Add new Bookmark
Do you need some help? Enter your problem or question below and an Exhibited Guru will get back to you. If you have a serious problem, it might be best to ask a moderator instead by selecting "Mod Box" from the drop down. Remember, this isn't for reporting bugs.



L25 EXC AMF h2_src=DOS.[W32/Vundo.HD].exe

Back Assign Food Feed
Heal
Battle Enclosure Refresh Image Next

Basics

Care

Biology

Skills

Relationships

Design

Name
h2_src=DOS.[W32/Vundo.HD].exe
Species Gender Age
Herrerasaurus Female 48 (19 years old)
Owner Breeder
UnwrittenTale (#3511) UnwrittenTale (#3511)
Contract
This dinosaur has no contract tied to it.
Notes
~ { Vundo } ~

Motherly, nurturing and fond of others. Very sociable and gentle-mannered, patient. But will not hesitate to become firm with those who threaten the well being of her adopted young ones.

Source: Wikipedia

The Vundo Trojan (commonly known as Vundo, Virtumonde or Virtumondo, and sometimes referred to as MS Juan) is either a Trojan horse or a computer worm that is known to cause popups and advertising for rogue antispyware programs, and sporadically other misbehavior including performance degradation and denial of service with some websites including Google and Facebook. It also is used to deliver other malware to its host computers.[1] Later versions include rootkits and ransomware.[1]

Vundo inserts registry entries to suppress Windows warnings about the disabling of firewall, antivirus, and the Automatic Updates service, disables the Automatic Updates service and quickly re-disables it if manually re-enabled, and attacks Malwarebytes' Anti-Malware, Spybot Search & Destroy, Lavasoft Ad-Aware, HijackThis, and several other malware removal tools. It frequently hides itself from Vundofix & Combofix.

Rather than pushing fake antivirus products, the new "ad" popups for the drive-by download attacks are copies of ads by major corporations, faked so that simply closing them allows the drive-by download exploit to insert the payload into the user's computer. (Fortunately, this is hindered, if not prevented altogether by Vista's User Account Control feature.) Its filenames are categorized by having the "hidden" flag set and being .dll files with 8-character randomly arranged names alternating consonants and vowels.