Solved! Use RUNDL132.EXE (Worm Viking) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

RUNDL132.EXE – Worm Viking removal

File MD5 Virus Alias
RUNDL132.EXE c4a4e6ff8719977fc2053de6754a4aef Worm Viking
RUNDL132.EXE c4a4e6ff8719977fc2053de6754a4aef Trojan, Suspicious File
RUNDL132.EXE c4a4e6ff8719977fc2053de6754a4aef Trojan Hllw
RUNDL132.EXE c4a4e6ff8719977fc2053de6754a4aef Trojan OnLineGames
RUNDL132.EXE c4a4e6ff8719977fc2053de6754a4aef Trojan Crypt

RUNDL132.EXE size: 69108 bytes
RUNDL132.EXE hash: C4A4E6FF8719977FC2053DE6754A4AEF

Created files:

%WinDir%\Logo1_.exe
%WinDir%\RichDll.dll
%SysDir%\drivers\etc\hosts
%WinDir%\uninstall\rundl132.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\load: %WinDir%\uninstall\rundl132.exe

Detected by UnHackMe:

RUNDL132.EXE
Default location: %WinDir%\UNINSTALL\RUNDL132.EXE

Dropper information:
MD5: 0697f025933e4f8aa5062db6c8f814e0
File size: 1148148 bytes

Leave a Reply