Home Malware Programs Worms Dorkbot

Dorkbot

Posted: June 1, 2011

Threat Metric

Ranking: 13,248
Threat Level: 5/10
Infected PCs: 5,342
First Seen: June 1, 2011
Last Seen: September 15, 2023
OS(es) Affected: Windows

Aliases

Generic30.RWE [AVG]W32/ZeroAccess.B!tr [Fortinet]TR/Spamlink.B [AntiVir]Trojan.Spamlink.14 [DrWeb]Gen:Variant.Symmi.4572 [F-Secure]TrojWare.Win32.Kryptik.AOCS [Comodo]Trojan-Ransom.Win32.PornoAsset.azfv [Kaspersky]Trojan.Ransomlock!g28 [Symantec]W32/Zbot.GR.gen!Eldorado [F-Prot]TrojanRansom.PornoAsset.azfv [CAT-QuickHeal]Generic30.AIAS [AVG]W32/PornoAsset.BHJW!tr [Fortinet]Artemis!76B93EEF84E1 [McAfee-GW-Edition]TR/Ransom.Blocker.bhjw [AntiVir]Trojan.Winlock.7427 [DrWeb]
More aliases (356)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



file.exe File name: file.exe
Size: 655.36 KB (655360 bytes)
MD5: 42c7c3bbf232fbb86dca01c6f75d2cf7
Detection count: 93
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: August 31, 2017
%APPDATA%\8673.exe File name: 8673.exe
Size: 54.78 KB (54784 bytes)
MD5: 315184d67a7a18d6b02b8d4a1b9f5cfa
Detection count: 83
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: February 22, 2013
%APPDATA%\D661.exe File name: D661.exe
Size: 55.29 KB (55296 bytes)
MD5: 1d43d43d728f01159931f0cf89dfa94d
Detection count: 44
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: February 6, 2013
%TEMP%\n4ix2zw.exe File name: n4ix2zw.exe
Size: 90.11 KB (90112 bytes)
MD5: 089d0751a27a042df2db0ca555dbec3b
Detection count: 37
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: June 6, 2011
%WINDIR%\dtca.exe File name: dtca.exe
Size: 24.57 KB (24576 bytes)
MD5: fccee40edc06bfcaf3b5174c77f80c28
Detection count: 33
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: November 9, 2018
%USERPROFILE%\Application Data\Wbnmni.exe File name: Wbnmni.exe
Size: 294.91 KB (294912 bytes)
MD5: daff13b10ad87d9f578555b641758fa1
Detection count: 20
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Application Data
Group: Malware file
Last Updated: December 7, 2011
%SYSTEMDRIVE%\Games\7 Wonders\7wondersres.dll File name: 7wondersres.dll
Size: 21.5 KB (21504 bytes)
MD5: 9ed9fc8a0b5662be9abb011f011a1d30
Detection count: 16
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SYSTEMDRIVE%\Games\7 Wonders\7wondersres.dll
Group: Malware file
Last Updated: August 4, 2020
%WINDIR%\system32\mswdat1032.exe File name: mswdat1032.exe
Size: 775.68 KB (775680 bytes)
MD5: be3a6ee5b1f3e6aff1a02905752a2a2c
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: June 3, 2011
%WINDIR%\SysWOW64\adsldp32.exe File name: adsldp32.exe
Size: 779.77 KB (779776 bytes)
MD5: e9820eb60f4561f72a16aee89aa7e4b8
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\SysWOW64
Group: Malware file
Last Updated: June 6, 2011
%SystemDrive%\4fff3b2e\4fff3b2e.exe File name: 4fff3b2e.exe
Size: 272.89 KB (272896 bytes)
MD5: 9eabfe6453e2510c6c63269ab96516b3
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\4fff3b2e
Group: Malware file
Last Updated: March 23, 2016
%USERPROFILE%\InstallShield Installation Information\{A5BA14E0-7384-5991B8648CBE70A4}\bootcfgx.exe File name: bootcfgx.exe
Size: 1.14 MB (1148160 bytes)
MD5: 391610bc234dc8ed034db97552b3360c
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\InstallShield Installation Information\{A5BA14E0-7384-5991B8648CBE70A4}
Group: Malware file
Last Updated: June 6, 2011
%APPDATA%\nmtd.exe File name: nmtd.exe
Size: 60.41 KB (60416 bytes)
MD5: 30761af5190c4952438535a40d9d879f
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: June 6, 2011
C:\install\winlog.exe File name: winlog.exe
Size: 503.29 KB (503296 bytes)
MD5: e988660ac3a01115e42077644d935466
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: C:\install
Group: Malware file
Last Updated: June 7, 2011
%APPDATA%\Leugur.exe File name: Leugur.exe
Size: 192.51 KB (192512 bytes)
MD5: f172d879a389210d50f03362ebf6c67b
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: June 8, 2020
%COMMONPROGRAMFILES%\msado320.tlb File name: msado320.tlb
Size: 69.63 KB (69632 bytes)
MD5: ea09e6441858e978424a3532ea646326
Detection count: 5
Mime Type: unknown/tlb
Path: %COMMONPROGRAMFILES%
Group: Malware file
Last Updated: March 18, 2020
%APPDATA%\4C24.exe File name: 4C24.exe
Size: 413.69 KB (413696 bytes)
MD5: c3b779e35e655ba094c2428c1f27e13c
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: December 23, 2011
%APPDATA%\11.exe File name: 11.exe
Size: 49.15 KB (49152 bytes)
MD5: dc5804aee172e6e01d435985320d3a42
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: April 2, 2013
%APPDATA%\A738.exe File name: A738.exe
Size: 55.29 KB (55296 bytes)
MD5: 834857e8f61b50b1f411a5c2f7788208
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: January 14, 2013
%APPDATA%\7369.exe File name: 7369.exe
Size: 54.78 KB (54784 bytes)
MD5: 76b93eef84e1774c1104ac5418acc1e1
Detection count: 1
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: March 29, 2013

Registry Modifications

The following newly produced Registry Values are:

Regexp file mask%APPDATA%\ScreenSaverPro.scr%APPDATA%\WindowsUpdate\Live.exe%APPDATA%\WindowsUpdate\Updater.exeHKEY..\..\..\..{RegistryKeys}Software\Uazi Soft

Related Posts

Loading...