Home Malware Programs Backdoors Xtrat.A

Xtrat.A

Posted: June 20, 2011

Threat Metric

Threat Level: 6/10
Infected PCs: 363
First Seen: June 20, 2011
Last Seen: December 2, 2021
OS(es) Affected: Windows

Aliases

Generic6_c.GIA [AVG]W32/Injector.DH!tr [Fortinet]Trojan.Win32.Midgare [Ikarus]Backdoor:Win32/Bifrose [Microsoft]Troj/SSonce-B [Sophos]TROJ_GEN.R0CBOC0HP13 [TrendMicro]BDS/Bifrose.A.5284 [AntiVir]Backdoor.Win32.Agent.CFRW [Comodo]W32.IRCBot.NG [Symantec]W32/Bifrost.AD.gen!Eldorado [F-Prot]P2PWorm ( 003b85831 ) [K7AntiVirus]BackDoor-FACW!A902BBD4F14D [McAfee]Backdoor.Xtreme.bpt [CAT-QuickHeal]BackDoor.Generic16.AGSE [AVG]Virus.Win32.VBInject [Ikarus]
More aliases (611)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%WINDIR%\InstallDir\Server.exe File name: Server.exe
Size: 91.14 KB (91142 bytes)
MD5: e2b52e0929cc2d8d80de2b16c4b46b72
Detection count: 85
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\InstallDir
Group: Malware file
Last Updated: January 23, 2012
%WINDIR%\system32\Drivers\Server.exe File name: Server.exe
Size: 69.63 KB (69632 bytes)
MD5: e78a722de433d2980ec8b292862344b9
Detection count: 68
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32\Drivers
Group: Malware file
Last Updated: November 14, 2012
%APPDATA%\Java\update.exe File name: update.exe
Size: 40.96 KB (40960 bytes)
MD5: e2d12671b806e0764b90e9707e56ce1f
Detection count: 47
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Java
Group: Malware file
Last Updated: December 27, 2011
%WINDIR%\InstallDir\Messanger.exe File name: Messanger.exe
Size: 121.09 KB (121095 bytes)
MD5: 9f312a1198de056d74884354064af27d
Detection count: 34
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\InstallDir
Group: Malware file
Last Updated: September 21, 2011
%APPDATA%\Winlogon\winlogon.exe File name: winlogon.exe
Size: 277.5 KB (277504 bytes)
MD5: aac277faf6ea5d71071a2093e0d02cc8
Detection count: 33
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Winlogon
Group: Malware file
Last Updated: October 5, 2012
%WINDIR%\system32\InstallDir\Server.exe File name: Server.exe
Size: 310.78 KB (310784 bytes)
MD5: 8cdd076ae6b02c94b7c50718b4352a45
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32\InstallDir
Group: Malware file
Last Updated: October 29, 2012
%WINDIR%\system32\InstallDir\Server.exe File name: Server.exe
Size: 813.89 KB (813893 bytes)
MD5: 43b24941bfa5844e19ce971123e54331
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32\InstallDir
Group: Malware file
Last Updated: March 29, 2013
%USERPROFILE%\AppData\Roaming\Microsoft\Microsoft.exe File name: Microsoft.exe
Size: 310.54 KB (310549 bytes)
MD5: 52d101ea8bb863cefe4d461267884768
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\AppData\Roaming\Microsoft
Group: Malware file
Last Updated: March 21, 2013
%APPDATA%\server_Protected.exe File name: server_Protected.exe
Size: 61.44 KB (61440 bytes)
MD5: 5dcebce790e69449800bea223831fe46
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: December 24, 2012
%PUBLIC%\WIN-5435-2813-2118\paltalk.exe File name: paltalk.exe
Size: 221.18 KB (221184 bytes)
MD5: 18454745a2501261e9d7d9126abd91d5
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %PUBLIC%\WIN-5435-2813-2118
Group: Malware file
Last Updated: October 9, 2012
%ALLUSERSPROFILE%\java.exe File name: java.exe
Size: 234.91 KB (234916 bytes)
MD5: 0b58be7f6a732205d9b50369693d1fb9
Detection count: 10
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: November 14, 2012
%APPDATA%\InstallDir\Server.exe File name: Server.exe
Size: 360.44 KB (360448 bytes)
MD5: 92afeb1669eab1d7d3bb5ad305240f22
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\InstallDir
Group: Malware file
Last Updated: May 15, 2013
%PROGRAMFILES%\Iwindatt_Pimbol\Iwindatt.exe File name: Iwindatt.exe
Size: 7.01 MB (7011881 bytes)
MD5: b43c07c46dbad8117ee5038a37093801
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Iwindatt_Pimbol
Group: Malware file
Last Updated: November 1, 2019
%APPDATA%\install\windows.exe File name: windows.exe
Size: 817.53 KB (817539 bytes)
MD5: 505d708a665d81b41600ea7ab87392ff
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\install
Group: Malware file
Last Updated: January 14, 2013
%WINDIR%\InstallDir\Server.exe File name: Server.exe
Size: 83.96 KB (83968 bytes)
MD5: e4f7fb6ece9f35c11e02b6aefecebdac
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\InstallDir
Group: Malware file
Last Updated: September 11, 2012
%APPDATA%\Microsoft\win32.exe File name: win32.exe
Size: 1.43 MB (1435136 bytes)
MD5: 1b84e1b380411a3500138f60276820da
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Microsoft
Group: Malware file
Last Updated: January 8, 2013
%WINDIR%\Microsoft\Driver.exe File name: Driver.exe
Size: 999.42 KB (999424 bytes)
MD5: 59e2f8d5777a6c53c2c59fb78ac36da2
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\Microsoft
Group: Malware file
Last Updated: January 23, 2013
%APPDATA%\InstallDir\alg.exe File name: alg.exe
Size: 132.98 KB (132981 bytes)
MD5: 794c426722df587c22c838fea241d1c5
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\InstallDir
Group: Malware file
Last Updated: March 29, 2013
%APPDATA%\Install\sys.exe File name: sys.exe
Size: 66.04 KB (66048 bytes)
MD5: 268c9c5f8556dd79a1827dddce29f974
Detection count: 3
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Install
Group: Malware file
Last Updated: March 1, 2013

Related Posts

Loading...