Easily Remove the 83.149.75.33 Trojan.Vundo Browser Hijack Virus infecting your computer with this step by step video guide I created while I was infected.
Your probably wondering that I have been getting back to back viruses since I had a previous virus / spyware removal video "Desktop Tab Missing? How To Restore Display Properties And Missing Desktop Tabs Instantly!" LOL, but 2 viruses in 8 years is not bad LMAO. I should have known better than to give Internet Explorer some heavy use lately without added protection 
Are you getting popups in Firefox, Internet Explorer and any other browser you use going to a page that looks similar to "http://83.149.75.33/info.png?"
Click here to go straight to how to remove the 83.149.75.33 Trojan.Vundo virus with free programs.
Do you receive constant pop-ups during internet activity, your system resources grinding to a halt, Windows Explorer crashing, Buffer overruns detected? The bombardment of 83.149.75.33 attacking your browsers!?!?!?!
Latest Webroot, Symantec, & even my favorite Zone Alarm Suite(although it detected the virus and quarantined some of it) antivirus and spyware utilities seem to do nothing to fix this 83.149.75.33 Trojan.Vundo problem??
Even online scanners such as Kaspersky Online Scanner and Trend Micro’s FREE online virus scanner, are unable to scan and clean this 83.149.75.33 Trojan.Vundo problem?!?!
Well… you are not alone! I too got infected with this virus / malware / spyware that I only knew as 83.149.75.33 due to it being the URL that constantly loads up. Later I found out that it was also more popularly known as the Trojan.Vundo virus. I researched all over from various websites and forums and took all the advice I seen with a sprinkle of my own knowledge and then cooked up this recipe to remove this 83.149.75.33 Trojan.Vundo virus.
Basically what your going to see is real-time(and video editing) of me fixing this problem from start to finish. This will show you how you can get rid of the 83.149.75.33 Trojan.Vundo virus once and for all!
Lets kick some virus butt shall we? LMAO Please leave feedback if this has helped you, thanks 
INSTRUCTIONS
- If you have a virus / anti-spyware program on your computer do a scan right away!
- If you don’t have it, get the "free" CCleaner, close
all browsers and programs. Install CCleaner, then run it. Make sure Ccleaner is displaying its "windows" tab, then click near bottom that says "run cleaner." When done cleaning close it. - We are now going to get the infamous and "free" HijackThis and save it to your desktop. Install HijackThis. Do a system scan and follow the rest of the onscreen instructions I show you including how to find out if certain files are suspicious in HijackThis.
- Next up we are going to get the "free" program "Malwarebytes’ Anti-Malware" and save it to desktop. Install it and do a quick scan. Follow the rest of my onscreen instructions using this program.
- Restart your computer and browse with ease!
Whew, wasn’t that a lot of work? LOL
VIDEO TUTORIAL [Please View Fullscreen]
More information:
What Is The Vundo Trojan / Virus aka Trojan.Vundo?
Vundo, or the Vundo Trojan (also known as Virtumonde or Virtumondo and sometimes referred to as MS Juan & Trojan.Vundo) is a Trojan horse that is known to cause popups and advertising for rogue antispyware programs, and sporadically other misbehavior including performance degradation and denial of service with some websites including Google.
The most obvious sign of infection are the pop ups. Vundo will cause the infected web browser to pop up advertisements; many of which claim a need for software to fix system "deterioration". The user’s desktop background is changed to the image of an installation window saying there is adware on the computer. The screensaver is also changed to the Blue Screen. When the user tries to change the background and screensaver back to their original by going to the Display Properties, the background and screensaver tabs are missing because their "Hide" values in the Registry were changed to 1. Both the background and screensaver are in the System32 folder, however the screensaver cannot be deleted. Windows automatic updates may also be disabled and it is not possible to turn them back on
Infected DLLs (with randomized names such as "__c00369AB.dat") will be present in the Windows/System32 folder and references to the DLLs will be found in the user’s start up (viewable in MSConfig), registry, and as browser add ons in Internet Explorer.
Depending on the version of the virus the following symptoms may or may not be present:
Vundo may attempt to prevent the user from removing it or otherwise impede its operation, such as by disabling the task manager or Windows registry editor. Some firewalls or antivirus softwares may also be disabled by the virus leaving the system even more vulnerable. Another symptom of Vundo may be the desktop icons will disappear and so will the taskbar and reappear after a short period. This becomes very frustrating if you are trying to run programs or get access to your files as the process gets automatically aborted.
Web access may also be negatively affected. Vundo may cause many websites to be unaccessible; these websites may just hang. The hard drive may start to be constantly accessed by the winlogon process, thus periodic freezes may be experienced.
Symptoms may also include the disabling of Windows Automatic Updates or other web-based services.
Firefox, Internet, Internet Explorer, Virus / Spyware Removal, Windows
83.149.75.33, Browser Hijack, CCLeaner, Computer Learning, HijackThis, How To, Malware, Malwarebytes' Anti-Malware, Popup, Remove 83.149.75.33, Remove Vundo, Spyware, Trojan.vundo, Trojan.vundo.h, Video Guide, Video Tutorial, Virus, Virus Removal, Windows
If you find this site useful, please leave a Donation for Jeremy so he can buy more Kool-Aid & create more Video Tutorials!
Thanks for this video! You need a beer on me my friend.
OMG!!!! WHAT GREAT TIMING FOR YOU TO POST THIS VIDEO TUTORIAL I WAS EXPERIENCING THESE POP-UPS AND I DIDNT KNOW WHY B/C I DID MULTIPLE VIRUS/SPYWARE SCANS ON MY COMPUTER SO I JUST BLAMED IT ON MY GIRLFRIEND USING THAT VIRUS RIDDLED LIMEWIRE BUT JUST BETWEEN YOU AND ME A PERFECT EXCUSE FOR ME TO DELETE IT OFF MY COMPUTER FOREVER AND FOR HER NEVER EVER TO RE-INSTALL THAT ON THE COMPUTER MUHAHAHHAHAHAHAHHA… ANYWAY YOU HELPED ME ALOT AFTER FOLLOWING STEP BY STEP YOUR VIDEO I NO LONGER HAVE ANY POP-UPS THANK YOU SO VERY MUCH GOD BLESS YOU YOUR DOING AN EXCELLENT JOB KEEP THEM VIDEOS COMING.
LMAO $Messiah$ you have the funniest comment i have read on my site yet LOL. “So I just blamed it on my girlfriend” LMAO! Glad I could help you
YOUR VIDEO DOESNT STREAM, THANKS FOR GOOD OLD TEXT
Sorry it didn’t work for you at the time Julij, but the video seems to be working and streaming today. Also if anyone views this video via RSS reader the video wont play, you would have to view it from your browser with flash enabled. Thanks for leaving a comment
This invasive “virus/malware/painintheass” seems to be diffrent on every machine and it may take several tries to find the solution as I discovered.
I acquired this “virus/malware/headache” on 1/27/2009. My last download from Microsoft was a routine updating of Office 2007. I know this because when I tried to use system restore my last save point was the day before I updated Office. I do not believe that Office is the culprit though.
Now about this bug….
This thing is incredible!
It hijacks every browser on your computer- Explorer, Firefox, Chrome and Safari. It blocks system restore. When you attempt to Update Windows it sends you to a very good “fake Google page.” Every click or search in the fake google page seems to add more malware and eventually as it grows it directs one to porn sites. I also believe that this is the reason it is worse on some machines than others. I recognized the Google page as fake because I use iGoogle as my home page and there was no button for iGoogle. When I attempted to search it became very apparent. It sent me straight to the page it wanted to- porn. It seems that the more you use this fake page the worst the infection becomes.
It doesn’t stop at hijacking the browser, it also prevents your Antivirus from updating. I had Trend Micro orginally and went out and bought Kaspersky after being told that it was the best by the IT guys at work. This thing shut down Kaspersky’s like it owned it. (I had a Disk version of Kaspersky manufactured in Oct 2008. I do believe that had I had updated Kaspersky running before, instead of Trend Micro, I would have never caught the bug.)
First, download the free Trojan Remover 6.7.5. (It is free for 1st 30 days) Find it here:
http://www.simplysup.com/
If you can run update on your antivirus and scan after using the Trojan Remover, then you are golden as it will likely catch the bug.
Whoever wrote this “bug” is a genius, and a sadistic bastard! It is like the last boss fight in good Videogame, you can’t kill it with just one weapon. It apparently hides in your RAM and attaches itself back into the registry.
My computer is now running like a dream! Please others post their battles with this Monster.
WHAT A LIFE SAVOR I’M NETWORKING YOUR WEBSITE I JUST HELPED MY “COUGAR” FIX THE VIRUS ON HER PC BY FOLLOWINNG YOUR EASY & VERY HELPFUL TUITORIALS KEEP DOING AN OUTSTANDING JOB.
Thanks! I have been looking for this information all day now. My pc is not running like used to and I need to figure out how to fix it soon. I have bookmarked your post so others can find it to on digg.
Yeah… Sadistic genius indeed. I’ve spent nearly 20 frickin’ hours trying to get rid of this pernicious little trojan which AVG identified as Trojan horse Vundo.JD…
By the way, nothing else caught it except Spybot (well, it caught something that it didn’t identify and I couldn’t tell if it deleted it or not). Yeah, I ran about 8 or 10 different antispyware/malware removal programs (including both of microsoft’s programs, the live onecare scanner and the malware removal tool) both in safe mode and normal and normal with the internet unhooked and all the antivirus stuff disabled. Even the PC tools spyware doc that my wife downloaded out of frustration didn’t find it… ha. Even the program that was specially designed to hunt it down (VundoSeaker or whater the heck it was called). Holly heck Batman….
So, I was pretty mystified as to how AVG and SB could keep finding this thing, tell me that they were going to delete it on reboot and then find it again after I logged back on. (You can probably already tell that I’m not a serious computer whiz, but I do alright in my own way given time… like 20 hours). I figured out that it had something to do with the boot sector, seeing that the Trojans seemed to always be located in System32 and whenever AVG scanned, it would show up after scans of the “boot sector.” yes indeed, the game was afoot Watson….
Yeah well, that didn’t help too much ’cause i don’t really trust myself with regedit or any of the programs that facilitate such a thing…
I looked on AVG’s forums and found something about replacing the atapi.sys process which I did using this covert .zip file stealth bomb attack on the drivers file that wasn’t totally covered in the post (seriously, you’ve got to fricking sneak up on this thing and swap the file out quick before it catches on to what you are doing and rewrites your effort… I crap you not, look up some of the wikipedia stuff on this thing).
So, the first time I did this it seemed okay until I got back on the internet and ran a scan and found it back where it was, all fat and happt.
The second time I did this it didn’t want to take and the atapi.sys file kept regenerating itself before I could swap it out.
The third time seemed to be the charm. This time I didn’t take any chances and I disabled the network connection after I downloaded the file and before I unzipped it. I then rebooted and ran MbAM and SB and AVG and everything cam up roses.
So here I was, thinking I was pretty cool… so i got online to post on AVG’s forum and guess what happened? Yup, my browser was hijacked again… weird though ’cause it still wasn’t showing up in AVG… duh duh duh. So, I deleted and reinstalled Firefox but guess what boys and girls?
Yes that’s right… I’m still having browser issues!!! YAY!!!
So, the moral of the story kids? If you know any hackers that that like to write malicious codes… turn ‘em in. Or if you’re so inclined… beat the crap out of them and then turn ‘em in.
Let me just say that if anyone wants to out themselves as the sh!t that wrote this particular beauty, I’d be happy to kick your chest in, break your jaw, dislocate one or both of your arms and break your knees. *smile*
Ahem, so I’m gonna try this Trojan Remover thing named above and if it doesn’twork I’m comin’ back for ya’ll.
BT
I forgot to mention that all of the programs cited here were run (ran? whatever) and I am still having problems.
Yes, even Keiffer’s beloved Trojan Remover. What the crap dude?!?!?
Fortunately for you all, I’m too tired to rip your arms off. And then, there’s the whole “I don’t really know who the heck you are anyway” thing.
So, anybody got any ideas for me here? I’ll make you cookies….
BT
@Blaine the Train: I like your writing LOL, Sorry you still couldnt get rid of the problem, try ComboFix which you can find in this post: http://www.pclicious.com/overclick-cn-virus-how-to-remove-easily/
Your the best!
I was about to go out, buy a new drive and reinstall everything … then I found this information. I have spent the best part of three days trying to get rid of this @#$%^ virus. Tried probably a dozen or so AV softwares.
30 minutes watching/following this video and the problem has been nuked.
Thank you so much!!!!
@Maris: Thanks!
@SRG: I am so glad I was able to help you out! Thanks so much for leaving a comment!