How to get rid of Vundo Infection?

Alright, thanks again! One last question. Is it okay to fix these? They have appeared there since we have started this whole process. And I dont use IE anyways.

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
 
Don't fix them. Those are perfectly legit browser files, and you won't get anything fixing those as long as you can't uninstall the IE. Or if you do it will go to, but don't fix it. You'll get nothing since you're not using it.
 
Avenger doesn't work on Vista...

Not true. It has been since January 2008.

Swandog46's Public Anti-Malware Tools

The Avenger
What's New in v2

1. A new GUI, completely rewritten from scratch. Hopefully simpler, prettier, and more intuitive.
2. Automatic rootkit detection and removal: check the "Scan for Rootkits" box and The Avenger will scan for rootkit drivers hidden from the operating system. The Avenger can also disable any hidden drivers found automatically.
3. New functionality for driver operations: a "Drivers to disable:" command as well as a safer, more robust implementation of "Drivers to delete:" (formerly "Drivers to unload:").
4. Full compatibility with Windows Vista.
5. Cleaner error handling and logging. All relevant data logged to c:\avenger.txt (if c:\ is the system drive).
6. Backups are now password-protected with industry-standard password "infected" to prevent accidental reinfection.
7. HKEY_USERS (HKU) no longer accessible to registry routines. The Avenger loads before it is constructed. Sorry.

Plus a slew of other bugfixes and improvements!
 
Back
Top