Category Archives: Downloader

Downloader.a!bv3

Downloader.a!bv3 also known as Backdoor.Generic.717239, a variant of Win32/Wapomi.AQ, Trojan.Gen. Malware Analysis of Downloader.a!bv3 Created files: %SysDir%\2DAD21FB.sys Detected by UnHackMe: 2DAD21FB.SYS Default location: %SYSDIR%\2DAD21FB.SYS UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware,…

Continue reading

Downloader/Win32.Agent

Downloader/Win32.Agent also known as Trojan-Downloader.Win32.Agent, Trojan/Cidox.c, Trojan. Malware Analysis of Downloader/Win32.Agent Created files: %SysDir%\2DAD21FB.sys Detected by UnHackMe: 2DAD21FB.SYS Default location: %SYSDIR%\2DAD21FB.SYS UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and…

Continue reading

TR/VB.Downloader.Gen

TR/VB.Downloader.Gen also known as Gen:Trojan.Heur.VP2.cm0@a0S28mni, Gen:Trojan.Heur.VP2.cm0@a0S28mni (B), Trojan/Win32.VB. Malware Analysis of TR/VB.Downloader.Gen Created files: %Temp%\~DF3341.tmp %Temp%\~DF3665.tmp %SysDir%\36e2e.exe %SysDir%\dd0bb.exe %WinDir%\31b6d.exe Detected by UnHackMe: 31B6D.EXE Default location: %WinDir%\31B6D.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including…

Continue reading

Heuristic.BehavesLike.Win32.Downloader.D

Heuristic.BehavesLike.Win32.Downloader.D also known as Backdoor/SubSeven.22.an, PAK_Generic.001, Packed/Pec1. Malware Analysis of Heuristic.BehavesLike.Win32.Downloader.D Created files: %Temp%\WZSE0.TMP\Data\Hebrew.ln_ %Temp%\WZSE0.TMP\Data\Hungarian.ln_ %Temp%\WZSE0.TMP\Data\InstAddin.exe %Temp%\WZSE0.TMP\Data\Italian.ln_ %Temp%\WZSE0.TMP\Data\Language.de_ Detected by UnHackMe: INSTADDIN.EXE Default location: %TEMP%\WZSE0.TMP\DATA\INSTADDIN.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware,…

Continue reading

TR/Downloader.Gen2

Malware Analysis of TR/Downloader.Gen2 Created files: %Program Files%\WebConnect\WebConnect.Common.dll %Program Files%\WebConnect\WebConnect.ico %Program Files%\WebConnect\WebConnectOPC.exe %Program Files%\WebConnect\WebConnectUninstall.exe %WinDir%\Tasks\DealPlyLiveUpdateTaskMachineCore.job Detected by UnHackMe: WEBCONNECTOPC.EXE Default location: %PROGRAM FILES%\WEBCONNECT\WEBCONNECTOPC.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses,…

Continue reading

Generic Downloader.x!glj

Generic Downloader.x!glj also known as TROJ_SPNR.0BJ212, Win32:Trojan-gen, TR/Dldr.Gippers.A.6. Malware Analysis of Generic Downloader.x!glj Created files: %SysDir%\dumpkernel.exe %WinDir%\Temp\sqlservr.exe %WinDir%\Temp\tttbrozzz.bat Detected by UnHackMe: SQLSERVR.EXE Default location: %WinDir%\TEMP\SQLSERVR.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware,…

Continue reading

Downloader.Generic12.BAOB

Downloader.Generic12.BAOB also known as Malware, Trojan.DL.Small!ShhZh3WqEas, Trojan.Generic.2866610. Malware Analysis of Downloader.Generic12.BAOB Created files: %Program Files Common%\webcam_plugin.exe %Program Files%\Internet Explorer\iservices\justerrc.exe %Program Files%\Internet Explorer\iservices\vfindyu.exe Detected by UnHackMe: VFINDYU.EXE Default location: %PROGRAM FILES%\INTERNET EXPLORER\ISERVICES\VFINDYU.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain…

Continue reading

Downloader-FCK

Downloader-FCK also known as Trojan.Agent/Gen-FraudSoft, TR/Downloader.Gen, Trojan.Gen. Malware Analysis of Downloader-FCK Created files: %SysDir%\LKIMLBKIEBIGJFHJFBGHIL[\cnge6668.exe %SysDir%\YXVZYOXVROVTWSUWSOTUVY[\mirror.exe %SysDir%\YXVZYOXVROVTWSUWSOTUVY[\netdhcp.exe %SysDir%\YXVZYOXVROVTWSUWSOTUVY[\scservice.exe %SysDir%\YXVZYOXVROVTWSUWSOTUVY[\servicess.exe Detected by UnHackMe: NETDHCP.EXE Default location: %SYSDIR%\YXVZYOXVROVTWSUWSOTUVY[\NETDHCP.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware,…

Continue reading

Downloader-FLN!D8D170D21B54

Downloader-FLN!D8D170D21B54 also known as Win32:MultiPlug-Y [PUP], BScope.Adware.MegaSearch. Malware Analysis of Downloader-FLN!D8D170D21B54 Created files: %Local Appdata%\Google\Chrome\User Data\Default\Extensions\nnnngcilhglkhdghcbnbkaghdbkjdegn\1\sqlite.js %Temp%\skypemoticons_new.exe %Temp%\{A5D7A35D-B10F-4473-A698-F92D7E3481AB}\Addons\newtab_setup.exe %Temp%\{A5D7A35D-B10F-4473-A698-F92D7E3481AB}\Addons\OptimizerProInstaller.exe %Temp%\{A5D7A35D-B10F-4473-A698-F92D7E3481AB}\Addons\web_assistant_v2.exe Detected by UnHackMe: NEWTAB_SETUP.EXE Default location: %TEMP%\{A5D7A35D-B10F-4473-A698-F92D7E3481AB}\ADDONS\NEWTAB_SETUP.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware,…

Continue reading

Downloader-FLN!8B3D645FEC82

Downloader-FLN!8B3D645FEC82 also known as Adware.Multiplug, PUP.Optional.SilentInstall.A, Adware:W32/SaveAs.A. Malware Analysis of Downloader-FLN!8B3D645FEC82 Created files: %Local Appdata%\Google\Chrome\User Data\Default\Extensions\nmjbkfjomjcnikonkhmedmkaddplgnhn\1\sqlite.js %Temp%\{6085F308-BB9E-4462-A689-F3BCBB66D1FE}\Addons\ebook_extension_setup.exe %Temp%\{6085F308-BB9E-4462-A689-F3BCBB66D1FE}\Addons\ext_setup.exe %Temp%\{6085F308-BB9E-4462-A689-F3BCBB66D1FE}\Addons\OptimizerProInstaller.exe %Temp%\{6085F308-BB9E-4462-A689-F3BCBB66D1FE}\general_logo.jpg Detected by UnHackMe: EXT_SETUP.EXE Default location: %TEMP%\{6085F308-BB9E-4462-A689-F3BCBB66D1FE}\ADDONS\EXT_SETUP.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware,…

Continue reading

Downloader-FLN!C651B1E81E1F

Downloader-FLN!C651B1E81E1F also known as Win32/Adware.MultiPlug.H, BScope.Adware.MegaSearch. Malware Analysis of Downloader-FLN!C651B1E81E1F Created files: %Local Appdata%\Google\Chrome\User Data\Default\Extensions\nmjbkfjomjcnikonkhmedmkaddplgnhn\1\manifest.json %Local Appdata%\Google\Chrome\User Data\Default\Extensions\nmjbkfjomjcnikonkhmedmkaddplgnhn\1\sqlite.js %Temp%\{6085F308-BB9E-4462-A689-F3BCBB66D1FE}\Addons\ebook_extension_setup.exe %Temp%\{6085F308-BB9E-4462-A689-F3BCBB66D1FE}\Addons\ext_setup.exe %Temp%\{6085F308-BB9E-4462-A689-F3BCBB66D1FE}\Addons\OptimizerProInstaller.exe Detected by UnHackMe: EBOOK_EXTENSION_SETUP.EXE Default location: %TEMP%\{6085F308-BB9E-4462-A689-F3BCBB66D1FE}\ADDONS\EBOOK_EXTENSION_SETUP.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of…

Continue reading

Downloader

Malware Analysis of Downloader Created files: %Program Files%\VuuPC\Uninstall.exe %Program Files%\VuuPC\VuuPCLicense.exe %Program Files%\VuuPC\VuuPCUpdater.exe %WinDir%\Tasks\EPUpdater.job %WinDir%\Tasks\VuuPCUpdate.job Detected by UnHackMe: VUUPCUPDATER.EXE Default location: %PROGRAM FILES%\VUUPC\VUUPCUPDATER.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans…

Continue reading

Gen:Variant.Downloader.119 (B)

Gen:Variant.Downloader.119 (B) also known as HeurEngine.Vmpbad, Gen:Variant.Downloader.119, Gen:Variant.Downloader.119. Malware Analysis of Gen:Variant.Downloader.119 (B) Created files: %WinDir%\Cursors\NTSVC.ocx %WinDir%\Cursors\taskhost.exe %SysDir%\bisorz.exe %SysDir%\Configs %SysDir%\ouoeiz.exe Detected by UnHackMe: BISORZ.EXE Default location: %SYSDIR%\BISORZ.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware,…

Continue reading

Gen:Variant.Downloader.119

Gen:Variant.Downloader.119 also known as TR/Black.Gen2, TROJ_GEN.R01IC0EHB13, Worm/Win32.Luder. Malware Analysis of Gen:Variant.Downloader.119 Created files: %WinDir%\Cursors\NTSVC.ocx %WinDir%\Cursors\taskhost.exe %SysDir%\bisorz.exe %SysDir%\Configs %SysDir%\ouoeiz.exe Detected by UnHackMe: BISORZ.EXE Default location: %SYSDIR%\BISORZ.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware,…

Continue reading

Generic Downloader.rv

Generic Downloader.rv also known as Worm.Win32.A.Vobfus.376832, VB.CODN, Win32.HLLW.Autoruner1.28016. Malware Analysis of Generic Downloader.rv Created files: %Profile%\biine.exe %Profile%\cailiow.exe Detected by UnHackMe: BIINE.EXE Default location: %PROFILE%\BIINE.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware,…

Continue reading

ApplicUnsaf.Win32.Downloader.MediaGet.A

ApplicUnsaf.Win32.Downloader.MediaGet.A also known as Downloader/Win32.MediaGet.gen, TROJ_GEN.F47V0723. Malware Analysis of ApplicUnsaf.Win32.Downloader.MediaGet.A Created files: %Local Appdata%\MediaGet2\imageformats\qjpeg4.dll %Local Appdata%\MediaGet2\imageformats\qmng4.dll %Local Appdata%\MediaGet2\libeay32.dll %Local Appdata%\MediaGet2\libtcmalloc_minimal.dll %Local Appdata%\MediaGet2\libvlc.dll Detected by UnHackMe: LIBEAY32.DLL Default location: %LOCAL APPDATA%\MEDIAGET2\LIBEAY32.DLL UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any…

Continue reading

Downloader-BWS

Downloader-BWS also known as Trojan/W32.FraudPack.235008, TROJ_RENOS.SMEX, Trojan.Fraudload.Gen!Pac.11. Malware Analysis of Downloader-BWS Created files: %SysDir%sshnas.dll Detected by UnHackMe: SSHNAS.DLL Default location: %SYSDIR%SSHNAS.DLL UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and…

Continue reading

Downloader/Win32.MediaGet.gen

Downloader/Win32.MediaGet.gen also known as ApplicUnsaf.Win32.Downloader.MediaGet.A. Malware Analysis of Downloader/Win32.MediaGet.gen Created files: %Local Appdata%\MediaGet2\imageformats\qjpeg4.dll %Local Appdata%\MediaGet2\imageformats\qmng4.dll %Local Appdata%\MediaGet2\libeay32.dll %Local Appdata%\MediaGet2\libtcmalloc_minimal.dll %Local Appdata%\MediaGet2\libvlc.dll Detected by UnHackMe: LIBEAY32.DLL Default location: %LOCAL APPDATA%\MEDIAGET2\LIBEAY32.DLL UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form…

Continue reading

W32/Downloader.AT.gen!Eldorado

W32/Downloader.AT.gen!Eldorado also known as Trojan, TROJ_GEN.F47V0729, Trojan.Pasta.Gen.1. Malware Analysis of W32/Downloader.AT.gen!Eldorado Created files: %Temp%\History\History.IE5\index.dat %Temp%\Install.exe %Temp%\setup_3015.exe %Temp%\Temporary Internet Files\Content.IE5\42UNH8ED\desktop.ini %Temp%\Temporary Internet Files\Content.IE5\42UNH8ED\errorPageStrings[1] Detected by UnHackMe: SETUP_3015.EXE Default location: %TEMP%\SETUP_3015.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form…

Continue reading

Downloader.MediaGet

Downloader.MediaGet also known as APPL/MediaGet.Gen5, Trojan.ADH, Win32.Adware.MediaGet.A. Malware Analysis of Downloader.MediaGet Created files: %Temp%\mediaget-installer-tmp\js\jquery.min.1.6.4.js %Temp%\mediaget-installer-tmp\mediaget-admin-proxy.exe %Temp%\mediaget-installer-tmp\MediaGet-oc.exe %Temp%\mediaget-installer-tmp\stub.html Detected by UnHackMe: MEDIAGET-OC.EXE Default location: %TEMP%\MEDIAGET-INSTALLER-TMP\MEDIAGET-OC.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware,…

Continue reading

Downloader/Win32.MediaGet

Downloader/Win32.MediaGet also known as W32/MediaGet.A.gen!Eldorado, Trojan.ADH.2, PUP/Win32.MediaGet. Malware Analysis of Downloader/Win32.MediaGet Created files: %Temp%\mediaget-installer-tmp\js\jquery.min.1.6.4.js %Temp%\mediaget-installer-tmp\mediaget-admin-proxy.exe %Temp%\mediaget-installer-tmp\MediaGet-oc.exe %Temp%\mediaget-installer-tmp\stub.html Detected by UnHackMe: MEDIAGET-OC.EXE Default location: %TEMP%\MEDIAGET-INSTALLER-TMP\MEDIAGET-OC.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware,…

Continue reading

not-a-virus:Downloader.Win32.MediaGet.dsl

not-a-virus:Downloader.Win32.MediaGet.dsl also known as PUP/Win32.MediaGet, Trojan.Win32.Generic.12E47FB3, probably a variant of Win32/MediaGet. Malware Analysis of not-a-virus:Downloader.Win32.MediaGet.dsl Created files: %Temp%\mediaget-installer-tmp\js\jquery.min.1.6.4.js %Temp%\mediaget-installer-tmp\mediaget-admin-proxy.exe %Temp%\mediaget-installer-tmp\MediaGet-oc.exe %Temp%\mediaget-installer-tmp\stub.html Detected by UnHackMe: MEDIAGET-OC.EXE Default location: %TEMP%\MEDIAGET-INSTALLER-TMP\MEDIAGET-OC.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of…

Continue reading

Downloader-CFN

Downloader-CFN also known as Trojan.Win32.Crypt.aqt, TR/Crypt.aqt, Trojan.Starter.977. Malware Analysis of Downloader-CFN Created files: %SysDir%\ctfmon_lr.exe %SysDir%\dq20801.dll Detected by UnHackMe: CTFMON_LR.EXE Default location: %SYSDIR%\CTFMON_LR.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans…

Continue reading

Downloader-FIK!CC2A7F765800

Downloader-FIK!CC2A7F765800 also known as Trojan-Downloader, Trojan.Small.gen, Mal/Generic-S. Malware Analysis of Downloader-FIK!CC2A7F765800 Created files: %Local Appdata%\lsm.exe %Temp%\Twain002.Mtx C:\Documents and Settings\All Users\rsvp.exe %WinDir%\system\cisvc.exe %WinDir%\system\sessmgr.exe Detected by UnHackMe: RSVP.EXE Default location: C:\DOCUMENTS AND SETTINGS\ALL USERS\RSVP.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not…

Continue reading

Downloader-FIK!DA02DB9137C2

Downloader-FIK!DA02DB9137C2 also known as TROJ_GEN.R03QC0DGJ13, Trojan.Win32.Foreign.byhzbq, Gen:Variant.Graftor.68259. Malware Analysis of Downloader-FIK!DA02DB9137C2 Created files: %WinDir%\cmstp.exe %Appdata%\Microsoft\csrss.exe %Appdata%\Microsoft\lsm.exe %Appdata%\logman.exe %Appdata%\smss.exe Detected by UnHackMe: LSM.EXE Default location: %APPDATA%\MICROSOFT\LSM.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware,…

Continue reading

W32/Downloader.AU.gen!Eldorado

W32/Downloader.AU.gen!Eldorado also known as Win32:Malware-gen, Conficker.HS, Trojan.Siggen3.20625. Malware Analysis of W32/Downloader.AU.gen!Eldorado Created files: %SysDir%\el65936.dll %SysDir%\xel65936.dll Detected by UnHackMe: XEL65936.DLL Default location: %SYSDIR%\XEL65936.DLL UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans…

Continue reading

W32/Downloader.MTBO-2112

W32/Downloader.MTBO-2112 also known as TR/Banload.agfb, Win32.BHO, Trojan. Malware Analysis of W32/Downloader.MTBO-2112 Created files: %SysDir%\ctfmon_lr.exe %SysDir%\dq20801.dll Detected by UnHackMe: DQ20801.DLL Default location: %SYSDIR%\DQ20801.DLL UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans…

Continue reading

W32.Adware.Downloader.Mediaget-1

W32.Adware.Downloader.Mediaget-1 also known as MediaGet. Malware Analysis of W32.Adware.Downloader.Mediaget-1 Created files: %Temp%\mediaget-installer-tmp\js\jquery-ui.min.1.8.0.js %Temp%\mediaget-installer-tmp\js\jquery.min.1.6.4.js %Temp%\mediaget-installer-tmp\mediaget-admin-proxy.exe %Temp%\mediaget-installer-tmp\MediaGet-oc.exe %Temp%\mediaget-installer-tmp\stub.html Detected by UnHackMe: MEDIAGET-ADMIN-PROXY.EXE Default location: %TEMP%\MEDIAGET-INSTALLER-TMP\MEDIAGET-ADMIN-PROXY.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses,…

Continue reading

Heuristic.BehavesLike.Win32.Downloader.H

Heuristic.BehavesLike.Win32.Downloader.H also known as W32/OnlineGames.DD.gen!Eldorado, TROJ_GAMETHI.FCE, Trojan.Generic.IS.435229. Malware Analysis of Heuristic.BehavesLike.Win32.Downloader.H Created files: %SysDir%\t320059.dll %SysDir%\t320059.ini %SysDir%\t3rpcss.dll Detected by UnHackMe: T320059.DLL Default location: %SYSDIR%\T320059.DLL UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses,…

Continue reading

RDN/Downloader.a!ga

RDN/Downloader.a!ga also known as Trojan.Jorik.Geral, Trojan.DL.Mnless!4972, Trojan.Win32.Generic!BT. Malware Analysis of RDN/Downloader.a!ga Created files: %Temp%\wg.exe %Temp%\zlib1.dll %Common Appdata%\DownloadSave\EdpbpcqBqw.EXE %Common Appdata%\DownloadSave\hdtctlz.exe %Common Appdata%\DownloadSave\PdtfxdzOwi.EXE Detected by UnHackMe: EDPBPCQBQW.EXE Default location: %COMMON APPDATA%\DOWNLOADSAVE\EDPBPCQBQW.EXE UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means it does not contain any form…

Continue reading

WordPress SEO fine-tune by Meta SEO Pack from Poradnik Webmastera