Rendul. How to remove? (Uninstall guide)

removal by Olivia Morelli - - | Type: Viruses
12

Rendul is a dangerous macro virus that infects Microsoft Word documents. Once executed, Rendul installs itself to the system and creates several infected text documents. Then it runs a payload. The virus lowers Microsoft Word security settings, disables the Windows Firewall, the Task Manager and the Registry Editor, alters system configuration. It also changes mouse settings and deletes all executables, images, text and spreadsheet documents, archives and some other files it finds in the root of the main hard disk, main Windows folder and default system directory. Rendul also deletes vital components of Microsoft Excel and Microsoft Powerpoint. The virus may display certain messages and hide the taskbar.

do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Rendul you agree to our privacy policy and agreement of use.
Reimage is recommended to uninstall Rendul. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing Rendul (2006-01-26)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing Rendul (2006-01-26)
Hitman Pro
We have tested Hitman Pro's efficiency in removing Rendul (2006-01-26)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing Rendul (2006-01-26)

Rendul manual removal:

Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftOffice9.0WordSecurityLevel=1

HKEY_CURRENT_USERSoftwareMicrosoftOffice10.0WordSecurityLevel=1

HKEY_CURRENT_USERSoftwarePoliciesMicrosoftWindowsFirewallDomainProfileEnableFirewall=0

HKEY_CURRENT_USERSoftwarePoliciesMicrosoftWindowsFirewallStandardProfileEnableFirewall=0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableRegistryTools=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableTaskMgr=1

HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsFirewallDomainProfileEnableFirewall=0

HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsFirewallStandardProfileEnableFirewall=0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerDisallowRun=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoClose=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoCloseKey=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoFavoritesMenu=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoFind=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoRun=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoSaveSettings=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoSetFolders=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoSetTaskbar=HJx02

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoViewContextMenu=1

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorerNoDesktop=HJx03

HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterAntiVirusOverride=1

HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterFirewallOverride=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsLendur

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsLendur

Delete files:
exemple.doc,girls.doc,information.doc,joke.doc,list.doc,music.doc,news.doc

Delete directories:
C:WindowsHzjl

C:WindowsSgba

C:WindowsTexts

C:WindowsVnbz

About the author

Olivia Morelli
Olivia Morelli - Ransomware analyst

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

More information about the author