Trojan.Vundo Description

Trojan.Vundo, or the Vundo Trojan (also known as Virtumonde or Virtumondo and sometimes referred to as MS Juan) is a Trojan horse that is known to cause popups and advertising for rogue antispyware programs, and other issues including performance degradation and denial of service with some websites including Google and Facebook.

A Vundo infection is typically caused either by opening an e-mail attachment carrying the trojan, or through a variety of browser exploits, including vulnerabilities in popular browser plug-ins, such as Java. Since there are many different varieties of Vundo trojans, symptoms of Vundo vary widely, ranging from the relatively benign to the severe. Almost all varieties of Vundo feature some sort of pop-up advertising as well as rooting themselves to make them difficult to delete.

Type: Trojans

Automatic Detection of Trojan.Vundo

Trojan.Vundo Technical Report

As new Trojan.Vundo details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following Trojan.Vundo files with its MD5s were created in the system: