How to Remove Trojan.Vundo.Ewz

by Ty Arthur

Stock Xchng

The Vundo.Ewz Trojan is a virus program that infects your computer when you click on a link inside a spam email. When your web browser opens up the link, the Trojan will then automatically install itself on your computer without your permission. You can tell that you've been infected with the Vundo.Ewz Trojan because your web browser's home page will change and you will receive frequent pop-up ads. You can remove the Trojan by running an anti-virus program and then manually deleting the remaining registry entries that the virus created.

Step 1

Download an anti-virus program such as "AVG Free Anti-Virus" or "Avast Anti-Virus" (see Resources below). Follow the on-screen installation instructions.

Step 2

Click on the "Start" button and then choose the "Restart" option. Wait for the logo of your computer's manufacturer to pop-up on the screen then press the "F8" key until a new menu screen appears.

Step 3

Press the down arrow key to highlight the option labeled as "Safe Mode." Press the Enter key to load the computer with safe mode turned on. Open the Start menu once the operating system finishes loading.

Step 4

Right-click on the "My Computer" option in the Start menu. Choose the "Properties" option from the menu that will appear. Click on the button labeled as "System Protection."

Step 5

Click on the "System Restore" tab. Scroll down to the bottom of the window and click on the "Turn Off System Restore" button. Click on "OK" and then close the window.

Step 6

Double-click the desktop icon for the virus removal software you installed in Step 1. Click on the program's "Update" button, and then click on the "Computer Scanner" button once the update finishes downloading.

Step 7

Wait for the scan to finish running and then click on the "Remove Selected Problems" option. Close the anti-virus program. Click on the Start button again. Type the word "Regedit" in the search box and then hit the Enter key.

Step 8

Open up the registry editor by double-clicking on its icon at the top of the search results. Press the "Ctrl" and "F" buttons at the same time to bring up the registry editor's search box.

Step 9

Enter the string of numbers and letters "02F96FB7-8AF6-439B-B7BA-2F952F9E4800" into the search box and press Enter. Right-click on each of the registry entries when they show up in the search list and then choose the "Delete" option.

Step 10

Search for and delete the registry entries named "2353FCBC-012D-487B-8BF3-865C0929FBEB," "22E85F2A-4A67-4835-B2C3-C575FE4EC322," and "DE8BDE42-16D9-4CCC-9F4F-1C3167B82F60." Restart the computer to finish removing the Vundo.Ewz Trojan from your PC.

Tip

  • Make a backup copy of each of your most important programs and files before deleting any registry entries. If you delete the wrong entry your computer's operating system may stop working properly.

Warning

  • If you leave the System Restore option turned on, your computer will create a system restore point as soon as you run the virus removal software. The new restore point will still have the Vundo.Ewz Trojan stored on it, which could lead to your computer becoming infected again in the future.

About the Author

Ty Arthur has been writing technical and entertainment-related articles for a variety of online sources since 2008. His articles have appeared on Metalunderground.com and many other websites. Arthur attended the Great Falls College of Technology and studied both computer science and creative writing.

Photo Credits

  • Stock Xchng