Vundo.528

Aliases:	Generic.Vundo.A, TR/Vundo.Gen (Antivir), Lop (AVG), Vundo.gen42 (Norman)
Date added:	2007-10-16

Details

Vundo is adware that will hijack your browser and display advertisements. Files:

• C:\Windows\system32\tuvuvww.dll (MD5: f9aa56421341a91d6c134445f5f5850a)

Registry entries:

• HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}

Removal

Boot into Safe Mode. Delete these files:

• C:\Windows\system32\tuvuvww.dll (MD5: f9aa56421341a91d6c134445f5f5850a)

Delete this registry key:

• HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}