Home Malware Programs Worms Nuqel.A

Nuqel.A

Posted: November 30, 2010

Threat Metric

Threat Level: 5/10
Infected PCs: 2,115
First Seen: November 30, 2010
Last Seen: November 5, 2024
OS(es) Affected: Windows

Aliases

Worm/Autoit.MH [AVG]Malicious Software [Prevx1]W32/Worm!b96b [F-Prot]Win32.Worm.Autorun.WI [BitDefender]Win32.HLLW.Autoruner.6842 [DrWeb]Worm.Win32.AutoRun.fwl [Kaspersky]Win32/Autoit.AJ [NOD32]W32/Autorun.JFD [Panda]Trojan.Crypt [Ikarus]Win32.HLLW.Cung [DrWeb]Heuristic.Trojan.SusPacked.FFXPU [ClamAV]Win32:Trojan-gen [Avast]Win32/Autoit.N [NOD32]Trj/CI.A [Panda]UnclassifiedMalware [Comodo]
More aliases (127)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%WINDIR%\system32\chrome.exe File name: chrome.exe
Size: 267.08 KB (267087 bytes)
MD5: 116c28776c067fb74d45e2673ae4be10
Detection count: 239
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: May 14, 2016
%USERPROFILE%\Desktop\Yeni klas?r\PES 2012 TR\T?rk?e Yama\Türkçe Yama.exe File name: Türkçe Yama.exe
Size: 399.36 KB (399360 bytes)
MD5: b7b0b90b83f0633c85694d84192d00f1
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Desktop\Yeni klas?r\PES 2012 TR\T?rk?e Yama
Group: Malware file
Last Updated: December 24, 2012
file.exe File name: file.exe
Size: 368.98 KB (368988 bytes)
MD5: bfbe7e71744bbfb3cd7db4d911835b03
Detection count: 20
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%WINDIR%\system32\RVHOST.exe File name: RVHOST.exe
Size: 268.21 KB (268216 bytes)
MD5: 6763a3f3ee4e7817c48df619dd4ad237
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 11, 2012

More files

Registry Modifications

The following newly produced Registry Values are:

Regexp file mask%WINDIR%\system32\SSVICHOSST.exe

Related Posts

Loading...