Rorpian

Aliases

Net-Worm.Win32.Kolab [Ikarus]Win32:Buterat-CA [GData]Troj/Agent-TBU [Sophos]Trojan.DownLoader4.45388 [DrWeb]Net-Worm.Win32.Kolab!IK [Emsisoft]Net-Worm.Win32.Kolab.apic [Kaspersky]Win32:Buterat-CA [Trj] [Avast]WORM_KOLAB.RO [TrendMicro-HouseCall]a variant of Win32/Kryptik.RUR [NOD32]Quantrologic (fs) [VIPRE]

More aliases (170)

Rorpian Automatic Detection Tool (Recommended)

Is your PC infected with Rorpian? To safely & quickly detect Rorpian, we highly recommend you run the malware scanner listed below.

Download SpyHunter's* Malware Scanner to detect Rorpian What happens if Rorpian does not let you open SpyHunter or blocks the Internet?

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

#	File Name	Detection Count
1	%APPDATA%\ Adobee\ Protect.exe	614
2	%TEMP%\ lbstkbe.exe	520
3	%WINDIR%\ system32\ xregew.exe	145
4	%WINDIR%\ scvhost.exe	70
5	%COMMONPROGRAMFILES%\ McAfee\ SystemCore\ mfefire.exe	33
6	%APPDATA%\ SysWin\ lsass.exe	28
7	%USERPROFILE%\ My Documents\ Downloads\ XvidSetup.exe	21
8	%WINDIR%\ advapi32wow.exe	21
9	%TEMP%\ Ahh.exe	16
10	%ALLUSERSPROFILE%\ api-ms-win-core-errorhandling-l1-1-032.dll	12