Trojan

How to remove “TrojanDropper:Win32/Vundo.H”?

Malware Removal

The TrojanDropper:Win32/Vundo.H is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDropper:Win32/Vundo.H virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine TrojanDropper:Win32/Vundo.H?


File Info:

crc32: 2856CCDC
md5: b332639ffe00c2cbf126e90385eaa670
name: B332639FFE00C2CBF126E90385EAA670.mlw
sha1: a7e2262c11394d2da0123a8ac5b90a2c3c2adddd
sha256: 95ca2ee6f7d7407f7140800dfd756f6c4a9da51e78383e65e8d66c33edac7e93
sha512: 4b45db2eb2a81ba0f3f46484e60c2b7f9a8468c4bb01b87fa8dde3ddbe9e502a847b3952adf14271c40208e603f044dd65c848aba2520ad7e000a5969652e6d1
ssdeep: 768:s9EZim1pcirq0bZ8kXSzSJMen164dv8Y53mj8dXA6kYVI2tPrk8TWCtkNor5eW:sUimHBJN9Oe11t8ImLoprzb
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

TrojanDropper:Win32/Vundo.H also known as:

BkavW32.CNCmonder.Heur
Elasticmalicious (high confidence)
DrWebTrojan.Virtumod.based.28
CynetMalicious (score: 100)
ALYacTrojan.Generic.2581181
CylanceUnsafe
ZillyaTrojan.Monderd.Win32.1300
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojanDropper:Win32/Monderd.8fd73093
Cybereasonmalicious.ffe00c
CyrenW32/Trojan.CTZP-3632
SymantecTrojan.Gen.MBT
ESET-NOD32Win32/Adware.Virtumonde
APEXMalicious
AvastWin32:Susn-C [Trj]
ClamAVWin.Trojan.Vundo-10471
KasperskyTrojan.Win32.Monderd.gen
BitDefenderTrojan.Generic.2581181
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
ViRobotTrojan.Win32.Monder.53760.M
MicroWorld-eScanTrojan.Generic.2581181
TencentWin32.Trojan.Monderd.Pcry
Ad-AwareTrojan.Generic.2581181
SophosML/PE-A + Troj/Virtum-Gen
ComodoMalware@#1ayesbmsc2m31
BitDefenderThetaAI:Packer.B4EF79821B
VIPRETrojan.Crypt.Krap (v)
TrendMicroTROJ_VUNDO.SMJ
McAfee-GW-EditionBehavesLike.Win32.VirRansom.qc
FireEyeGeneric.mg.b332639ffe00c2cb
EmsisoftTrojan.Generic.2581181 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Monder.alqi
WebrootW32.Vundo.Gen
AviraTR/Vundo.Gen
eGambitUnsafe.AI_Score_91%
MicrosoftTrojanDropper:Win32/Vundo.H
GDataTrojan.Generic.2581181
TACHYONTrojan/W32.Monder.53760.M
AhnLab-V3Trojan/Win32.Vundo.R9398
Acronissuspicious
McAfeeVundo
MAXmalware (ai score=100)
VBA32Trojan.Monderd
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_VUNDO.SMJ
RisingTrojan.Win32.Generic.136AFF0D (C64:YzY0OuNh9H4CM3qx)
IkarusTrojan.Vundo
MaxSecureTrojan.Monderd.gen
FortinetW32/Murlo.UR!tr
AVGWin32:Susn-C [Trj]
Paloaltogeneric.ml

How to remove TrojanDropper:Win32/Vundo.H?

TrojanDropper:Win32/Vundo.H removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment