Home Malware Programs Backdoors Popwin.B

Popwin.B

Posted: March 2, 2011

Threat Metric

Threat Level: 6/10
Infected PCs: 1,466
First Seen: March 2, 2011
Last Seen: May 9, 2022
OS(es) Affected: Windows

Aliases

BackDoor.Generic11.AZKJ [AVG]W32/Flux.FM!tr.dldr [Fortinet]Trojan-Downloader.Win32.Flux [Ikarus]Win-Trojan/Flux.5760 [AhnLab-V3]TrojWare.Win32.TrojanDownloader.Flux.AB [Comodo]Trojan.Generic.3743584 [BitDefender]Trojan-Downloader.Win32.Flux.fm [Kaspersky]Win32.NewMalware.aj [eSafe]W32/Onlinegames.BDR [F-Prot]Win32/TrojanDownloader.Flux.AB [NOD32]EmailWorm [K7AntiVirus]BackDoor-DKA [McAfee]Win32.Trojan.Glox.gen!damaged.3 [CAT-QuickHeal]W32/Lineage.HCB.worm [Panda]Downloader.Generic6.VZF [AVG]
More aliases (296)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\iefind\iefindup.exe File name: iefindup.exe
Size: 217.08 KB (217088 bytes)
MD5: f3b1e9bf0990306afce00b5ef97405a6
Detection count: 550
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\iefind
Group: Malware file
Last Updated: March 6, 2011
%PROGRAMFILES%\MalwareSweeper.com\MalwareSweeper\MalSwep.exe File name: MalSwep.exe
Size: 696.32 KB (696320 bytes)
MD5: 79fba71c43c099cac048ac72dc5d186e
Detection count: 267
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\MalwareSweeper.com\MalwareSweeper
Group: Malware file
Last Updated: March 6, 2011
C:\Users\<username>\Desktop\ESET_NOD32_Antivirus_4.0.314_incl._Crack\mara-fix.exe File name: mara-fix.exe
Size: 724.19 KB (724193 bytes)
MD5: 2504169a450a25c11bcbda5035932c18
Detection count: 87
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\Desktop\ESET_NOD32_Antivirus_4.0.314_incl._Crack\mara-fix.exe
Group: Malware file
Last Updated: November 21, 2021
%WINDIR%\cdosyswow.exe File name: cdosyswow.exe
Size: 522.75 KB (522752 bytes)
MD5: fcf65dcc14d9465b51f462f638186325
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: March 6, 2011
%WINDIR%\system32\dlo1B7D.dll File name: dlo1B7D.dll
Size: 739.32 KB (739328 bytes)
MD5: 552b7ffa597a2871f8641effab4e2a05
Detection count: 53
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: March 6, 2011
%APPDATA%\xvic\xvic.exe File name: xvic.exe
Size: 32.25 KB (32256 bytes)
MD5: a100255153c29bd11b894f5e7eb2cbee
Detection count: 53
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\xvic
Group: Malware file
Last Updated: March 6, 2011
%WINDIR%\SysWOW64\drivers\suf.sys File name: suf.sys
Size: 33.79 KB (33792 bytes)
MD5: e0db796b773d82505fd546d55ab22546
Detection count: 28
File type: System file
Mime Type: unknown/sys
Path: %WINDIR%\SysWOW64\drivers
Group: Malware file
Last Updated: March 6, 2011
%LOCALAPPDATA%\cmeChu.dll File name: cmeChu.dll
Size: 102.4 KB (102400 bytes)
MD5: a1e90ae5e10f12fe6d72aa01f855bcd8
Detection count: 22
File type: Dynamic link library
Mime Type: unknown/dll
Path: %LOCALAPPDATA%
Group: Malware file
Last Updated: March 8, 2011
%PROGRAMFILES%\QuestBrwSearch\questbrwsearch.dll File name: questbrwsearch.dll
Size: 581.63 KB (581632 bytes)
MD5: d31b6c1e809643b83d12c9f3a64af802
Detection count: 9
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\QuestBrwSearch
Group: Malware file
Last Updated: March 14, 2011
%PROGRAMFILES%\QuestBrwSearch\questbrwsearch.dll File name: questbrwsearch.dll
Size: 581.63 KB (581632 bytes)
MD5: 3f7e1d90161f2cde9ac19b62c0d8c229
Detection count: 9
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\QuestBrwSearch
Group: Malware file
Last Updated: March 14, 2011
D:\crack\eset license\TNODUP.exe File name: TNODUP.exe
Size: 1.81 MB (1811968 bytes)
MD5: 9a9bea5b79586081574ae0ace6a97f1d
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: D:\crack\eset license
Group: Malware file
Last Updated: March 6, 2011
C:\Dokumente und Einstellungen\Orvell\ov5setup.exe File name: ov5setup.exe
Size: 3.07 MB (3073024 bytes)
MD5: dc9abffe87a3b0475dce590011c7f19d
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: C:\Dokumente und Einstellungen\Orvell
Group: Malware file
Last Updated: March 6, 2011
%WINDIR%\system32\65831D70.EXE File name: 65831D70.EXE
Size: 17.04 KB (17041 bytes)
MD5: 9a62315d0a51ba396bd13edac4d1a775
Detection count: 5
File type: Executable File
Mime Type: unknown/EXE
Path: %WINDIR%\system32
Group: Malware file
Last Updated: March 2, 2011
C:\Downloads\Mulit Screen Remote Desktop\multi-screen-remote-desktop_setup.exe File name: multi-screen-remote-desktop_setup.exe
Size: 1.52 MB (1523403 bytes)
MD5: c0aade80911c5107f0a3103cd3c2942f
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: C:\Downloads\Mulit Screen Remote Desktop
Group: Malware file
Last Updated: July 27, 2020
%USERPROFILE%\Start Menu\Programs\Startup\rundll32.exe File name: rundll32.exe
Size: 1.38 MB (1387520 bytes)
MD5: e67549666c83ac9bbea1ba73eec40e0f
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Start Menu\Programs\Startup
Group: Malware file
Last Updated: March 6, 2011
%WINDIR%\msvcp71wow.exe File name: msvcp71wow.exe
Size: 521.21 KB (521216 bytes)
MD5: a1b8eaef718406cd058b13eae053af29
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: March 6, 2011
%WINDIR%\system32\716797E7.EXE File name: 716797E7.EXE
Size: 19.59 KB (19597 bytes)
MD5: 4cd0bc16a987fa28a4f7d77581a42094
Detection count: 5
File type: Executable File
Mime Type: unknown/EXE
Path: %WINDIR%\system32
Group: Malware file
Last Updated: April 16, 2013
Loading...