Home Malware Programs Trojans Trojan.Ledap.gen!A

Trojan.Ledap.gen!A

Posted: September 3, 2012

Threat Metric

Threat Level: 8/10
Infected PCs: 84
First Seen: September 3, 2012
Last Seen: March 7, 2022
OS(es) Affected: Windows

Trojan.Ledap.gen!A is a Trojan that may use system vulnerabilities to access the targeted computer system and then perform numerous illegitimate actions in order to steal financial information or distribute other malware infections. Trojan.Ledap.gen!A can take over virtual memory, generate latect connections to the Internet, gather login credentials and then use them to enter the victim's personal email or online chat accounts for spreading malware threats. Trojan.Ledap.gen!A may disguise itself from removal of security software by implementing rootkit functionalities to make it impossible to uninstall from the infected computer. Trojan.Ledap.gen!A may modify runtime policies, add malicious processes to the computer system's startup, add newly generated background services, restrict access to the Windows Advanced Options Menu, block Windows Security Center and such features as Windows Updates or Notification Balloon, and delete Desktop icons.

Aliases

W32/P2PWorm.QD.worm [Panda]Generic23.AGSB [AVG]W32/Delf.UHT!tr [Fortinet]Trojan-Downloader.Win32.Delf [Ikarus]Backdoor/Win32.Gbod [AhnLab-V3]TR/Dldr.Delphi.Gen [AntiVir]Trojan.Siggen2.60287 [DrWeb]TrojWare.Win32.TrojanDownloader.Delf.gen [Comodo]Trojan.Dropper.UDV [BitDefender]Backdoor.Win32.Gbod.dv [Kaspersky]Win32:Jorik-HP [Trj] [Avast]W32/Delfloader.B.gen!Eldorado [F-Prot]Trojan-Downloader [K7AntiVirus]Artemis!948A6B19CC04 [McAfee]Trojan.Malex.E.iw8 [CAT-QuickHeal]
More aliases (72)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%ALLUSERSPROFILE%\Application Data\fJ0GL9HSkHyNdWipm4Q.dll File name: fJ0GL9HSkHyNdWipm4Q.dll
Size: 81.92 KB (81920 bytes)
MD5: 91a95123e08ec3272ee693250b469f67
Detection count: 90
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Application Data
Group: Malware file
Last Updated: September 3, 2012
%WINDIR%\WinUpdaterstd\svchost.exe File name: svchost.exe
Size: 116.22 KB (116224 bytes)
MD5: 948a6b19cc04956b73685cc355878c90
Detection count: 52
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\WinUpdaterstd
Group: Malware file
Last Updated: September 7, 2012
%TEMP%\install_0_msi.exe File name: install_0_msi.exe
Size: 69.12 KB (69120 bytes)
MD5: dc9c07017bc8f388225226148dcbd5ab
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: September 4, 2012
%TEMP%Ytpok\ytp.exe File name: ytp.exe
Size: 530.9 KB (530904 bytes)
MD5: 6e9821a3f5c9aaeb7c4970cab70276dd
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%Ytpok
Group: Malware file
Last Updated: September 7, 2012
%COMMONPROGRAMFILES%\BOONTY Shared\Service\Boonty.exe File name: Boonty.exe
Size: 69.12 KB (69120 bytes)
MD5: c6e90a6ff5ab5ec753a15087611f3087
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %COMMONPROGRAMFILES%\BOONTY Shared\Service
Group: Malware file
Last Updated: September 7, 2012
Loading...