Skip to main content
Microsoft Security Intelligence
Published Aug 03, 2011 | Updated Sep 15, 2017


Detected by Microsoft Defender Antivirus

Aliases: Trojan-Downloader.Win32.Wadolin (Ikarus) Infostealer.Gampass (Symantec)


TrojanDropper:Win32/Vundo.L is a trojan that is a member of a multi-component family of programs that deliver 'out of context' pop-up advertisements. It also drops files that are capable of downloading other malware.

To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:

For more information on antivirus software, see

This threat may make lasting changes to a computer's configuration that are NOT restored by detecting and removing this threat. For more information on returning an infected computer to its pre-infected state, please see the following article:

Recreating a clean Hosts file:

Follow us