Severity scale:  
  (70/100)

Rendul. How to remove? (Uninstall guide)

removal by Olivia Morelli - - | Type: Viruses
12

Rendul is a dangerous macro virus that infects Microsoft Word documents. Once executed, Rendul installs itself to the system and creates several infected text documents. Then it runs a payload. The virus lowers Microsoft Word security settings, disables the Windows Firewall, the Task Manager and the Registry Editor, alters system configuration. It also changes mouse settings and deletes all executables, images, text and spreadsheet documents, archives and some other files it finds in the root of the main hard disk, main Windows folder and default system directory. Rendul also deletes vital components of Microsoft Excel and Microsoft Powerpoint. The virus may display certain messages and hide the taskbar.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Rendul you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Rendul. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.

Rendul manual removal:

Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftOffice9.0WordSecurityLevel=1

HKEY_CURRENT_USERSoftwareMicrosoftOffice10.0WordSecurityLevel=1

HKEY_CURRENT_USERSoftwarePoliciesMicrosoftWindowsFirewallDomainProfileEnableFirewall=0

HKEY_CURRENT_USERSoftwarePoliciesMicrosoftWindowsFirewallStandardProfileEnableFirewall=0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableRegistryTools=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableTaskMgr=1

HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsFirewallDomainProfileEnableFirewall=0

HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsFirewallStandardProfileEnableFirewall=0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerDisallowRun=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoClose=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoCloseKey=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoFavoritesMenu=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoFind=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoRun=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoSaveSettings=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoSetFolders=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoSetTaskbar=HJx02

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoViewContextMenu=1

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorerNoDesktop=HJx03

HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterAntiVirusOverride=1

HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterFirewallOverride=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsLendur

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsLendur

Delete files:
exemple.doc,girls.doc,information.doc,joke.doc,list.doc,music.doc,news.doc

Delete directories:
C:WindowsHzjl

C:WindowsSgba

C:WindowsTexts

C:WindowsVnbz

About the author

Olivia Morelli
Olivia Morelli - Ransomware analyst

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Olivia Morelli
About the company Esolutions