Solved! Use RUNDL132.EXE (Worm Viking) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

RUNDL132.EXE – Worm Viking removal

File MD5 Virus Alias
RUNDL132.EXE 3cf794443e87c932c3a2713c49282a11 Worm Viking
RUNDL132.EXE 3cf794443e87c932c3a2713c49282a11 Trojan Generic
RUNDL132.EXE 3cf794443e87c932c3a2713c49282a11 Trojan Hllw
RUNDL132.EXE 3cf794443e87c932c3a2713c49282a11 Trojan Eldorado
RUNDL132.EXE 3cf794443e87c932c3a2713c49282a11 Trojan Agent
RUNDL132.EXE 3cf794443e87c932c3a2713c49282a11 Trojan Delf

RUNDL132.EXE size: 90112 bytes
RUNDL132.EXE hash: 3CF794443E87C932C3A2713C49282A11

Created files:

%WinDir%\Dll.dll
%SysDir%\drivers\etc\hosts
%WinDir%\uninstall\rundl132.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\load: %WinDir%\uninstall\rundl132.exe

Detected by UnHackMe:

RUNDL132.EXE
Default location: %WinDir%\UNINSTALL\RUNDL132.EXE

Dropper information:
MD5: 3cf794443e87c932c3a2713c49282a11
File size: 90112 bytes

Leave a Reply