Worm:Win32/Vundo.A is a worm that spreads by copying itself to mapped drives in the computer. Vundo is also a family known to display pop-ups that are usually related to fake antivirus software. It may prevent security processes and features from functioning properly.


The following system changes may indicate the presence of this malware:

  • The absence of the following Microsoft file from your computer: mrt.exe
  • Alert notifications from installed legitimate antivirus software may be the one of the only symptom(s)

Also Known As

  • Vundo.gen.ab (McAfee)
  • Trojan.Win32.Monder.bzea (Kaspersky)
  • Trojan.Win32.Popw.rmu (Kaspersky)
Community content is available under CC-BY-SA unless otherwise noted.