Solved! Use RUNDL132.EXE (Worm Viking) Removal Guide

I will tell you in this post how to fix the issue manually and how to clean it automatically using a special powerful removal tool. You can download the removal program for free here:

Manual removal instructions:

RUNDL132.EXE – Worm Viking removal

File MD5 Virus Alias
RUNDL132.EXE c4a4e6ff8719977fc2053de6754a4aef Worm Viking
RUNDL132.EXE c4a4e6ff8719977fc2053de6754a4aef Trojan, Suspicious File
RUNDL132.EXE c4a4e6ff8719977fc2053de6754a4aef Trojan Hllw
RUNDL132.EXE c4a4e6ff8719977fc2053de6754a4aef Trojan OnLineGames
RUNDL132.EXE c4a4e6ff8719977fc2053de6754a4aef Trojan Crypt

RUNDL132.EXE size: 69108 bytes
RUNDL132.EXE hash: C4A4E6FF8719977FC2053DE6754A4AEF

Created files:

%WinDir%\Logo1_.exe
%WinDir%\RichDll.dll
%SysDir%\drivers\etc\hosts
%WinDir%\uninstall\rundl132.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\load: %WinDir%\uninstall\rundl132.exe

Detected by UnHackMe:

RUNDL132.EXE
Default location: %WinDir%\UNINSTALL\RUNDL132.EXE

Dropper information:
MD5: 0697f025933e4f8aa5062db6c8f814e0
File size: 1148148 bytes

Leave a Reply