Troubleshooting Trojan.Vundo and winantivirus

[guest]

Situation: the client has a Trojan.Vundo, but the Symantec anti-virus can't clean it. It comes back after scanning and clean the virus. The cleint even reformatted the hard disk, but after move the data and emial back to the system, th ewinantivirus popup again.

To prevent this virus, try the following suggestion:

1. Limit the sharing right, for example share with read only.
2. Make sure you have firewall running.
3. Have the anti-virus running and update the definition.
4. When the popup display, don't click any thing in the screen, instead of close it using Task Manager.

The ways to clean.

1. Use msconfig to remove any suspect software.
2. Use regeidt
3. Download Vundofix.
4. Download fixvundo from symantec.
5. Use HiJackThis.

[guest]

I tried all mentioned ways to clean trojan vundo, but it comes back. fixvundo and vundofix say no virus found. However, the Symantec anti-virus find it and clean with requiring reboot. But vundo comes back again. What should I do?

[chicagotech]

Run the symantec removal tool with the safe mode.

[guest]

I tried to turn on the safe mode, but all I had was a black screen, nothing else.

[chicagotech]

Try one of them.

1. Try to shutdown it first and then run safe mode.
2. Run the windows clean reboot.
3. Disable all non-Microsoft services.
4. Disable anti-virus.