Home Malware Programs Viruses Virus.Obfuscator.YR

Virus.Obfuscator.YR

Posted: April 24, 2013

Threat Metric

Threat Level: 8/10
Infected PCs: 248
First Seen: April 24, 2013
OS(es) Affected: Windows

Aliases

VB2.JGL [AVG]W32/Zbot.YWW!tr [Fortinet]TR/VB.Agent.DA [AntiVir]Cryptic.BNH [AVG]Trojan.Win32.Searches [Ikarus]Gen:Variant.Kazy.6003 [BitDefender]Trojan/Win32.Hupigon [AhnLab-V3]Trojan-Dropper.Win32.Clons.aado [Kaspersky]Artemis!55DFCEBFD3F8 [McAfee]Crypt_s.ATT [AVG]W32/Clons.AAEL!tr [Fortinet]Trojan.Crypt_s [Ikarus]Dropper/Win32.Clons [AhnLab-V3]TR/Crypt.TPM.Gen [AntiVir]Backdoor.Win32.Agent.SPA [Comodo]
More aliases (169)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%APPDATA%\altshell.dat File name: altshell.dat
Size: 45.05 KB (45056 bytes)
MD5: 2df2a73d456f34f4a3297a1f18218601
Detection count: 119
File type: Data file
Mime Type: unknown/dat
Path: %APPDATA%
Group: Malware file
Last Updated: April 29, 2013
%APPDATA%\Skype\{293C7478-0471-4D34-B87B-81D3E977E2C4}\renovator.exe File name: renovator.exe
Size: 278.52 KB (278528 bytes)
MD5: f0e7abd31dd462e1c0d42ceb10b3b211
Detection count: 71
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Skype\{293C7478-0471-4D34-B87B-81D3E977E2C4}
Group: Malware file
Last Updated: April 24, 2013
%LOCALAPPDATA%\Lollipop\Lollipop.exe File name: Lollipop.exe
Size: 2.11 MB (2116608 bytes)
MD5: 402290a4418860a37b86054d71c4cd83
Detection count: 40
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Lollipop
Group: Malware file
Last Updated: April 29, 2013
%LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files\Content.IE5\PKDQO7QR\programstarter_d3371799.exe File name: programstarter_d3371799.exe
Size: 1.6 MB (1607760 bytes)
MD5: 778cbd934123565dce9ac711d4c959eb
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files\Content.IE5\PKDQO7QR
Group: Malware file
Last Updated: April 29, 2013
%SystemDrive%\Users\<username>\AppData\Local\NOS\smebypvq.dll File name: smebypvq.dll
Size: 770.04 KB (770048 bytes)
MD5: 756e5dd105bb890e236d9bfbaeed4adc
Detection count: 16
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Users\<username>\AppData\Local\NOS
Group: Malware file
Last Updated: April 29, 2013
%APPDATA%\TODXO\insidminer.exe File name: insidminer.exe
Size: 9.21 KB (9216 bytes)
MD5: 7ce3ed961f98119db94a97b1fc65a3f4
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\TODXO
Group: Malware file
Last Updated: April 29, 2013
%LOCALAPPDATA%\Trymedia Systems\iqgeigqs.dll File name: iqgeigqs.dll
Size: 737.28 KB (737280 bytes)
MD5: 55dfcebfd3f828866e5c741a271bb163
Detection count: 12
File type: Dynamic link library
Mime Type: unknown/dll
Path: %LOCALAPPDATA%\Trymedia Systems
Group: Malware file
Last Updated: April 29, 2013
F:\Program Files\RhinoSoft.com\Serv-U\ServUTray.exe File name: ServUTray.exe
Size: 102.4 KB (102400 bytes)
MD5: 1ad4f1d9722a92e9b8995f23f3ffea17
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: F:\Program Files\RhinoSoft.com\Serv-U\ServUTray.exe
Group: Malware file
Last Updated: September 9, 2022
%TEMP%\1351177533.exe File name: 1351177533.exe
Size: 176.12 KB (176128 bytes)
MD5: 6295c32f4c7425359c62ac2ba93e6413
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: April 29, 2013
%SystemDrive%\win7xe\winlogons.exe File name: winlogons.exe
Size: 2.08 MB (2088960 bytes)
MD5: 0edc0ceaf060eeb3676a08bca4033f55
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\win7xe
Group: Malware file
Last Updated: April 29, 2013
Loading...