How to Remove Trojan Horse Vundo T

by Thomas King, Demand Media

Trojan Horse Vundo T launches annoying pop-up ads on your computer.

Trojan Horse Vundo T is a member of the Trojan Vundo family of Trojans. These Trojans flood your computer with pop-up advertisements that download harmful files onto your computer. Some of these harmful files may open security holes on your computer and are used to procure your personal information. In addition, the Trojan Vundo family of Trojans may slow your computer, change your Internet and desktop settings, and decrease your available memory.

Automatic Removal

Step 1

Open your antivirus program. If you do not have an antivirus program, consider downloading a free antivirus program, such as Windows Malicious Software Removal Tool or Avast. See resources below.

Step 2

Update your antivirus program. Most antivirus programs include an "Update" or "Check for Updates" button. If you do not know how to update your antivirus program, check the manufacturer's homepage.

Step 3

Run a full scan of your computer using your antivirus program. This may take several hours, but should detect and remove the Vundo T Trojan Horse. If it does not, continue to the next step.

Manual Removal

Step 1

Hold down the Windows key and press "R." The Run box opens.

Step 2

Type "regedit" into the Run box and click "OK." The Registry Editor opens.

Step 3

Locate the following registry values in the left pane of the Registry Editor and delete them. To delete a registry value, right-click on it and select "Delete." "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Active State" "HKEY_CURRENT_USER SoftwareMicrosoftWindows CurrentVersionRunOnce*WinLogon" "HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows CurrentVersionRunOnce*[filename]" "HKEY_CLASSES_ROOTCLSID{2316230A-C89C-4BCC-95C2-66659AC7A775}" "HKEY_CLASSES_ROOTCLSID{8109AF33-6949-4833-8881-43DCC232B7B2}" "HKEY_LOCAL_MACHINE SOFTWAREClassesATLEvents.ATLEvents" "HKEY_LOCAL_MACHINE SOFTWAREClassesATLEvents.ATLEvents.1" "HKEY_LOCAL_MACHINE SOFTWAREClassesCLSID{02F96FB7-8AF6-439B-B7BA-2F952F9E4800}" "HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionExplorerBrowser Helper Objects{02F96FB7-8AF6-439B-B7BA-2F952F9E4800}" "HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionExplorerBrowser Helper Objects{2316230A-C89C-4BCC-95C2-66659AC7A775}" "HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionExplorerBrowser Helper Objects{8109AF33-6949-4833-8881-43DCC232B7B2}" "HKEY_CURRENT_USER SoftwareMicrosoftInternet ExplorerMainActive State"

References

FasterPCCleanClean: How to Remove Trojan Vundo

Resources

About the Author

Thomas King is a graduate of the University of Pittsburgh School of Law where he served as managing editor of the "Pittsburgh Journal of Environmental and Public Health Law." He currently lives in Aberdeen, Washington where he writes and practices law.