Home Malware Programs Spyware Email-Worm.Zhelatin.vy

Email-Worm.Zhelatin.vy

Posted: April 19, 2008

Threat Metric

Threat Level: 6/10
Infected PCs: 16
First Seen: July 24, 2009
Last Seen: April 28, 2019
OS(es) Affected: Windows

Zhelatin is an email worm that propagates as a spam email attachment. Once installed on your system, the worm will employ rootkit techniques in an attempt to prevent detection. It will attempt to add your PC to an IRC Botnet, and will then use your PC to send spam emails. Infected email messages will be sent to all email addresses that the worm is able to find on your computer.

Aliases

Backdoor:Win32/Nuwar.A [Microsoft]W32/PackTibs.N [Fortinet]Email-Worm.Win32.Zhelatin.xv [F-Secure]Suspicious File [eSafe]Trojan.Packed.431 [DrWeb](Suspicious) - DNAScan [CAT-QuickHeal]DeepScan:Generic.Malware.SFMHY@mmign.93804231 [BitDefender]Worm/Zhelatin.AQ [AntiVir]

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



xpupdate.exe File name: xpupdate.exe
Size: 27.08 KB (27088 bytes)
MD5: 4cea4716401f9d6c859d2d8ccbb75d2a
Detection count: 50
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
shift.exe.exe File name: shift.exe.exe
Size: 122.88 KB (122880 bytes)
MD5: e7cb9eb6a3ead486547ef88985e7a415
Detection count: 45
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
xpupdate.exe, dllgh8jkd1q2.exe File name: xpupdate.exe, dllgh8jkd1q2.exe
Size: 28.02 KB (28022 bytes)
MD5: 1fc52962d9a1c9868e52dc70855490d2
Detection count: 35
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
n2ewma1xxsv2234.exe, vedxga1me4t1.exe File name: n2ewma1xxsv2234.exe, vedxga1me4t1.exe
Size: 12.79 KB (12796 bytes)
MD5: 9978009e77d8ac5b5306caf15cdf0d97
Detection count: 32
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
3456346345643.exe, syskosp.exe, syst.exe File name: 3456346345643.exe, syskosp.exe, syst.exe
Size: 16.84 KB (16848 bytes)
MD5: d13929780bea3f790336f61dba6603dc
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
dllgh8jkd1q7.exe File name: dllgh8jkd1q7.exe
Size: 13.88 KB (13886 bytes)
MD5: a57f69c29c7c969a6b39b5d21f65529b
Detection count: 20
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
xpupdate.exe File name: xpupdate.exe
Size: 25.08 KB (25088 bytes)
MD5: 58287f027bf021448c0252b7ac1961ab
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
kavir.exe File name: kavir.exe
Size: 131.58 KB (131584 bytes)
MD5: 6eec1b693349b1f9af73b6b49b5d74c1
Detection count: 2
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
Loading...