Home Malware Programs Backdoors Backdoor.Wombot.A

Backdoor.Wombot.A

Posted: February 13, 2012

Threat Metric

Threat Level: 6/10
Infected PCs: 246
First Seen: February 13, 2012
OS(es) Affected: Windows

Backdoor.Wombot.A is a backdoor Trojan that allows attackers to gain remote access and control over the compromised PC system. Backdoor.Wombot.A stays in the system background and connects to a specific IRC server to get commands from its author. Thus, Backdoor.Wombot.A can propagate to other PCs, stealing passwords and exploiting Windows vulnerabilities. Backdoor.Wombot.A can also open a back door to allow extra malware threats access the infected computer system. Backdoor.Wombot.A can be used to initiate a DoS attack. Backdoor.Wombot.A drops malicious files and modifies the Windows Registry by creating registry entries that enable it to run automatically every time you start Windows. Backdoor.Wombot.A also exposes the corrupted PC to fake anti-spyware software attacks. Backdoor.Wombot.A can download and run malicious files and record personal information by using keylogging. Therefore, Backdoor.Wombot.A can break your privacy and such data as banking logins and passwords can be transfered to cybercriminals.

Aliases

Generic27.CMMV [AVG]W32/SPNR.11DJ12!tr [Fortinet]Generic BackDoor!1pg [McAfee-GW-Edition]Trojan.Packed.22467 [DrWeb]Mal/VBCheMan-A [Sophos]Trojan.Win32.VBKrypt.lrmx [Kaspersky]Win32.Artemis [eSafe]Win32:Kryptik-IKF [Trj] [Avast]a variant of Win32/Injector.QHU [NOD32]Artemis!345524730583 [McAfee]Trojan.VBKrypt.lrmx [CAT-QuickHeal]Trj/OCJ.A [Panda]Generic30.BHSH [AVG]W32/FakeAV.L [Fortinet]Trojan-Downloader.Win32.Genome [Ikarus]
More aliases (138)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%APPDATA%\qtwm.exe File name: qtwm.exe
Size: 302.59 KB (302592 bytes)
MD5: 37331eee3409df03a9d0e9496d046ba3
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: March 1, 2013

More files
Loading...