RUNDL132.EXE – Worm Viking

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

RUNDL132.EXE – Worm Viking removal

FileMD5Virus Alias
RUNDL132.EXE f288b35169f0f307161c8607dcde3403 Worm Viking
RUNDL132.EXE f288b35169f0f307161c8607dcde3403 Trojan SuspiciousFile
RUNDL132.EXE f288b35169f0f307161c8607dcde3403 Trojan Hllw
RUNDL132.EXE f288b35169f0f307161c8607dcde3403 Trojan Eldorado
RUNDL132.EXE f288b35169f0f307161c8607dcde3403 Trojan Agent

RUNDL132.EXE size: 34433 bytes
RUNDL132.EXE hash: F288B35169F0F307161C8607DCDE3403

Created files:

%WinDir%\Dll.dll
%WinDir%\Logo1_.exe
%WinDir%\rundl132.exe
%SysDir%\drivers\etc\hosts

Autostart registry keys:

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\load: %WinDir%\rundl132.exe

Detected by UnHackMe:

RUNDL132.EXE
Default location: %WinDir%\RUNDL132.EXE

Dropper information:
MD5: 0345c95e36215acaa7ffed25b65ef273
File size: 68001 bytes

Leave a Reply