Dietpuma.com

Posted: February 14, 2012

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Ranking:	16,757
Threat Level:	8/10
Infected PCs:	548

First Seen:	February 24, 2012
Last Seen:	August 23, 2023
OS(es) Affected:	Windows

Dietpuma.com, rather than being the dieting or wildlife-information site that its web address implies, is a clone of other search engines from the 'puma' family and, like them, is marketed by PC threats that use Google-specific browser redirects. As of early February 2012, Dietpuma.com hasn't been blacklisted for directly malicious behavior, but SpywareRemove.com malware research team suggests that you treat Dietpuma.com with suspicion, since related websites have been known to distribute PC threats. As for Dietpuma.com, most forms of contact with Dietpuma.com are instigated by browser hijackers that redirect your web browser from Google to Dietpuma.com or other puma-based sites. Because these redirects may also occur alongside more serious PC threats, you should solve them and delete a Dietpuma.com browser hijacker by using thorough and extensive anti-malware scans with appropriate security software.

Dietpuma.com – a Search Engine That's Trimmed-Down on the Essentials

Because Dietpuma.com has minimal presence on the web and doesn't engage in significant marketing efforts, your main path to Dietpuma.com lies via the not-so-gentle encouragement of browser hijackers. Web browser hijacks that promote Dietpuma.com have been noted to trigger in the following fashion, although SpywareRemove.com malware experts also caution that updates to these PC threats may make changes to the process:

A browser hijacker is installed onto your PC by various means (such as a Trojan downloader, drive-by-download attack or file-based exploit). This installation is often noted to include other PC threats and other attacks, in addition to browser redirects to Dietpuma.com.
The browser hijacker proceeds to monitor your online activities for any attempts to interact with a search result link from Google. Other search engines appear to be unaffected, but all web browsers can be considered to be vulnerable.
Once you click a Google search result, said browser hijacker redirects you to Dietpuma.com or another puma-based site, afterward delivering you to the original and intended destination. In some cases, redirects may falter and stop at Dietpuma.com without proceeding onwards to the original site.

Although these attacks may not cause much damage to your PC, they are an effective form of click fraud and will slow down your ability to use your web browser effectively. SpywareRemove.com malware research team also warns that some searches, such as searches for anti-malware information, may be completely blocked by Dietpuma.com-promoting PC threats.

When Seeing Blue Means That Dietpuma.com-Marketing PC Threat Has Pounced

Most web browser hijackers for Dietpuma.com are also noted to include additional functions or be installed next to other PC threats that can accomplish significant harm if left alone. SpywareRemove.com malware researchers warn against the likely presence of Trojans or rootkits that should be removed, along with Dietpuma.com's browser hijacker, via extensive anti-malware scans. System crashes or blue error screens are predominant symptoms of infection that often occur side-by-side with redirects to Dietpuma.com.

Other search engine sites from Dietpuma.com's family include Carpuma.com, Foodpuma.com, Buffpuma.com, Internetpuma.com, Loanpuma.com, Insurancepuma.com and Creditpuma.com. SpywareRemove.com malware experts recommend that you consider each of these sites to be at least equivalent to Dietpuma.com in terms of risk and likely attacks, and some may be considered even more dangerous than Dietpuma.com due to their confirmed involvement in the distribution of malicious software.

Aliases

W32/Inject.CHII!tr [Fortinet]Trojan.Win32.Inject [Ikarus]Trojan/Win32.Inject.gen [Antiy-AVL]Mal/Generic-L [Sophos]Trojan.Win32.Inject.chii [Kaspersky]Win32.TRSpam.Sasfis [eSafe]Generic.dx!bdpq [McAfee]Trojan.Inject.chii [CAT-QuickHeal]Gen:Variant.Kazy.50027 [BitDefender]a variant of Win32/Kryptik.XWR [NOD32]Generic BackDoor.vv [McAfee]Win32/Cryptor [AVG]Heuristic.LooksLike.Win32.Winwebsec.E [McAfee-GW-Edition]TR/Crypt.ZPACK.Gen2 [AntiVir]Gen:Trojan.Heur.KT.5.2u0@a0hBvbli [F-Secure]
More aliases (150)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

acovytgj.dll

File name: acovytgj.dll
Size: 209.92 KB (209920 bytes)
MD5: 92724babba6922a707deec375983f3da
Detection count: 80
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: February 24, 2012

%WINDIR%\system32\NCUSBw32.dll

File name: NCUSBw32.dll
Size: 156.67 KB (156672 bytes)
MD5: 1c342fba8cc51b658b0086adcf337367
Detection count: 70
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: March 2, 2012

%WINDIR%\system32\ahijytyl.dll

File name: ahijytyl.dll
Size: 209.92 KB (209920 bytes)
MD5: cff0b3d6e0c6a92c9665202b78e692f9
Detection count: 70
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 26, 2012

%TEMP%\xC.exe

File name: xC.exe
Size: 1.01 MB (1012224 bytes)
MD5: 80adb053ec8e370d72bcb7d22bc43a49
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: March 2, 2012

%WINDIR%\Temp\_ex-68.exe

File name: _ex-68.exe
Size: 893.44 KB (893440 bytes)
MD5: 24463dfbda04dc63e830a7cc0af3833b
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\Temp
Group: Malware file
Last Updated: March 2, 2012

%APPDATA%\2446.exe

File name: 2446.exe
Size: 362.18 KB (362188 bytes)
MD5: b67a502bf26fca5389b1c00255d4ad01
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: March 2, 2012

%PROGRAMFILES%\MixCentral\Download Manager\Axis2Starter.exe

File name: Axis2Starter.exe
Size: 150.01 KB (150016 bytes)
MD5: b04904232400a1f18e6a8ba11d12deda
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\MixCentral\Download Manager
Group: Malware file
Last Updated: March 2, 2012

%APPDATA%\WinUpdtr\video loader.exe

File name: video loader.exe
Size: 608.25 KB (608256 bytes)
MD5: f84fc0af0338f562dcea9b4091d885b4
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WinUpdtr
Group: Malware file
Last Updated: March 2, 2012

USB3Nw32.dll

File name: USB3Nw32.dll
Size: 37.88 KB (37888 bytes)
MD5: 70f8debd124f3a975372e7cf3110b02e
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: March 2, 2012