RUNDL132.EXE – Worm Viking

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

RUNDL132.EXE – Worm Viking removal

FileMD5Virus Alias
RUNDL132.EXE 59cda5ec2608369e75117c396e8128ef Worm Viking
RUNDL132.EXE 59cda5ec2608369e75117c396e8128ef Trojan SuspiciousFile
RUNDL132.EXE 59cda5ec2608369e75117c396e8128ef Trojan Hllw
RUNDL132.EXE 59cda5ec2608369e75117c396e8128ef Trojan Eldorado
RUNDL132.EXE 59cda5ec2608369e75117c396e8128ef Trojan Magania
RUNDL132.EXE 59cda5ec2608369e75117c396e8128ef Trojan Agent

RUNDL132.EXE size: 27111 bytes
RUNDL132.EXE hash: 59CDA5EC2608369E75117C396E8128EF

Created files:

%WinDir%\Logo1_.exe
%WinDir%\rundl132.exe
%SysDir%\runouce.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Runonce: %WinDir%\System32\runouce.exe^??? ???Processt?????$}#?S? |l???$}lx?Dl H( -=^C
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\load: %WinDir%\rundl132.exe

Detected by UnHackMe:

RUNDL132.EXE
Default location: %WinDir%\RUNDL132.EXE

Dropper information:
MD5: 0a4ae82dda06bb6dc37d827976d112bf
File size: 66527 bytes

Leave a Reply