Home Malware Programs Worms JS.Phremous

JS.Phremous

Posted: May 2, 2012

Threat Metric

Threat Level: 5/10
Infected PCs: 25
First Seen: May 2, 2012
OS(es) Affected: Windows

JS.Phremous is a computer worm that replicates itself to removable drives and network shares. Once executed, JS.Phremous creates the certain files. JS.Phremous also creates the certain file on all drives that include removable drives and network shares. JS.Phremous creates .lnk files for every folder located in the particular locations. JS.Phremous also conceals the particular folders JS.Phremous conceals itself inside a .html file and can be started in numerous ways. For instance, if JS.Phremous is manually initiated with Internet Explorer, it tries to move the IE window outside of the normal view of the screen, so that the PC user cannot see any website. However, the taskbar will still display a related IE window being open. The malicious shortcuts the malware infection creates initiate JS.Phremous in such a way that no related window is set on the Windows taskbar nor are any visible windows created that the PC user can see. Uninstall JS.Phremous to secure your computer from harm.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



M0rPheuS.tpl File name: M0rPheuS.tpl
Size: 5.22 KB (5225 bytes)
MD5: cdb38d3ea1614488acfc4e740d452538
Detection count: 90
Mime Type: unknown/tpl
Group: Malware file
Last Updated: May 3, 2012
M0rPheuS.hta File name: M0rPheuS.hta
Size: 5.22 KB (5225 bytes)
MD5: c6c72304ceada1f27353b55a776b8ae1
Detection count: 89
Mime Type: unknown/hta
Group: Malware file
Last Updated: May 3, 2012
M0rPheuS.tpl File name: M0rPheuS.tpl
Size: 5.12 KB (5122 bytes)
MD5: 36037cf295b07683012fdcf3be32bd3f
Detection count: 88
Mime Type: unknown/tpl
Group: Malware file
Last Updated: May 3, 2012
%DriveLetter%\M0rPheS.tpl File name: %DriveLetter%\M0rPheS.tpl
Mime Type: unknown/tpl
Group: Malware file
%DriveLetter%\[FOLDER NAME].lnk File name: %DriveLetter%\[FOLDER NAME].lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%UserProfile%\Start Menu\Programs\M0rPheS.tpl File name: %UserProfile%\Start Menu\Programs\M0rPheS.tpl
Mime Type: unknown/tpl
Group: Malware file
%UserProfile%\Start Menu\Programas\M0rPheS.tpl File name: %UserProfile%\Start Menu\Programas\M0rPheS.tpl
Mime Type: unknown/tpl
Group: Malware file
%UserProfile%\My Documents\M0rPheS.tpl File name: %UserProfile%\My Documents\M0rPheS.tpl
Mime Type: unknown/tpl
Group: Malware file
%UserProfile%\Start Menu\M0rPheS.tpl File name: %UserProfile%\Start Menu\M0rPheS.tpl
Mime Type: unknown/tpl
Group: Malware file
%UserProfile%\Desktop\M0rPheS.tpl File name: %UserProfile%\Desktop\M0rPheS.tpl
Mime Type: unknown/tpl
Group: Malware file
%UserProfile%\Start Menu\[FOLDER NAME].lnk File name: %UserProfile%\Start Menu\[FOLDER NAME].lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%UserProfile%\Start Menu\Programas\[FOLDER NAME].lnk File name: %UserProfile%\Start Menu\Programas\[FOLDER NAME].lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%UserProfile%\My Documents\[FOLDER NAME].lnk File name: %UserProfile%\My Documents\[FOLDER NAME].lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%UserProfile%\Start Menu\Programs\[FOLDER NAME].lnk File name: %UserProfile%\Start Menu\Programs\[FOLDER NAME].lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%UserProfile%\Desktop\[FOLDER NAME].lnk File name: %UserProfile%\Desktop\[FOLDER NAME].lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
Loading...