Home Malware Programs Worms Email-Worm.Scrambler

Email-Worm.Scrambler

Posted: February 12, 2007

Threat Metric

Threat Level: 9/10
Infected PCs: 14
First Seen: July 24, 2009
Last Seen: January 20, 2022
OS(es) Affected: Windows

Email-Worm.Scrambler is a mass-mailing worm that spreads through email and IRC and infects Windows system. Email-Worm.Scrambler spreads with a subject name "Check this out, it's funny!" and carries a spoofed 'From' address picked up randomly from the infected system. Upon execution of the infected attachment, Email-Worm.Scrambler copies itself in a random name with an .exe extension under the Windows System folder. To propagate itself, Email-Worm.Scrambler gathers email addresses from the Windows Address Book and Windows Messenger Contact list of the infected system. Email-Worm.Scrambler mails an infected file to these addresses using its own SMTP engine.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



malware.exe File name: malware.exe
Size: 106.49 KB (106496 bytes)
MD5: d91f46951452bd80dc99dd07340fa345
Detection count: 60
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
afcbb.exe, hgedj.exe File name: afcbb.exe, hgedj.exe
Size: 73.72 KB (73728 bytes)
MD5: e1143a353dd29afb470bcb476b1da6fa
Detection count: 52
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: January 8, 2022
E:\Folder 02\VirusShare_0d3b7131af8aeca81938bb1e9eab6f95 File name: VirusShare_0d3b7131af8aeca81938bb1e9eab6f95
Size: 39.42 KB (39424 bytes)
MD5: 0d3b7131af8aeca81938bb1e9eab6f95
Detection count: 5
Path: E:\Folder 02\VirusShare_0d3b7131af8aeca81938bb1e9eab6f95
Group: Malware file
Last Updated: January 20, 2022
Loading...