Home Malware Programs Backdoors Backdoor.Wombot.A

Backdoor.Wombot.A

Posted: February 13, 2012

Threat Metric

Threat Level: 6/10
Infected PCs: 246
First Seen: February 13, 2012
OS(es) Affected: Windows

Backdoor.Wombot.A is a backdoor Trojan that allows attackers to gain remote access and control over the compromised PC system. Backdoor.Wombot.A stays in the system background and connects to a specific IRC server to get commands from its author. Thus, Backdoor.Wombot.A can propagate to other PCs, stealing passwords and exploiting Windows vulnerabilities. Backdoor.Wombot.A can also open a back door to allow extra malware threats access the infected computer system. Backdoor.Wombot.A can be used to initiate a DoS attack. Backdoor.Wombot.A drops malicious files and modifies the Windows Registry by creating registry entries that enable it to run automatically every time you start Windows. Backdoor.Wombot.A also exposes the corrupted PC to fake anti-spyware software attacks. Backdoor.Wombot.A can download and run malicious files and record personal information by using keylogging. Therefore, Backdoor.Wombot.A can break your privacy and such data as banking logins and passwords can be transfered to cybercriminals.

Aliases

Generic27.CMMV [AVG]W32/SPNR.11DJ12!tr [Fortinet]Generic BackDoor!1pg [McAfee-GW-Edition]Trojan.Packed.22467 [DrWeb]Mal/VBCheMan-A [Sophos]Trojan.Win32.VBKrypt.lrmx [Kaspersky]Win32.Artemis [eSafe]Win32:Kryptik-IKF [Trj] [Avast]a variant of Win32/Injector.QHU [NOD32]Artemis!345524730583 [McAfee]Trojan.VBKrypt.lrmx [CAT-QuickHeal]Trj/OCJ.A [Panda]Generic30.BHSH [AVG]W32/FakeAV.L [Fortinet]Trojan-Downloader.Win32.Genome [Ikarus]
More aliases (138)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%APPDATA%\qtwm.exe File name: qtwm.exe
Size: 402.43 KB (402432 bytes)
MD5: 78ffe24e7f37a0b671ea87a681684ada
Detection count: 60
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: August 13, 2012
%APPDATA%\qtwm.exe File name: qtwm.exe
Size: 495.66 KB (495665 bytes)
MD5: 74c7706efcaa2aa40eb92cc568d917c4
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: February 13, 2012
%APPDATA%\qtwm.exe File name: qtwm.exe
Size: 544.76 KB (544768 bytes)
MD5: 345524730583a65132270b8b8f6b4b77
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: May 13, 2013
%APPDATA%\qtwm.exe File name: qtwm.exe
Size: 660.99 KB (660992 bytes)
MD5: 3ca04c6662c1a6d1cdb0c0c0be7e478e
Detection count: 28
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: August 6, 2012
%APPDATA%\qtwm.exe File name: qtwm.exe
Size: 329.21 KB (329216 bytes)
MD5: c22c781a883a25f907ca0eb0c3c8f252
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: August 31, 2012
%APPDATA%\qtwm.exe File name: qtwm.exe
Size: 302.59 KB (302592 bytes)
MD5: 37331eee3409df03a9d0e9496d046ba3
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: March 1, 2013
Loading...