Please make sure you know what you are doing before performing any of the instructions on this site. You maybe better off downloading a proven spyware scanner and let the program do the cleaning. You may need anti-virus software as well and please allow up to 10 hours to get your system back on its feet again. Please feel free to ask questions, tell us the problem and we will help for FREE.
DOWNLOAD RUNGBU SPYWARE REMOVAL SOFTWARE
These products will remove and protect you from adware, spyware, trojans etc...
Removal instructions for rungbu:
Rungbu is a virus that replaces Microsoft Word documents with copies of itself. It does not delete original files, but makes them hidden. When the user attempts to open a text document the parasite displays a message asking to install a necessary plug-in. If the user agrees, the virus opens a file. It then replaces it with a copy of itself. Rungbu runs on every Windows startup. It does not carry any destructive payload.
Alias:
Unknown
Protect yourself from spyware and virus attacks PDF
Notes:
Stop processes:ctfmon.exe, docicon.exe, smss.exe, spoolsv.exe, svchost.exe
Remove Registry values:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonUserinit=C:Recycledsvchost.exe
HKEY_LOCAL_MACHINESOFTWAREClassesscrfile(Default)=Microsoft Word Document
HKEY_CLASSES_ROOTWord.Document.8DefaultIcon(Default)=[percentage]Windir[percentage]Installer{00000409-78E1-11D2-B60F-006097C998E7}docicon.exe
Remove files:ctfmon.exe, docicon.exe, smss.exe, spoolsv.exe, svchost.exe
Remove directories:C:WindowsInstaller{00000409-78E1-11D2-B60F-006097C998E7}C:WinntInstaller{00000409-78E1-11D2-B60F-006097C998E7}
Additional:Exact file location:ctfmon.exe, smss.exe, spoolsv.exe, svchost.exe - C:Recycleddocicon.exe - C:WindowsInstaller{00000409-78E1-11D2-B60F-006097C998E7} or C:WinntInstaller{00000409-78E1-11D2-B60F-006097C998E7} Rungbu:
All topics related to Rungbu spyware or virus on your computer and ways or how to remove Rungbu or fix it.