more than a day, it is imbedded in your system restore. I don’t believe anyone will have long term success without first shutting off system restore.

By: Virtumate

Virtumate — Sun, 14 Sep 2008 12:35:43 +0000

I think Virtumonde virus showed how actually vulnerable and imperfect popular antivirus suites are. People bundle
their computers with loads of security programs only to find out that virtumonde feels just great in their protected systems. Self-proclaimed techies recommend to install half a dozen additional applications without giving any reasons except “this might help”. Somehow this makes me think that it’s much better to have protection AGAINST infection, rather than tools to cure virtumonde. Not specaking about registry changes it can make; sometimes it just doesn’t make sense to remove the trojan because the system is already a mess.

By: Robert C.

Robert C. — Tue, 02 Sep 2008 01:14:12 +0000

I second michael in kansas (Oldphart)–it’s Sept 1, 2008 and I’ve contracted the virus. I’ll try SDFix and see what happens….

By: Oldphart

Oldphart — Sat, 12 Jul 2008 07:53:02 +0000

I sure wish that there were dates by the entries above. I have tried Superantispyware, AdAware, Spybot S-D, X-raypc, several online House Calls….all to no avail. Safe mode approach, Hiren’s CD and booting to Ram Drive utilizing programs on the disk still did not crack this recent version. Oh..by the way…the today is July 12, 2008. Going to try the SDfix mentioned above. Thanks for the ray of hope by your post michelle.

michael in kansas

By: max

max — Tue, 01 Jul 2008 20:13:08 +0000

Yeah SDFix is rock

the only one little proggy that helped me to get rid off this crap///

By: richard

richard — Tue, 17 Jun 2008 06:03:26 +0000

all you need is a program called “superantispyware” , it cleared out all of my vundo, virtumonde,etc, even from my memory, and its free for home use, with a donation if you think fit.

By: michelle

michelle — Mon, 09 Jun 2008 04:43:32 +0000

it took me weeks to remove virtumonde.. and only one program fixes everything.. SDFix!!!

Please run the following:

1. sdfix

1. Download SDFix and save it to your Desktop.

http://downloads.andymanchesta.com/R…ools/SDFix.exe

2. Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

3. Reboot into Safe Mode`:-

Reboot into >>>safe mode

4. Open the extracted SDFix folder and double click RunThis.bat to start the script.
Type Y to begin the cleanup process.

It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
Press any Key and it will restart the PC.

When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.

Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt

Goodluck!!!

By: Vundo Removal Instructions

Vundo Removal Instructions — Fri, 14 Mar 2008 00:14:46 +0000

I read a blog post on vundoremoval.com that said doing a system restore was the simplest way. I tried it and it worked great. After that I used spybot and removed the other traces. All in all it took under an hour and about 5 minutes of actual sit down time. If you just got infected recently then that vundo removal guide is the best.

By: virtumonde protection

virtumonde protection — Sat, 01 Mar 2008 20:02:37 +0000

In the computer repair business I run into this bad boy all the time. Their is a site that focuses only on this strain and how to remove it. check out http://www.virtumonde.net . They have plenty of removal guides for this.

By: virtumonde removal

virtumonde removal — Sat, 23 Feb 2008 07:02:04 +0000

When you run the Vundofix tool you should always run it in safe mode. That will give you the best chance for removeal. Other paid programs like webroot and spyware doctor will also kill it in it’s tracks. the free solutions are Spybot S and D and ad-aware but those do not keep you protected from getting it in the first place