Evade Kit

24th November 2009

Evade Kit

Virtumonde is a pernicious Adware Trojan that is usually installed into your windows pc (Windows 2000, Windows XP, or Windows Vista) via an outdated Java Runtime Environment. Vundo, also known as Virtumonde and Virtumondo creates random letter DLL’s in C:windowssystem32 (tyeyavv.dll for example) that inject themselves into the winlogon.exe process as well as the explorer.exe process. Since Vundo injects itself into winlogon.exe removal can be very hard because winlogon.exe is in use almost every second. The biggest problem with Vundo is not necessarily the removal process, but it’s actually the detection process since Vundo creators make hundreds of variants a day in an effort to evade detection (which seems to be working unfortunately).

What are the symptoms of a Vundo Infection?

Vundo displays unblockable popup and popunder ads even when users are not actively browsing the internet. Vundo has also been known to display fake system alerts that try to scare a user into buying a fake antivirus application. Vundo is essentially a platform for delivering scams to your PC on a massive not-stop scale.

How to remove Vundo using free software – My Vundo Removal Kit.

Removing Vundo for free can be a little tough since there are so many Vundo variants and every free program has a different detection database and heuretics algorithm.

When I encounter Vundo and a client does not want to pay for any software I “break out” my free Vundo removal kit. This kit is currently comprised of:

-MalwareBytes AntiMalware (malwarebytes.org)

-SuperAntiSpware (superantispyware.com)

-VundoFix (from atribune.org)

-UnDLL (from eset.com)

To start the Vundo removal process:

1. Backup any personal data to CD, DVD or flash drive.

2. Download and install MalwareBytes Anti-Malware.

3. Load MalwareBytes Anti-Malware and click the update tab and then click update to receive the latest updates.

4. Download and install SuperAntiSpyware.

5. Load SuperAntiSpyware. SuperAntiSpyware will ask you if you want to check for new rules and definitions. Choose yes.

6. Close SuperAntiSpyware.

7. Download VundoFix.

8. Download UnDLL.

9. Reboot your PC in Safe Mode.

10. While in safe mode load MalwareBytes Anti-Malware and perform a full scan.

11. When the scan is complete click show results.

12. Remove any checked items.

13. Reboot if MalwareBytes asks you to.

14. Enter Safemode again.

15. Load SuperAntiSpyware.

16. Click Preferences and click the scanning control tab.

17. Check on “Terminate memory threats before quarantining”.

18. Close preferences and click the “Scan your computer ” button.

19. Select “Perform Complete scan” and click next

20. Let the scan complete and remove anything it finds.

21. Next, we’ll finish up the Vundo detection and removal process by using VundoFix

22. Open VundoFix and click the “Scan for Vundo” button.

23. If any Vundo infections still remain click the “Fix Vundo” button.

24. At this point Vundo has most likely been neutralized.

25. Reboot your pc.

26. You should be Vundo Free now.

27. Download and install the latest copy of the Java Runtime Environment and keep it updated.

28. Do yourself a favor and buy Spyware Doctor with Antivirus (one license protects 3 PC’s). It’s the only antivirus that I’ve tested this year to successfully detect and remove almost every variant of Vundo with very little effort.

If you think any Vundo Trojans have been missed in c:windows or c:windowssystem32 then you scan submit those files to virustotal.com for analysis. If the file you submit comes back as a possible infection then you may forcibly remove it using UnDLL. If you’re still getting popup ads then you may want to run a HiJackThis scan and email me the log file or just install Spyware Doctor with AntiVirus.

Matthew Rizos writes daily articles on how to remove malware using free anti-malware software.

Free Antivirus

For the best antivirus [http://www.thebestantivirus.org] go here.

eBay Logo  

Escape & Evade Tactical Military Survival Kit


Escape & Evade Tactical Military Survival Kit


$129.95


*Escape, Evade, Survive.The best survival kit at this $.  ALL of your NUST HAVES


*Escape, Evade, Survive.The best survival kit at this $. ALL of your NUST HAVES


$54.99


Escape & Evade SERE Tactical Military Survival Kit


Escape & Evade SERE Tactical Military Survival Kit


$135.95


Military Survival Kit, Tactical Escape Evade AFFORDABLE


Military Survival Kit, Tactical Escape Evade AFFORDABLE


$49.99


Ear Socks 4Oakley EVADE 22-172 22-173 22-174 22-175 22-226 Sock Kit Specs Parts


Ear Socks 4Oakley EVADE 22-172 22-173 22-174 22-175 22-226 Sock Kit Specs Parts


$13.99



Escape & Evade Tactical Military Survival Kit


Escape & Evade Tactical Military Survival Kit


$129.95


Youtube video at: 4jNUlpczYYo
Designed for U.S. Forces: Fits in thigh pocket:
SHELTER:
Tactical Survival Sleeping Bag (Bivvy): Olive Drab Reversible :Reflects up to 90% body heat. Wind and waterproof.
WATER PURIFICATION/COLLECTION:
Aquamira Water Purification Tablets, CL02, Military Edition: 1 Pk of 10 tabs.
1 L Stand Up Water Collection & Purification Bags: Sterile. Qty: 2
FIRE STARTING:
Scout F…

Escape & Evade SERE Tactical & Military Survival Kit - VCM


Escape & Evade SERE Tactical & Military Survival Kit – VCM


$139.95


Youtube video at: qsKvXPHhc9Q
Escape & Evade SERE Military – Tactical Survival & Medical Combination Kit Contents:
SHELTER:
Tactical Survival Sleeping Bag (Bivvy). Reflects 90% body heat. OD reversible to silver.
WATER PURIFICATION:
Aquamira H20 Tablets, Military Edition:10 tabs.Cl02.
1 Liter Water Bags, Stand Up, Sterile.:Qty:2
FIRE STARTING:
Scout Fire Steel And Striker.3K C sparks/3K strikes….

Tricked n' Tuned


Tricked n’ Tuned


$1.53


In Tricked ‘n Tuned: West Coast Streets is the newest customizing, fast-paced, outrageous, high-tuned racer. Start out with a hacked out beater and build your rep (and your car) through some of the most insane drag racing challenges ever created! Features the latest aftermarket parts: New rims, colors, decals, body kits and more….

The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System


The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System


$26.40


With the growing prevalence of the Internet, rootkit technology has taken center stage in the battle between White Hats and Black Hats. Adopting an approach that favors full disclosure, The Rootkit Arsenal presents the most accessible, timely, and complete coverage of rootkit technology. This book covers more topics, in greater depth, than any other currently available. In doing so, the author for…

The Special Forces Guide to Escape and Evasion


The Special Forces Guide to Escape and Evasion


$25.95


The Special Forces Guide to Escape and Evation covers everything a combat soldier needs to know about evading capture and making a successful return to friendly territory. Beginning from the point where an individual finds himself trapped behind enemy lines, the book describes the many techniques that special force soldiers rely on to survive in enemy territory while evading capture. Key topics in…

Aircraft Down!: Evading Capture in WWII Europe (Potomac Books' History of War series)


Aircraft Down!: Evading Capture in WWII Europe (Potomac Books’ History of War series)


$8.57


An authority on pilot evasion, escape, and survival recounts extraordinary adventures that took place in Holland, Belgium, France, Spain, Italy, Albania, and Greece during World War II….

Post tags: , , , , , , , , , , , , , , , , ,

No Comments

No comments yet.

RSS feed for comments on this post.

Sorry, the comment form is closed at this time.