Home Malware Programs Adware Adware.NetNucleous

Adware.NetNucleous

Posted: May 4, 2013

Threat Metric

Ranking: 10,924
Threat Level: 2/10
Infected PCs: 24,805
First Seen: May 4, 2013
Last Seen: October 9, 2023
OS(es) Affected: Windows

Aliases

W32/Jorik.CTPG!tr [Fortinet]Trojan.DownLoader8.62888 [DrWeb]Mal/EncPk-AJS [Sophos]PWS-Zbot-FAQD!18A262A70EAC [McAfee]Suspicious file [Panda]Virus.Win32.Cryptor [Ikarus]Adware/Lollipop.AP.34 [AntiVir]Artemis!F53588CE86F0 [McAfee]Trj/Dtcontx.C [Panda]Win32:Agent-AQZN [GData]TR/Agent.aqzn.1 [AntiVir]Mal/Generic-S [Sophos]Win32:Agent-AQZN [Spy] [Avast]Trj/OCJ.D [Panda]SHeur4.BDZI [AVG]
More aliases (62)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Program Files\NetNucleous\ActiveCollector\ACRecover.exe File name: ACRecover.exe
Size: 61.44 KB (61440 bytes)
MD5: 86ec18b4f95828793720927dee220652
Detection count: 4,836
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files\NetNucleous\ActiveCollector\ACRecover.exe
Group: Malware file
Last Updated: December 1, 2021
C:\Program Files (x86)\NetNucleous\ActiveCollector\ActiveCollector.exe File name: ActiveCollector.exe
Size: 1.26 MB (1265664 bytes)
MD5: cfb09ab22d5efa2340fc9856d1db09dd
Detection count: 4,761
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files (x86)\NetNucleous\ActiveCollector\ActiveCollector.exe
Group: Malware file
Last Updated: April 24, 2022
C:\Users\<username>\AppData\Roaming\NetNucleous\ActiveCollector\ActiveCollector.exe File name: ActiveCollector.exe
Size: 1.26 MB (1261568 bytes)
MD5: b9c9f4b955016680b383f18ba13f4e3e
Detection count: 4,415
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Roaming\NetNucleous\ActiveCollector\ActiveCollector.exe
Group: Malware file
Last Updated: May 17, 2023
%ALLUSERSPROFILE%\EA78DC76CA60E97CC863EF\Trlogo.exe File name: Trlogo.exe
Size: 1.13 MB (1131520 bytes)
MD5: de9e19e19d8a9572eaf9d551e16bac0a
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\EA78DC76CA60E97CC863EF
Group: Malware file
Last Updated: May 8, 2013
%USERPROFILE%\quxazfztfolmamfcptmwcglds.exe File name: quxazfztfolmamfcptmwcglds.exe
Size: 215.55 KB (215552 bytes)
MD5: 798ccb41debacf44e073832f6882745a
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%
Group: Malware file
Last Updated: May 8, 2013
%APPDATA%\sss.scr File name: sss.scr
Size: 1.2 MB (1200128 bytes)
MD5: 04618ccee26766a2b328d170d6db43d1
Detection count: 9
Mime Type: unknown/scr
Path: %APPDATA%
Group: Malware file
Last Updated: May 8, 2013
%LOCALAPPDATA%\Lollipop\Lollipop.exe File name: Lollipop.exe
Size: 3.04 MB (3040256 bytes)
MD5: f53588ce86f060df3bf5e9949887b7ba
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Lollipop
Group: Malware file
Last Updated: May 13, 2013
%TEMP%\0.46547251391641054.exe File name: 0.46547251391641054.exe
Size: 47.27 KB (47271 bytes)
MD5: 18a262a70eaccc4bb910d64084768746
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: May 13, 2013

Registry Modifications

The following newly produced Registry Values are:

Regexp file mask%PROGRAMFILES%\NetNucleous\ActiveCollector\ACRecover.exe%PROGRAMFILES%\NetNucleous\ActiveCollector\ActiveCollector.exe%PROGRAMFILES(x86)%\NetNucleous\ActiveCollector\ACRecover.exe%PROGRAMFILES(x86)%\NetNucleous\ActiveCollector\ActiveCollectorPlugin64.dllHKEY..\..\..\..{RegistryKeys}Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07202B0E-149C-4568-90DF-ACC2B4057809}

Additional Information

The following directories were created:
%PROGRAMFILES%\NetNucleous%PROGRAMFILES(x86)%\NetNucleous
Loading...