Our computer was infected with a Trojan.Vundo virus. Symantec virus scan identified this virus and during a typical full system scan supposedly removed the virus. However, we continued to receive a popup message from the Symantec system saying a Trojan.Vundo virus was detected and has been removed.
After repeatedly getting this message, we went to the Symantec website and found a Trojan.Vundo removal tool. We downloaded the tool and ran it per the instructions. The tool said it removed the virus. Unfortunately, after a while the same Symantec message popped up saying a Trojan.Vundo virus was detected and has been removed.
We then went to the Symantec website and found the instructions for manual removal of the Trojan.Vundo virus. We followed the instructions, which included disable system restore, update virus definitions, restart the computer in safe mode, scan for and delete the infected files and reverse changes made to the registry using the regedit command. We did all of these items, although the items we were told to look for in the registry did not exist.
After about three days with no indication of the virus, the same Symantec message popped up saying a Trojan.Vundo virus was detected and has been removed.
Technicians at a local Compusa suggested the only way to delete the virus may be to do a full system restore. We are looking for suggestions on how to delete this virus permanently from our computer without having to do a full system restore and losing all of our programs and data.
2007-01-11
00:57:11
·
8 answers
·
asked by
Reader
3
in
Security