TROJ_VUNDO.AO - Description and solution it was vundo not vendo there is a pattern file for it but trend micro said something about it being imbedded in a file written to a disk or something along those lines and it was very hard to remove this. It recommended identifying the infected file and removing manually through the add files option in the quarantined files screen