Trojan Vundo Removal Guide

Threat Level:
9/10
Rate this Article:
Comments (0)
Article Views: 26149
Category: Trojans

There are simply too many threats facing healthy PCs these days to go at protecting your PC alone – and Trojan Vundo is the perfect example. This vicious and malicious Trojan enters the system surreptitiously and roots itself in the system without seeking action or permission from the user.

The entire purpose behind Trojan Vundo is to spam the user with various annoying commercial pop up ads, as well as to download more malware onto the system without the user even knowing about it. Other annoying symptoms associated with Trojan Vundo include slowing down the infected PC to the point of being nearly completely unmanageable, and it will increase erratic system behavior.

This Trojan is spread via a variety of ways, which includes through infected e-mail attachments and through social networking applications. What adds to the danger is the fact that Trojan Vundo will install other malicious software and infections to the system, and make the system more vulnerable to future attacks.

If you find your PC is infected with this Trojan, you need to restore your system’s security and privacy by investing in a fully functional, operational and legitimate security application which will destroy Trojan Vundo for good. This will also protect the system against similar attacks in future, and leave you feeling confident that your system is being protected.

Download Remover for Trojan Vundo *
*SpyHunter scanner, published on this site, is intended to be used only as a detection tool. To use the removal functionality, you will need to purchase the full version of SpyHunter.

Trojan Vundo technical info for manual removal:

Files Modified/Created on the system:

# File Name File Size (Bytes) File Hash
1kahasuha.dll88064 bytes
2linobeyo.dll52736 bytesMD5: bc0d2c6fc5288e93d6cd2e9eda34cb3b
3fccbcab.dll36352 bytes
4foburune.dll86016 bytesMD5: bc1c4e7096118767175dec2a7fa05af7
5yewiluyo.dll108032 bytes
6khfdc.dll330848 bytes
7bajibuli.dll47616 bytes
8zivahesu.dll49152 bytes
9kawenola.dll67072 bytes
10luyusowa.dll92672 bytesMD5: 36c86ded46886fb81a61be96eb36adb3
11urqnoli.dll38400 bytes
12vtutqpp.dll38400 bytes
13sidebar32.exe113792 bytesMD5: c358e170f8c6525dbbc3bcf164eb9d40
14hemetepe.dll86016 bytes
15yohajizi.dll91432 bytes
16__c0091CDF.dat28672 bytesMD5: 90982bb8ed61ebaddb39d42b76d0afde
17rqrsqnm.dll39936 bytes
18qomnnop.dll38400 bytes
19lumuheze.dll95396 bytes
20dogejuhu.dll89600 bytes
21ddaaya.dll122880 bytesMD5: 056e217a68c3facce9fbb7bd3dd8b315
22tidahahi.dll45056 bytesMD5: 4e9fd2478841d314298af7f979f20ddc
23jkkjj.dll315488 bytes
24vadusufo.dll89600 bytesMD5: a63b53c597862776dd9d24aca5f1b599
25__c0051750.dat28672 bytesMD5: 889c38b9d897754f0660fe901dea2f35
26ssqrq.dll320096 bytes
27fccayaw.dll38400 bytes
28ruyutave.dll92672 bytesMD5: 60114baf5f8d5d970c259ac5b236a754
29filoloye.dll93184 bytesMD5: 109ca5c6851e148c6342b2b0230d6e4d
30guyubaha.dll39424 bytesMD5: bfcd4bc73f530c1e4ba1f7057e804e91
31ziyewila.dll94262 bytes
32awvvu.dll331776 bytes
33kutihfgl.dll73216 bytes
34vakemuna.dll50176 bytes
35honayoto.dll92672 bytesMD5: 0e8b373b7c052bb69f3c288ff2b18d97
36arnobs.dll124416 bytes
37riborika.dll57344 bytesMD5: 2ddc88ca710a0f8743f900be4ed3e348
38loyayono.dll96768 bytesMD5: 4b3c7b37bfe500fd374d48886fee9c74
39_A00F1905D2A.exe37888 bytesMD5: 19a144e7cb3d048a06a5865a055c0981
40ddcyy.dll325184 bytes
41patadosu.dll92672 bytesMD5: bf507f709922a4b384dcf7205d2d6531
42drnpfdxkvw.dll221184 bytes
43hgfeca.dll108032 bytesMD5: cf17205f23a88fb58fc805475bfdc533
44cbxwwwx.dll39424 bytes
45zapohugu.dll
46urqnlmm.dll40448 bytes
47_A00F13EF60D.exe37376 bytesMD5: 132c04f16e429035905b243944421351
48kozezupo.dll94271 bytes
49mljigde.dll41984 bytes
50kuzogago.dll63755 bytes
51cbxvuts.dll35328 bytes
52nunayeta.dll95318 bytes
53zifewiba.dll50176 bytes
54wezetugu.dll92160 bytesMD5: e7f764ab3065d48aa9b68625358c5a98
55wudepuve.dll88576 bytes
56mezinoma.dll49664 bytes
57wibovaha.dll67072 bytes
58__c0049D04.dat35328 bytesMD5: a091d71a79fed97b5eb6ab5a637cdfe0
59xanwtyxc.exe40448 bytesMD5: 98f2183ef91f091bb83bb1204dc166dc
60pmkhi.dll244832 bytes
61zikedama.dll47616 bytes
62jkhfg.dll344576 bytes
63hovogove.dll103219 bytes
64visoziyo.dll89088 bytesMD5: 318ac6c66a8f9d64e6cfa54c11c9b07d
65gebaaay.dll39424 bytes
66wumomara.dll92672 bytesMD5: d4966375044f6743824371e68356c0df
67awtqo.dll320096 bytes
68fubatuzo.dll91136 bytes
69zimuworo.dll96043 bytes
70__c00DFB62.dat25600 bytesMD5: 31a90a8e415a92c1ecbaf92cbafdf730
71mlljk.dll323168 bytes
72komabagi.dll106496 bytes
73sstuu.dll316000 bytes
74vtsqo.dll334848 bytes
75farakive.dll64055 bytes
76awvvt.dll344576 bytes
77pakiguwu.dll88576 bytes
78doyanavo.dll, vijohato.dll, gojowahu.dll, reripaga.dll54272 bytesMD5: b2e3cdc530205b17c4567867fe9d8901
79borababu.dll50176 bytes
80fhletmxb.dll165472 bytes
81__c00D63A.dat25600 bytesMD5: aa98addfce1715b2f6b7ff2cd0a40b64
82hesanebo.dll89088 bytesMD5: 287c41a48b9f4e16cccf4f64080481d4
83nudeleze.dll96453 bytes
84batujuko.dll89088 bytesMD5: 480227d8cf9108a366d8cae209a9991a
85ripodefe.dll50176 bytes
86qomklml.dll35328 bytes
87roruhore.dll88576 bytes
88veyevida.dll95941 bytes
89sedutodo.dll66246 bytes
90damopore.dll89600 bytes
91dubolaho.dll92160 bytesMD5: ac7d0fc910450ffa0918b724de117e7f
92updatecheck.exe90112 bytesMD5: 118d7d4133c84523bc35a863e51d5566
93ledamine.dll106496 bytes
94kedawubo.dll89088 bytesMD5: a73240a29d414c6c79e85340998f9b54
95ssttu.dll333408 bytes
96nagomone.dll48128 bytes
97hgddc.dll313440 bytes
98mepavuhi.dll60928 bytesMD5: 7e05dc764d5d5a77525dffcac1350909
99kunobesi.dll92672 bytesMD5: ca23aa840acc2ebf648154243283ebe3
100duleneja.dll89600 bytesMD5: c73ebf54b88e5d547e2a1c6f8f403f00
101kabujupe.dll103033 bytes
102awturrq.dll40448 bytes
103fusigagi.dll45056 bytesMD5: 4363f5b582cdc9322ae9e8450438e53e
104vturpn.dll88576 bytesMD5: 08cfd69d98151b107b2c8ce6b485c896
105wadavuro.dll91648 bytesMD5: c14ccb470e1b60a293edc485d041dd32
106ssqrp.dll293376 bytes
107pmnllii.dll36352 bytes
108ddcdbab.dll38912 bytes
109yujukaku.dll89600 bytesMD5: 3ada9432c88a6761d54ea97885ca2b49
110hhhhae.dll133120 bytes
111kihugali.dll93696 bytesMD5: 452d857312504ca57efb63a765e603f5
112ssqqrsq.dll23728 bytes
113gopuvuja.dll47616 bytes
114keradebu.dll50176 bytes
115royetuki.dll93237 bytes
116ragehage.dll104960 bytes
117yebineza.dll50176 bytes
118setunude.dll49152 bytes
119mofohupu.dll50688 bytes
120khfdecc.dll40448 bytes
121gvzleg5r.exe157184 bytesMD5: 81b6ec76b0b313b04d0c576333ab3e4a
122vtusppn.dll37376 bytes
123konowahu.dll90112 bytesMD5: 7e20e50ac1220789cb075817b914eee0
124wotologa.dll92160 bytesMD5: 2f927060c15fcb48976e3e0057b03aca
125geede.dll319072 bytes
126fabireze.dll97792 bytes
127madubiha.dll50176 bytes
128madipoha.dll50688 bytes
129testabd.dll24576 bytes
130yobuwiji.dll81920 bytes
131_A00F29699F.exe37888 bytesMD5: 6b1f4fb700d752c39bc1b3b333008d4e
132hafasego.dll62076 bytes
133tmp2E.tmp.dll64512 bytes
134kepenowe.dll39424 bytesMD5: 95b2a8c20ad2641dffab352b8c14fa07
135bidubiti.dll92423 bytes
136sokazoya.dll39424 bytesMD5: 069346fd7d1a904ae9d9d8f834389e5f
137vupisizi.dll91136 bytesMD5: ddccadea3deac0ba7ee371f995f5ae05
138zywmdime.dll659472 bytes
139naluwota.dll95879 bytes
140__c0095022.dat28672 bytesMD5: cdb8fb85a648b1f126009e1edef8d797
141tupabezu.dll92160 bytesMD5: fb82cdc6f70adddc91ab6cd188f8e0de
142raziwanu.dll66560 bytes
143iifdeby.dll41472 bytes
144mebarepo.dll87552 bytes
145yiyasafo.dll92672 bytesMD5: 5330d5fdc2fc6c6439acac5a78453c56
146ssttt.dll331776 bytes
147yinazeku.dll45056 bytesMD5: 321fbd327f661fdc77e547dde26a8ca5
148bugudesi.dll50176 bytes
149tukuhegu.dll97474 bytes
150kugnlc.dll129024 bytes
151vufipuye.dll92672 bytesMD5: d830911d685c69cf68865c203ca76d96
152ramobugu.dll93184 bytesMD5: cbcc49be418671d24708f57da6565dce
153qommkjh.dll34816 bytes
154yuwegiju.dll93184 bytesMD5: 2379eb878847d8cdb00270332e723395
155vtutq.dll329216 bytes
156nasijuye.dll96256 bytesMD5: 0eee3356df22a461239638218eaf45c7
157yoduvofa.dll, kozibala.dll39424 bytesMD5: 4c5a96706076890d0a51a7cccbfb81ef
158rahobofo.dll67072 bytes
159jutizowi.dll70710 bytes
160ddaby.dll333824 bytes
161palozora.dll92160 bytesMD5: 4e23754facf297465261968fd5034582
162fopijunu.dll88576 bytes
163_A00F158B740.exe40960 bytesMD5: 5ad9d2b6468ef813c68eea4caf87fca1
164revalatu.dll45056 bytesMD5: 8ecaee696dac6a0a0e73e3f0cc1cd95f
165femigegi.dll92672 bytesMD5: fc6009ff27b53ee3fe8ad41cd2c19b0e
166pmnnmll.dll23728 bytes
167dapatudi.dll92672 bytesMD5: 5fe529765fd145798d6e502bd745ce64
168tazamuto.dll98304 bytes
169hggdaxy.dll35328 bytes
170cbxuust.dll36352 bytes
171ganafihe.dll67072 bytes
172cbxyaaa.dll34816 bytes
173tuvstqo.dll41472 bytes
174jkhfd.dll317024 bytes
175pmkhh.dll331776 bytes
176herugife.dll93236 bytes
177vtuuu.dll326752 bytes
178zafedeho.dll92160 bytes
179urqom.dll319584 bytes
180mljijij.dll39936 bytes
181jimekaju.dll92672 bytesMD5: acbc13181f221383fcf142e1e8ed5d56
182zasulege.dll49152 bytes
183vtuvv.dll334848 bytes
184muzurimo.dll96433 bytes
185luravufa.dll67072 bytes
186sefewana.dll92160 bytesMD5: 5709e3668c16f7ddaa3b9113e6f409d4
187%TEMP%
188sifajade.dll91648 bytesMD5: d4e0b851900df3c68c80bcea6544ee2e
189kefuzego.dll88064 bytes
190nezovefo.dll50176 bytes
191winwil32.dll24576 bytes
192de6z7w05.exe122880 bytesMD5: b83115b560bfd3f10859df478160a1cf
193vtutr.dll321024 bytes
194nuvameje.dll108032 bytes
195geedb.dll321632 bytes
196__c007010D.dat27648 bytesMD5: 6993623685ef2be15656a4d09a3b580b
197pmkjg.dll329312 bytes
198__c007CFDF.dat34816 bytesMD5: 9be2b2412e653b3969a988c8d4a44087
199hupetetu.dll107520 bytes
200mohasobi.dll97932 bytes
201zefumiwu.dll97993 bytes
202forukabe.dll91303 bytes
203munokesu.dll91648 bytesMD5: 601224d3e6c5b92a26d69ea3647f1ac5
204weredaho.dll49152 bytes
205vufurajo.dll92160 bytesMD5: 1e8dad487f1d4cbf2624ef66b522d3a1
206jkhhh.dll320608 bytes
207pamuyomi.dll97876 bytes
208awtutuv.dll38400 bytes
209maweyeri.dll93696 bytes
210fubulave.dll92672 bytesMD5: 84f7cf1ff7ef65246ba87f0774b1b31e
211dadirova.dll67072 bytes
212vegapaye.dll39424 bytesMD5: 242d6b31daf6e1ad4f55a34719a25edb
213wobowedi.dll88576 bytes
214sohovaha.dll
215yejimoya.dll91648 bytesMD5: 2f9c8912767536f8c945b9a66834c010
216rejipupo.dll50688 bytes
217yujetata.dll89600 bytesMD5: 8ed52c18f957d3f4acb4ae43300a4fb0
218petolahu.dll105984 bytes
219tarozahi.dll93184 bytesMD5: c724d3f69378fa8635eae2a418183042
220yatewefa.dll67072 bytes
221lutazipu.dll92672 bytes
222awvtt.dll291840 bytes
223emqsys.dll20992 bytes
224lotakine.dll79872 bytes
225gebyy.dll325184 bytes
226__c00E00C0.dat35328 bytesMD5: 46cf62c92900f84d3b78f6f09ecc8941
227knpcoq.dll99840 bytes
228dafumumu.dll93184 bytes
229tareyezu.dll
230efccy.dll334848 bytes
231uvfsffms.dll94720 bytesMD5: 54eae8184df23ff8b7b95d3f09ef8c4a
232abypofwh.dll110592 bytes
233%SystemRoot%\System32
234nldfmtapxvt.dll217088 bytes
235toretewo.dll51200 bytesMD5: d37145240bc750be8c491a18ca9637c4
236zevafubi.dll92258 bytes
237hggghec.dll36864 bytes
238_A00F98253.exe40448 bytesMD5: 5164db2e93e064a8eacfbe61251a4667
239goralaro.dll50176 bytes
240vturq.dll334848 bytes
241bokiluve.dll49664 bytes
242bodalene.dll96987 bytesMD5: e1a0d426ffa39f6fda679ebb9235d847
243kokuluga.dll90624 bytesMD5: 1dd815fe1defce00251f4fb716f9af85
244jijeruwa.dll92672 bytesMD5: 35c95b21f023ec9201cf9465cfb5d77d
245gaduvoma.dll90624 bytesMD5: cd0ad490e946a2a0cff372778eb08afd
246harupeza.dll89600 bytesMD5: 87d4d88ee7866c339c286358daf411fd
247sewepedo.dll93915 bytes
248pofegohu.dll49664 bytes
249fozojati.dll92672 bytesMD5: 9c658d81ee6cab99b0803e4b008eecf1
250tihaduza.dll89600 bytesMD5: 30147d3b5ee43c00394e213fa994b460
251sstqp.dll290816 bytes
252viyezoya.dll61030 bytes
253lusumune.dll91648 bytesMD5: 09c80985ec77b4ef6ac8df895ac7545b
254khfee.dll290816 bytes
255tesggpg.dll104960 bytesMD5: 48324a445ec5c48d6ef699a199fb9bb8
256awtss.dll-removed_skip336992 bytes
257lekefoji.dll105472 bytes
258zikewapo.dll92160 bytesMD5: cd89100f2172c3badca2792977453934
259websrc32.dll240128 bytes
260sizulase.dll50176 bytes
261qopoo.dll296448 bytes
262foroheka.dll52736 bytesMD5: f1e3d308dd8c971b6648220b4a7fa8fe
263kadageko.dll80384 bytes
264pmnnn.dll334848 bytes
265khfghgd.dll40448 bytes
266jkklmmk.dll36864 bytes
267gebcyxx.dll38912 bytes
268awvtr.dll344576 bytes
269gebcy.dll334848 bytes
270wefeyubi.dll, mudagodu.dll45056 bytesMD5: 1eca7b0e89097ad71d91738c4b2c9a86
271ssqpm.dll335872 bytes
272guderasa.dll98043 bytesMD5: b38d0b1a9ab73bf6a86d9160e6c2e4a4
273seyiyetu.dll176640 bytesMD5: e6626c9103ebbc3f352b02bba2886a5a
274qommnno.dll39424 bytes
275vuhugeya.dll91214 bytes
276rikojine.dll92964 bytes
277yozuyosa.dll92672 bytesMD5: 0e01c507e26da75a0ad5fcfe8d1f9e7a
278besigaza.dll102034 bytes
279nzngrd.dll129024 bytes
280hajiruno.dll68096 bytes
281kjdsrngn.exe57371 bytes
282raritazu.dll95232 bytesMD5: 40293a3b006ad0aa65d7f2295a4d8b5e
283yetujigi.dll52736 bytesMD5: 62718155ade1f7365281ddb74dc9f2c4
284urqqrqo.dll41984 bytes
285mozuzolo.dll93184 bytesMD5: 5317eb6a92bb86250927fa9a7d4fa44a
286dipoveya.dll90624 bytesMD5: 0d51a585d150a9a008514478e14ba648
287kuvusabu.dll89600 bytesMD5: 47ebbec1be4e4b01c83c1bf491fc93d5
288mmcprf.dll488960 bytesMD5: bdaa0397521746b794f62b6e7804c7f3
289gitoribo.dll91933 bytes
290wvurpmn.dll37888 bytes
291fccbyww.dll40448 bytes
292fccddeb.dll39936 bytes
293norupeze.dll98900 bytes
294rqrqpmj.dll37888 bytes
295ljjkkii.dll31254 bytes
296xxwwv.dll321632 bytes
297vtstu.dll300640 bytes
298mibevilo.dll67072 bytes
299tiyunike.dll92672 bytesMD5: e60ac79ac42057190a5e8810d35b898f

Registry Modifications:

The following Registry Keys were created:

  • rkqq
  • horymywe
  • mevega
  • TISKY009.exe
  • ownsuser
  • {57-72-28-83-ZN}
  • MSOffice
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {76CFB752-E1B5-45E5-871F-E696B997FFB1}
  • {E5-56-67-7A-ZN}
  • {33-38-81-17-ZN}
  • mppds
  • {9B-B6-64-4C-ZN}
  • {D6-6B-BA-A5-ZN}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}
  • pfrnnzxA
  • lolgrmra.exe
  • {A0-08-87-75-ZN}
  • {63-31-1E-E8-ZN}
  • Kvsc3.exe
  • mppds.exe
  • tejetun
  • {62-24-47-7E-ZN}
  • PrintDrive
  • rkqqm.exe
  • fwfu
  • epmbkfcz
  • software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {1C72F7D4-A286-4B60-BDAD-438982FBB771}
  • Roogpcg
  • j7251636.dll
  • Dklvf
  • ybkjufcz
  • Kvsc3
  • {17-79-92-28-ZN}
  • Xri
  • rs2R3ph
  • abypofwh
  • SearchIndexer
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {C16CDB5C-2468-4116-AD60-868CA1368FA1}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {8E1BFC0E-8AD2-424D-AC8A-06038481516E}
  • j9221031
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {48F2A76C-BCC4-4D15-97AC-2C78BC84CB45}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {FE84C866-4F86-446D-8AFB-1438164EC1F9}
  • Software\Microsoft\Internet Explorer\URLSearchHooks {B6C621ED-821B-4311-4EF1-ACA0C115E707}
  • {B5-54-43-3D-ZN}
  • Microsoft Windows Adapter 5.1.3214
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {1CF662BF-4AFD-4778-8306-1F0EB8284EBB}
  • AVPSrv.exe
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {4910234A-B457-4278-90D2-0CE778675E25}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad mgsvflkw
  • {09-93-30-07-ZN}
  • mjdsregs.exe
  • zzb
  • Qgh
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {C7BBDD18-4BD1-416D-877A-4EDB566A0054}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {A14FB995-D8AC-494B-A6D3-ADC04028F281}
  • j0221833
  • dwdsregt.exe
  • Sen
  • {FA-AA-A9-90-ZN}
  • Tapicfg.exe
  • tmp5B.tmp.exe
  • buvwfklw
  • cygdwrso.dll
  • {74-49-9C-CD-ZN}
  • Uninstall_CToolbar
  • {26-60-05-56-ZN}
  • abypofwh.dll
  • winshow
  • {B1-1B-B5-58-ZN}
  • {B9-92-26-69-ZN}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {F1C5B241-BFBE-4CFC-99A4-76823ADF23F6}
  • MsIMMs32.exe
  • MemoryManager
  • j9221031.dll
  • sgohslhh
  • mndsregp.exe
  • {ZN}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {06EEE729-30EC-4480-A5D2-89BB99A618FA}
  • ApachInc
  • j7251636
  • bwtwhehq.exe
  • MsIMMs32
  • uzvdfo
  • {AC-CA-A5-5A-ZN}
  • {32-2B-B3-32-ZN}
  • diclwdyA
  • mjdsregl.exe
  • msdsregm.exe
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {92a44a16-c56a-4506-b5cd-6fe05bdbe182}
  • {FC-CD-D6-62-ZN}
  • Microsoft\Windows NT\CurrentVersion\Winlogon\Notify yayvtsp
  • AVPSrv
  • modsregn.exe
  • mlwfltyj.dll
  • msccrt
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {BE0FF150-C7FC-4E37-8F92-4E9AF1389238}
  • Microsft Windows Adapter 5.1.3013
  • 6B95DB4F
  • Microsft Windows Adapter
  • Bat Wave Base Dale
  • SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad SSODL

Reply

Your email address will not be published.

Name
Website
Comment

Enter the numbers in the box to the right *