Solved! Use RUNDL132.EXE (Worm Viking) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

RUNDL132.EXE – Worm Viking removal

File MD5 Virus Alias
RUNDL132.EXE bd3924367b2cf3e67cc881f47f96a5a7 Worm Viking
RUNDL132.EXE bd3924367b2cf3e67cc881f47f96a5a7 Trojan Hllw
RUNDL132.EXE bd3924367b2cf3e67cc881f47f96a5a7 Trojan Eldorado
RUNDL132.EXE bd3924367b2cf3e67cc881f47f96a5a7 Trojan Downloader
RUNDL132.EXE bd3924367b2cf3e67cc881f47f96a5a7 Worm Mytob
RUNDL132.EXE bd3924367b2cf3e67cc881f47f96a5a7 Trojan Agent

RUNDL132.EXE size: 30105 bytes
RUNDL132.EXE hash: BD3924367B2CF3E67CC881F47F96A5A7

Created files:

%WinDir%\Logo1_.exe
%WinDir%\rundl132.exe
%WinDir%\vDll.dll

Autostart registry keys:

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\load: %WinDir%\rundl132.exe

Detected by UnHackMe:

RUNDL132.EXE
Default location: %WinDir%\RUNDL132.EXE

Dropper information:
MD5: 5a643e2950ece7bf1d134306e4dbd7c1
File size: 56217 bytes

Leave a Reply