Home Malware Programs Trojans Coremhead

Coremhead

Posted: December 6, 2010

Threat Metric

Threat Level: 8/10
Infected PCs: 171
First Seen: December 6, 2010
Last Seen: June 30, 2019
OS(es) Affected: Windows

Aliases

W32/Zbot.AXQC!tr [Fortinet]Trojan-Spy.Win32.Zbot [Ikarus]Spyware/Win32.Zbot [AhnLab-V3]TR/Crypt.XPACK.Gen [AntiVir]Trojan.Inject.15969 [DrWeb]TrojWare.Win32.Spy.Zbot.axqc [Comodo]Trojan-Spy.Win32.Zbot.axqc [Kaspersky]Win32.TRSpy.ZBot.Axq [eSafe]Win32:MalOb-EK [Cryp] [Avast]Infostealer [Symantec]W32/MalwareF.AFBPN [F-Prot]PWS-Zbot.gen.cz [McAfee]Trj/OCJ.B [Panda]Generic30.ASKA [AVG]W32/Zbot.ANQ!tr [Fortinet]
More aliases (204)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%APPDATA%\Intra defy\Eggs inter idol.exe File name: Eggs inter idol.exe
Size: 249.85 KB (249856 bytes)
MD5: d6e7b8f0a0ef8347de6294dd16912bfa
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Intra defy
Group: Malware file
Last Updated: December 7, 2010
%ALLUSERSPROFILE%\Application Data\wmimgmt.exe File name: wmimgmt.exe
Size: 174.08 KB (174080 bytes)
MD5: f9e5351ea39244565766eac8818d3a6a
Detection count: 43
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\Application Data
Group: Malware file
Last Updated: December 7, 2010
%APPDATA%\Okvavo.scr File name: Okvavo.scr
Size: 101.88 KB (101888 bytes)
MD5: cb22f530f4084d6d27e161e62ac0c38d
Detection count: 42
Mime Type: unknown/scr
Path: %APPDATA%
Group: Malware file
Last Updated: December 24, 2012
%ALLUSERSPROFILE%\A717AC7B264AB03C3A1E8A319E61561.exe File name: A717AC7B264AB03C3A1E8A319E61561.exe
Size: 50.68 KB (50688 bytes)
MD5: d8c9a34885442501c2031f79ee793801
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: March 2, 2012
%APPDATA%\barb draw scr\Browse Blue.exe File name: Browse Blue.exe
Size: 540.67 KB (540672 bytes)
MD5: d1a54f53c79b9a285313e0464520ebeb
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\barb draw scr
Group: Malware file
Last Updated: December 6, 2010
%SystemDrive%\winntse.bin\winntse.bin.exe File name: winntse.bin.exe
Size: 178.17 KB (178176 bytes)
MD5: 59a4c003cf31e38c0a4811c06aeaf661
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\winntse.bin
Group: Malware file
Last Updated: April 28, 2011
%LOCALAPPDATA%\usrdesk60\usrdesk60.dll File name: usrdesk60.dll
Size: 65.53 KB (65536 bytes)
MD5: 66be5da44b7329dec6fa3cb107cd2203
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %LOCALAPPDATA%\usrdesk60
Group: Malware file
Last Updated: December 8, 2010
%USERPROFILE%\zauejac.exe File name: zauejac.exe
Size: 142.84 KB (142848 bytes)
MD5: 2b84af9f3d836127b2e0ab1e82c7e664
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%
Group: Malware file
Last Updated: March 18, 2011
%WINDIR%\system32\srvwplay.exe File name: srvwplay.exe
Size: 80.38 KB (80384 bytes)
MD5: d2bde2c56ad68867b8c62c5144dbef98
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: March 29, 2013
Loading...