Trojan-Downloader.Win32.FraudLoad.gam
Trojan-Downloader.Win32.FraudLoad.gam Description
Trojan-Downloader.Win32.FraudLoad.gam is installed through a devious exploit and deceives the user by downloading other harmful malware onto the infected computer. Trojan-Downloader.Win32.FraudLoad.gam can download adware, spyware and other malware from various servers and sources on the Internet. Other symptoms include opening illicit network connections, self-mutation and the ability to disable weak software security. Risks which may prove detrimental to the computer user include the transmission of personal information without the user’s consent. Trojan-Downloader.Win32.FraudLoad.gam can severely degrade the performance of your computer and poses a severe security risk. Terminate Trojan-Downloader.Win32.FraudLoad.gam upon detection.
Aliases
Hoax/Win32.Agent.gen [Antiy-AVL]Hoax.Win32.Agent!IK [Emsisoft]TR/Agent.amy.1 [AntiVir]Trojan.Agent!2tjGWIItMMo [Agnitum]Hoax.Win32.Agent.amy [Kaspersky]TROJ_SPNR.08DB12 [TrendMicro-HouseCall]W32/Obfuscated.DM!genr [Norman]Artemis!7B948792C642 [McAfee]Win32:Adware-gen [Adw] [Avast5]WinFixer.IV [AVG]
More aliases (5501)
Trojan-Downloader.Win32.FraudLoad.gam Automatic Detection Tool (Recommended)
Is your PC infected with Trojan-Downloader.Win32.FraudLoad.gam? To safely & quickly detect Trojan-Downloader.Win32.FraudLoad.gam, we highly recommend you run the malware scanner listed below.
Download SpyHunter's* Malware Scanner to detect Trojan-Downloader.Win32.FraudLoad.gam
What happens if Trojan-Downloader.Win32.FraudLoad.gam does not let you open SpyHunter or blocks the Internet?
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read
the tutorials on how to find malware,
kill unwanted processes,
remove malicious DLLs and
delete other harmful files. Always be
sure to back up your PC before making any changes.
- The following files were created in the system:
# File Name Detection Count 1 winscent.exe 513 2 services.exe 482 3 wscsvc32.exe 461 4 uoyzsydz.exe 372 5 outtheoutat.exe 372 6 helpers32.dll 314 7 csrssc.exe 307 8 wayebomi.exe 307 9 helper32.dll 110 10 smss32.exe 103
More files
Registry Modifications
Tutorial: To edit and delete registry entries manually, read the tutorial on
how to remove malicious registry entries.
Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
- The following newly produced Registry Values are:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}brastkisc_ui.exeMonopodPersonal Security Center Monitorsmss32.exesysgif32Windows Frameworkwinupdate86.exe{2C70168B-97CE-4f31-B85D-1FEC5002721D}{7DD4A7AC-A3F1-4495-884A-7947C5B89108}{DD651081-A909-45ad-BD71-2335B0ADE043}HKEY..\..\{Value}Microsoft\Windows NT\CurrentVersion\Winlogon\Notify, value: ddcCSKDuMicrosoft\Windows NT\CurrentVersion\Winlogon\Notify, value: geBqRKBtSOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {1F98C59B-DB4B-454B-98C8-95D0668B11A6}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {7A957AFD-F995-4CDD-8D03-CB83B3672855}Software\Microsoft\Internet Explorer\Toolbar, value: {6BBD76F0-FDBB-4D2D-AD36-5C922F510AF5}Software\Microsoft\Internet Explorer\Toolbar, value: {7D787886-3B24-401C-A7BC-AF950A1C3CAC}Software\Microsoft\Internet Explorer\Toolbar, value: {14E52265-CCA3-4F78-A21B-88F4EE6E78C1}Software\Microsoft\Internet Explorer\Toolbar, value: {79293B31-D790-4B64-AAD7-8D47CED92E54}Software\Microsoft\Internet Explorer\Toolbar, value: {257F0149-3042-4F1E-97A1-7602460E97EE}Software\Microsoft\Internet Explorer\Toolbar, value: {92162A1C-A9E3-4C0C-BCDC-2996E8406887}Software\Microsoft\Internet Explorer\Toolbar, value: {F1348462-25DE-4F17-869F-BAAFE04DD599}Software\Microsoft\Internet Explorer\Toolbar, value: {AE06A911-A5A5-4DFA-9ADA-1DF21EAB25C6}Software\Microsoft\Internet Explorer\Toolbar, value: {2E7789D2-AEF7-45BE-8CBF-2CEF5EF9F03B}Software\Microsoft\Internet Explorer\Toolbar, value: {B3A57C90-D66D-42D7-AAC2-CBB2841008BD}Software\Microsoft\Internet Explorer\Toolbar, value: {74415C3D-DB1D-40BF-9F91-1D1A31027A31}Software\Microsoft\Internet Explorer\Toolbar, value: {5FF6FACA-CFF7-499D-AB5B-8EEA9CE80739}Software\Microsoft\Internet Explorer\Toolbar, value: {8202F040-3566-46E4-920F-92504E90E170}Software\Microsoft\Internet Explorer\Toolbar, value: {1C7295ED-FCE6-4F90-9624-EE46F6D8DD59}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {FF20AF38-AD56-4361-AE03-339130767E26}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {1EDC0625-1B0F-467C-9889-817C3DE3D37C}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {AB802BE5-5918-4875-954F-C878E08FC60E}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {A8160B32-92A5-48CB-839D-D4C5D05054E4}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {63BB2189-05DB-4E6B-9542-82C9A1C53C0B}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {3BB35E2E-9AE6-4FDE-A691-9E5BDBD93044}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {8255476E-97F9-470F-9190-031DD1941B74}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {88E2C28F-80C8-49BA-94A3-A5D4930B4A23}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {695AD9B9-B97E-4F91-8B6F-B1BD73937505}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {86ACF01A-98C0-4051-ADD0-AEAA78A7FCBE}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {FCCD9F7B-5BF3-4DC4-B131-CE069F8A62AB}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {C70BCB6B-51D7-40FE-8A88-CD5FA0088646}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {392A638F-8459-4F66-A990-ECA6292B8BFE}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {F661BA6B-FAF4-4165-A701-F65A7585AC91}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {2969BC53-0B3D-4043-9C3C-ED7D3945C23D}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {BF53502D-3BEF-4273-9925-89D7526A5F87}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {65A214E4-E5E7-4685-8637-00E7B48725F0}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {EB6ABD3D-F2E7-4807-B9B6-F62AE3021A17}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {8A11BBE3-E0B5-40FB-9D86-E08A52B51B47}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {879969F9-CDF3-4846-BE1F-89A9E43FF30F}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {106198B5-9A3D-4D97-8DEF-845A1FDCD787}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {D355A751-C166-4351-8112-0EB0775E1B16}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {1CFB1B63-FEB6-4FF2-9B5F-28FA70D6A049}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {59B4236E-2A39-4942-8278-980630D6D26F}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {7335E3EA-1F69-4622-9DA6-EA926241B097}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {DD75AB82-CBE3-4096-825E-C24BFA82B5FF}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {4B87885D-104A-4C24-A9BB-7D795B8039A2}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {D92C8B24-6818-4992-AFDD-7E96C92E28BD}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {326E1D30-5343-4B85-8BD5-DF6852DAA6F3}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {ED2FC0D9-9ABF-42E3-96F8-049740A1C435}Software\Microsoft\Internet Explorer\Toolbar\WebBrowser, value: {5B452B01-12C9-4286-81D9-2308AEB3CD94}Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, value: {99f8405b-63d1-421a-83bb-7b4b0642ac28}SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, value: {2016a466-91a2-43c6-97d8-2fd380f065ef}SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, value: {27cb634d-c84e-4c00-9b53-f5523601dbad}Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, value: {9c87cb31-93d0-4f3e-a360-4a91ff77aeb7}Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, value: {020487CC-FC04-4B1E-863F-D9801796230B}Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, value: {8d332d3a-0114-4492-8521-c2b93b4db160}Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, value: {C5AF42A3-94F3-42BD-F634-3604832C897D}Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, value: procgdbl32.exeSoftware\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, value: procgdnb32.exeSoftware\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, value: procgdwb32.exeSoftware\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, value: orandoutbySoftware\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, value: onatSOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN, value: forandbySoftware\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, value: outtheoutatSOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, value: eitherorSOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, value: evgratsmSOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, value: kvxqmtreSYSTEM\CurrentControlSet\Control\SafeBoot\Minimal, value: Winpu73.sysSYSTEM\CurrentControlSet\Control\SafeBoot\Network, value: Winpu73.sys - The following CLSID's were detected:
HKEY..\..\{CLSID Path} {D10384B5-9497-4250-BDE1-4DE413F8C669}{8BCDB708-77A2-4C1C-B35C-C81FDCC045EF}{5B452B01-12C9-4286-81D9-2308AEB3CD94}{A44B024A-CE32-4BDA-0075-C799A4BFF141}{9EFB101A-EA9A-4065-B8A4-8963FC57C446}{685EDF73-6BF2-45EA-A1C1-1C4C0C044307}{16406580-14CE-4441-B904-AD56CC8064CA}{4B87885D-104A-4C24-A9BB-7D795B8039A2}{D92C8B24-6818-4992-AFDD-7E96C92E28BD}{DD75AB82-CBE3-4096-825E-C24BFA82B5FF}{7335E3EA-1F69-4622-9DA6-EA926241B097}{59B4236E-2A39-4942-8278-980630D6D26F}{326E1D30-5343-4B85-8BD5-DF6852DAA6F3}{D355A751-C166-4351-8112-0EB0775E1B16}{EB6ABD3D-F2E7-4807-B9B6-F62AE3021A17}{879969F9-CDF3-4846-BE1F-89A9E43FF30F}{C70BCB6B-51D7-40FE-8A88-CD5FA0088646}{8A11BBE3-E0B5-40FB-9D86-E08A52B51B47}{392A638F-8459-4F66-A990-ECA6292B8BFE}{BF53502D-3BEF-4273-9925-89D7526A5F87}{88E2C28F-80C8-49BA-94A3-A5D4930B4A23}{FCCD9F7B-5BF3-4DC4-B131-CE069F8A62AB}{A8160B32-92A5-48CB-839D-D4C5D05054E4}{3BB35E2E-9AE6-4FDE-A691-9E5BDBD93044}{695AD9B9-B97E-4F91-8B6F-B1BD73937505}{86ACF01A-98C0-4051-ADD0-AEAA78A7FCBE}{AB802BE5-5918-4875-954F-C878E08FC60E}{B1E0C6DC-BBEA-4DE1-BFCA-70362CD86579}{61D1EA3E-A930-4BEB-B16B-D7212B5C5A4C}{1F98C59B-DB4B-454B-98C8-95D0668B11A6}{7A957AFD-F995-4CDD-8D03-CB83B3672855}{99f8405b-63d1-421a-83bb-7b4b0642ac28}{8255476E-97F9-470F-9190-031DD1941B74}{9c87cb31-93d0-4f3e-a360-4a91ff77aeb7}{5FF6FACA-CFF7-499D-AB5B-8EEA9CE80739}{8202F040-3566-46E4-920F-92504E90E170}{12A25CE9-0A93-4074-9516-A5B1A83141C9}{1817219B-D6DC-450A-B913-41F12BC05019}{44DBA688-6E83-4538-BB5B-982A3C7A4E12}{1BF97F11-E184-42BD-8E57-EDBA3CFB4F7A}{B3A57C90-D66D-42D7-AAC2-CBB2841008BD}{AE06A911-A5A5-4DFA-9ADA-1DF21EAB25C6}{E717DC9B-B2DA-4CB5-9DA2-EEEC2516ED3A}{92162A1C-A9E3-4C0C-BCDC-2996E8406887}{F1348462-25DE-4F17-869F-BAAFE04DD599}{8B6860DE-2CFA-4713-B42F-DC06D008DC54}{257F0149-3042-4F1E-97A1-7602460E97EE}{48D78BE5-CFB9-4B66-9AC4-96D4CF21DE06}{74D46BBA-5638-473A-83B6-97E7804A7411}{70EC7CA3-2FFC-4E43-97DE-3C91B2F65D36}
Additional Information
- The following URL's were detected:
cubeexe.comsecurityonlinecomputer.net
Posted: December 2, 2009 | By SpywareRemove
MoreThreat Level: 9/10
(No Ratings Yet)
Loading ...Rate this article:
Detection Count: 1,375
This spyware antivirus package was installed on my firm\’s computer by an IT Security Expert trading as Ashurst Group LTD (company did not exist at Companies House) in London/Surrey. This guy claimed to be from MI5 & \’found\’ syp wireless devices & other such nonsense designed to extort cash from my clients.