Trojan.Vundo

Trojan.Vundo is a component of an adware program that downloads and displays pop-up advertisements. It is known to be installed by visiting a Web site link contained in a spammed email.

Note: As of February 25, 2009, Symantec began observing an increase in the number of Trojan.Vundo infections as a direct result of W32.Ackantta.B@mm.

For more information, please read the following:

• W32.Ackantta.B@mm
• Trojan.Awax
• For Love or Money—Social Engineering by W32.Ackantta.B@mm
• An Offer Too Good to Refuse, Courtesy of Vundo
  

Protection

• Initial Rapid Release version 9 May 2006
• Latest Rapid Release version 24 November 2009 revision 034
• Initial Daily Certified version 9 May 2006
• Latest Daily Certified version 24 November 2009 revision 017
• Initial Weekly Certified release date 10 May 2006

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Medium
• Number of Infections: 1000+
• Number of Sites: 10+
• Geographical Distribution: Medium
• Threat Containment: Moderate
• Removal: Moderate

Damage

• Damage Level: Medium
• Payload: May download potentially malicious files on to the compromised computer.

Distribution

• Distribution Level: Low