Home Malware Programs Spyware Email-Worm.Zhelatin.agg

Email-Worm.Zhelatin.agg

Posted: March 2, 2008

Threat Metric

Threat Level: 6/10
Infected PCs: 53
First Seen: July 24, 2009
OS(es) Affected: Windows

Zhelatin is an email worm that propagates as a spam email attachment. Once installed on your system, the worm will employ rootkit techniques in an attempt to prevent detection. It will attempt to add your PC to an IRC Botnet, and will then use your PC to send spam emails. Infected email messages will be sent to all email addresses that the worm is able to find on your computer.

Aliases

Troj/BdoorB-Fam [Sophos]Backdoor:Win32/Nuwar.A [Microsoft]W32/Nuwar@MM [McAfee]Email-Worm.Win32.Zhelatin.agg [F-Secure]Suspicious File [eSafe]Dropped:Trojan.Peed.JQV [BitDefender]I-Worm/Nuwar.W [AVG]Win32:Zbot-ALS [Avast]TR/Crypt.XPACK.Gen [AntiVir]

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



neos.exe File name: neos.exe
Size: 84.48 KB (84480 bytes)
MD5: 494b4f6bc9116de149f29823da278558
Detection count: 51
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: May 31, 2013
a2d696f9a7b514e8b9592198768f1d41.exe File name: a2d696f9a7b514e8b9592198768f1d41.exe
Size: 135.16 KB (135168 bytes)
MD5: a2d696f9a7b514e8b9592198768f1d41
Detection count: 35
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: May 31, 2013
file.exe File name: file.exe
Size: 45.56 KB (45568 bytes)
MD5: 3b876a0060084d38cc4a1c15fcc7e86b
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: May 31, 2013
Loading...