Home Malware Programs Worms W32.Blaster.Worm

W32.Blaster.Worm

Posted: February 26, 2010

Threat Metric

Ranking: 13,244
Threat Level: 5/10
Infected PCs: 283
First Seen: February 28, 2011
Last Seen: September 26, 2023
OS(es) Affected: Windows

W32.Blaster.Worm is a self-replicating computer worm which promotes commercial releases of malicious programs like spyware. W32.Blaster.Worm performs malicious tasks and will attempt to replicate via existing networks and system vulnerabilities. W32.Blaster.Worm should be removed before it starts creating chaos on your system.

Aliases

Trj/Banker.FWD [Panda]Trojan/Win32.Banbra.gen [Antiy-AVL]PUA.Packed.Thinstall2425 [ClamAV]Win32.Bymer.d [eSafe]Artemis!90FC2793655B [McAfee]Corrupted [AVG]W32/SuspPack.AA.gen!Eldorado [F-Prot]New Malware.b [McAfee]Generic20.BAPI [AVG]W32/Dx.VIG!tr [Fortinet]Trojan.Win32.Sefnit [Ikarus]TR/Kazy.5310.70 [AntiVir]TrojWare.Win32.Agent.~N14 [Comodo]Win32:Sefnit [Avast]a variant of Win32/Sefnit.AL [NOD32]
More aliases (203)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%TEMP%\babahh.exe File name: babahh.exe
Size: 5.63 KB (5632 bytes)
MD5: 04c09159d9183d7000b6c7f7835767f5
Detection count: 74
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: March 2, 2011
%WINDIR%\System32\drivers\bhegc.sys File name: bhegc.sys
Size: 195.83 KB (195832 bytes)
MD5: dce6f749d37e69624329c911ebc14477
Detection count: 73
File type: System file
Mime Type: unknown/sys
Path: %WINDIR%\System32\drivers
Group: Malware file
Last Updated: March 6, 2011
D:\PT2_Downloader.exe File name: PT2_Downloader.exe
Size: 1.16 MB (1161326 bytes)
MD5: 37cd856340d475bf1351fe24cd1f25a3
Detection count: 36
File type: Executable File
Mime Type: unknown/exe
Path: D:
Group: Malware file
Last Updated: March 2, 2011
%SYSTEMDRIVE%\Users\<username>\Desktop\Mom old 2008 computer dowload\Program Files\Sony\VAIO Service Utility\VAIO-SUTOOL.exe File name: VAIO-SUTOOL.exe
Size: 3.68 MB (3682576 bytes)
MD5: 90fc2793655b40a0c92644c2212ba44a
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %SYSTEMDRIVE%\Users\<username>\Desktop\Mom old 2008 computer dowload\Program Files\Sony\VAIO Service Utility\VAIO-SUTOOL.exe
Group: Malware file
Last Updated: December 20, 2020
%WINDIR%\TEMP\yedk\setup.exe File name: setup.exe
Size: 31.88 KB (31880 bytes)
MD5: 61ffa9aae03904805b66f0eb957f8b45
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\TEMP\yedk
Group: Malware file
Last Updated: March 6, 2011
D:\Downloads\snimci\muzika\PokerbilitySetup.exe File name: PokerbilitySetup.exe
Size: 1.12 MB (1128207 bytes)
MD5: e901329cda7e7e9fd4c8b6b1db3840f2
Detection count: 2
File type: Executable File
Mime Type: unknown/exe
Path: D:\Downloads\snimci\muzika
Group: Malware file
Last Updated: March 6, 2011

Additional Information

The following messages's were detected:
# Message
1

2 Comments

  • prasad says:

    I am not even able to see anything when i give run--->regedit

  • Debbie says:

    regedit won't open. it starts and then closes right away. task manager also starts but seems like when whatever starts it will close.everything I download to get rid of it won't start.

Loading...