Microsoft security software detects and removes this threat.

This trojan downloader can download and run files on your computer.

It is a member of the Win32/Vundo family that deliver out-of-context pop-up advertisements.

Windows Defender Antivirus detects and removes this threat.

 

Win32/Vundo is a multiple-component family of malware that delivers "out of context" pop-up advertisements. Variants of the family may also download and run other files, including malware and adware.

Vundo is often installed as a browser helper object (BHO) without your consent, by other malware.

This family uses advanced defensive and stealth techniques to escape detection and to hinder removal. 

Windows Defender detects and removes this threat.

This threat is classified as a trojan downloader. It tries to download and install other malware or unwanted software.

Some downloader trojans target specific files on remote websites. Others target a specific URL that points to a website with exploit code that can automatically download and run software or malicious code on your PC.

More details are available in the Win32/Vundo family description.

 

Trojan:Win32/Vundo.gen!AE is a component of Win32/Vundo - a multiple-component family of programs that deliver 'out of context' pop-up advertisements. They may also download and execute arbitrary files.

 

Vundo is often distributed as a DLL file and installed on an affected machine as a Browser Helper Object (BHO) without a user's consent. This family uses advanced defensive and stealth techniques to escape detection and to hinder removal.
 
For more information, please see the Win32/Vundo analysis elsewhere in our encyclopedia.

Trojan:Win32/Vundo.gen!AN is a generic detection for a trojan that injects its code into running processes and downloads and executes arbitrary files, which may include additional malware.

Trojan:Win32/Vundo.gen!BB is a generic detection for a member of the Vundo family that delivers 'out of context' pop-up advertisements to the computer on which it is installed.

Trojan:Win32/Vundo.gen!A is a generic detection for a multi-component family of programs that deliver 'out of context' pop-up advertisements to the computer on which they are installed and may download and execute arbitrary files. Vundo may exist on a computer as a dynamic link library (DLL) or as an executable. Some variants function as Browser Helper Objects (BHOs). It may also use defensive methods to make itself difficult to remove from the affected machine.

Trojan:Win32/Vundo.gen!H is a component of Win32/Vundo - a multiple-component family of programs that deliver 'out of context' pop-up advertisements. They may also download and execute arbitrary files.

Vundo is often distributed as a DLL file and installed on an affected machine as a Browser Helper Object (BHO) without a user's consent. This family uses advanced defensive and stealth techniques to escape detection and to hinder removal.

Trojan:Win32/Vundo.gen!AG is a component of Win32/Vundo - a multiple-component family of programs that deliver 'out of context' pop-up advertisements. They may also download and execute arbitrary files.

Trojan:Win32/Vundo.gen!AK is a component of Win32/Vundo - a multiple-component family of programs that deliver 'out of context' pop-up advertisements. They may also download and execute arbitrary files.

 

Vundo is often distributed as a DLL file and installed on an affected machine as a Browser Helper Object (BHO) without a user's consent. This family uses advanced defensive and stealth techniques to escape detection and to hinder removal.

Trojan:Win32/Vundo.gen!AV is a component of Win32/Vundo - a multiple-component family of programs that deliver 'out of context' pop-up advertisements. They may also download and execute arbitrary files.

TrojanDownloader:Win32/Vundo.I is a trojan that downloads and executes files that are detected as variants of Trojan:Win32/Vundo.

Trojan:Win32/Vundo.D is a component of Win32/Vundo - a multiple-component family of programs that deliver 'out of context' pop-up advertisements. They may also download and execute arbitrary files.

Vundo is often distributed as a DLL file and installed on an affected machine as a Browser Helper Object (BHO) without a user's consent. This family uses advanced defensive and stealth techniques to escape detection and to hinder removal.

Trojan:Win32/Vundo.LM is a component of Win32/Vundo - a multiple-component family of programs that deliver 'out of context' pop-up advertisements. They may also download and execute arbitrary files.

 

Vundo is often distributed as a DLL file and installed on an affected machine as a Browser Helper Object (BHO) without a user's consent. This family uses advanced defensive and stealth techniques to escape detection and to hinder removal.

TrojanDownloader:Win32/Vundo.HIY is a component of Win32/Vundo - a multiple-component family of programs that deliver 'out of context' pop-up advertisements. TrojanDownloader:Win32/Vundo.HIY also downloads and executes arbitrary files.

Trojan:Win32/Vundo.ME is a trojan that is a member of Win32/Vundo - a multiple-component family of programs that deliver out-of-context pop-up advertisements. They may also download and execute arbitrary files.

Trojan:Win32/Vundo.JC.dll is a detection for the DLL file component of the Vundo family that deliver 'out of context' pop-up advertisements to the computer on which they are installed and may terminate services and processes.

Trojan:Win32/Vundo.KO is a component of Win32/Vundo - a multiple-component family of programs that deliver 'out of context' pop-up advertisements. They may also download and execute arbitrary files.

Vundo is often distributed as a DLL file and installed on an affected machine as a Browser Helper Object (BHO) without a user's consent. This family uses advanced defensive and stealth techniques to escape detection and to hinder removal.

 

This particular component is used to download and execute arbitrary files to the affected computer. In the wild, we have observed Trojan:Win32/Vundo.KO downloading and installing additional Vundo components such as Trojan:Win32/Vundo.gen!AT.

Win32/Vundo is a multiple-component family of programs that deliver 'out of context' pop-up advertisements. They may also download and execute arbitrary files. Win32/Vundo is often distributed as a DLL file and installed on an affected machine as a Browser Helper Object (BHO) without a user's consent. This family uses advanced defensive and stealth techniques to escape detection and to hinder removal.

Trojan:Win32/Vundo.gen!BF is a component of Win32/Vundo - a multiple-component family of programs that deliver 'out of context' pop-up advertisements. They may also download and execute arbitrary files.

 

Vundo is often distributed as a DLL file and installed on an affected machine as a Browser Helper Object (BHO) without a user's consent. This family uses advanced defensive and stealth techniques to escape detection and to hinder removal.