Mal Vundo seems to be a variant of the Vudno Trojan or Troj_Vundo infection which may have the ability to download malware without notice to the computer user of the affected system. There are several different types of malware that are known to download malware or even viruses onto a PC that has been plagued with an unfortunate infection such as Mal Vundo. Basically, Mal Vundo is a viscous malware infection that is further affecting thousands of computer users in many countries around the world by downloading or installing other malware or viruses. Mal Vundo or Mal_Vundo may be described over the internet as many different types of infections including Mal_Vundo-1, Mal_Vundo-4, Mal_Vundo-5, Mal_Vundo-6, Mal_Vundo-7, and Mal_Vundo-8. Each of the Mal_Vundo infections are different and have their own variants but are all related to the Vundo Trojan horse infection. You may think of the different Mal Vundo infections as distant relatives instead of siblings of each other.
Variants of Mal_Vundo-1 and Mal_Vundo-4:

• Mal_Vundo-1: Trojan.Vundo, Troj/Virtum-Gen and TR/Vundo.Gen.
• Mal_Vundo-4: TR/Dldr.Delf.amb.84, TR/Dldr.Delf.amb.84 and Trojan-Downloader.Win32.Delf.amb.

1. Reboot your computer into safe mode. You can do this by going to Start menu > Turn Off Computer > Restart.
   When your computer starts to boot press the F8 key repeatedly (once every second) until you see a menu asking if you would like to use Safe Mode or Safe Mode with networking. Select Safe Mode.
2. Find and delete the following DLL files in the "system" (C:\Windows\System\) directory:
   
   %System%\awttsrix.dll
   %System%\byxrijkl.dll
   %System%\cbxqicdw.dll
   %System%\ckvo0.dll
   %System%\ckvo2.dll
   %System%\hggwuvvv.dll
   %System%\hggxwpnl.dll
   %System%\jkklljdc.dll
   %System%\nnnmmnof.dll
   %System%\pmnmnnlf.dll
   %System%\tuvtlifv.dll
   %System%\urqrjjyq.dll
   %System%\wvuklbxp.dll
   %System%\wvumkhwo.dll
   %System%\yayypgwq.dll
   
3. Find and delete the following DLL file on your hard drive (any location):
   
   vzbb.dll
   
4. Find and delete the following registry entries in your system registry (regedit):
   
   HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionExplorerBrowser Helper Objects{8109AF33-6949-4833-8881-43DCC232B7B2}
   HKEY_LOCAL_MACHINESOFTWAREClassesATLEvents.ATLEvents.1
   HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnce*[filename]
   HKEY_CURRENT_USER SoftwareMicrosoftInternet ExplorerMainActive StateHKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOnce*WinLogon
   HKEY_LOCAL_MACHINE SOFTWAREClassesCLSID{02F96FB7-8AF6-439B-B7BA-2F952F9E4800}
   HKEY_LOCAL_MACHINE SOFTWAREClassesATLEvents.ATLEvents.1
   HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionExplorerBrowser Helper Objects{2316230A-C89C-4BCC-95C2-66659AC7A775}
   HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows CurrentVersionRunOnce*[filename]
   HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainActiveState
   02F96FB7-8AF6-439B-B7BA-2F952F9E4800
   HKEY_LOCAL_MACHINE SOFTWAREClassesATLEvents.ATLEvents
   HKEY_CLASSES_ROOTCLSID{8109AF33-6949-4833-8881-43DCC232B7B2}
   HKEY_CLASSES_ROOTCLSID{2316230A-C89C-4BCC-95C2-66659AC7A775}
   HKEY_LOCAL_MACHINESOFTWAREClassesATLEvents.ATLEvents
   8109AF33-6949-4833-8881-43DCC232B7B2
   2316230A-C89C-4BCC-95C2-66659AC7A775
   HKEY_CURRENT_USER SoftwareMicrosoftWindows CurrentVersionRunOnce*WinLogon
   HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionExplorerBrowser Helper Objects{02F96FB7-8AF6-439B-B7BA-2F952F9E4800}
   
5. Restart your computer normally.

Most AV software will automatically delete or quarantine any virus that it finds. There is also normally an option that will allow you to delete any items that have been quarantined. If it will only give you more information about it, you need to verify that the file in question has been moved into quarantine and is not still sitting in an accessible location on your computer. Some AV products cannot automatically remove some malware from your system. It should tell you in the More Information area if this is the case and what you need to do to manually remove it (if necessary).

Then if you can quarantine that in a folder. Quarantine it. If pccillin have a reporting log with its path. Then copy in a piece of paper the name and path. Then delete that in DOS mode if you are familiar with that only be sure that it is a legit viral file.