Home Malware Programs Trojans CANALPLAY

CANALPLAY

Posted: November 5, 2011

Threat Metric

Threat Level: 8/10
Infected PCs: 187
First Seen: February 22, 2012
Last Seen: December 7, 2022
OS(es) Affected: Windows

Aliases

Rootkit/Sirefef.B [Panda]Agent3.AWLG [AVG]W32/ZAccess.G!tr.rkit [Fortinet]Rootkit.Win32.ZAccess [Ikarus]Backdoor/Win32.ZAccess [AhnLab-V3]Trojan/Win32.ZAccess.gen [Antiy-AVL]Mal/ZAccess-C [Sophos]Generic.dx!bb3w [McAfee-GW-Edition]TR/TDss.73.9 [AntiVir]TrojWare.Win32.Rootkit.ZAccess.KG [Comodo]Gen:Variant.TDss.73 [BitDefender]Rootkit.Win32.ZAccess.g [Kaspersky]Trojan.Rootkit-3753 [ClamAV]Win32.TRRootkit [eSafe]Win32:Zeroot [Rtk] [Avast]
More aliases (242)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%WINDIR%\pdwa.exe File name: pdwa.exe
Size: 71.67 KB (71676 bytes)
MD5: 628cce84013f18188ca5a7dd01441e37
Detection count: 84
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: February 24, 2012
%WINDIR%\system32\tcpscvs.exe File name: tcpscvs.exe
Size: 1.08 MB (1085944 bytes)
MD5: a51f6b27ef149c5d1b33b319b77c7320
Detection count: 51
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: March 6, 2012
D:\k\B FFM.exe File name: B FFM.exe
Size: 246.27 KB (246272 bytes)
MD5: b17b0679cb1f7e6715c240b250aa4483
Detection count: 44
File type: Executable File
Mime Type: unknown/exe
Path: D:\k\B FFM.exe
Group: Malware file
Last Updated: December 7, 2022
C:\Users\<username>\Desktop\Rat All\Rat android &windows\Rat6 new\exploit\Stealer_Pack\Stealer_Pack\RapZo Logger v 1.5 ( Public Edition )\Rapzo Pack\Express.exe File name: Express.exe
Size: 532.99 KB (532992 bytes)
MD5: 2ff7ca32cfefbf6949dee5d66ac616cd
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\Desktop\Rat All\Rat android &windows\Rat6 new\exploit\Stealer_Pack\Stealer_Pack\RapZo Logger v 1.5 ( Public Edition )\Rapzo Pack\Express.exe
Group: Malware file
Last Updated: August 23, 2023
%USERPROFILE%\Mis documentos\Downloads\ComboFix.exe File name: ComboFix.exe
Size: 4.41 MB (4414945 bytes)
MD5: 1bfca793727e8300c1fcadc2dbf2875f
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Mis documentos\Downloads
Group: Malware file
Last Updated: October 14, 2020
%APPDATA%\wxvi.exe File name: wxvi.exe
Size: 529.4 KB (529409 bytes)
MD5: 7e6946d0f0c57fc00ebeea0c90c89712
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: March 2, 2012
%USERPROFILE%\Local Settings\Application Data\RemoteUnlock.exe File name: RemoteUnlock.exe
Size: 188.41 KB (188416 bytes)
MD5: 2945fecae6282863f965c03a7625cca2
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Local Settings\Application Data
Group: Malware file
Last Updated: March 2, 2012
C:\Users\<username>\AppData\Roaming\2FD8.tmp File name: 2FD8.tmp
Size: 49.66 KB (49664 bytes)
MD5: 5ad986eef9cde41484020ad6794cc662
Detection count: 9
File type: Temporary File
Mime Type: unknown/tmp
Path: C:\Users\<username>\AppData\Roaming\2FD8.tmp
Group: Malware file
Last Updated: January 20, 2022
%APPDATA%\Microsoft\Windows\Templates\svvhost.exe File name: svvhost.exe
Size: 630.27 KB (630272 bytes)
MD5: 2130001ea74bbd9a6468c921d8e35c23
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Microsoft\Windows\Templates
Group: Malware file
Last Updated: April 23, 2020
%USERPROFILE%\Desktop\New Folder\M2Fish.dll File name: M2Fish.dll
Size: 1.57 MB (1570304 bytes)
MD5: e1baee17993cddf234cf0b7780be25a3
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %USERPROFILE%\Desktop\New Folder
Group: Malware file
Last Updated: August 31, 2020
Loading...